$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IfydskpK4D-mYauvBpRNEEsgVqQ.roa File: IfydskpK4D-mYauvBpRNEEsgVqQ.roa (raw, json) Hash identifier: fogPRD0bhXJ6Un6XHYo7V9gqJss54c6rZEvL+lC1D58= Subject key identifier: 21:FC:9D:B2:4A:4A:E0:3F:A6:61:AB:AF:06:94:4D:10:4B:20:56:A4 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 116D Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IfydskpK4D-mYauvBpRNEEsgVqQ.roa Signing time: Fri 01 Sep 2023 03:14:20 +0000 ROA not before: Fri 01 Sep 2023 03:14:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 396982 IP address blocks: 101.101.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 11:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4461 (0x116d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Sep 1 03:14:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=21FC9DB24A4AE03FA661ABAF06944D104B2056A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:c3:d8:27:06:89:96:9a:cd:89:a7:b8:44: f0:f2:85:45:8e:d7:49:a7:84:84:08:23:04:8a:c3: ee:e0:b3:6e:e1:7b:93:cd:f4:ac:8d:10:1e:4d:43: 8e:35:6a:6a:a1:5f:8e:00:ff:31:91:54:7e:6b:dd: cb:ec:9c:6e:9f:cf:f3:58:f7:33:6c:f4:ff:db:80: 1c:a8:7e:05:d3:57:0b:d2:c3:67:d8:2c:df:35:66: 0d:0e:38:79:36:56:c7:2c:22:47:ba:8a:f8:e4:39: bd:66:38:44:c2:95:6a:35:44:4c:49:7c:41:cc:d4: ba:4d:d2:12:b1:ec:98:c7:62:4e:d7:ae:3b:42:ef: 66:5a:21:a6:7c:0a:b2:c3:96:2a:a2:51:ff:08:ae: 36:cf:e4:cc:10:f2:60:9b:37:60:4f:b2:ed:f8:04: 54:c3:8b:6d:2a:2a:c5:77:91:05:99:87:5e:8c:91: 39:b1:3e:38:a4:ae:76:d9:67:70:e0:58:a2:78:c6: 76:13:15:ab:f4:4e:b3:5f:fc:1c:dc:1f:33:06:e8: 37:93:41:fc:11:85:b1:f5:55:63:28:7b:16:20:2f: 01:d7:6c:05:88:96:50:98:bb:5e:d9:2f:3a:45:58: 60:04:66:99:4f:5f:47:04:8d:1e:f0:3d:c5:fa:c9: c7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:9D:B2:4A:4A:E0:3F:A6:61:AB:AF:06:94:4D:10:4B:20:56:A4 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/IfydskpK4D-mYauvBpRNEEsgVqQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.101.101.0/24 Signature Algorithm: sha256WithRSAEncryption 34:7e:68:a0:0b:03:ce:62:0a:33:3a:29:57:d1:b8:50:8b:16: 58:33:c7:62:c5:2b:40:ed:b7:cc:dd:f5:50:fb:3f:4c:da:45: ed:8d:91:3b:21:1e:d6:5b:e5:b0:e2:d0:72:b7:de:6e:96:f0: da:36:7b:34:6e:5b:22:3c:76:ce:31:ec:8a:ec:fc:35:31:cd: 32:ce:61:22:c9:2f:72:8b:16:2e:07:25:0c:05:28:97:ea:8a: e8:bb:3a:8f:0f:39:24:96:7c:fd:54:1f:0d:f0:3e:4f:7e:c0: 56:cf:6f:65:a9:7c:37:34:1f:e0:29:57:f1:13:f3:c7:3d:8f: 2b:ff:68:b6:d7:dd:e8:aa:73:5c:2a:01:80:be:5a:cb:e1:5d: 52:23:04:59:b9:af:32:d5:b9:3b:4c:06:a5:8a:84:86:29:75: f0:49:42:0f:36:01:bf:fb:5a:04:ee:40:75:51:3b:39:f9:2a: 68:f0:64:5e:4d:3d:a9:b6:11:99:9d:a5:96:8f:89:b7:ae:bc: 1b:1b:80:73:7a:39:8c:10:b5:c0:08:7a:ea:43:20:0e:15:be: 01:bc:c6:c9:e0:f5:73:f8:db:ac:ab:8a:af:44:8f:62:ae:51: c6:ac:73:ec:c2:8f:b0:ab:30:ef:3a:2a:51:5c:11:67:b5:af: 11:6a:a4:ff -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMzA5MDEw MzE0MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIxRkM5REIyNEE0QUUw M0ZBNjYxQUJBRjA2OTQ0RDEwNEIyMDU2QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfY8PYJwaJlprNiae4RPDyhUWO10mnhIQIIwSKw+7gs27he5PN 9KyNEB5NQ441amqhX44A/zGRVH5r3cvsnG6fz/NY9zNs9P/bgByofgXTVwvSw2fY LN81Zg0OOHk2VscsIke6ivjkOb1mOETClWo1RExJfEHM1LpN0hKx7JjHYk7XrjtC 72ZaIaZ8CrLDliqiUf8IrjbP5MwQ8mCbN2BPsu34BFTDi20qKsV3kQWZh16MkTmx PjikrnbZZ3DgWKJ4xnYTFav0TrNf/BzcHzMG6DeTQfwRhbH1VWMoexYgLwHXbAWI llCYu17ZLzpFWGAEZplPX0cEjR7wPcX6ycdxAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUIfydskpK4D+mYauvBpRNEEsgVqQwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9JZnlkc2twSzRELW1ZYXV2QnBS TkVFc2dWcVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZWVl MA0GCSqGSIb3DQEBCwUAA4IBAQA0fmigCwPOYgozOilX0bhQixZYM8dixStA7bfM 3fVQ+z9M2kXtjZE7IR7WW+Ww4tByt95ulvDaNns0blsiPHbOMeyK7Pw1Mc0yzmEi yS9yixYuByUMBSiX6orouzqPDzkklnz9VB8N8D5PfsBWz29lqXw3NB/gKVfxE/PH PY8r/2i2193oqnNcKgGAvlrL4V1SIwRZua8y1bk7TAalioSGKXXwSUIPNgG/+1oE 7kB1UTs5+Spo8GReTT2pthGZnaWWj4m3rrwbG4BzejmMELXACHrqQyAOFb4BvMbJ 4PVz+Nusq4qvRI9irlHGrHPswo+wqzDvOipRXBFnta8RaqT/ -----END CERTIFICATE-----Generated at Mon May 6 00:11:14 2024 by rpki-client on console-fra.rpki-client.org