$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/eNE34XWpJDXSTOqxBKEaXTfN5Iw.roa File: eNE34XWpJDXSTOqxBKEaXTfN5Iw.roa (raw, json) Hash identifier: O5A0CvoKZjYp60cUr5oA4Xq5IxMzAny8/2NXrbNwX1A= Subject key identifier: 78:D1:37:E1:75:A9:24:35:D2:4C:EA:B1:04:A1:1A:5D:37:CD:E4:8C Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Certificate serial: 0B5A Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/eNE34XWpJDXSTOqxBKEaXTfN5Iw.roa Signing time: Fri 01 Sep 2023 08:36:08 +0000 ROA not before: Fri 01 Sep 2023 08:36:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 136173 IP address blocks: 43.224.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Validity Not Before: Sep 1 08:36:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=78D137E175A92435D24CEAB104A11A5D37CDE48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:f2:4d:03:c7:65:d3:57:41:97:e4:fa:7a: 2e:2a:5a:4c:9f:79:ae:57:8f:0e:bf:14:61:5e:7e: fd:eb:7f:07:57:ad:64:ac:fa:65:66:47:2f:df:35: fe:41:0d:76:26:94:45:4b:52:ca:5e:94:1c:5a:93: 4e:f9:69:eb:ea:a2:bc:ae:f8:ec:9c:b7:19:28:08: 0a:e0:56:4b:92:11:7b:28:b2:a9:ce:44:a6:90:4c: 61:42:28:0b:cd:6b:94:fc:74:5f:eb:54:d0:d7:47: 5d:ee:45:89:4e:93:41:1b:03:7d:a9:5e:37:5d:04: 51:c2:10:80:fa:fb:5e:49:c5:e0:f3:f1:a1:05:3d: 59:82:82:45:98:27:58:6d:2d:82:89:64:50:86:b4: ef:54:c2:da:4a:e6:a2:8c:b5:36:6f:25:49:51:72: a2:0d:3b:21:d5:d0:77:07:46:43:1a:7d:42:47:fd: 8a:8a:32:c6:cc:c1:fb:22:0e:d0:69:46:e7:6b:f2: cf:64:8a:76:29:92:5f:f0:ae:75:92:3a:f7:8d:1d: fd:32:81:1d:d6:69:87:b0:bf:ee:f0:a3:f5:a2:e6: 34:54:9e:6a:0c:66:48:7d:58:cf:79:7e:d4:fe:f0: 60:29:be:e0:02:c2:97:0a:ca:59:1d:89:a5:27:d4: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D1:37:E1:75:A9:24:35:D2:4C:EA:B1:04:A1:1A:5D:37:CD:E4:8C X509v3 Authority Key Identifier: keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/eNE34XWpJDXSTOqxBKEaXTfN5Iw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.224.22.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:a1:5c:9b:d5:de:00:52:14:de:fb:a9:4b:d1:b7:22:b7:83: a1:72:e7:f9:a1:6a:bf:46:81:e4:ad:6e:16:91:06:9b:38:88: d8:80:da:c5:86:23:34:b9:39:3e:01:d5:5e:05:47:58:ca:8e: 6b:92:e9:1b:22:c2:80:1c:07:7a:1a:01:fd:06:ba:6a:ac:0e: 04:a5:65:a1:25:81:05:23:f6:03:62:a3:7c:17:1b:a2:5d:c7: 96:6d:df:0f:20:10:38:4b:60:e7:0f:f4:c9:6b:57:e7:cb:df: 43:54:dd:d4:2f:70:bc:f3:78:d4:f0:b3:3b:66:83:a7:15:73: 6d:6c:79:c6:65:47:55:c6:fe:52:c8:8d:e7:0c:78:bd:a9:c6: 4e:42:3d:d6:f3:52:4d:a1:a8:de:6f:d1:a4:f2:9f:28:c5:b7: c9:27:37:f8:f0:e8:f1:d3:39:65:7c:0e:28:c1:f3:38:5c:8d: a0:64:42:72:ac:c7:85:aa:a9:2c:63:22:07:8a:57:1f:12:22: 34:8c:b0:f0:97:5d:39:9f:46:85:b5:91:43:35:5c:95:c3:88: ab:14:42:ed:f3:0c:2c:9e:a4:06:e8:a5:aa:39:60:94:0f:db: 97:af:b1:18:b2:58:26:15:b8:0e:8d:e6:e6:3e:0a:fb:5b:61: eb:9a:85:85 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICC1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yMzA5MDEw ODM2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc4RDEzN0UxNzVBOTI0 MzVEMjRDRUFCMTA0QTExQTVEMzdDREU0OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT6PJNA8dl01dBl+T6ei4qWkyfea5Xjw6/FGFefv3rfwdXrWSs +mVmRy/fNf5BDXYmlEVLUspelBxak075aevqoryu+OyctxkoCArgVkuSEXsosqnO RKaQTGFCKAvNa5T8dF/rVNDXR13uRYlOk0EbA32pXjddBFHCEID6+15JxeDz8aEF PVmCgkWYJ1htLYKJZFCGtO9UwtpK5qKMtTZvJUlRcqINOyHV0HcHRkMafUJH/YqK MsbMwfsiDtBpRudr8s9kinYpkl/wrnWSOveNHf0ygR3WaYewv+7wo/Wi5jRUnmoM Zkh9WM95ftT+8GApvuACwpcKylkdiaUn1KQfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUeNE34XWpJDXSTOqxBKEaXTfN5IwwHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9lTkUzNFhXcEpEWFNUT3F4QktF YVhUZk41SXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+AW MA0GCSqGSIb3DQEBCwUAA4IBAQCMoVyb1d4AUhTe+6lL0bcit4Ohcuf5oWq/RoHk rW4WkQabOIjYgNrFhiM0uTk+AdVeBUdYyo5rkukbIsKAHAd6GgH9BrpqrA4EpWWh JYEFI/YDYqN8FxuiXceWbd8PIBA4S2DnD/TJa1fny99DVN3UL3C883jU8LM7ZoOn FXNtbHnGZUdVxv5SyI3nDHi9qcZOQj3W81JNoajeb9Gk8p8oxbfJJzf48Ojx0zll fA4owfM4XI2gZEJyrMeFqqksYyIHilcfEiI0jLDwl105n0aFtZFDNVyVw4irFELt 8wwsnqQG6KWqOWCUD9uXr7EYslgmFbgOjebmPgr7W2HrmoWF -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:41 2024 by rpki-client on console-ams.rpki-client.org