$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/yTTHQdHXZTVSRZpGXqHbZDwkhaw.roa File: yTTHQdHXZTVSRZpGXqHbZDwkhaw.roa (raw, json) Hash identifier: e6YkG7gwGAA5t1Q5EYNLl1qtHNzTifjjnj57PBGpJmg= Subject key identifier: C9:34:C7:41:D1:D7:65:35:52:45:9A:46:5E:A1:DB:64:3C:24:85:AC Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 0569 Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/yTTHQdHXZTVSRZpGXqHbZDwkhaw.roa Signing time: Fri 01 Sep 2023 09:00:32 +0000 ROA not before: Fri 01 Sep 2023 09:00:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9678 IP address blocks: 103.98.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 15:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Sep 1 09:00:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C934C741D1D7653552459A465EA1DB643C2485AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:47:87:df:75:78:70:75:a2:99:09:84:76: 36:48:60:16:8e:a0:82:9d:60:e6:50:bd:82:2e:f5: 9a:48:f0:49:28:d7:e5:16:9b:c5:ef:3a:c5:43:cc: e3:a4:e4:c8:33:d7:ca:b2:bb:77:6a:21:d3:de:e4: d7:37:6c:d1:e3:a6:b6:5d:fa:2d:7d:20:26:b5:30: cd:a1:d8:4f:16:66:cf:c1:fa:d1:d8:60:30:aa:f8: 42:6d:35:d4:fd:c5:84:5c:b0:15:57:5a:19:32:3a: e3:fe:f8:70:73:57:25:37:9d:81:91:5c:ee:b8:c9: 0a:72:89:ec:95:e8:bc:c5:f7:83:71:00:a6:5d:32: f0:f0:01:33:bd:8c:4d:6e:d4:3f:1f:df:f7:31:ba: 27:10:8a:1c:8d:ec:88:c1:2e:5d:4f:39:c6:46:f9: f0:a8:91:74:16:06:ad:5d:48:42:8e:1d:62:56:2c: 61:61:a7:81:8c:34:3d:6c:fa:d6:6d:e9:cd:d1:cb: 69:b8:0d:1f:56:21:71:78:2f:3f:d0:72:44:1d:52: 7e:61:61:bb:00:65:a2:24:45:c9:7b:fe:c4:3d:cd: 8b:55:10:9e:0f:f8:f1:19:f2:22:bf:aa:9d:7c:e8: e4:68:c9:17:db:ee:4b:07:c7:15:9d:7d:6b:a7:3a: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:34:C7:41:D1:D7:65:35:52:45:9A:46:5E:A1:DB:64:3C:24:85:AC X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/yTTHQdHXZTVSRZpGXqHbZDwkhaw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.98.75.0/24 Signature Algorithm: sha256WithRSAEncryption 73:34:20:a5:ea:22:67:74:e0:99:6a:ad:dc:fe:05:1e:0c:e9: 92:fc:5b:9f:79:ed:4f:19:e1:f4:17:e2:f5:8a:5d:c3:da:30: bb:99:95:2c:31:5c:5a:eb:d0:5a:ff:28:cc:e6:af:90:a0:58: b2:3f:60:3b:67:e1:17:1a:24:06:d8:48:28:3d:43:84:6b:f5: fe:2c:21:07:b5:85:75:b4:2c:6a:e0:80:0e:10:d7:2f:74:ca: 7d:09:70:14:cc:7b:b4:6e:e8:83:9e:10:31:41:a7:9b:c5:44: d9:6e:a8:0c:7d:0c:ec:ad:c4:0e:08:f3:ec:57:81:e3:e1:29: f4:27:73:f6:13:3d:95:30:ed:80:61:2f:d2:e9:28:a1:7c:ba: d7:1d:2d:18:d3:7d:29:3e:bc:3d:94:c2:a4:a0:57:05:36:2c: 3b:40:a7:39:26:e9:16:24:01:d1:b4:27:a3:e8:60:1b:e6:c8: e8:b4:93:5a:c9:c2:0b:93:15:5f:b9:99:5c:2a:e7:12:3d:24: bd:fd:ae:fd:11:dc:7e:2b:ef:49:9d:f6:48:e3:f9:c3:b2:fc: 3e:c6:38:8a:dd:66:25:9f:4d:e0:7d:68:69:11:43:8d:8d:80: 08:ed:19:7e:9b:0c:e3:29:f4:da:f6:33:0b:5b:1a:ea:10:60: 24:c5:c3:41 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yMzA5MDEw OTAwMzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM5MzRDNzQxRDFENzY1 MzU1MjQ1OUE0NjVFQTFEQjY0M0MyNDg1QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwLkeH33V4cHWimQmEdjZIYBaOoIKdYOZQvYIu9ZpI8Eko1+UW m8XvOsVDzOOk5Mgz18qyu3dqIdPe5Nc3bNHjprZd+i19ICa1MM2h2E8WZs/B+tHY YDCq+EJtNdT9xYRcsBVXWhkyOuP++HBzVyU3nYGRXO64yQpyieyV6LzF94NxAKZd MvDwATO9jE1u1D8f3/cxuicQihyN7IjBLl1POcZG+fCokXQWBq1dSEKOHWJWLGFh p4GMND1s+tZt6c3Ry2m4DR9WIXF4Lz/QckQdUn5hYbsAZaIkRcl7/sQ9zYtVEJ4P +PEZ8iK/qp186ORoyRfb7ksHxxWdfWunOtFPAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyTTHQdHXZTVSRZpGXqHbZDwkhawwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL3lUVEhRZEhYWlRWU1JacEdY cUhiWkR3a2hhdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn YkswDQYJKoZIhvcNAQELBQADggEBAHM0IKXqImd04Jlqrdz+BR4M6ZL8W5957U8Z 4fQX4vWKXcPaMLuZlSwxXFrr0Fr/KMzmr5CgWLI/YDtn4RcaJAbYSCg9Q4Rr9f4s IQe1hXW0LGrggA4Q1y90yn0JcBTMe7Ru6IOeEDFBp5vFRNluqAx9DOytxA4I8+xX gePhKfQnc/YTPZUw7YBhL9LpKKF8utcdLRjTfSk+vD2UwqSgVwU2LDtApzkm6RYk AdG0J6PoYBvmyOi0k1rJwguTFV+5mVwq5xI9JL39rv0R3H4r70md9kjj+cOy/D7G OIrdZiWfTeB9aGkRQ42NgAjtGX6bDOMp9Nr2MwtbGuoQYCTFw0E= -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:35 2024 by rpki-client on console-ams.rpki-client.org