$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/0FAyT2Cg-Chmp0XRcoku76-GPxA.roa File: 0FAyT2Cg-Chmp0XRcoku76-GPxA.roa (raw, json) Hash identifier: cVRUpgP2J0jd6OAvkDcdCrpir8eqEhINDD5Xjbxyddg= Subject key identifier: D0:50:32:4F:60:A0:F8:28:66:A7:45:D1:72:89:2E:EF:AF:86:3F:10 Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0B8E Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/0FAyT2Cg-Chmp0XRcoku76-GPxA.roa Signing time: Fri 01 Sep 2023 08:35:39 +0000 ROA not before: Fri 01 Sep 2023 08:35:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 198949 IP address blocks: 61.65.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2958 (0xb8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Sep 1 08:35:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D050324F60A0F82866A745D172892EEFAF863F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:1a:3e:e4:ff:f8:5f:fd:55:92:36:fd:30: f5:c0:99:10:37:9c:84:3d:8b:51:7c:26:e1:90:63: 22:44:d7:e7:43:77:fe:2e:4e:a8:06:3c:6b:cb:5f: e5:da:30:13:63:40:54:38:8f:75:dc:ad:02:44:17: b4:9a:d4:9a:4d:99:63:eb:68:18:5a:ea:ac:b9:31: 68:f5:83:b2:eb:d1:9b:0e:0b:02:02:3a:68:51:f1: 15:9b:d6:93:fb:50:12:ca:7a:e6:57:bd:3f:b7:47: 19:6d:25:de:f8:d7:cd:9f:f6:4c:6f:dd:5e:a9:91: c3:69:cd:28:dd:8d:4b:2e:b9:39:df:ea:36:55:e6: 5b:e9:5a:b1:f3:9b:eb:6d:bf:d6:32:7a:0e:a5:88: e7:d5:62:a3:eb:f6:f4:21:cd:f3:c6:e9:30:fc:1e: df:b3:d5:65:c5:23:cd:da:ca:2d:3c:c1:3f:31:58: 1d:a2:42:42:e9:ba:87:a4:f7:79:1b:aa:06:72:bc: e6:bc:a8:83:8b:d8:4f:35:62:3c:54:e2:6a:d2:7a: 7a:5d:20:62:27:c3:0e:e7:8c:40:f3:bf:e1:7c:4e: 06:d2:3e:c1:f4:46:4e:03:08:38:ba:38:ec:8e:78: 13:69:e0:f7:9e:b2:7d:33:11:c4:49:27:20:bd:7c: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:50:32:4F:60:A0:F8:28:66:A7:45:D1:72:89:2E:EF:AF:86:3F:10 X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/0FAyT2Cg-Chmp0XRcoku76-GPxA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.65.238.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:a9:8a:68:29:7d:3a:e4:4f:41:67:89:24:5c:ee:c1:42:d0: 33:11:17:0c:8b:6a:bb:39:54:cc:02:ce:a0:02:e9:33:76:a7: f5:f9:c4:fb:06:c7:4f:39:e4:31:d4:11:1c:b3:f3:6e:13:4c: 36:66:34:86:22:f7:26:d7:c3:12:60:1c:0c:f5:f2:46:8d:b7: b6:a7:39:be:f3:35:48:59:d5:45:95:f6:41:0e:ba:02:2c:ef: 31:15:99:5d:ce:55:9c:eb:61:86:92:32:02:36:69:4e:00:65: e5:05:1c:94:32:b3:44:0f:54:b8:29:dc:57:5b:f3:f7:1e:59: 58:85:10:b7:b8:20:b3:10:62:0d:1c:68:31:7a:6c:76:c5:96: c6:e3:b6:ab:b2:5b:ee:40:7a:e7:4f:83:43:5e:c2:eb:9c:90: 02:cf:30:db:36:4b:eb:01:cd:a2:4c:a0:08:7c:41:1b:ec:92: 0e:12:5e:d3:59:17:5a:dc:40:eb:4f:0e:f7:69:70:a1:ca:b5: 38:d3:e0:be:10:73:fd:9f:c4:3d:3a:e1:9f:0e:26:d3:98:af: 1a:2c:00:39:4e:9d:b4:7d:f9:7a:f9:a2:75:67:cd:88:00:1d: 57:1d:62:2a:d8:ab:98:74:cb:f4:ea:ae:81:9d:22:30:a6:8b: 08:94:0e:d0 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICC44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yMzA5MDEw ODM1MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQwNTAzMjRGNjBBMEY4 Mjg2NkE3NDVEMTcyODkyRUVGQUY4NjNGMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLWBo+5P/4X/1Vkjb9MPXAmRA3nIQ9i1F8JuGQYyJE1+dDd/4u TqgGPGvLX+XaMBNjQFQ4j3XcrQJEF7Sa1JpNmWPraBha6qy5MWj1g7Lr0ZsOCwIC OmhR8RWb1pP7UBLKeuZXvT+3RxltJd74182f9kxv3V6pkcNpzSjdjUsuuTnf6jZV 5lvpWrHzm+ttv9Yyeg6liOfVYqPr9vQhzfPG6TD8Ht+z1WXFI83ayi08wT8xWB2i QkLpuoek93kbqgZyvOa8qIOL2E81YjxU4mrSenpdIGInww7njEDzv+F8TgbSPsH0 Rk4DCDi6OOyOeBNp4Peesn0zEcRJJyC9fEKpAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU0FAyT2Cg+Chmp0XRcoku76+GPxAwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy8wRkF5VDJDZy1DaG1w MFhSY29rdTc2LUdQeEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAPUHuMA0GCSqGSIb3DQEBCwUAA4IBAQCOqYpoKX065E9BZ4kkXO7BQtAzERcM i2q7OVTMAs6gAukzdqf1+cT7BsdPOeQx1BEcs/NuE0w2ZjSGIvcm18MSYBwM9fJG jbe2pzm+8zVIWdVFlfZBDroCLO8xFZldzlWc62GGkjICNmlOAGXlBRyUMrNED1S4 KdxXW/P3HllYhRC3uCCzEGINHGgxemx2xZbG47arslvuQHrnT4NDXsLrnJACzzDb NkvrAc2iTKAIfEEb7JIOEl7TWRda3EDrTw73aXChyrU40+C+EHP9n8Q9OuGfDibT mK8aLAA5Tp20ffl6+aJ1Z82IAB1XHWIq2KuYdMv06q6BnSIwposIlA7Q -----END CERTIFICATE-----Generated at Mon May 6 03:10:11 2024 by rpki-client on console-ams.rpki-client.org