$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6l8E4e_1J06iH1viL9FoZH9GW4c.roa File: 6l8E4e_1J06iH1viL9FoZH9GW4c.roa (raw, json) Hash identifier: NUheeGWiEjwM1z5vvliCZzupzuaWOuHEdeMbS4BSksk= Subject key identifier: EA:5F:04:E1:EF:F5:27:4E:A2:1F:5B:E2:2F:D1:68:64:7F:46:5B:87 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 043A Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6l8E4e_1J06iH1viL9FoZH9GW4c.roa Signing time: Fri 01 Sep 2023 08:03:44 +0000 ROA not before: Fri 01 Sep 2023 08:03:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 983 IP address blocks: 103.156.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 04:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Sep 1 08:03:44 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EA5F04E1EFF5274EA21F5BE22FD168647F465B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:50:51:0b:80:ab:f2:de:cd:09:50:4b:ff: fb:3f:c3:a1:19:cd:5e:d9:34:d5:2b:10:9b:b7:b1: 34:d2:b3:5a:0d:6f:42:fd:03:57:3f:de:98:3f:c7: b2:85:d2:35:3f:e6:48:16:d4:a0:b1:20:66:5c:7a: 6b:91:db:6a:54:96:32:c2:8f:b1:e3:02:b1:7a:b0: 0a:63:2c:58:bb:65:4f:6c:64:1f:f0:69:bd:bb:a2: 0b:2b:f5:6c:04:05:9c:e4:36:6a:d4:73:09:95:bd: e8:24:14:ed:c0:6d:43:08:2d:6d:22:e7:ac:07:90: 89:50:e7:11:65:82:57:96:44:b0:35:6c:bf:14:35: cf:b9:30:43:ca:73:9c:a4:26:08:3a:dd:95:64:96: b6:e9:e2:a1:10:06:e8:10:0f:54:ee:90:8e:91:8e: 19:7d:13:77:24:c8:88:a4:ac:d5:70:fa:b7:98:36: 3d:3e:9e:c4:c8:e7:1e:e5:d3:ee:3c:72:55:2b:64: c7:67:02:eb:cc:6c:10:ac:98:45:d5:0e:10:9d:9f: d1:25:0c:66:47:c3:52:91:aa:34:92:64:21:be:40: 23:f7:67:ef:fa:df:f9:eb:87:52:f7:06:de:a7:a0: ac:45:91:30:6a:c5:1b:17:40:88:e3:24:30:58:f4: b6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5F:04:E1:EF:F5:27:4E:A2:1F:5B:E2:2F:D1:68:64:7F:46:5B:87 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/6l8E4e_1J06iH1viL9FoZH9GW4c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.184.0/24 Signature Algorithm: sha256WithRSAEncryption 69:cf:0a:70:64:17:72:e3:ab:2d:55:2f:05:80:b0:2b:8a:b7: 1c:45:ea:7c:37:17:6e:b5:a3:b5:dc:f7:b3:da:03:46:4c:4b: d7:d1:7a:ed:ed:c8:a1:24:db:99:1e:96:ba:90:f0:ab:4b:8f: 48:f1:28:7f:db:7e:e8:79:16:24:dd:9a:d7:bb:3b:c5:1a:fb: 02:93:df:98:6b:7e:4f:ce:b0:7c:6d:05:77:33:be:bc:1c:44: 25:a7:38:42:93:c7:5f:88:53:5a:63:27:df:3e:7b:f1:32:40: df:e5:cd:0d:83:5a:86:72:ad:16:9e:15:00:7f:f3:2c:67:33: e4:fa:ee:ef:d0:d0:0f:20:4c:43:31:26:5d:35:45:33:22:9a: 33:34:0c:4b:ac:21:71:a5:4c:6d:fc:35:94:63:62:9c:d5:70: d9:63:19:96:1b:77:87:65:6b:a7:86:4d:69:2a:31:e0:03:e2: e9:65:09:14:4f:80:01:d3:0c:a3:c4:96:3d:df:c0:0a:e7:79: 3c:01:95:bb:47:74:90:11:e0:19:9a:08:a6:44:d7:82:66:c5: 71:8f:fd:ae:a6:ac:99:8b:c4:2c:a1:f3:17:f2:98:3f:e8:89: 0e:8a:d0:9b:ff:20:48:60:88:ad:c1:3b:20:86:dc:d7:e5:da: ff:40:d8:77 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw ODAzNDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVBNUYwNEUxRUZGNTI3 NEVBMjFGNUJFMjJGRDE2ODY0N0Y0NjVCODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqIFBRC4Cr8t7NCVBL//s/w6EZzV7ZNNUrEJu3sTTSs1oNb0L9 A1c/3pg/x7KF0jU/5kgW1KCxIGZcemuR22pUljLCj7HjArF6sApjLFi7ZU9sZB/w ab27ogsr9WwEBZzkNmrUcwmVvegkFO3AbUMILW0i56wHkIlQ5xFlgleWRLA1bL8U Nc+5MEPKc5ykJgg63ZVklrbp4qEQBugQD1TukI6Rjhl9E3ckyIikrNVw+reYNj0+ nsTI5x7l0+48clUrZMdnAuvMbBCsmEXVDhCdn9ElDGZHw1KRqjSSZCG+QCP3Z+/6 3/nrh1L3Bt6noKxFkTBqxRsXQIjjJDBY9LazAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU6l8E4e/1J06iH1viL9FoZH9GW4cwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvNmw4RTRlXzFKMDZpSDF2 aUw5Rm9aSDlHVzRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuDANBgkqhkiG9w0BAQsFAAOCAQEAac8KcGQXcuOrLVUvBYCwK4q3HEXqfDcX brWjtdz3s9oDRkxL19F67e3IoSTbmR6WupDwq0uPSPEof9t+6HkWJN2a17s7xRr7 ApPfmGt+T86wfG0FdzO+vBxEJac4QpPHX4hTWmMn3z578TJA3+XNDYNahnKtFp4V AH/zLGcz5Pru79DQDyBMQzEmXTVFMyKaMzQMS6whcaVMbfw1lGNinNVw2WMZlht3 h2Vrp4ZNaSox4APi6WUJFE+AAdMMo8SWPd/ACud5PAGVu0d0kBHgGZoIpkTXgmbF cY/9rqasmYvELKHzF/KYP+iJDorQm/8gSGCIrcE7IIbc1+Xa/0DYdw== -----END CERTIFICATE-----Generated at Wed Jun 5 00:22:57 2024 by rpki-client on console-ams.rpki-client.org