$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/VeNiMui0FZZ_k5DjiTUCVYv0jEs.roa File: VeNiMui0FZZ_k5DjiTUCVYv0jEs.roa (raw, json) Hash identifier: LFhoIjRYAJq90VZf0Rl3cg/FLTuBtC+hgaQaPVEwJX0= Subject key identifier: 55:E3:62:32:E8:B4:15:96:7F:93:90:E3:89:35:02:55:8B:F4:8C:4B Certificate issuer: /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8 Certificate serial: 0AE9 Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/VeNiMui0FZZ_k5DjiTUCVYv0jEs.roa Signing time: Fri 01 Sep 2023 08:24:29 +0000 ROA not before: Fri 01 Sep 2023 08:24:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 1340 IP address blocks: 103.10.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8 Validity Not Before: Sep 1 08:24:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=55E36232E8B415967F9390E3893502558BF48C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:da:72:0f:a5:e2:f3:b3:b4:d5:34:5b:17:e1: cb:ec:14:41:b3:04:4a:83:1a:1b:06:e0:f0:73:46: 2e:75:03:b6:18:ca:df:df:30:3a:7d:87:b6:21:1b: f5:5c:0e:37:62:45:f3:11:89:6f:37:2f:ca:b6:84: b7:a2:51:d6:28:9c:4d:ac:9c:d1:56:51:23:4d:cb: 10:47:42:88:74:5b:25:bc:31:1b:6f:7c:9b:b0:52: 86:ae:4c:de:6d:4c:62:3c:f8:3c:b3:30:02:08:a5: 0a:a1:28:b1:b1:0d:d7:b4:e3:f1:55:7b:2a:dd:50: 18:be:d3:8f:5a:ae:89:7c:41:46:7e:56:20:3e:e4: 83:4b:16:4f:81:85:0f:42:96:71:05:27:36:8b:c1: 36:bd:73:a2:5a:bd:31:15:f8:15:e2:05:5f:da:72: ea:74:af:f9:4f:e9:ff:2e:44:91:38:30:e6:37:73: cc:59:5e:dd:7a:a3:f1:51:77:07:a1:b1:9b:0b:eb: 6b:f9:c5:91:39:01:cf:88:e9:f9:ff:76:1f:82:47: 4c:8d:84:13:a1:cf:8f:fc:88:c3:f3:aa:16:0c:43: ae:a5:70:09:24:c4:c8:4b:5a:76:95:85:53:a6:7a: 66:fc:00:69:ff:f6:f5:0b:d9:25:19:14:f5:75:e9: 33:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:62:32:E8:B4:15:96:7F:93:90:E3:89:35:02:55:8B:F4:8C:4B X509v3 Authority Key Identifier: keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/VeNiMui0FZZ_k5DjiTUCVYv0jEs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.10.4.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:a4:5b:b4:41:b9:09:ab:27:8a:98:d9:b9:b4:f0:9a:53:df: f6:b7:92:c0:5e:5d:f2:d1:df:71:f3:ad:fc:16:65:dd:4c:0a: 63:6f:a9:eb:6c:4a:8e:e6:cf:e9:a5:86:f1:d0:bc:6d:f9:a2: e7:3d:74:b8:8a:69:df:e5:38:33:5f:f8:96:b7:52:8e:6f:f6: fa:7b:75:a6:f7:c7:b9:40:55:ac:25:45:fa:bd:00:14:18:63: 81:15:7e:2e:29:3f:87:1b:ff:b9:8f:9b:75:27:65:31:38:a6: 79:39:62:0b:ba:60:41:55:10:e6:39:53:b0:7b:46:45:1f:5e: 51:90:c4:87:4a:a4:b0:23:e8:31:b6:c6:7e:10:21:db:f6:5b: b3:fb:9b:da:a1:bb:7b:94:65:37:38:42:fd:70:b9:80:3b:23: 62:cd:06:2b:e9:3c:a5:9f:7b:a6:8c:d2:67:7a:f8:23:e8:75: 52:9c:7a:33:88:9d:67:78:5d:25:91:76:f4:c9:1e:27:ea:19: 08:74:57:ef:d4:13:4d:ce:50:4b:f0:4d:54:c7:be:a5:a8:4c: 6c:9e:f6:d3:ac:ab:5d:0f:34:cf:d1:41:4b:ae:38:c1:0a:7c: c7:7a:63:cc:6f:ac:23:64:38:1e:cd:26:6a:4c:73:a7:5d:92: 44:ff:22:d1 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICCukwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzg2 NjQ4Rjc5QkI3OUUxRjBCMEZGOTAzOTY5MkY3NEU0RjNDRTFGODAeFw0yMzA5MDEw ODI0MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU1RTM2MjMyRThCNDE1 OTY3RjkzOTBFMzg5MzUwMjU1OEJGNDhDNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDz2nIPpeLzs7TVNFsX4cvsFEGzBEqDGhsG4PBzRi51A7YYyt/f MDp9h7YhG/VcDjdiRfMRiW83L8q2hLeiUdYonE2snNFWUSNNyxBHQoh0WyW8MRtv fJuwUoauTN5tTGI8+DyzMAIIpQqhKLGxDde04/FVeyrdUBi+049arol8QUZ+ViA+ 5INLFk+BhQ9ClnEFJzaLwTa9c6JavTEV+BXiBV/acup0r/lP6f8uRJE4MOY3c8xZ Xt16o/FRdwehsZsL62v5xZE5Ac+I6fn/dh+CR0yNhBOhz4/8iMPzqhYMQ66lcAkk xMhLWnaVhVOmemb8AGn/9vUL2SUZFPV16TOXAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUVeNiMui0FZZ/k5DjiTUCVYv0jEswHwYDVR0jBBgwFoAUeGZI95u3nh8LD/kD lpL3Tk884fgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNVUy9l R1pJOTV1M25oOExEX2tEbHBMM1RrODg0ZmcuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2VHWkk5NXUzbmg4TERfa0RscEwzVGs4ODRmZy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0FTVVMvVmVOaU11aTBGWlpfazVEamlUVUNW WXYwakVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcKBDAN BgkqhkiG9w0BAQsFAAOCAQEADqRbtEG5CasnipjZubTwmlPf9reSwF5d8tHfcfOt /BZl3UwKY2+p62xKjubP6aWG8dC8bfmi5z10uIpp3+U4M1/4lrdSjm/2+nt1pvfH uUBVrCVF+r0AFBhjgRV+Lik/hxv/uY+bdSdlMTimeTliC7pgQVUQ5jlTsHtGRR9e UZDEh0qksCPoMbbGfhAh2/Zbs/ub2qG7e5RlNzhC/XC5gDsjYs0GK+k8pZ97pozS Z3r4I+h1Upx6M4idZ3hdJZF29MkeJ+oZCHRX79QTTc5QS/BNVMe+pahMbJ7206yr XQ80z9FBS644wQp8x3pjzG+sI2Q4Hs0makxzp12SRP8i0Q== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:18 2024 by rpki-client on console-fra.rpki-client.org