$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3hYJoi6m26-E3az_pIphnWgXtbg.roa File: 3hYJoi6m26-E3az_pIphnWgXtbg.roa (raw, json) Hash identifier: R2siSaU0gZGQsj1fTeGSiRhNwTkfyYOLnGRYx8vbUcQ= Subject key identifier: DE:16:09:A2:2E:A6:DB:AF:84:DD:AC:FF:A4:8A:61:9D:68:17:B5:B8 Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0B6D Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3hYJoi6m26-E3az_pIphnWgXtbg.roa Signing time: Fri 01 Sep 2023 08:30:30 +0000 ROA not before: Fri 01 Sep 2023 08:30:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18046 IP address blocks: 103.234.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Sep 1 08:30:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DE1609A22EA6DBAF84DDACFFA48A619D6817B5B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:73:84:57:1d:44:88:54:c6:19:b4:ee:8f: 14:30:cb:df:67:7f:44:68:2e:25:c2:9b:00:4e:d0: 16:69:e6:57:b9:6a:58:b9:b4:bd:0c:fb:16:fc:ab: 90:54:03:05:5f:fb:fe:70:c0:7f:d0:2d:0d:9c:2d: 1d:6d:71:0a:53:d7:d1:d4:55:4c:3f:90:d1:15:5c: 15:22:14:46:34:98:51:f4:87:14:11:21:4c:3a:42: 2c:c5:7e:d2:31:4b:32:81:57:a2:a2:bb:7c:52:91: 93:e2:31:ae:61:9f:5f:22:0b:49:08:91:4b:f2:0c: 83:9e:9f:13:e6:ec:cf:64:97:4b:1e:86:28:8f:46: dc:4a:11:c6:48:8f:f3:34:7e:01:af:02:dd:f3:83: 21:f1:2b:2c:7e:b8:31:05:8b:d2:ab:75:d1:82:3f: dc:8a:5f:8e:b4:00:d1:5e:ca:37:cc:fd:96:53:b1: 3a:67:5b:03:f6:45:2c:ab:ee:cb:05:69:37:7e:4f: 35:7d:d6:4b:f8:6e:32:e2:e9:03:62:69:83:d0:75: cc:07:c4:54:da:07:bb:de:98:e2:ff:21:7d:e2:96: 56:54:f6:1c:99:3b:6c:bc:1d:2b:cb:3b:f1:0a:52: 63:87:a9:36:29:06:77:27:1b:22:c4:6f:d1:e9:ef: 5a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:16:09:A2:2E:A6:DB:AF:84:DD:AC:FF:A4:8A:61:9D:68:17:B5:B8 X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3hYJoi6m26-E3az_pIphnWgXtbg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.224.0/22 Signature Algorithm: sha256WithRSAEncryption 47:93:32:66:f3:87:82:59:b4:46:8e:00:0d:52:6b:62:10:db: c3:74:81:53:d0:80:dd:49:d5:30:8d:58:82:64:8f:28:76:13: 1d:7f:05:80:a7:e7:a1:96:d4:54:3d:fd:31:5c:83:85:38:07: 87:69:8b:5f:d8:0c:ca:da:0c:03:0e:c6:a3:8a:ed:39:0e:68: 15:0a:3e:b2:08:7a:33:43:00:35:f6:ae:89:69:61:98:2c:a9: c8:f7:70:b0:35:40:c9:a0:43:e6:47:64:9c:5a:92:93:61:31: 07:31:e7:42:cc:91:58:05:6e:bc:b1:a4:52:84:36:88:b0:b8: 32:1f:60:dc:3e:81:28:69:35:cb:ba:51:30:2e:6f:c3:d2:de: b4:af:69:6e:ac:d5:20:a2:81:91:1f:c0:3d:61:75:33:9c:65: 52:ad:e3:8c:b3:18:c3:2e:1a:c8:66:c8:8c:38:95:77:4e:6e: e9:2d:b4:39:0f:63:fc:ec:ff:00:9c:18:7d:2d:25:89:44:0d: f3:28:2b:c8:54:ed:c4:27:14:cf:97:e1:83:85:9e:53:1e:8f: 4b:b1:b6:0e:4a:3e:7d:58:04:01:90:c3:a1:35:82:e7:f4:f2: a7:2d:6c:82:7b:94:1f:82:04:2a:73:a9:10:1e:a9:2c:44:ff: 75:fc:c6:55 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICC20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yMzA5MDEw ODMwMzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFMTYwOUEyMkVBNkRC QUY4NEREQUNGRkE0OEE2MTlENjgxN0I1QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSrXOEVx1EiFTGGbTujxQwy99nf0RoLiXCmwBO0BZp5le5ali5 tL0M+xb8q5BUAwVf+/5wwH/QLQ2cLR1tcQpT19HUVUw/kNEVXBUiFEY0mFH0hxQR IUw6QizFftIxSzKBV6Kiu3xSkZPiMa5hn18iC0kIkUvyDIOenxPm7M9kl0sehiiP RtxKEcZIj/M0fgGvAt3zgyHxKyx+uDEFi9KrddGCP9yKX460ANFeyjfM/ZZTsTpn WwP2RSyr7ssFaTd+TzV91kv4bjLi6QNiaYPQdcwHxFTaB7vemOL/IX3illZU9hyZ O2y8HSvLO/EKUmOHqTYpBncnGyLEb9Hp71q1AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU3hYJoi6m26+E3az/pIphnWgXtbgwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vM2hZSm9pNm0y Ni1FM2F6X3BJcGhuV2dYdGJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfq4DANBgkqhkiG9w0BAQsFAAOCAQEAR5MyZvOHglm0Ro4ADVJrYhDb w3SBU9CA3UnVMI1YgmSPKHYTHX8FgKfnoZbUVD39MVyDhTgHh2mLX9gMytoMAw7G o4rtOQ5oFQo+sgh6M0MANfauiWlhmCypyPdwsDVAyaBD5kdknFqSk2ExBzHnQsyR WAVuvLGkUoQ2iLC4Mh9g3D6BKGk1y7pRMC5vw9LetK9pbqzVIKKBkR/APWF1M5xl Uq3jjLMYwy4ayGbIjDiVd05u6S20OQ9j/Oz/AJwYfS0liUQN8ygryFTtxCcUz5fh g4WeUx6PS7G2Dko+fVgEAZDDoTWC5/Typy1sgnuUH4IEKnOpEB6pLET/dfzGVQ== -----END CERTIFICATE-----Generated at Sun Jun 2 07:14:19 2024 by rpki-client on console-fra.rpki-client.org