$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/i_0BXhjPVofNeCiZEcYu58IS6g8.roa File: i_0BXhjPVofNeCiZEcYu58IS6g8.roa (raw, json) Hash identifier: 7b1wqh9RqfrAJHUWtQAb6KWXixStnqYyzkz9OMMfH2c= Subject key identifier: 8B:FD:01:5E:18:CF:56:87:CD:78:28:99:11:C6:2E:E7:C2:12:EA:0F Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Certificate serial: 0AFD Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/i_0BXhjPVofNeCiZEcYu58IS6g8.roa Signing time: Fri 01 Sep 2023 08:30:45 +0000 ROA not before: Fri 01 Sep 2023 08:30:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 16509 IP address blocks: 103.119.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 14:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807 Validity Not Before: Sep 1 08:30:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8BFD015E18CF5687CD78289911C62EE7C212EA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:5c:af:79:72:8d:88:4f:8a:4c:5c:c1:12: 21:49:cb:ae:a0:31:1e:7e:7c:e0:13:96:b5:74:56: 0f:75:e8:41:cd:27:0e:f7:7b:67:c7:0a:95:a1:15: 22:13:e1:58:42:34:aa:e5:46:95:d9:5d:e4:f5:4a: 6c:31:ad:37:b9:3f:ad:67:bd:a6:cd:91:48:8a:d9: b9:de:dc:53:a2:e8:a3:e2:d7:5b:fa:25:53:3e:dc: 0b:14:29:a7:01:e1:d7:e0:87:29:49:33:af:77:6d: e6:fd:db:c6:29:b2:1c:d7:c5:61:00:23:17:07:2b: 44:2c:fd:30:8c:9e:9a:ed:13:5e:f6:a8:fc:09:ad: 7d:41:65:ed:5d:9e:ce:b9:9f:80:80:a0:70:60:fc: 7c:6e:08:25:93:d9:9f:99:93:e5:38:28:71:3e:13: 13:1c:8e:b9:dd:e6:71:7b:20:f9:84:7c:e5:34:7c: ed:e1:99:f5:90:30:35:f4:1e:43:d4:8f:cd:e3:62: a0:d2:18:be:a5:50:07:90:35:8a:e2:d0:04:e9:89: c5:81:af:67:75:f1:80:07:17:ab:ae:9e:46:40:4f: 01:60:c6:5c:14:83:1e:3b:a7:70:44:77:5b:bc:e4: 7d:b0:6d:73:ac:88:fc:9d:74:1f:c4:7f:fc:69:25: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FD:01:5E:18:CF:56:87:CD:78:28:99:11:C6:2E:E7:C2:12:EA:0F X509v3 Authority Key Identifier: keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/i_0BXhjPVofNeCiZEcYu58IS6g8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.119.213.0/24 Signature Algorithm: sha256WithRSAEncryption b9:6a:3e:34:d4:92:e2:26:70:bf:bf:64:7b:44:e6:2c:23:09: f5:7d:b6:6d:5d:12:94:06:d7:66:08:7b:2f:50:95:90:47:5a: 52:d1:7b:c8:1c:c6:03:7d:cf:96:0d:52:58:be:a3:6e:98:a2: 5f:a6:5b:18:0b:24:3d:4c:ce:37:3a:ab:bb:a2:08:24:96:98: 52:92:e2:4a:6b:ac:6d:8c:53:ef:50:65:aa:04:77:ed:61:8b: 0c:eb:bc:01:19:fd:f7:9a:c9:0b:9e:1c:5f:75:3f:3e:88:ee: 3a:70:e2:1e:1f:6a:91:d5:d6:d6:d8:63:85:8d:49:00:c0:d3: d6:9f:cf:c1:2e:b6:1b:4f:f3:ca:38:c8:85:cc:58:c7:60:ef: 86:94:33:7c:83:08:5c:95:ba:10:75:09:03:c4:34:2c:5f:d3: 68:43:8d:b3:c7:f9:1a:5b:1b:3d:51:4f:22:7c:62:79:a4:ab: ab:08:26:0c:ab:09:d3:71:3b:cb:e0:44:5c:aa:1c:1a:c5:26: 15:b9:38:15:2f:cc:d2:ec:6b:75:5f:6f:5c:14:47:72:68:a7: 6a:97:37:e7:0c:4b:07:af:df:0a:cb:9f:44:62:93:63:29:e1: fa:dc:61:9d:56:d7:8a:21:80:23:b3:9a:5f:c4:ec:f1:78:46: 61:46:ea:35 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yMzA5MDEw ODMwNDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhCRkQwMTVFMThDRjU2 ODdDRDc4Mjg5OTExQzYyRUU3QzIxMkVBMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5EFyveXKNiE+KTFzBEiFJy66gMR5+fOATlrV0Vg916EHNJw73 e2fHCpWhFSIT4VhCNKrlRpXZXeT1SmwxrTe5P61nvabNkUiK2bne3FOi6KPi11v6 JVM+3AsUKacB4dfghylJM693beb928YpshzXxWEAIxcHK0Qs/TCMnprtE172qPwJ rX1BZe1dns65n4CAoHBg/HxuCCWT2Z+Zk+U4KHE+ExMcjrnd5nF7IPmEfOU0fO3h mfWQMDX0HkPUj83jYqDSGL6lUAeQNYri0ATpicWBr2d18YAHF6uunkZATwFgxlwU gx47p3BEd1u85H2wbXOsiPyddB/Ef/xpJRXJAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUi/0BXhjPVofNeCiZEcYu58IS6g8wHwYDVR0jBBgwFoAUXNEK1bakd108UE1m EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvaV8wQlhoalBWb2ZOZUNp WkVjWXU1OElTNmc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd31TANBgkqhkiG9w0BAQsFAAOCAQEAuWo+NNSS4iZwv79ke0TmLCMJ9X22bV0S lAbXZgh7L1CVkEdaUtF7yBzGA33Plg1SWL6jbpiiX6ZbGAskPUzONzqru6IIJJaY UpLiSmusbYxT71BlqgR37WGLDOu8ARn995rJC54cX3U/PojuOnDiHh9qkdXW1thj hY1JAMDT1p/PwS62G0/zyjjIhcxYx2DvhpQzfIMIXJW6EHUJA8Q0LF/TaEONs8f5 GlsbPVFPInxieaSrqwgmDKsJ03E7y+BEXKocGsUmFbk4FS/M0uxrdV9vXBRHcmin apc35wxLB6/fCsufRGKTYynh+txhnVbXiiGAI7OaX8Ts8XhGYUbqNQ== -----END CERTIFICATE-----Generated at Fri May 3 00:48:52 2024 by rpki-client on console-fra.rpki-client.org