$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/pa5XwQYcaGZuzOjBhGrKH40OCrI.roa File: pa5XwQYcaGZuzOjBhGrKH40OCrI.roa (raw, json) Hash identifier: Gev1RTMM9E/xa6NKjzRkwAI15BbzJaE7xBsg5TgNx7k= Subject key identifier: A5:AE:57:C1:06:1C:68:66:6E:CC:E8:C1:84:6A:CA:1F:8D:0E:0A:B2 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0BBF Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/pa5XwQYcaGZuzOjBhGrKH40OCrI.roa Signing time: Fri 01 Sep 2023 08:36:41 +0000 ROA not before: Fri 01 Sep 2023 08:36:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9244 IP address blocks: 113.21.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3007 (0xbbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Sep 1 08:36:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A5AE57C1061C68666ECCE8C1846ACA1F8D0E0AB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:0c:71:d2:00:b5:ee:d7:55:29:4f:29:44: 79:78:2d:b0:95:50:5d:b1:e9:f6:39:b3:fe:f5:83: 30:ac:a4:f5:cf:8d:f9:13:56:a1:e3:bb:dc:84:e9: 9a:ab:37:6b:57:04:ad:37:1e:f1:2d:93:fb:e3:b1: c9:c4:2d:d6:c8:3d:0e:be:44:22:79:7a:12:34:07: e1:78:a6:2b:76:c3:24:6d:6f:c1:be:d9:85:36:6e: d9:ea:22:d4:b2:b8:42:10:07:57:16:f0:26:2b:50: 5a:ff:89:7c:46:26:85:a1:76:69:f9:1a:f7:0a:6c: 16:74:82:6d:5f:d5:b8:2d:16:73:f8:5a:e2:2c:42: 5a:4f:88:0c:87:00:d7:92:64:a5:44:d3:bb:34:73: f3:36:3c:32:7e:3c:7a:2a:13:fe:45:a0:79:81:3e: e4:75:4c:29:46:85:60:c3:52:e5:7f:9d:88:ec:f5: 05:41:9c:8c:6e:cd:ca:d6:2b:1e:9c:dd:9d:0e:71: f8:f5:16:09:9e:76:8b:52:04:0d:9f:e7:6f:ee:2c: 88:27:34:bd:5c:6a:31:75:57:cd:cd:02:f7:9c:99: 1a:1e:af:02:aa:59:d0:b1:1b:47:ab:8b:25:23:28: dd:0d:58:20:5f:25:e2:25:30:83:d0:11:3a:40:11: c1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AE:57:C1:06:1C:68:66:6E:CC:E8:C1:84:6A:CA:1F:8D:0E:0A:B2 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/pa5XwQYcaGZuzOjBhGrKH40OCrI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.173.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:d5:52:d3:26:42:6e:80:c3:c4:3a:d9:2c:45:9e:a9:9c:2f: 59:fd:94:0b:9e:c7:05:a5:90:e1:29:43:b5:52:d5:67:08:bc: ef:97:59:95:ca:64:ca:bd:94:cb:95:47:2f:e7:ad:0c:2b:83: f1:3f:3c:8c:df:44:fb:09:d3:52:c9:b5:05:7e:ca:9f:eb:01: bc:43:b7:4b:ff:d4:f1:06:0a:62:c2:d8:fd:44:ce:89:e7:e0: 21:f1:8f:ad:14:f9:1e:17:56:75:1c:85:26:21:62:a0:05:5c: 04:82:2d:38:1d:eb:79:63:a5:c0:cb:00:c0:da:11:8f:79:4d: 28:85:5a:48:64:19:47:70:20:c5:3b:cb:b1:1f:3a:a8:30:1c: 39:fa:e3:50:48:98:32:59:b2:82:cd:dd:e4:3c:99:31:88:10: d3:20:64:31:98:76:32:e8:73:a3:a3:b1:56:02:78:91:f6:5f: 0e:f8:2e:90:d3:2a:11:6b:06:c4:60:19:d4:6f:1e:f5:9c:82: 34:8e:a7:1e:5a:f2:26:ad:cf:2a:89:c7:6f:e6:e3:c1:49:98: 40:ed:cb:5a:fe:70:fa:c0:25:82:d2:7b:8d:b2:9b:c2:c0:b4: 96:98:52:4a:86:3f:0a:fa:21:8e:85:11:fa:3d:9c:ac:66:0a: da:9f:50:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICC78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMzA5MDEw ODM2NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE1QUU1N0MxMDYxQzY4 NjY2RUNDRThDMTg0NkFDQTFGOEQwRTBBQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx8gxx0gC17tdVKU8pRHl4LbCVUF2x6fY5s/71gzCspPXPjfkT VqHju9yE6ZqrN2tXBK03HvEtk/vjscnELdbIPQ6+RCJ5ehI0B+F4pit2wyRtb8G+ 2YU2btnqItSyuEIQB1cW8CYrUFr/iXxGJoWhdmn5GvcKbBZ0gm1f1bgtFnP4WuIs QlpPiAyHANeSZKVE07s0c/M2PDJ+PHoqE/5FoHmBPuR1TClGhWDDUuV/nYjs9QVB nIxuzcrWKx6c3Z0Ocfj1FgmedotSBA2f52/uLIgnNL1cajF1V83NAvecmRoerwKq WdCxG0eriyUjKN0NWCBfJeIlMIPQETpAEcH9AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUpa5XwQYcaGZuzOjBhGrKH40OCrIwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL3BhNVh3UVljYUdadXpPakJo R3JLSDQwT0NySS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABx Fa0wDQYJKoZIhvcNAQELBQADggEBADzVUtMmQm6Aw8Q62SxFnqmcL1n9lAuexwWl kOEpQ7VS1WcIvO+XWZXKZMq9lMuVRy/nrQwrg/E/PIzfRPsJ01LJtQV+yp/rAbxD t0v/1PEGCmLC2P1Ezonn4CHxj60U+R4XVnUchSYhYqAFXASCLTgd63ljpcDLAMDa EY95TSiFWkhkGUdwIMU7y7EfOqgwHDn641BImDJZsoLN3eQ8mTGIENMgZDGYdjLo c6OjsVYCeJH2Xw74LpDTKhFrBsRgGdRvHvWcgjSOpx5a8iatzyqJx2/m48FJmEDt y1r+cPrAJYLSe42ym8LAtJaYUkqGPwr6IY6FEfo9nKxmCtqfUEo= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org