$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa File: OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa (raw, json) Hash identifier: Y5O/kRkyDkNoZVGa2YFBu59ETabQeCL6RNbw1+kLBbg= Subject key identifier: 39:29:E2:13:76:98:E6:82:A3:A9:02:49:D0:8B:33:D6:95:DE:BB:2D Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 0578 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa Signing time: Fri 01 Sep 2023 08:59:51 +0000 ROA not before: Fri 01 Sep 2023 08:59:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17418 IP address blocks: 103.153.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 21:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1400 (0x578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Sep 1 08:59:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3929E2137698E682A3A90249D08B33D695DEBB2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c8:cf:04:f9:1d:88:26:c7:9a:1e:8d:1a:ee: 2c:08:70:04:d9:74:b7:9f:d0:8b:51:d5:cb:96:c6: 0f:a6:9e:88:40:57:56:a8:8b:0a:c5:a0:bf:7a:9b: bd:32:ba:3c:3d:cb:aa:18:97:d6:7c:9b:db:14:d4: 42:6f:4e:4f:08:ab:01:bd:97:67:39:59:8f:40:30: 80:e8:08:27:f5:c6:ff:4b:c0:5c:c7:3c:3d:89:f5: 46:e0:a0:71:02:24:0a:92:75:97:ec:7e:48:28:80: 47:57:69:53:b9:a4:7e:11:4d:53:eb:df:38:08:cb: be:e3:fc:5a:27:f8:51:eb:40:35:a3:fa:6b:81:da: 98:83:9c:30:eb:3f:8e:86:74:5a:a0:d5:06:c5:34: 29:44:bd:0c:0e:97:27:88:2c:18:60:df:49:09:64: b8:7a:65:e4:a6:28:92:0a:16:03:7f:9a:7a:84:3c: a6:80:35:de:23:4d:30:af:9e:7b:cf:75:c9:f0:4a: 36:c5:08:6c:9e:8d:4e:1a:fd:26:dc:9e:7e:eb:95: e0:71:8c:56:17:5f:6e:fd:b5:53:2f:79:ab:3c:16: 8d:fa:32:2f:75:6d:73:a6:5f:8f:bf:d3:3d:bd:b3: e4:ed:79:37:18:eb:b9:44:bf:f6:10:a8:b1:62:f2: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:29:E2:13:76:98:E6:82:A3:A9:02:49:D0:8B:33:D6:95:DE:BB:2D X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OSniE3aY5oKjqQJJ0Isz1pXeuy0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:1e:f6:68:86:32:c5:65:66:2b:b8:2b:47:9a:33:fc:01:57: 91:c9:f6:e4:77:c4:f6:15:43:ec:05:ed:8b:ea:20:b2:9e:95: 90:bf:ce:24:dc:71:58:e3:05:19:07:c4:ac:96:d7:74:aa:ae: 41:44:59:f3:ee:55:c9:ad:7a:55:97:75:f8:11:7f:69:5d:1b: a2:69:ac:f3:86:89:ce:34:a9:df:c2:f6:93:94:49:98:ba:37: db:00:a2:59:74:40:93:64:04:e3:be:31:a3:87:14:28:9e:11: a0:2f:6c:58:08:48:de:24:03:c7:5b:83:1f:71:47:8d:04:89: ca:61:c2:79:06:68:d9:bb:37:15:43:ec:a2:8d:ec:d8:53:34: 72:16:9f:29:a8:e9:16:80:e7:d2:2c:c2:26:3f:40:14:49:b2: 6d:be:f7:16:de:6a:30:6c:1a:1f:08:63:c9:12:33:f4:5b:2e: 25:15:93:18:80:86:26:f0:ea:e8:94:b8:4f:38:14:21:ff:39: 30:fd:c8:d5:70:fa:e8:07:46:87:2a:12:12:7e:00:be:ca:ca: 0e:79:4c:77:aa:81:5c:47:52:2e:fd:b8:1d:51:f4:b5:11:53: aa:ae:6e:e9:6e:99:4c:3b:91:ae:7b:6a:86:19:a9:be:0e:8a: 1d:4e:41:3a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzA5MDEw ODU5NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM5MjlFMjEzNzY5OEU2 ODJBM0E5MDI0OUQwOEIzM0Q2OTVERUJCMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTyM8E+R2IJseaHo0a7iwIcATZdLef0ItR1cuWxg+mnohAV1ao iwrFoL96m70yujw9y6oYl9Z8m9sU1EJvTk8IqwG9l2c5WY9AMIDoCCf1xv9LwFzH PD2J9UbgoHECJAqSdZfsfkgogEdXaVO5pH4RTVPr3zgIy77j/Fon+FHrQDWj+muB 2piDnDDrP46GdFqg1QbFNClEvQwOlyeILBhg30kJZLh6ZeSmKJIKFgN/mnqEPKaA Nd4jTTCvnnvPdcnwSjbFCGyejU4a/Sbcnn7rleBxjFYXX279tVMveas8Fo36Mi91 bXOmX4+/0z29s+TteTcY67lEv/YQqLFi8g8DAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOSniE3aY5oKjqQJJ0Isz1pXeuy0wHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL09TbmlFM2FZNW9LanFRSkow SXN6MXBYZXV5MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn mbAwDQYJKoZIhvcNAQELBQADggEBAEwe9miGMsVlZiu4K0eaM/wBV5HJ9uR3xPYV Q+wF7YvqILKelZC/ziTccVjjBRkHxKyW13SqrkFEWfPuVcmtelWXdfgRf2ldG6Jp rPOGic40qd/C9pOUSZi6N9sAoll0QJNkBOO+MaOHFCieEaAvbFgISN4kA8dbgx9x R40EicphwnkGaNm7NxVD7KKN7NhTNHIWnymo6RaA59IswiY/QBRJsm2+9xbeajBs Gh8IY8kSM/RbLiUVkxiAhibw6uiUuE84FCH/OTD9yNVw+ugHRocqEhJ+AL7Kyg55 THeqgVxHUi79uB1R9LURU6qubulumUw7ka57aoYZqb4Oih1OQTo= -----END CERTIFICATE-----Generated at Tue May 7 15:44:11 2024 by rpki-client on console-ams.rpki-client.org