$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/045UU0pizT14gM98I0eERJRXUZ4.roa File: 045UU0pizT14gM98I0eERJRXUZ4.roa (raw, json) Hash identifier: cmeXEBJkAs37W0POlCAZZfR3TtERfZ4UpNxmgdU6P4I= Subject key identifier: D3:8E:54:53:4A:62:CD:3D:78:80:CF:7C:23:47:84:44:94:57:51:9E Certificate issuer: /CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3 Certificate serial: 0291 Authority key identifier: EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/045UU0pizT14gM98I0eERJRXUZ4.roa Signing time: Fri 01 Sep 2023 08:25:20 +0000 ROA not before: Fri 01 Sep 2023 08:25:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131618 IP address blocks: 103.161.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 07:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7F4A8B7B210DB9208ED580357045E5971DE0D3 Validity Not Before: Sep 1 08:25:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D38E54534A62CD3D7880CF7C234784449457519E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:5a:dd:99:f2:07:fd:35:45:d8:93:6f:01: f5:3b:5d:60:e7:db:32:69:b6:44:30:9a:2c:6d:be: 71:ba:40:2e:ec:bf:9f:aa:76:24:a4:4e:94:28:5f: 8d:00:4c:1b:06:5b:bf:4d:db:cb:2f:bc:de:78:4e: 9f:c3:8f:a2:db:0b:16:46:90:68:55:f6:3c:e7:c9: ff:e9:b7:be:39:25:6d:7d:bb:e7:c7:92:ce:7e:6b: 8e:6f:3a:4f:cb:19:f2:e9:60:5d:91:cb:1c:29:99: 08:f9:c5:94:79:b3:a1:80:99:94:02:80:43:c4:ef: e9:1e:56:6f:ff:4f:a8:5b:ef:ac:6f:42:b5:6c:54: 11:5c:44:6d:91:10:17:bf:5e:81:6d:12:bd:d8:9f: f5:a8:41:10:62:08:f5:ea:71:d7:8d:ee:53:29:c0: c9:bd:03:d3:2a:e0:c0:b6:e1:fb:fe:fd:31:14:cb: 61:1d:90:53:cb:e9:70:a9:a9:98:86:fe:e6:31:d0: 10:ea:46:77:a1:cd:50:88:04:03:38:4e:d3:86:b2: ed:13:df:b9:ac:6e:e6:27:68:15:12:37:27:b1:28: 1b:98:8e:46:7f:d7:ab:24:26:34:af:40:d6:71:0b: 87:f9:71:ae:6a:e0:a7:7b:f5:c4:5f:4d:02:7b:dd: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8E:54:53:4A:62:CD:3D:78:80:CF:7C:23:47:84:44:94:57:51:9E X509v3 Authority Key Identifier: keyid:EB:7F:4A:8B:7B:21:0D:B9:20:8E:D5:80:35:70:45:E5:97:1D:E0:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/639Ki3shDbkgjtWANXBF5Zcd4NM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/639Ki3shDbkgjtWANXBF5Zcd4NM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARLWATCH/045UU0pizT14gM98I0eERJRXUZ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.161.6.0/23 Signature Algorithm: sha256WithRSAEncryption 49:fa:ed:1f:ff:c1:9c:40:b9:67:bf:30:5e:ee:10:b0:36:26: 06:19:7a:9a:31:f9:b9:ef:0b:40:bf:ef:29:3d:02:9d:53:f3: 6f:88:f4:9b:cc:8c:35:92:11:aa:f1:3c:4d:b7:bc:5f:3e:1a: 73:12:f2:5a:36:f7:65:f4:a4:43:ec:ec:07:39:26:3b:89:32: 60:ca:f1:29:4d:b4:55:e5:6d:bb:0b:e3:c7:c5:8d:7e:aa:85: 86:8c:26:d3:e2:1b:75:88:e5:33:8f:25:b6:ee:e8:ab:4b:12: d4:3e:0c:66:f6:91:08:41:44:c5:fe:34:e1:d2:3c:bb:2e:cd: 20:20:d8:9e:2a:c7:08:43:3a:43:fd:9f:18:ab:40:aa:5f:15: 3e:13:be:38:31:46:93:a5:8d:93:f4:45:ea:e0:d5:be:f2:bb: 59:39:14:ae:be:23:43:9e:06:2f:03:5b:7d:3b:2b:ac:af:ac: 87:dd:56:ed:b7:23:90:df:74:ad:76:06:4f:50:72:d0:a5:d3: 7e:a2:8d:c3:06:ab:1c:4e:7f:5a:0c:a5:d4:0c:0e:c8:6c:f2: dd:73:40:84:42:b6:97:3b:69:5d:f9:0c:b7:39:c8:01:e7:c0: 72:d8:66:bf:66:3f:f7:93:21:06:64:e3:67:a4:db:f9:8b:72: d5:e8:97:8f -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICApEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI3 RjRBOEI3QjIxMERCOTIwOEVENTgwMzU3MDQ1RTU5NzFERTBEMzAeFw0yMzA5MDEw ODI1MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQzOEU1NDUzNEE2MkNE M0Q3ODgwQ0Y3QzIzNDc4NDQ0OTQ1NzUxOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDClrdmfIH/TVF2JNvAfU7XWDn2zJptkQwmixtvnG6QC7sv5+q diSkTpQoX40ATBsGW79N28svvN54Tp/Dj6LbCxZGkGhV9jznyf/pt745JW19u+fH ks5+a45vOk/LGfLpYF2RyxwpmQj5xZR5s6GAmZQCgEPE7+keVm//T6hb76xvQrVs VBFcRG2REBe/XoFtEr3Yn/WoQRBiCPXqcdeN7lMpwMm9A9Mq4MC24fv+/TEUy2Ed kFPL6XCpqZiG/uYx0BDqRnehzVCIBAM4TtOGsu0T37msbuYnaBUSNyexKBuYjkZ/ 16skJjSvQNZxC4f5ca5q4Kd79cRfTQJ73Y3bAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU045UU0pizT14gM98I0eERJRXUZ4wHwYDVR0jBBgwFoAU639Ki3shDbkgjtWA NXBF5Zcd4NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FSTFdB VENILzYzOUtpM3NoRGJrZ2p0V0FOWEJGNVpjZDROTS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvNjM5S2kzc2hEYmtnanRXQU5YQkY1WmNkNE5NLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FSTFdBVENILzA0NVVVMHBpelQx NGdNOThJMGVFUkpSWFVaNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnoQYwDQYJKoZIhvcNAQELBQADggEBAEn67R//wZxAuWe/MF7uELA2JgYZ epox+bnvC0C/7yk9Ap1T82+I9JvMjDWSEarxPE23vF8+GnMS8lo292X0pEPs7Ac5 JjuJMmDK8SlNtFXlbbsL48fFjX6qhYaMJtPiG3WI5TOPJbbu6KtLEtQ+DGb2kQhB RMX+NOHSPLsuzSAg2J4qxwhDOkP9nxirQKpfFT4TvjgxRpOljZP0Rerg1b7yu1k5 FK6+I0OeBi8DW307K6yvrIfdVu23I5DfdK12Bk9QctCl036ijcMGqxxOf1oMpdQM Dshs8t1zQIRCtpc7aV35DLc5yAHnwHLYZr9mP/eTIQZk42ek2/mLctXol48= -----END CERTIFICATE-----Generated at Sat May 18 07:49:56 2024 by rpki-client on console-ams.rpki-client.org