$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/Drp7VOlboQY-4GSuHdjTrvcN5RY.roa File: Drp7VOlboQY-4GSuHdjTrvcN5RY.roa (raw, json) Hash identifier: NwKWwNZAEdOzXManl3RJCd6leLuP6bwSOy9EznQuHuo= Subject key identifier: 0E:BA:7B:54:E9:5B:A1:06:3E:E0:64:AE:1D:D8:D3:AE:F7:0D:E5:16 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0C6D Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Drp7VOlboQY-4GSuHdjTrvcN5RY.roa Signing time: Fri 01 Sep 2023 08:26:32 +0000 ROA not before: Fri 01 Sep 2023 08:26:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 123.50.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Sep 1 08:26:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0EBA7B54E95BA1063EE064AE1DD8D3AEF70DE516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:1c:06:44:6a:47:99:0f:e5:bb:54:ff:7f: 3f:6a:33:74:0a:04:5c:d9:48:e9:2c:c6:99:53:45: 0d:29:25:1e:8c:62:49:97:52:79:c2:2c:3e:79:7d: 9d:73:81:6f:3a:af:35:b3:a2:87:7e:ed:db:e8:10: 26:ff:b3:94:06:d7:c2:82:4b:54:83:1f:95:87:fd: b9:92:d5:f6:cc:46:75:0b:b6:0f:76:6c:f4:ff:12: da:4c:5c:fb:d7:60:e7:1b:83:e7:6d:0f:7f:41:7a: 0e:44:87:9a:0b:09:ab:8a:9f:77:0d:a3:db:5c:ea: 62:2b:4b:5e:58:2e:5b:2b:f2:5b:11:bd:b3:d5:11: 8b:42:90:50:61:d0:28:66:be:ba:04:85:1c:d6:ba: a1:33:e2:15:5d:ad:67:34:94:cd:0b:58:86:4a:4c: 6e:17:d2:6b:2e:c5:bf:63:ad:ef:0a:2d:56:d6:5e: e9:c3:57:05:21:8e:14:f5:fd:85:39:c2:d1:71:d2: d9:2e:de:8d:28:1e:91:75:f2:cf:5b:0e:0e:db:c3: d2:99:e0:05:f7:11:d9:20:5b:4f:ca:26:8f:bb:fe: 12:46:16:6c:dc:68:b1:36:03:94:88:63:b5:a4:f8: 18:ff:e0:31:85:ae:f9:06:eb:e5:11:4c:0a:77:eb: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:7B:54:E9:5B:A1:06:3E:E0:64:AE:1D:D8:D3:AE:F7:0D:E5:16 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/Drp7VOlboQY-4GSuHdjTrvcN5RY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.50.40.0/21 Signature Algorithm: sha256WithRSAEncryption 61:e0:30:f6:64:36:77:56:c7:ca:1d:5e:73:c9:17:6b:c6:b6: c9:25:98:31:61:0c:97:a4:9b:d1:e2:c5:ce:5a:0d:fa:f6:3e: ef:a7:29:07:40:e5:62:0d:f1:7b:26:c7:85:08:17:dd:43:e3: 25:0b:ef:b5:94:e3:1e:f8:0c:fe:62:18:26:eb:fd:36:37:d9: 12:ba:c0:d4:f1:62:74:0e:ff:c4:b3:68:17:f9:56:af:d6:5b: ee:a6:b2:f3:cb:a9:41:97:bf:07:82:a7:d8:8c:6e:16:57:39: 32:1c:56:45:73:f7:ba:8d:5a:60:66:cb:cb:fe:9f:d4:eb:cf: 88:b6:57:90:95:bb:ee:78:f6:0f:7b:3e:5b:1f:e7:90:f4:16: 3b:cd:fe:20:7c:a6:10:17:78:3e:b6:93:52:69:b1:c4:ed:ed: ee:91:d4:22:f7:84:49:9e:e3:31:64:bc:f9:04:a9:fb:41:b1: 9a:74:35:d1:1b:61:d5:7f:53:25:e8:1f:c4:1b:a5:0b:b9:57: 34:cc:ce:23:c9:ec:5f:fc:86:7b:ce:4c:8b:8d:6c:b9:12:8a: ef:71:0e:6e:e2:0f:5d:17:93:39:04:46:f7:8f:72:2b:e6:6c: 05:8a:a8:87:2e:4d:2b:2a:99:80:f3:b8:fb:37:86:02:f3:6f: 29:4e:c9:1a -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw ODI2MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBFQkE3QjU0RTk1QkEx MDYzRUUwNjRBRTFERDhEM0FFRjcwREU1MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5kxwGRGpHmQ/lu1T/fz9qM3QKBFzZSOksxplTRQ0pJR6MYkmX UnnCLD55fZ1zgW86rzWzood+7dvoECb/s5QG18KCS1SDH5WH/bmS1fbMRnULtg92 bPT/EtpMXPvXYOcbg+dtD39Beg5Eh5oLCauKn3cNo9tc6mIrS15YLlsr8lsRvbPV EYtCkFBh0ChmvroEhRzWuqEz4hVdrWc0lM0LWIZKTG4X0msuxb9jre8KLVbWXunD VwUhjhT1/YU5wtFx0tku3o0oHpF18s9bDg7bw9KZ4AX3EdkgW0/KJo+7/hJGFmzc aLE2A5SIY7Wk+Bj/4DGFrvkG6+URTAp366YZAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUDrp7VOlboQY+4GSuHdjTrvcN5RYwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9EcnA3Vk9sYm9RWS00R1N1SGRq VHJ2Y041Ulkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDezIo MA0GCSqGSIb3DQEBCwUAA4IBAQBh4DD2ZDZ3VsfKHV5zyRdrxrbJJZgxYQyXpJvR 4sXOWg369j7vpykHQOViDfF7JseFCBfdQ+MlC++1lOMe+Az+Yhgm6/02N9kSusDU 8WJ0Dv/Es2gX+Vav1lvuprLzy6lBl78HgqfYjG4WVzkyHFZFc/e6jVpgZsvL/p/U 68+ItleQlbvuePYPez5bH+eQ9BY7zf4gfKYQF3g+tpNSabHE7e3ukdQi94RJnuMx ZLz5BKn7QbGadDXRG2HVf1Ml6B/EG6ULuVc0zM4jyexf/IZ7zkyLjWy5EorvcQ5u 4g9dF5M5BEb3j3Ir5mwFiqiHLk0rKpmA87j7N4YC828pTska -----END CERTIFICATE-----Generated at Mon Jun 3 12:43:59 2024 by rpki-client on console-fra.rpki-client.org