$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/uVWDutr4BhpVCNeAmYZPFfQ7Rl8.roa File: uVWDutr4BhpVCNeAmYZPFfQ7Rl8.roa (raw, json) Hash identifier: +IODSutbSz2xKnXJGhLdenogl4HirX/T1cW8X6UPTrU= Subject key identifier: B9:55:83:BA:DA:F8:06:1A:55:08:D7:80:99:86:4F:15:F4:3B:46:5F Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 059B Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/uVWDutr4BhpVCNeAmYZPFfQ7Rl8.roa Signing time: Thu 12 Oct 2023 08:20:37 +0000 ROA not before: Thu 12 Oct 2023 08:20:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131657 IP address blocks: 103.122.188.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 21:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Oct 12 08:20:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B95583BADAF8061A5508D78099864F15F43B465F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:48:cc:b3:2a:45:d9:a1:18:18:c2:b4:8b: 0b:3a:f0:89:f3:94:cc:dd:64:68:01:a6:bd:ec:9c: 83:4b:65:34:3e:05:48:8f:1a:eb:1f:4b:85:5f:af: a4:76:bc:ed:1e:25:64:76:a0:b9:37:d5:1a:5a:70: 34:74:59:a8:e4:fb:c2:3e:6e:8b:0b:63:b1:1d:6a: ef:88:65:41:79:42:c6:ff:4e:5e:15:97:52:da:33: c4:87:49:5d:73:1b:f6:66:29:c3:92:1f:c3:af:f2: f0:7e:5a:87:7c:d5:c5:0b:54:67:a5:96:16:09:cd: 57:a5:52:1e:ac:be:1c:0e:fb:4f:1b:59:05:9b:7c: db:fe:3e:15:28:12:07:74:95:9c:cd:f7:51:5a:fa: 33:72:9d:5d:20:ed:6b:4a:43:7d:32:5e:32:5b:c0: e4:b6:1e:17:59:cc:a8:85:c3:d6:06:36:a6:d3:bd: 4e:67:f4:71:09:e3:44:7f:83:45:0e:5a:0f:54:c8: 98:b2:10:32:88:3a:3a:76:31:cb:53:63:03:54:b5: 1c:36:a5:ba:0c:c7:4d:c7:7d:7c:35:a8:39:e0:13: d7:0a:ea:eb:38:5e:73:8e:68:2b:c9:0a:0c:22:9a: 11:5a:28:86:2f:fd:f0:b1:04:77:54:47:fe:31:41: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:55:83:BA:DA:F8:06:1A:55:08:D7:80:99:86:4F:15:F4:3B:46:5F X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/uVWDutr4BhpVCNeAmYZPFfQ7Rl8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/22 Signature Algorithm: sha256WithRSAEncryption 81:5c:f9:ba:9b:f9:bf:69:76:90:f7:54:4f:86:05:93:8d:c9: 96:f5:55:11:df:9d:e2:ce:35:aa:ef:40:f4:45:b0:60:aa:4b: 12:37:7f:31:88:3e:f4:50:c8:c1:05:b3:2f:8c:cf:52:60:ad: b6:48:fe:3b:4d:19:4c:b1:57:e1:ff:19:ee:e7:1a:5d:1b:62: ae:61:65:e7:23:7c:a3:76:7a:19:17:62:42:88:4b:19:57:54: 37:69:fa:07:f2:9b:af:02:f5:ef:3b:15:25:7e:2a:8d:64:c5: 89:4f:3c:c8:7f:67:23:ed:7a:d4:06:fe:85:41:9d:2a:27:d4: 98:ac:45:16:9c:f6:60:c9:10:f9:44:a7:8f:9a:de:b1:4c:93: 8b:9e:f5:f5:79:9e:78:86:1e:04:a1:e9:f7:63:52:8c:3c:5d: 75:30:8c:6b:4b:e8:09:31:66:99:30:ec:b5:46:c8:9b:e8:07: 92:1a:b4:a0:57:ca:8d:ed:1c:f0:fd:77:cf:cf:91:a9:b8:d5: a3:50:6a:9a:d7:39:37:29:c5:6a:48:28:dc:90:f1:73:16:e3: 6a:d5:8f:b4:cb:20:a4:ca:16:1d:7c:cf:10:9a:aa:2a:8b:68: 0d:61:bb:1d:9d:37:ba:e8:7b:50:1c:12:ea:ec:1a:54:09:c5: da:e9:5a:5f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBZswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzEwMTIw ODIwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI5NTU4M0JBREFGODA2 MUE1NTA4RDc4MDk5ODY0RjE1RjQzQjQ2NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjjkjMsypF2aEYGMK0iws68InzlMzdZGgBpr3snINLZTQ+BUiP GusfS4Vfr6R2vO0eJWR2oLk31RpacDR0Wajk+8I+bosLY7Edau+IZUF5Qsb/Tl4V l1LaM8SHSV1zG/ZmKcOSH8Ov8vB+Wod81cULVGellhYJzVelUh6svhwO+08bWQWb fNv+PhUoEgd0lZzN91Fa+jNynV0g7WtKQ30yXjJbwOS2HhdZzKiFw9YGNqbTvU5n 9HEJ40R/g0UOWg9UyJiyEDKIOjp2MctTYwNUtRw2pboMx03HfXw1qDngE9cK6us4 XnOOaCvJCgwimhFaKIYv/fCxBHdUR/4xQUHVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUuVWDutr4BhpVCNeAmYZPFfQ7Rl8wHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL3VWV0R1dHI0QmhwVkNOZUFt WVpQRmZRN1JsOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn erwwDQYJKoZIhvcNAQELBQADggEBAIFc+bqb+b9pdpD3VE+GBZONyZb1VRHfneLO NarvQPRFsGCqSxI3fzGIPvRQyMEFsy+Mz1JgrbZI/jtNGUyxV+H/Ge7nGl0bYq5h ZecjfKN2ehkXYkKISxlXVDdp+gfym68C9e87FSV+Ko1kxYlPPMh/ZyPtetQG/oVB nSon1JisRRac9mDJEPlEp4+a3rFMk4ue9fV5nniGHgSh6fdjUow8XXUwjGtL6Akx Zpkw7LVGyJvoB5IatKBXyo3tHPD9d8/Pkam41aNQaprXOTcpxWpIKNyQ8XMW42rV j7TLIKTKFh18zxCaqiqLaA1hux2dN7roe1AcEursGlQJxdrpWl8= -----END CERTIFICATE-----Generated at Tue May 7 14:32:35 2024 by rpki-client on console-fra.rpki-client.org