$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/abm6tnWjU0hioaXp18hmZJGfMTw.roa File: abm6tnWjU0hioaXp18hmZJGfMTw.roa (raw, json) Hash identifier: QCftpdP9ndNHTZlMiOlWSqUG47GWIzj3bN7moB5a/rc= Subject key identifier: 69:B9:BA:B6:75:A3:53:48:62:A1:A5:E9:D7:C8:66:64:91:9F:31:3C Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0FCD Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/abm6tnWjU0hioaXp18hmZJGfMTw.roa Signing time: Fri 01 Sep 2023 08:29:35 +0000 ROA not before: Fri 01 Sep 2023 08:29:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38851 IP address blocks: 103.5.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 19:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4045 (0xfcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=69B9BAB675A3534862A1A5E9D7C86664919F313C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:cd:3e:73:a7:49:de:e0:bd:71:7e:11:5f: 51:f4:82:f2:f6:7c:41:34:38:f4:c6:9e:56:dc:35: 71:ec:ea:cb:0f:94:d9:8e:46:03:6c:21:cd:6c:8e: 81:7d:31:ad:1a:ef:82:9b:17:e9:2e:2c:25:07:33: 5f:17:68:4d:5f:0b:ac:05:8b:18:bb:e9:5b:87:56: 74:be:82:23:3d:a5:9f:92:e1:36:39:9a:61:22:ef: 25:49:b1:c8:0a:6a:67:a6:ba:d8:b5:c1:75:f7:52: 84:fe:bb:da:54:19:46:12:c4:f3:59:35:c6:b0:93: c2:f2:33:19:f8:03:53:88:68:a6:bd:96:34:11:01: 04:27:43:70:24:52:ee:79:12:8a:1b:9b:25:15:dc: bd:e8:81:2c:4c:a3:4d:f9:f4:38:cc:21:e6:86:5c: be:c7:6f:2d:92:5e:d8:84:ba:9e:7c:08:91:ce:c3: 20:7d:75:a4:48:7a:a6:ae:fd:58:2e:8f:6a:0f:a9: 6b:f1:e3:92:bd:1c:c5:d9:18:52:57:7d:18:dd:91: 46:0c:dd:29:12:14:cd:d9:db:2a:61:54:d6:8c:67: a2:b7:3e:bf:51:75:67:de:b6:e2:10:7a:56:ce:35: 0c:08:f5:79:63:1b:07:7e:5f:d0:56:eb:15:8b:3a: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B9:BA:B6:75:A3:53:48:62:A1:A5:E9:D7:C8:66:64:91:9F:31:3C X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/abm6tnWjU0hioaXp18hmZJGfMTw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.100.0/22 Signature Algorithm: sha256WithRSAEncryption b8:b0:c9:7a:c2:02:76:79:a5:92:7b:9c:21:2f:59:f7:15:63: ae:c2:df:64:68:dc:61:f3:43:16:7b:ac:46:6d:8b:5e:d3:d7: 99:36:12:fb:72:38:78:68:63:d5:73:0e:6e:f3:3f:be:68:d8: b0:5d:13:93:7e:cd:94:12:8b:7a:59:75:28:2e:d8:e9:68:7c: 54:77:18:5c:5f:96:24:b2:22:52:15:4b:b2:c3:56:69:f3:8e: 8b:2e:d9:86:2c:91:72:4c:52:14:6e:83:d5:45:ca:97:92:06: 10:db:2b:75:b6:ae:01:46:35:16:70:6e:56:e5:a0:3e:50:59: 58:20:07:5e:bf:65:2c:69:4c:50:10:3a:d2:64:6b:52:a1:07: 89:fe:35:5a:20:93:ea:d2:62:34:78:99:5c:af:7b:43:21:03: 69:b1:24:9b:5b:63:c2:7a:e3:12:5e:26:fe:81:60:57:e7:a2: a5:f3:ef:eb:b1:19:ec:86:51:be:56:7a:06:34:3c:3e:e6:cc: 95:c2:6d:bb:5c:4b:f9:0e:50:c2:59:56:3f:48:dd:6d:54:94: fb:e1:21:51:a6:b6:9d:83:c0:05:8b:ae:4a:3d:51:26:10:2a: d1:18:95:34:ce:04:d8:07:d0:9b:83:61:12:f7:1b:46:70:5f: 10:bb:96:57 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICD80wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY5QjlCQUI2NzVBMzUz NDg2MkExQTVFOUQ3Qzg2NjY0OTE5RjMxM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXTc0+c6dJ3uC9cX4RX1H0gvL2fEE0OPTGnlbcNXHs6ssPlNmO RgNsIc1sjoF9Ma0a74KbF+kuLCUHM18XaE1fC6wFixi76VuHVnS+giM9pZ+S4TY5 mmEi7yVJscgKamemuti1wXX3UoT+u9pUGUYSxPNZNcawk8LyMxn4A1OIaKa9ljQR AQQnQ3AkUu55EoobmyUV3L3ogSxMo0359DjMIeaGXL7Hby2SXtiEup58CJHOwyB9 daRIeqau/Vguj2oPqWvx45K9HMXZGFJXfRjdkUYM3SkSFM3Z2yphVNaMZ6K3Pr9R dWfetuIQelbONQwI9XljGwd+X9BW6xWLOgzLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUabm6tnWjU0hioaXp18hmZJGfMTwwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9hYm02dG5XalUwaGlv YVhwMThobVpKR2ZNVHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZwVkMA0GCSqGSIb3DQEBCwUAA4IBAQC4sMl6wgJ2eaWSe5whL1n3FWOuwt9k aNxh80MWe6xGbYte09eZNhL7cjh4aGPVcw5u8z++aNiwXROTfs2UEot6WXUoLtjp aHxUdxhcX5YksiJSFUuyw1Zp846LLtmGLJFyTFIUboPVRcqXkgYQ2yt1tq4BRjUW cG5W5aA+UFlYIAdev2UsaUxQEDrSZGtSoQeJ/jVaIJPq0mI0eJlcr3tDIQNpsSSb W2PCeuMSXib+gWBX56Kl8+/rsRnshlG+VnoGNDw+5syVwm27XEv5DlDCWVY/SN1t VJT74SFRpradg8AFi65KPVEmECrRGJU0zgTYB9Cbg2ES9xtGcF8Qu5ZX -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:29 2024 by rpki-client on console-ams.rpki-client.org