$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/DXVIoel2FlS_fXe7XuUmKuN3Yp8.roa File: DXVIoel2FlS_fXe7XuUmKuN3Yp8.roa (raw, json) Hash identifier: Nm5pfrlzR/hqOdTrxqb5dIlW+HQpE1Q/AnaCUu9PpwU= Subject key identifier: 0D:75:48:A1:E9:76:16:54:BF:7D:77:BB:5E:E5:26:2A:E3:77:62:9F Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0B72 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/DXVIoel2FlS_fXe7XuUmKuN3Yp8.roa Signing time: Tue 31 Oct 2023 07:31:04 +0000 ROA not before: Tue 31 Oct 2023 07:31:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18046 IP address blocks: 103.130.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Oct 31 07:31:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0D7548A1E9761654BF7D77BB5EE5262AE377629F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:10:5f:14:41:5a:7b:d1:1d:e1:38:4a:a4: 11:3a:c5:05:95:78:10:60:e1:ae:8a:d4:c9:b1:38: de:2d:bf:61:a3:2f:a3:8f:dd:e4:1c:4c:2f:60:e5: ca:14:77:5b:97:d7:03:a1:93:eb:57:4a:f9:9d:46: fa:39:90:6d:58:42:a9:86:02:79:9d:59:e5:86:f0: 62:da:9c:e8:f9:3b:84:12:06:83:2f:dd:7a:e2:b1: bf:23:d6:a2:37:96:79:a9:2b:cd:e1:ac:cb:7b:54: 98:31:61:9d:8a:47:5a:b0:02:57:7e:4a:22:01:31: 5b:ca:4e:e0:15:2a:97:d5:77:a0:93:6c:75:b7:eb: 32:52:d3:23:25:26:ab:08:d0:77:fa:65:88:2a:1b: 8d:a6:09:22:a0:f2:90:72:0d:93:64:f2:d5:6d:95: 54:be:fc:ff:6a:5d:a5:48:36:d3:fa:c0:de:a0:56: 6b:b7:01:44:59:d3:74:ee:47:66:04:5e:e7:75:96: b1:9f:f2:0c:08:ae:50:0a:53:04:20:60:03:e9:d8: 9a:95:43:2e:34:cc:bf:dd:42:2b:a1:32:83:52:b6: f0:03:32:6c:4a:5d:72:e5:b5:06:03:41:e7:32:85: c0:67:4a:97:db:0e:bd:a1:27:a9:8b:36:62:5d:40: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:75:48:A1:E9:76:16:54:BF:7D:77:BB:5E:E5:26:2A:E3:77:62:9F X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/DXVIoel2FlS_fXe7XuUmKuN3Yp8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.40.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:6b:5e:29:e5:1e:11:be:27:25:66:dd:f8:22:2a:af:01:a7: bd:7b:b5:e2:1a:29:8d:61:a6:67:6b:c6:9c:0d:c9:31:7d:49: 33:a5:47:cb:0d:c1:fc:c8:7b:90:47:4b:c8:bf:cf:04:8f:a1: a0:53:13:f6:c9:b2:67:ab:7d:9d:17:32:33:47:06:c5:3a:57: 68:6b:41:df:6f:0a:95:95:9c:12:57:3b:aa:54:d1:f3:b2:68: d3:a0:57:a5:a5:76:64:85:de:9d:ce:cf:6c:e1:0a:b3:05:2e: f7:7d:c5:b7:70:2d:c5:36:2e:24:64:4a:6e:40:d0:ce:5d:eb: fc:88:05:1a:22:ae:ef:e3:4e:2c:cc:17:9c:af:b3:fe:68:a8: d8:1a:dd:e0:c9:20:e0:b2:95:ec:ce:70:0e:a8:29:52:c6:e9: f4:a5:51:34:08:0f:b6:d7:eb:bd:d1:d9:39:55:7d:cd:8e:15: 63:f4:08:23:af:2e:d1:09:7f:78:cc:ff:c0:dc:f3:07:f8:62: eb:4e:43:95:0f:24:19:f0:8c:6b:21:5f:ef:6b:84:8b:ab:1b: 31:c8:14:5f:5b:af:d3:1a:d1:25:79:02:2b:60:80:5f:81:81: 6d:f8:5d:74:c3:9d:f4:c3:bd:6d:8b:23:4d:0f:c2:aa:b8:6d: 12:24:84:50 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yMzEwMzEw NzMxMDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBENzU0OEExRTk3NjE2 NTRCRjdENzdCQjVFRTUyNjJBRTM3NzYyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQIxBfFEFae9Ed4ThKpBE6xQWVeBBg4a6K1MmxON4tv2GjL6OP 3eQcTC9g5coUd1uX1wOhk+tXSvmdRvo5kG1YQqmGAnmdWeWG8GLanOj5O4QSBoMv 3Xrisb8j1qI3lnmpK83hrMt7VJgxYZ2KR1qwAld+SiIBMVvKTuAVKpfVd6CTbHW3 6zJS0yMlJqsI0Hf6ZYgqG42mCSKg8pByDZNk8tVtlVS+/P9qXaVINtP6wN6gVmu3 AURZ03TuR2YEXud1lrGf8gwIrlAKUwQgYAPp2JqVQy40zL/dQiuhMoNStvADMmxK XXLltQYDQecyhcBnSpfbDr2hJ6mLNmJdQFaTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUDXVIoel2FlS/fXe7XuUmKuN3Yp8wHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvRFhWSW9lbDJGbFNfZlhl N1h1VW1LdU4zWXA4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmeCKDANBgkqhkiG9w0BAQsFAAOCAQEATmteKeUeEb4nJWbd+CIqrwGnvXu14hop jWGmZ2vGnA3JMX1JM6VHyw3B/Mh7kEdLyL/PBI+hoFMT9smyZ6t9nRcyM0cGxTpX aGtB328KlZWcElc7qlTR87Jo06BXpaV2ZIXenc7PbOEKswUu933Ft3AtxTYuJGRK bkDQzl3r/IgFGiKu7+NOLMwXnK+z/mio2Brd4Mkg4LKV7M5wDqgpUsbp9KVRNAgP ttfrvdHZOVV9zY4VY/QII68u0Ql/eMz/wNzzB/hi605DlQ8kGfCMayFf72uEi6sb McgUX1uv0xrRJXkCK2CAX4GBbfhddMOd9MO9bYsjTQ/CqrhtEiSEUA== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:05 2024 by rpki-client on console-ams.rpki-client.org