$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa File: ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa (raw, json) Hash identifier: DtYSJ45PMYK5itgYqn33JV8xHDzr5Cg+BC9RM9Sk9Pk= Subject key identifier: 64:92:6A:88:5A:A3:06:65:3E:06:90:AB:BC:BB:37:11:E8:05:9B:49 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0C65 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa Signing time: Fri 01 Sep 2023 08:26:31 +0000 ROA not before: Fri 01 Sep 2023 08:26:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 103.224.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Sep 1 08:26:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=64926A885AA306653E0690ABBCBB3711E8059B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:95:e6:9a:74:21:43:3f:fe:01:45:08:85:93: 39:74:ab:a3:47:00:98:a3:07:c6:02:c0:df:c1:49: f7:fe:53:80:91:31:e1:c0:f4:75:06:1d:db:4c:d3: 91:1d:4a:da:c3:92:58:a9:88:4d:1e:34:da:6c:68: 19:93:de:ec:ae:0c:98:59:4d:58:6c:27:b2:cc:25: 28:ec:14:91:71:e6:eb:7a:67:8b:c1:a3:05:21:31: d3:d0:2b:ad:dc:7b:52:31:6e:1d:ef:99:e7:c4:20: a3:ac:06:a3:4b:0b:50:3c:74:ef:8c:ea:2a:9d:75: bf:15:65:9f:ce:fa:22:7f:86:db:02:08:de:d2:7b: 66:c6:6f:ff:64:e8:3c:c4:82:9f:16:83:ba:94:85: d7:40:71:27:44:94:1f:38:05:e2:e0:dc:52:b9:71: 6e:13:63:6b:7c:da:cd:4e:f9:07:18:1a:ef:8b:9c: 30:6f:9d:ad:fe:5f:9a:ad:39:c6:38:3f:15:08:5c: b8:6f:b7:c6:a7:68:4b:f4:b5:b9:0c:7a:7a:b2:87: 54:ce:26:e4:b1:81:92:80:bd:b2:6d:a2:d7:0b:67: fd:3f:44:df:27:0e:e4:05:58:b4:ac:36:fd:b7:20: 68:e3:9f:d3:2a:b5:40:d1:71:6c:29:25:0d:17:8c: 74:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:92:6A:88:5A:A3:06:65:3E:06:90:AB:BC:BB:37:11:E8:05:9B:49 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.200.0/22 Signature Algorithm: sha256WithRSAEncryption 96:fc:44:30:23:f3:2e:02:03:3c:3e:aa:2d:bd:56:d6:5e:f1: 81:d3:90:3b:34:9b:3a:21:f0:ea:ae:41:f5:91:81:da:f4:a7: bc:f5:2f:07:a5:33:e9:65:4d:73:b0:2b:94:16:bf:02:62:41: fe:0b:a4:da:67:bf:51:ca:1c:b3:3a:fe:1e:3d:0f:8e:e5:9f: 03:76:95:78:68:23:5b:29:4a:10:8a:1b:09:4d:5c:34:be:4a: 29:95:16:fb:9f:65:f5:3f:7f:56:0a:70:f3:52:da:9f:67:e4: 59:62:a7:23:e3:b2:2d:8e:3e:a7:e9:a4:12:0e:fb:c7:1b:0c: 4d:ad:6e:23:c7:13:bc:a7:9d:c1:7b:a5:45:86:80:ff:83:3f: d9:c7:7a:73:fd:ab:7b:69:3b:d8:72:cc:20:87:7a:21:5f:2a: 77:a7:3b:c4:01:51:63:6b:5d:d4:f0:7a:bf:59:9d:ad:66:b3: be:ff:06:23:99:93:aa:50:7f:55:12:d2:b0:a2:d1:fe:cf:f9: ea:d5:8d:b4:dc:54:c0:bc:a4:fe:8c:c3:56:67:34:2c:ae:86: 8e:ff:e4:95:93:ba:49:d6:49:e2:bb:61:92:33:73:6c:fc:f9: ee:79:db:4b:67:25:6d:34:a4:d7:e7:cd:45:5f:6b:8a:5a:03: e5:7e:40:3c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw ODI2MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY0OTI2QTg4NUFBMzA2 NjUzRTA2OTBBQkJDQkIzNzExRTgwNTlCNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYleaadCFDP/4BRQiFkzl0q6NHAJijB8YCwN/BSff+U4CRMeHA 9HUGHdtM05EdStrDklipiE0eNNpsaBmT3uyuDJhZTVhsJ7LMJSjsFJFx5ut6Z4vB owUhMdPQK63ce1Ixbh3vmefEIKOsBqNLC1A8dO+M6iqddb8VZZ/O+iJ/htsCCN7S e2bGb/9k6DzEgp8Wg7qUhddAcSdElB84BeLg3FK5cW4TY2t82s1O+QcYGu+LnDBv na3+X5qtOcY4PxUIXLhvt8anaEv0tbkMenqyh1TOJuSxgZKAvbJtotcLZ/0/RN8n DuQFWLSsNv23IGjjn9MqtUDRcWwpJQ0XjHR/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUZJJqiFqjBmU+BpCrvLs3EegFm0kwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9aSkpxaUZxakJtVS1CcENydkxz M0VlZ0ZtMGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+DI MA0GCSqGSIb3DQEBCwUAA4IBAQCW/EQwI/MuAgM8PqotvVbWXvGB05A7NJs6IfDq rkH1kYHa9Ke89S8HpTPpZU1zsCuUFr8CYkH+C6TaZ79RyhyzOv4ePQ+O5Z8DdpV4 aCNbKUoQihsJTVw0vkoplRb7n2X1P39WCnDzUtqfZ+RZYqcj47Itjj6n6aQSDvvH GwxNrW4jxxO8p53Be6VFhoD/gz/Zx3pz/at7aTvYcswgh3ohXyp3pzvEAVFja13U 8Hq/WZ2tZrO+/wYjmZOqUH9VEtKwotH+z/nq1Y203FTAvKT+jMNWZzQsroaO/+SV k7pJ1kniu2GSM3Ns/PnuedtLZyVtNKTX581FX2uKWgPlfkA8 -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:40 2024 by rpki-client on console-ams.rpki-client.org