$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/9T6mIkXEe20US5wVSTh8cBqQlxY.roa File: 9T6mIkXEe20US5wVSTh8cBqQlxY.roa (raw, json) Hash identifier: g9vNOYwOsBgDPoJev72dJdWUeGIQui4rMYVOPbFYBfs= Subject key identifier: F5:3E:A6:22:45:C4:7B:6D:14:4B:9C:15:49:38:7C:70:1A:90:97:16 Certificate issuer: /CN=179C63DB1D6F3AB2FB0EE78E1A897B85BBD2A602 Certificate serial: 0255 Authority key identifier: 17:9C:63:DB:1D:6F:3A:B2:FB:0E:E7:8E:1A:89:7B:85:BB:D2:A6:02 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/9T6mIkXEe20US5wVSTh8cBqQlxY.roa Signing time: Mon 26 Aug 2024 05:10:33 +0000 ROA not before: Mon 26 Aug 2024 05:10:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63895 IP address blocks: 103.185.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/F5xj2x1vOrL7DueOGol7hbvSpgI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/F5xj2x1vOrL7DueOGol7hbvSpgI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179C63DB1D6F3AB2FB0EE78E1A897B85BBD2A602 Validity Not Before: Aug 26 05:10:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F53EA62245C47B6D144B9C1549387C701A909716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:a7:1b:cc:d6:25:9d:fa:50:27:4c:d7:56: d2:73:da:4a:0c:65:51:cc:eb:ff:f5:ac:f6:2e:27: 3c:40:26:ab:df:54:32:b2:a6:5b:75:ad:79:29:bd: d5:06:37:32:a3:a5:67:48:8b:7e:a3:86:1d:4c:d1: dc:cb:74:2d:bc:75:ed:a0:db:d0:73:32:33:9f:bb: 2c:0a:09:52:04:f8:f7:45:c2:bd:e0:52:1a:7f:76: 59:c2:8c:e5:ad:d3:46:dc:f6:3d:78:cb:79:53:ca: b7:77:3b:94:ba:8b:52:ad:ac:59:1a:14:c4:45:9b: e7:99:bd:b0:36:89:5a:69:6e:3d:f9:e2:da:c6:7b: 9e:ac:60:01:1c:ac:56:1e:8b:a8:7a:51:ee:5f:c5: 7f:cb:84:5a:84:db:77:89:c3:9d:f4:4a:05:67:0f: 46:2d:b8:a9:30:49:54:64:c3:b9:e5:44:9e:67:a7: 05:ea:a3:59:12:9b:4c:da:af:07:d5:04:c4:f4:d9: 27:2c:6f:1f:ea:7a:2b:0b:f6:f4:91:a0:92:b9:d2: 1c:a5:58:cf:43:f5:4e:ec:98:dd:4a:38:30:3e:60: 63:56:a6:2d:69:0d:5c:4f:12:79:d6:e6:7a:a2:0a: 7d:43:1c:e1:81:d0:e9:ee:ac:54:45:91:2f:23:71: ab:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3E:A6:22:45:C4:7B:6D:14:4B:9C:15:49:38:7C:70:1A:90:97:16 X509v3 Authority Key Identifier: keyid:17:9C:63:DB:1D:6F:3A:B2:FB:0E:E7:8E:1A:89:7B:85:BB:D2:A6:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/F5xj2x1vOrL7DueOGol7hbvSpgI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/F5xj2x1vOrL7DueOGol7hbvSpgI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHARMWAY/9T6mIkXEe20US5wVSTh8cBqQlxY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.185.29.0/24 Signature Algorithm: sha256WithRSAEncryption 61:0a:d6:72:bd:ff:ce:8f:e6:c5:ed:a5:bd:d4:50:1b:2e:35: 6f:d3:88:75:10:b7:eb:da:1f:6d:64:f4:00:e8:9c:bc:46:78: d6:51:b9:b6:6a:95:eb:7b:11:16:84:87:ed:40:64:32:8a:c4: 59:00:5a:8c:4f:b9:66:b6:09:c5:d6:64:c7:a6:03:5b:6f:24: c6:11:61:ed:10:86:34:5c:d4:94:9d:c8:8a:35:e1:99:35:e9: a7:c8:06:6b:f4:01:2a:c6:6f:cf:f4:23:31:73:c2:87:73:97: 64:c3:c9:ed:f7:ed:33:32:e2:ba:d2:c6:43:e2:03:0c:28:6f: ee:29:e0:53:82:de:35:d4:78:f1:e8:86:ce:4e:30:86:ac:53: 23:16:37:af:3d:41:a1:dd:ae:29:66:1f:75:4c:8b:c9:a0:79: 21:a0:4d:e1:46:3e:03:4d:0a:a4:a6:dd:8c:05:92:af:5a:4c: 92:d7:cf:7d:9f:46:2a:25:4e:50:2d:15:37:62:e0:b2:ac:e5: 43:67:dd:a4:91:83:88:ee:db:42:e7:f4:9f:78:6f:c4:29:1b: 97:fb:16:51:e5:18:f7:13:ef:12:f3:cd:41:8e:6a:86:65:12: 21:3b:7f:ea:37:95:9f:59:b0:6e:fb:22:92:6a:88:21:16:b7: a3:5f:30:f0 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTc5 QzYzREIxRDZGM0FCMkZCMEVFNzhFMUE4OTdCODVCQkQyQTYwMjAeFw0yNDA4MjYw NTEwMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1M0VBNjIyNDVDNDdC NkQxNDRCOUMxNTQ5Mzg3QzcwMUE5MDk3MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVSqcbzNYlnfpQJ0zXVtJz2koMZVHM6//1rPYuJzxAJqvfVDKy plt1rXkpvdUGNzKjpWdIi36jhh1M0dzLdC28de2g29BzMjOfuywKCVIE+PdFwr3g Uhp/dlnCjOWt00bc9j14y3lTyrd3O5S6i1KtrFkaFMRFm+eZvbA2iVppbj354trG e56sYAEcrFYei6h6Ue5fxX/LhFqE23eJw530SgVnD0YtuKkwSVRkw7nlRJ5npwXq o1kSm0zarwfVBMT02Scsbx/qeisL9vSRoJK50hylWM9D9U7smN1KODA+YGNWpi1p DVxPEnnW5nqiCn1DHOGB0OnurFRFkS8jcauHAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU9T6mIkXEe20US5wVSTh8cBqQlxYwHwYDVR0jBBgwFoAUF5xj2x1vOrL7DueO Gol7hbvSpgIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBUk1X QVkvRjV4ajJ4MXZPckw3RHVlT0dvbDdoYnZTcGdJLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9GNXhqMngxdk9yTDdEdWVPR29sN2hidlNwZ0kuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSEFSTVdBWS85VDZtSWtYRWUyMFVT NXdWU1RoOGNCcVFseFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7kdMA0GCSqGSIb3DQEBCwUAA4IBAQBhCtZyvf/Oj+bF7aW91FAbLjVv04h1 ELfr2h9tZPQA6Jy8RnjWUbm2apXrexEWhIftQGQyisRZAFqMT7lmtgnF1mTHpgNb byTGEWHtEIY0XNSUnciKNeGZNemnyAZr9AEqxm/P9CMxc8KHc5dkw8nt9+0zMuK6 0sZD4gMMKG/uKeBTgt411Hjx6IbOTjCGrFMjFjevPUGh3a4pZh91TIvJoHkhoE3h Rj4DTQqkpt2MBZKvWkyS1899n0YqJU5QLRU3YuCyrOVDZ92kkYOI7ttC5/SfeG/E KRuX+xZR5Rj3E+8S881BjmqGZRIhO3/qN5WfWbBu+yKSaoghFrejXzDw -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:02 2024 by rpki-client on console-ams.rpki-client.org