$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/wfcHXutZXf6rV4WaMoQ4nnx7GQU.roa File: wfcHXutZXf6rV4WaMoQ4nnx7GQU.roa (raw, json) Hash identifier: 8MC/FUf90royVCIjCcfwJ38aPhylfySW9DJsorcZcfY= Subject key identifier: C1:F7:07:5E:EB:59:5D:FE:AB:57:85:9A:32:84:38:9E:7C:7B:19:05 Certificate issuer: /CN=834D79F4126BF9E9DC0B32B86764E7D602514E01 Certificate serial: 01C5 Authority key identifier: 83:4D:79:F4:12:6B:F9:E9:DC:0B:32:B8:67:64:E7:D6:02:51:4E:01 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/wfcHXutZXf6rV4WaMoQ4nnx7GQU.roa Signing time: Fri 01 Sep 2023 08:30:58 +0000 ROA not before: Fri 01 Sep 2023 08:30:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7483 IP address blocks: 103.175.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834D79F4126BF9E9DC0B32B86764E7D602514E01 Validity Not Before: Sep 1 08:30:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C1F7075EEB595DFEAB57859A3284389E7C7B1905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:2d:18:a3:54:be:fe:9f:02:b2:42:d5:9a: 64:e0:a9:77:23:cd:13:37:9a:9e:e5:4c:39:6c:7d: 0c:5e:ef:53:f9:c5:65:77:12:d3:76:48:77:3e:84: 61:7d:dd:34:57:55:6e:80:e9:39:86:f3:af:8d:d5: a3:ec:90:74:1c:18:e5:9d:89:43:65:dc:f4:26:83: 2f:67:b5:7a:52:27:67:0e:e5:62:d4:f8:94:b0:61: 1a:bb:58:93:78:2c:dd:1f:91:c6:74:41:f2:4d:63: 6c:f4:7c:6d:08:45:4a:00:10:40:32:dd:86:3f:5b: 97:ac:e3:21:10:65:55:ad:67:e5:1b:34:85:58:3c: 6f:31:57:41:11:8c:42:38:cf:cf:b9:97:b5:17:f6: 1b:33:ff:ed:3c:14:1a:7d:00:d8:a3:d8:61:79:2d: 90:dd:10:c1:ed:09:4f:96:85:fd:c7:0e:6a:19:cb: 4b:b4:2b:47:72:c7:bd:6d:13:f0:6c:7a:f5:b4:92: 72:d3:46:e6:92:01:f4:78:e7:5d:dc:e9:9d:70:0e: 31:09:f7:b6:8e:ce:d2:dd:4f:55:c0:cc:20:c6:e1: be:c9:c1:92:7f:63:ff:a0:49:69:c5:f7:96:2d:d4: 2c:0f:c1:6a:b9:aa:fb:c0:49:57:67:54:c3:aa:ec: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:07:5E:EB:59:5D:FE:AB:57:85:9A:32:84:38:9E:7C:7B:19:05 X509v3 Authority Key Identifier: keyid:83:4D:79:F4:12:6B:F9:E9:DC:0B:32:B8:67:64:E7:D6:02:51:4E:01 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/g0159BJr-encCzK4Z2Tn1gJRTgE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g0159BJr-encCzK4Z2Tn1gJRTgE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDNODE/wfcHXutZXf6rV4WaMoQ4nnx7GQU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.175.166.0/23 Signature Algorithm: sha256WithRSAEncryption a1:5c:69:02:bd:19:00:9d:61:e5:01:6e:09:31:bd:f6:ef:c4: 50:78:f9:20:53:f7:86:1b:15:c4:76:28:0a:91:31:2c:0f:eb: 27:f9:25:97:86:99:37:4f:45:e7:03:99:f9:06:3d:1f:d2:36: aa:62:e1:2a:94:8e:61:c0:09:fb:2b:48:06:c1:1d:c3:6e:21: 81:a1:ae:4a:e4:c7:16:3d:33:d8:a4:ae:d9:d5:91:49:5a:84: 31:58:9a:7f:e6:37:0a:fc:56:e0:d2:29:88:94:63:57:6f:11: 47:e8:40:83:b8:e9:0a:70:54:42:55:c6:8d:1c:92:b7:0a:56: 95:7f:a3:ce:80:b4:9d:6d:56:2c:10:f1:7b:77:5a:d5:a8:fc: 74:d2:dd:35:7c:b4:ce:d1:4e:76:bb:1c:ed:e8:70:11:a2:d2: 0e:91:68:6e:a5:2c:9f:c9:6f:df:93:05:41:05:b7:4e:ca:52: ce:75:79:bf:71:b7:9a:9f:76:34:67:19:6f:5c:43:60:a7:d9: 5f:3b:b3:92:4d:93:9d:86:5e:3e:d8:c9:96:5a:ab:8f:9c:bd: 83:aa:9a:a5:ca:93:3d:c4:25:20:ef:38:c9:60:4b:db:0e:a0: ca:05:63:2f:86:2d:b2:3f:05:a4:15:24:5e:93:7e:5b:6a:3c: 60:9a:6b:89 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODM0 RDc5RjQxMjZCRjlFOURDMEIzMkI4Njc2NEU3RDYwMjUxNEUwMTAeFw0yMzA5MDEw ODMwNThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMxRjcwNzVFRUI1OTVE RkVBQjU3ODU5QTMyODQzODlFN0M3QjE5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPSy0Yo1S+/p8CskLVmmTgqXcjzRM3mp7lTDlsfQxe71P5xWV3 EtN2SHc+hGF93TRXVW6A6TmG86+N1aPskHQcGOWdiUNl3PQmgy9ntXpSJ2cO5WLU +JSwYRq7WJN4LN0fkcZ0QfJNY2z0fG0IRUoAEEAy3YY/W5es4yEQZVWtZ+UbNIVY PG8xV0ERjEI4z8+5l7UX9hsz/+08FBp9ANij2GF5LZDdEMHtCU+Whf3HDmoZy0u0 K0dyx71tE/BsevW0knLTRuaSAfR4513c6Z1wDjEJ97aOztLdT1XAzCDG4b7JwZJ/ Y/+gSWnF95Yt1CwPwWq5qvvASVdnVMOq7Oi7AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUwfcHXutZXf6rV4WaMoQ4nnx7GQUwHwYDVR0jBBgwFoAUg0159BJr+encCzK4 Z2Tn1gJRTgEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURO T0RFL2cwMTU5QkpyLWVuY0N6SzRaMlRuMWdKUlRnRS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvZzAxNTlCSnItZW5jQ3pLNFoyVG4xZ0pSVGdFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVUROT0RFL3dmY0hYdXRaWGY2 clY0V2FNb1E0bm54N0dRVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnr6YwDQYJKoZIhvcNAQELBQADggEBAKFcaQK9GQCdYeUBbgkxvfbvxFB4 +SBT94YbFcR2KAqRMSwP6yf5JZeGmTdPRecDmfkGPR/SNqpi4SqUjmHACfsrSAbB HcNuIYGhrkrkxxY9M9ikrtnVkUlahDFYmn/mNwr8VuDSKYiUY1dvEUfoQIO46Qpw VEJVxo0ckrcKVpV/o86AtJ1tViwQ8Xt3WtWo/HTS3TV8tM7RTna7HO3ocBGi0g6R aG6lLJ/Jb9+TBUEFt07KUs51eb9xt5qfdjRnGW9cQ2Cn2V87s5JNk52GXj7YyZZa q4+cvYOqmqXKkz3EJSDvOMlgS9sOoMoFYy+GLbI/BaQVJF6TfltqPGCaa4k= -----END CERTIFICATE-----Generated at Mon Jun 3 12:43:59 2024 by rpki-client on console-fra.rpki-client.org