$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/poyDiTS31SHy4NfHlt2RKjtlnb8.roa File: poyDiTS31SHy4NfHlt2RKjtlnb8.roa (raw, json) Hash identifier: rxF4v8Ua8shCmp6WwJXIfiNLWyzEU9Lvw8G82HQDC8c= Subject key identifier: A6:8C:83:89:34:B7:D5:21:F2:E0:D7:C7:96:DD:91:2A:3B:65:9D:BF Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 043D Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/poyDiTS31SHy4NfHlt2RKjtlnb8.roa Signing time: Fri 01 Sep 2023 08:03:45 +0000 ROA not before: Fri 01 Sep 2023 08:03:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7480 IP address blocks: 103.156.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 15:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Sep 1 08:03:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A68C838934B7D521F2E0D7C796DD912A3B659DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:26:e6:c1:cf:4b:c0:8c:dd:39:c9:59:c5:e9: 19:2e:fc:05:e3:bc:37:f2:b9:02:71:7a:7e:06:b9: 58:36:5b:8b:85:4d:44:89:df:f3:e1:18:42:79:a7: fa:64:45:81:d5:bf:d3:39:8a:d3:fe:fd:10:bd:c0: 75:9f:83:93:e3:c2:6a:c0:62:c4:29:56:7c:66:ae: 81:3b:4b:5d:89:b5:ec:3e:b7:5c:a4:0f:cb:38:0e: e1:d9:b3:09:cb:98:42:0a:30:e4:42:cc:6f:2d:d5: 47:f2:6b:18:4a:3f:05:34:6d:0f:1b:d7:d7:94:d9: 65:bc:1f:cd:e9:5f:a5:e2:99:b0:a5:2e:ac:65:11: 3b:0a:2e:9e:4f:ab:c1:7a:b8:62:82:5a:02:6f:5a: ca:34:9c:cb:05:6f:d6:ee:86:28:5c:74:08:0f:49: 83:ee:90:0c:6b:d3:3e:b5:ec:6f:b6:9b:37:df:f5: 06:8d:b7:b5:f8:bc:5f:2d:d3:91:c4:69:60:73:19: 1c:f0:fd:a9:7e:5c:dc:fd:33:81:b2:ec:25:6b:f5: b3:3e:d8:6e:a0:b4:06:e9:8b:2c:9d:1d:85:b7:44: bd:7e:35:ff:fd:5c:02:c6:a3:18:a8:78:8f:67:d1: 08:d4:04:ba:47:aa:3c:86:ce:e8:c2:b3:ac:04:c8: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8C:83:89:34:B7:D5:21:F2:E0:D7:C7:96:DD:91:2A:3B:65:9D:BF X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/poyDiTS31SHy4NfHlt2RKjtlnb8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.185.0/24 Signature Algorithm: sha256WithRSAEncryption 26:cd:88:c7:0d:a3:b3:38:00:9d:c0:b4:a8:e9:a4:c3:b9:67: 2c:fb:b1:62:16:94:87:b0:34:93:e6:b5:61:de:55:d8:a5:b5: cc:8a:b9:7e:f0:9b:18:cd:8e:6a:53:1d:34:ba:69:7b:67:fd: 24:21:41:9b:d6:62:d2:ba:10:d2:6b:49:cf:6a:ab:99:32:37: 5c:bd:cd:f1:4c:e3:65:0e:9e:54:37:83:c1:89:d3:71:54:e9: d8:c6:31:34:ce:5a:a1:14:e4:04:4b:21:94:47:92:b5:e0:83: d3:22:10:17:7a:7f:86:f7:11:05:a4:2c:8b:97:a4:c1:a8:b9: 17:d4:f0:17:3b:40:0b:18:41:26:6f:96:03:89:93:be:bc:cc: 3d:6e:84:1e:1d:b7:a8:e2:e7:bb:ee:62:9e:d2:d3:d1:da:2f: 0c:5c:5b:be:d8:91:a1:b9:41:9a:39:be:b3:2d:0e:c3:8b:12: ce:88:59:53:ee:fd:7c:e3:8b:51:d6:ea:37:c8:35:eb:a0:e7: e1:fb:73:77:20:4f:57:b9:f4:9d:e0:2f:af:d9:b4:c5:8d:d8: a4:51:03:1b:4f:e4:41:73:96:c8:9a:89:4a:ac:54:2b:83:ba: 18:3d:85:2d:fd:fb:c8:01:44:50:18:d1:f5:ba:dd:74:b2:2b: d2:cf:63:88 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw ODAzNDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2OEM4Mzg5MzRCN0Q1 MjFGMkUwRDdDNzk2REQ5MTJBM0I2NTlEQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPJubBz0vAjN05yVnF6Rku/AXjvDfyuQJxen4GuVg2W4uFTUSJ 3/PhGEJ5p/pkRYHVv9M5itP+/RC9wHWfg5PjwmrAYsQpVnxmroE7S12Jtew+t1yk D8s4DuHZswnLmEIKMORCzG8t1UfyaxhKPwU0bQ8b19eU2WW8H83pX6XimbClLqxl ETsKLp5Pq8F6uGKCWgJvWso0nMsFb9buhihcdAgPSYPukAxr0z617G+2mzff9QaN t7X4vF8t05HEaWBzGRzw/al+XNz9M4Gy7CVr9bM+2G6gtAbpiyydHYW3RL1+Nf/9 XALGoxioeI9n0QjUBLpHqjyGzujCs6wEyPZBAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUpoyDiTS31SHy4NfHlt2RKjtlnb8wHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvcG95RGlUUzMxU0h5NE5m SGx0MlJLanRsbmI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGecuTANBgkqhkiG9w0BAQsFAAOCAQEAJs2Ixw2jszgAncC0qOmkw7lnLPuxYhaU h7A0k+a1Yd5V2KW1zIq5fvCbGM2OalMdNLppe2f9JCFBm9Zi0roQ0mtJz2qrmTI3 XL3N8UzjZQ6eVDeDwYnTcVTp2MYxNM5aoRTkBEshlEeSteCD0yIQF3p/hvcRBaQs i5ekwai5F9TwFztACxhBJm+WA4mTvrzMPW6EHh23qOLnu+5intLT0dovDFxbvtiR oblBmjm+sy0Ow4sSzohZU+79fOOLUdbqN8g166Dn4ftzdyBPV7n0neAvr9m0xY3Y pFEDG0/kQXOWyJqJSqxUK4O6GD2FLf37yAFEUBjR9brddLIr0s9jiA== -----END CERTIFICATE-----Generated at Sun Apr 28 05:52:05 2024 by rpki-client on console-ams.rpki-client.org