$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/5Qm7Fl9vjBH9T4QDv3zTN4MygbY.roa File: 5Qm7Fl9vjBH9T4QDv3zTN4MygbY.roa (raw, json) Hash identifier: VcmpA9bS5OfncPceHQmQ2zD5Orf3KEinXpeujhzYT2s= Subject key identifier: E5:09:BB:16:5F:6F:8C:11:FD:4F:84:03:BF:7C:D3:37:83:32:81:B6 Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Certificate serial: 0C76 Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/5Qm7Fl9vjBH9T4QDv3zTN4MygbY.roa Signing time: Mon 26 Aug 2024 04:56:18 +0000 ROA not before: Mon 26 Aug 2024 04:56:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131149 IP address blocks: 103.123.192.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Validity Not Before: Aug 26 04:56:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E509BB165F6F8C11FD4F8403BF7CD337833281B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:75:0f:0b:d4:8b:84:3a:2f:57:f0:57:17: b6:73:33:dd:f8:ae:76:28:22:0e:a3:30:93:67:16: 82:a9:22:4b:cd:d6:d7:64:09:8b:1a:5d:db:44:02: a4:f1:5d:47:3a:42:ce:c8:3f:9f:d5:a3:c8:72:4e: 32:3f:91:15:8c:99:2e:97:72:7f:88:01:79:b2:84: 20:ff:cd:5b:67:8b:09:36:02:4a:78:bf:63:94:2c: 76:d7:ce:c2:43:a4:3b:13:5c:d8:b2:99:02:85:0b: 4f:ff:8f:0c:3e:49:df:d6:53:02:9a:e5:01:19:88: 1c:94:ed:89:9f:b8:28:c4:35:03:50:0d:bb:b3:40: 87:0b:23:fd:59:4e:04:3f:0d:e9:2d:ce:7f:d8:30: e3:f7:7b:4f:76:97:b2:a5:ce:f7:d8:30:7e:71:a5: 87:30:70:c1:7e:ab:c4:ab:fd:38:f5:7b:ef:61:67: a6:93:55:ef:39:4a:0e:fc:d2:b6:45:94:d6:4a:2a: 10:7a:e1:9f:f9:8a:7a:55:f6:36:4f:ca:6d:6e:f6: 53:84:c9:68:d6:c4:12:02:1a:ca:b2:8a:fd:73:37: 47:af:4c:80:a1:76:18:c3:71:f2:89:d0:dd:d0:a2: 3d:77:0b:b1:26:aa:4a:c9:63:c8:aa:38:b7:43:27: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:09:BB:16:5F:6F:8C:11:FD:4F:84:03:BF:7C:D3:37:83:32:81:B6 X509v3 Authority Key Identifier: keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/5Qm7Fl9vjBH9T4QDv3zTN4MygbY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.192.0/22 Signature Algorithm: sha256WithRSAEncryption 27:6f:ed:a8:4c:08:0e:cd:e3:a1:85:8b:30:e7:d4:dd:f4:39: 5f:c0:10:41:43:4a:11:6a:6a:f5:af:67:25:d3:84:38:34:67: c3:76:11:10:bc:85:9f:ae:13:ed:84:3e:21:c2:1a:02:9e:c8: b4:77:4f:33:e3:87:b6:84:53:e4:84:47:2c:ea:c0:21:f2:6a: 4e:f6:db:e9:c3:c9:0b:92:60:4f:d3:48:e9:aa:d7:6f:25:a5: 4b:0d:7d:8b:af:1c:fd:07:93:62:dc:d1:f4:d1:24:ea:bc:5a: ae:3e:8f:68:8f:02:1c:bc:47:d8:7a:1f:c5:64:48:d2:12:1e: 6a:b1:4f:f9:9e:97:28:26:45:70:27:40:ca:a5:89:90:44:81: 8e:4f:b7:17:82:ae:99:ff:c5:02:4c:18:4e:85:08:d7:81:82: d3:e8:6f:c5:5c:e5:3e:cb:c0:41:f3:ac:97:21:63:18:5e:ec: a5:5a:b0:ad:d3:a3:97:84:44:e9:e0:b3:ec:40:00:13:53:c1: b2:3a:03:3c:e3:b3:66:91:43:31:cd:23:c5:67:59:b9:b7:ef: 48:55:80:a9:fd:82:c5:7f:aa:0d:d8:07:bd:59:75:64:43:0d: 27:a4:9a:3e:08:fc:16:82:8a:0c:33:e1:6d:48:af:00:4f:bb: 33:a3:b0:85 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdB NEFGRDlFN0ZDMUZFRDRGOTU0NURFNDFDRTQ0MTNEQUNCMEUwNTAeFw0yNDA4MjYw NDU2MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU1MDlCQjE2NUY2RjhD MTFGRDRGODQwM0JGN0NEMzM3ODMzMjgxQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRX3UPC9SLhDovV/BXF7ZzM934rnYoIg6jMJNnFoKpIkvN1tdk CYsaXdtEAqTxXUc6Qs7IP5/Vo8hyTjI/kRWMmS6Xcn+IAXmyhCD/zVtniwk2Akp4 v2OULHbXzsJDpDsTXNiymQKFC0//jww+Sd/WUwKa5QEZiByU7YmfuCjENQNQDbuz QIcLI/1ZTgQ/Dektzn/YMOP3e092l7KlzvfYMH5xpYcwcMF+q8Sr/Tj1e+9hZ6aT Ve85Sg780rZFlNZKKhB64Z/5inpV9jZPym1u9lOEyWjWxBICGsqyiv1zN0evTICh dhjDcfKJ0N3Qoj13C7EmqkrJY8iqOLdDJ9EBAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU5Qm7Fl9vjBH9T4QDv3zTN4MygbYwHwYDVR0jBBgwFoAUh6Sv2ef8H+1PlUXe Qc5EE9rLDgUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVBTkpI RU4vaDZTdjJlZjhILTFQbFVYZVFjNUVFOXJMRGdVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9oNlN2MmVmOEgtMVBsVVhlUWM1RUU5ckxEZ1UuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUFOSkhFTi81UW03Rmw5dmpCSDlU NFFEdjN6VE40TXlnYlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3vAMA0GCSqGSIb3DQEBCwUAA4IBAQAnb+2oTAgOzeOhhYsw59Td9DlfwBBB Q0oRamr1r2cl04Q4NGfDdhEQvIWfrhPthD4hwhoCnsi0d08z44e2hFPkhEcs6sAh 8mpO9tvpw8kLkmBP00jpqtdvJaVLDX2Lrxz9B5Ni3NH00STqvFquPo9ojwIcvEfY eh/FZEjSEh5qsU/5npcoJkVwJ0DKpYmQRIGOT7cXgq6Z/8UCTBhOhQjXgYLT6G/F XOU+y8BB86yXIWMYXuylWrCt06OXhETp4LPsQAATU8GyOgM847NmkUMxzSPFZ1m5 t+9IVYCp/YLFf6oN2Ae9WXVkQw0npJo+CPwWgooMM+FtSK8AT7szo7CF -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:59 2024 by rpki-client on console-ams.rpki-client.org