$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/mbd-4DqYl7hhSv1_Aa2aL4PchPI.roa File: mbd-4DqYl7hhSv1_Aa2aL4PchPI.roa (raw, json) Hash identifier: LELcR5rfPgVdW3ihwP+GYE5qctjfSDZqPqrUVdKe5II= Subject key identifier: 99:B7:7E:E0:3A:98:97:B8:61:4A:FD:7F:01:AD:9A:2F:83:DC:84:F2 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DDC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mbd-4DqYl7hhSv1_Aa2aL4PchPI.roa Signing time: Mon 15 Jan 2024 21:35:04 +0000 ROA not before: Mon 15 Jan 2024 21:35:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 223.22.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:35:04 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=99B77EE03A9897B8614AFD7F01AD9A2F83DC84F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:d6:74:73:da:3f:a4:da:39:07:a6:68:40: 35:ab:1e:51:f9:09:71:0e:9e:17:0a:41:29:c6:4e: c2:14:7a:fb:52:d8:b6:0f:f3:29:c9:69:5a:5f:68: 53:c3:4a:dc:39:14:ef:a6:cb:91:55:06:89:1d:8e: 64:17:27:6a:f8:38:27:d2:3e:56:42:ec:df:2e:ef: c7:eb:35:54:26:9a:ae:70:dc:d3:fe:0e:6e:2f:74: f2:6b:34:c3:70:f8:08:8f:54:5f:d3:3d:e3:3b:b0: 4a:d5:ce:d0:c1:9b:65:59:3d:65:3e:9d:0b:94:0e: 4e:4a:ab:a9:dc:5b:6d:4c:c3:c8:bd:c4:3c:ff:fa: 6c:66:1b:5e:09:09:39:b7:d4:b1:be:8d:f5:9a:bc: 4a:ff:06:8f:15:2b:49:0d:6a:34:af:85:78:e3:e4: 27:7e:88:f2:e7:9a:46:f7:92:0d:d0:75:4a:44:df: 3e:d0:dc:55:8a:cf:b2:57:ac:6e:73:38:de:5a:54: 36:49:e3:56:cb:fa:f1:47:56:d4:e1:83:e4:f2:54: 93:2d:52:c7:5c:6f:55:c7:67:fb:b1:41:01:29:10: 10:b7:aa:4a:07:ff:dc:80:25:5f:7d:e4:a0:1e:76: d7:5d:be:f9:1e:46:9d:38:06:02:50:4d:6f:b9:a5: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B7:7E:E0:3A:98:97:B8:61:4A:FD:7F:01:AD:9A:2F:83:DC:84:F2 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mbd-4DqYl7hhSv1_Aa2aL4PchPI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.0.0/15 Signature Algorithm: sha256WithRSAEncryption 89:67:9c:d9:ed:7b:97:0e:df:00:4a:46:cd:cc:d9:a8:24:e1: 89:c9:74:7e:15:bb:99:e2:d2:f5:da:2f:6c:14:3c:69:8c:74: 70:77:fc:a9:81:79:e3:90:f6:55:1a:99:61:b5:81:df:c9:b7: 72:0c:48:1d:7d:16:d2:c3:52:72:5f:da:c1:2e:8d:8c:2f:ff: e1:53:7e:22:8f:0f:24:88:71:ba:65:cf:d4:2f:63:d1:0d:25: 35:c9:cd:60:4b:21:d4:23:66:18:32:9b:6c:74:bd:f8:d9:06: 4c:5c:d0:13:04:11:32:25:a4:4d:85:9a:ad:62:b6:b2:c1:bc: 40:be:1c:2d:88:fd:92:67:29:a0:db:12:3c:9a:f6:6f:5d:2f: f5:7c:96:af:42:6f:b8:05:b6:92:d1:91:ed:1f:75:85:1b:67: ae:19:d0:81:47:95:06:5f:cf:b7:80:31:82:92:6b:de:2f:cd: 07:9e:98:aa:18:1d:76:4f:bc:7c:33:16:b2:c5:1f:61:dc:7d: f4:f0:57:3e:51:63:62:c9:ec:86:d1:5e:3c:b9:fa:8c:44:dd: 1c:ac:b7:a7:e9:1b:41:24:07:e4:50:27:c9:4d:33:ab:f0:21: 0f:ba:39:e8:0f:d8:f4:54:21:dd:46:9c:15:ea:a4:25:3b:8b: 25:8d:b9:1e -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM1MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk5Qjc3RUUwM0E5ODk3 Qjg2MTRBRkQ3RjAxQUQ5QTJGODNEQzg0RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdTtZ0c9o/pNo5B6ZoQDWrHlH5CXEOnhcKQSnGTsIUevtS2LYP 8ynJaVpfaFPDStw5FO+my5FVBokdjmQXJ2r4OCfSPlZC7N8u78frNVQmmq5w3NP+ Dm4vdPJrNMNw+AiPVF/TPeM7sErVztDBm2VZPWU+nQuUDk5Kq6ncW21Mw8i9xDz/ +mxmG14JCTm31LG+jfWavEr/Bo8VK0kNajSvhXjj5Cd+iPLnmkb3kg3QdUpE3z7Q 3FWKz7JXrG5zON5aVDZJ41bL+vFHVtThg+TyVJMtUsdcb1XHZ/uxQQEpEBC3qkoH /9yAJV995KAedtddvvkeRp04BgJQTW+5pdNbAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUmbd+4DqYl7hhSv1/Aa2aL4PchPIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL21iZC00RHFZbDdoaFN2MV9BYTJhTDRQ Y2hQSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHfFjANBgkq hkiG9w0BAQsFAAOCAQEAiWec2e17lw7fAEpGzczZqCThicl0fhW7meLS9dovbBQ8 aYx0cHf8qYF545D2VRqZYbWB38m3cgxIHX0W0sNScl/awS6NjC//4VN+Io8PJIhx umXP1C9j0Q0lNcnNYEsh1CNmGDKbbHS9+NkGTFzQEwQRMiWkTYWarWK2ssG8QL4c LYj9kmcpoNsSPJr2b10v9XyWr0JvuAW2ktGR7R91hRtnrhnQgUeVBl/Pt4AxgpJr 3i/NB56Yqhgddk+8fDMWssUfYdx99PBXPlFjYsnshtFePLn6jETdHKy3p+kbQSQH 5FAnyU0zq/AhD7o56A/Y9FQh3UacFeqkJTuLJY25Hg== -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org