$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/tnpdaYWg-mIOblkSdZyUYUwj4YI.roa File: tnpdaYWg-mIOblkSdZyUYUwj4YI.roa (raw, json) Hash identifier: 9OOPtDRZtEWFS00OMBF9fGcVek0jvTEtYkQ+DET7cfc= Subject key identifier: B6:7A:5D:69:85:A0:FA:62:0E:6E:59:12:75:9C:94:61:4C:23:E1:82 Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378 Certificate serial: 0B50 Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/tnpdaYWg-mIOblkSdZyUYUwj4YI.roa Signing time: Fri 01 Sep 2023 10:14:09 +0000 ROA not before: Fri 01 Sep 2023 10:14:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38851 IP address blocks: 43.250.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Jun 2024 22:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378 Validity Not Before: Sep 1 10:14:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B67A5D6985A0FA620E6E5912759C94614C23E182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:74:6b:41:23:1f:7b:00:49:3d:f8:de:ac: 1f:1b:56:e8:e8:ac:94:9a:20:9d:fd:5b:cb:bd:c5: 7d:0b:69:51:c3:ba:e1:13:79:02:ea:8e:12:63:7c: 99:c6:2a:6c:65:a9:f0:e7:4b:a8:2c:9e:d4:19:fa: 55:74:b0:2d:aa:87:32:33:13:3c:c3:94:d9:dc:2a: f7:ea:9c:fd:e6:15:62:5d:da:63:3c:de:94:f6:fa: 95:b6:86:9f:af:85:9d:7f:97:07:a7:7c:78:0a:08: 73:96:81:b2:9f:8f:8e:dc:7b:de:9e:6d:01:14:e5: 93:a1:49:34:9b:e7:e2:55:77:60:23:34:10:f6:4f: fa:a1:37:06:ff:7d:58:03:85:3a:9c:a4:83:76:c5: da:d1:9c:5e:15:6d:13:d6:ab:3c:f3:21:81:f1:ce: bc:30:4e:2f:f1:ee:b8:c5:6d:c3:d7:1d:32:f3:8a: 01:1d:28:b9:05:b8:51:08:bd:6b:4b:3d:99:8b:f6: e4:d3:ea:97:fa:dc:e9:af:aa:d2:88:e3:bd:06:ef: e9:cd:cb:ec:11:a9:8a:7d:68:11:d5:af:b5:5e:b6: 25:3b:b7:29:e0:de:8a:96:cd:6a:f3:d1:6f:64:22: 2b:21:2e:e9:fb:24:a4:51:0d:8a:60:a5:96:0f:ed: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7A:5D:69:85:A0:FA:62:0E:6E:59:12:75:9C:94:61:4C:23:E1:82 X509v3 Authority Key Identifier: keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/tnpdaYWg-mIOblkSdZyUYUwj4YI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.250.44.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:bb:ee:a5:8b:54:2a:7f:87:08:21:e1:ef:02:31:da:b7:32: d0:51:b2:db:c0:6d:63:d3:c0:bc:e6:26:fa:78:0f:88:b0:df: 1e:f3:49:ae:f0:c8:88:a7:b9:8e:9a:01:c1:80:ee:93:02:08: c3:10:a9:aa:bb:d8:33:a5:f1:7b:12:fb:c0:1d:6d:86:54:13: bf:1f:26:60:5a:12:1e:48:c8:f5:24:35:d7:50:c8:01:73:64: 69:b6:9e:77:fc:58:53:57:38:9b:ab:7d:20:fc:5d:69:ad:39: 77:44:52:b4:e7:48:1f:a2:48:ec:db:6b:d1:0f:2f:26:f3:c8: db:21:25:84:ae:53:2e:d1:21:91:1d:e8:32:9f:e6:1f:a0:74: 4d:88:65:f0:ee:41:a6:1f:3f:b8:1f:99:ac:cf:54:c0:e2:0c: 11:97:f5:4d:51:05:e0:6a:2a:67:75:4e:3a:75:a7:cc:c5:82: 61:08:3d:f7:6f:c4:9b:9a:75:5c:e1:47:d9:46:de:54:a5:e5: 2d:43:64:ef:9d:7d:63:aa:89:d0:56:94:04:43:04:15:5b:99: 26:7c:d0:29:5d:98:d5:c6:6b:62:6f:1f:65:cf:ad:c5:b0:22: d5:51:89:db:0d:b8:74:44:b8:73:b6:12:e4:ff:cb:f5:b9:d9: 2c:3e:20:21 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0VD N0YxNjc3QkI0OTIzODAyODIxNTNCQjc3RUMyRUJFMzE4NTM3ODAeFw0yMzA5MDEx MDE0MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI2N0E1RDY5ODVBMEZB NjIwRTZFNTkxMjc1OUM5NDYxNEMyM0UxODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwcXRrQSMfewBJPfjerB8bVujorJSaIJ39W8u9xX0LaVHDuuET eQLqjhJjfJnGKmxlqfDnS6gsntQZ+lV0sC2qhzIzEzzDlNncKvfqnP3mFWJd2mM8 3pT2+pW2hp+vhZ1/lwenfHgKCHOWgbKfj47ce96ebQEU5ZOhSTSb5+JVd2AjNBD2 T/qhNwb/fVgDhTqcpIN2xdrRnF4VbRPWqzzzIYHxzrwwTi/x7rjFbcPXHTLzigEd KLkFuFEIvWtLPZmL9uTT6pf63OmvqtKI470G7+nNy+wRqYp9aBHVr7VetiU7tyng 3oqWzWrz0W9kIishLun7JKRRDYpgpZYP7Xd9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUtnpdaYWg+mIOblkSdZyUYUwj4YIwHwYDVR0jBBgwFoAUfsfxZ3u0kjgCghU7 t37C6+MYU3gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdUL2Zz ZnhaM3Uwa2pnQ2doVTd0MzdDNi1NWVUzZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZnNmeFozdTBramdDZ2hVN3QzN0M2LU1ZVTNnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVFdUL3RucGRhWVdnLW1JT2Jsa1NkWnlVWVV3 ajRZSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr+iwwDQYJ KoZIhvcNAQELBQADggEBAH677qWLVCp/hwgh4e8CMdq3MtBRstvAbWPTwLzmJvp4 D4iw3x7zSa7wyIinuY6aAcGA7pMCCMMQqaq72DOl8XsS+8AdbYZUE78fJmBaEh5I yPUkNddQyAFzZGm2nnf8WFNXOJurfSD8XWmtOXdEUrTnSB+iSOzba9EPLybzyNsh JYSuUy7RIZEd6DKf5h+gdE2IZfDuQaYfP7gfmazPVMDiDBGX9U1RBeBqKmd1Tjp1 p8zFgmEIPfdvxJuadVzhR9lG3lSl5S1DZO+dfWOqidBWlARDBBVbmSZ80CldmNXG a2JvH2XPrcWwItVRidsNuHREuHO2EuT/y/W52Sw+ICE= -----END CERTIFICATE-----Generated at Sat Jun 29 09:26:09 2024 by rpki-client on console-ams.rpki-client.org