$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/ZjbBsrV296QCjFWkQWv1A2Yc3K8.roa File: ZjbBsrV296QCjFWkQWv1A2Yc3K8.roa (raw, json) Hash identifier: 5raCmIELEVqimA3nydE0cYiF0TX7Ks9dRmHcHeXywKs= Subject key identifier: 66:36:C1:B2:B5:76:F7:A4:02:8C:55:A4:41:6B:F5:03:66:1C:DC:AF Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Certificate serial: 0185 Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/ZjbBsrV296QCjFWkQWv1A2Yc3K8.roa Signing time: Fri 01 Sep 2023 08:30:02 +0000 ROA not before: Fri 01 Sep 2023 08:30:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 103.183.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 21:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Validity Not Before: Sep 1 08:30:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6636C1B2B576F7A4028C55A4416BF503661CDCAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:bd:5b:0e:e6:c6:bb:24:e9:04:f1:7d:08: 1c:d7:5d:a9:7e:72:59:1e:44:dd:0b:95:eb:9a:a3: 6f:11:0e:89:90:a9:04:cc:3c:3e:5b:37:6e:40:94: b6:47:13:3f:42:28:62:10:9c:0a:b8:5c:87:36:e6: 48:94:79:92:b0:98:c0:f6:c0:12:e3:ca:46:f9:a0: 95:80:cd:dd:7a:13:4f:02:26:b0:6f:9b:0c:bc:f2: ef:bf:17:46:b5:35:98:be:b9:a4:6a:a6:ec:28:82: 20:9d:ae:9c:4f:aa:00:ec:22:bf:11:99:0a:6e:db: 90:f9:5e:38:e3:ac:0d:7a:ce:26:cb:de:8e:7b:e1: 4d:c3:fb:61:eb:8e:68:d5:3e:2f:73:30:ce:76:72: f0:d3:5b:1e:c2:96:c7:f9:61:32:64:04:c6:c0:a6: 28:18:38:b5:e9:13:25:48:87:bc:b8:6a:76:42:1a: 75:0e:49:0c:c2:53:34:cf:f7:33:b2:94:a5:8d:91: 69:8e:e7:97:df:06:a0:2e:7c:97:83:a9:ee:91:19: 87:3d:b5:31:8b:4b:d7:5c:ce:12:e1:9d:43:16:4e: c1:8f:66:3e:70:32:bd:20:be:00:9c:08:64:17:99: 35:d6:f2:72:17:97:99:e1:a8:9c:d9:d7:4e:35:88: aa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:C1:B2:B5:76:F7:A4:02:8C:55:A4:41:6B:F5:03:66:1C:DC:AF X509v3 Authority Key Identifier: keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/ZjbBsrV296QCjFWkQWv1A2Yc3K8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.183.78.0/24 Signature Algorithm: sha256WithRSAEncryption 42:d9:98:a7:88:19:81:f0:0d:44:0e:e1:11:a2:a2:5c:d7:21: 7b:e4:70:3e:b7:f5:10:f1:2d:fc:2b:3f:d2:88:0a:00:f4:a0: f2:a5:f0:16:ab:d0:42:43:40:f4:77:f1:f3:22:12:48:1f:84: 3f:df:0d:14:ee:13:dc:7d:6a:94:ba:f9:04:8b:50:79:76:ef: c8:ba:00:be:26:2d:9d:47:8b:b1:42:3b:91:a7:02:c4:77:1b: 95:da:1d:35:8c:d3:9b:26:2a:af:63:b4:4b:21:05:87:72:6a: d5:0f:37:15:8f:46:16:c3:39:b7:64:a7:32:18:64:78:ed:2b: 20:11:b7:98:f1:bc:34:83:23:1e:64:ca:13:b0:66:fc:02:df: 9e:4b:6b:ff:70:23:16:2b:12:5d:6d:68:f2:60:94:aa:63:fe: 2e:6d:2e:e1:63:34:22:2c:a3:07:31:63:0f:8c:e9:2a:f8:d5: 75:54:04:b0:95:8c:68:05:cc:97:14:25:2f:60:98:1c:d5:f5: 30:49:ed:38:5c:68:31:59:83:35:eb:19:d2:11:56:0e:9b:b7: e3:31:5b:59:a8:73:44:50:cc:92:e3:de:62:ad:a2:5e:b2:24: 8a:14:7e:8b:5e:89:de:27:c1:9e:80:8c:d2:29:7f:3e:08:6e: 6a:20:24:05 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD ODQzOUZFMTlEOTlCMDM4MjcwMjA4Qzk0QjY2Q0EyMzFGRkVENTAeFw0yMzA5MDEw ODMwMDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY2MzZDMUIyQjU3NkY3 QTQwMjhDNTVBNDQxNkJGNTAzNjYxQ0RDQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrEb1bDubGuyTpBPF9CBzXXal+clkeRN0Lleuao28RDomQqQTM PD5bN25AlLZHEz9CKGIQnAq4XIc25kiUeZKwmMD2wBLjykb5oJWAzd16E08CJrBv mwy88u+/F0a1NZi+uaRqpuwogiCdrpxPqgDsIr8RmQpu25D5XjjjrA16zibL3o57 4U3D+2HrjmjVPi9zMM52cvDTWx7Clsf5YTJkBMbApigYOLXpEyVIh7y4anZCGnUO SQzCUzTP9zOylKWNkWmO55ffBqAufJeDqe6RGYc9tTGLS9dczhLhnUMWTsGPZj5w Mr0gvgCcCGQXmTXW8nIXl5nhqJzZ1041iKo/AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUZjbBsrV296QCjFWkQWv1A2Yc3K8wHwYDVR0jBBgwFoAUq8hDn+GdmbA4JwII yUtmyiMf/tUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU RUwvcThoRG4tR2RtYkE0SndJSXlVdG15aU1mX3RVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9xOGhEbi1HZG1iQTRKd0lJeVV0bXlpTWZfdFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElOQVRFTC9aamJCc3JWMjk2UUNq RldrUVd2MUEyWWMzSzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ7dOMA0GCSqGSIb3DQEBCwUAA4IBAQBC2ZiniBmB8A1EDuERoqJc1yF75HA+ t/UQ8S38Kz/SiAoA9KDypfAWq9BCQ0D0d/HzIhJIH4Q/3w0U7hPcfWqUuvkEi1B5 du/IugC+Ji2dR4uxQjuRpwLEdxuV2h01jNObJiqvY7RLIQWHcmrVDzcVj0YWwzm3 ZKcyGGR47SsgEbeY8bw0gyMeZMoTsGb8At+eS2v/cCMWKxJdbWjyYJSqY/4ubS7h YzQiLKMHMWMPjOkq+NV1VASwlYxoBcyXFCUvYJgc1fUwSe04XGgxWYM16xnSEVYO m7fjMVtZqHNEUMyS495iraJesiSKFH6LXoneJ8GegIzSKX8+CG5qICQF -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:41 2024 by rpki-client on console-ams.rpki-client.org