$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/Io9dCsGoqjAvT0aJP8_ESjajdNQ.roa File: Io9dCsGoqjAvT0aJP8_ESjajdNQ.roa (raw, json) Hash identifier: B2OaJPv0VNtoZCnWg+dcdJRerqioStnX7pGL/aj4mXE= Subject key identifier: 22:8F:5D:0A:C1:A8:AA:30:2F:4F:46:89:3F:CF:C4:4A:36:A3:74:D4 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F0E Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/Io9dCsGoqjAvT0aJP8_ESjajdNQ.roa Signing time: Mon 26 Aug 2024 05:12:42 +0000 ROA not before: Mon 26 Aug 2024 05:12:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 103.136.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3854 (0xf0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Aug 26 05:12:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=228F5D0AC1A8AA302F4F46893FCFC44A36A374D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:71:7c:88:06:6c:f3:af:6b:be:97:c4:dd: be:0a:82:65:a2:20:18:01:df:ca:18:39:6f:7d:cc: d0:06:54:42:ab:67:7a:0d:61:21:78:48:29:fa:81: fe:6e:6d:3a:45:c3:46:ac:1d:03:16:03:db:73:f2: 30:cb:bd:1d:fd:1e:32:e8:e2:f0:f5:ef:c7:f4:34: 4c:fd:a1:04:b6:c6:d5:fd:ef:11:ab:f3:66:e8:9f: e3:33:3b:3c:46:9d:65:f6:a2:d9:ab:21:2f:f8:a7: 1f:c1:3b:ee:51:0f:77:95:48:07:48:9e:f4:48:cb: 0c:cf:29:fa:63:85:30:a3:8c:71:e1:9e:74:e8:50: e4:90:9c:c8:0c:fb:d4:d6:20:be:65:fe:07:f7:af: 2e:48:92:96:bb:94:9b:b1:2c:10:6c:af:2c:50:f3: bc:de:dd:88:91:39:21:a8:20:dc:78:10:74:f1:33: 4c:a9:e7:af:ff:42:a8:d5:98:0c:0d:02:80:be:64: dd:56:8d:9a:f3:b2:1f:9a:6d:b0:b0:84:55:7a:c5: 58:6e:43:60:e2:4c:8a:78:da:72:10:b9:b3:4d:e2: 55:08:ed:b0:ca:a3:ec:14:b8:0c:13:13:0b:e0:38: 77:4e:47:b6:d4:be:c6:04:bf:32:16:28:55:50:0e: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:5D:0A:C1:A8:AA:30:2F:4F:46:89:3F:CF:C4:4A:36:A3:74:D4 X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/Io9dCsGoqjAvT0aJP8_ESjajdNQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.61.0/24 Signature Algorithm: sha256WithRSAEncryption 09:f2:cb:84:7b:37:5c:89:1f:ea:b2:f8:4b:83:b5:ef:e1:4e: 28:6e:f7:4d:76:c7:a4:e0:74:38:b2:1b:65:1c:78:c5:29:82: 4d:45:5a:60:77:d5:16:84:b8:07:7a:8c:48:33:90:e7:36:0f: 25:62:92:70:e8:bf:f7:2c:ec:dd:53:cc:16:07:92:cc:a7:4f: fa:68:85:86:b5:2d:f7:01:5d:65:f7:e4:89:f9:a4:ea:af:bf: cd:37:ee:c1:3a:90:3f:c7:d2:10:1f:e1:10:98:46:8b:de:e5: 77:f5:63:3b:d0:3a:2b:e8:f5:87:68:2e:f6:30:84:e5:ac:ba: 65:89:c0:71:60:d2:4b:b8:bc:ab:2b:40:da:fb:f9:3c:9b:ee: 48:3a:6b:5d:7b:1c:7e:f2:b1:eb:ba:dd:35:d6:75:37:42:bd: 52:81:7a:c0:8f:83:4c:a0:1e:72:59:12:97:c1:33:6b:eb:87: 10:e5:2b:22:3f:1e:c4:de:7e:e9:03:46:ff:ed:de:7f:5d:4b: 44:4b:73:48:09:36:84:87:d8:08:72:0d:2b:ab:8a:29:71:7b: 38:73:89:3f:b5:79:1e:ff:e7:6d:bc:a8:46:59:23:61:09:94: e5:20:7f:c4:2e:0b:df:cf:c9:86:3e:6f:15:79:67:9e:a5:e0: 77:b3:db:33 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNDA4MjYw NTEyNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIyOEY1RDBBQzFBOEFB MzAyRjRGNDY4OTNGQ0ZDNDRBMzZBMzc0RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7AHF8iAZs869rvpfE3b4KgmWiIBgB38oYOW99zNAGVEKrZ3oN YSF4SCn6gf5ubTpFw0asHQMWA9tz8jDLvR39HjLo4vD178f0NEz9oQS2xtX97xGr 82bon+MzOzxGnWX2otmrIS/4px/BO+5RD3eVSAdInvRIywzPKfpjhTCjjHHhnnTo UOSQnMgM+9TWIL5l/gf3ry5Ikpa7lJuxLBBsryxQ87ze3YiROSGoINx4EHTxM0yp 56//QqjVmAwNAoC+ZN1WjZrzsh+abbCwhFV6xVhuQ2DiTIp42nIQubNN4lUI7bDK o+wUuAwTEwvgOHdOR7bUvsYEvzIWKFVQDtD5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUIo9dCsGoqjAvT0aJP8/ESjajdNQwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL0lvOWRDc0dvcWpBdlQwYUpQOF9FU2ph amROUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABniD0wDQYJ KoZIhvcNAQELBQADggEBAAnyy4R7N1yJH+qy+EuDte/hTihu9012x6TgdDiyG2Uc eMUpgk1FWmB31RaEuAd6jEgzkOc2DyViknDov/cs7N1TzBYHksynT/pohYa1LfcB XWX35In5pOqvv8037sE6kD/H0hAf4RCYRove5Xf1YzvQOivo9YdoLvYwhOWsumWJ wHFg0ku4vKsrQNr7+Tyb7kg6a117HH7yseu63TXWdTdCvVKBesCPg0ygHnJZEpfB M2vrhxDlKyI/HsTefukDRv/t3n9dS0RLc0gJNoSH2AhyDSuriilxezhziT+1eR7/ 5228qEZZI2EJlOUgf8QuC9/PyYY+bxV5Z56l4Hez2zM= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:03 2024 by rpki-client on console-ams.rpki-client.org