$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/Z-mQnEVc0Ngpmu0XJJ_ioK6A9p8.roa File: Z-mQnEVc0Ngpmu0XJJ_ioK6A9p8.roa (raw, json) Hash identifier: 2Nd08RLW9Grikw16VmmEAPSIzIJvWVoKGCpUezRlXaM= Subject key identifier: 67:E9:90:9C:45:5C:D0:D8:29:9A:ED:17:24:9F:E2:A0:AE:80:F6:9F Certificate issuer: /CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42 Certificate serial: 03 Authority key identifier: CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/Z-mQnEVc0Ngpmu0XJJ_ioK6A9p8.roa Signing time: Wed 20 Sep 2023 18:51:38 +0000 ROA not before: Wed 20 Sep 2023 18:51:38 +0000 ROA not after: Wed 18 Sep 2024 09:08:14 +0000 asID: 131642 IP address blocks: 103.99.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 00:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42 Validity Not Before: Sep 20 18:51:38 2023 GMT Not After : Sep 18 09:08:14 2024 GMT Subject: CN=67E9909C455CD0D8299AED17249FE2A0AE80F69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:48:49:33:49:80:a3:02:1c:89:de:ff:ce:99: fe:15:1b:04:0c:f1:02:ac:b8:cd:f1:0e:bc:1a:9a: 4d:13:96:08:cb:bc:3b:33:5a:ae:f4:e8:b8:75:81: 34:16:11:71:10:c3:ec:23:7f:70:1d:5a:a9:66:7a: 70:b1:49:d4:f7:a9:64:ac:a7:89:8f:54:ef:ea:ce: 4f:0d:33:de:46:18:5a:0d:59:0a:06:97:f0:ec:51: df:8f:c8:12:75:8f:19:9c:e0:75:32:1e:45:0d:46: 3a:02:d2:b0:0f:c7:89:87:1b:ef:ed:60:9c:1a:3e: 36:1b:1f:fb:be:1c:f1:ac:74:0f:bf:54:c7:c2:4c: c4:65:c0:21:67:8a:93:5e:a3:ec:ca:16:34:9c:67: ff:f8:28:02:2a:bd:51:8b:4c:a8:ea:ff:09:c3:e7: 02:c2:f2:21:d2:e1:ed:d2:2d:7d:d1:1a:0d:88:3d: 1d:c7:10:35:ad:36:49:b6:d5:7a:d4:21:8b:8f:53: 91:8c:03:db:ac:08:fc:a1:a0:b3:f3:4f:09:96:38: d3:ca:f6:a3:7d:90:e0:3c:c2:48:9e:97:5f:d5:ce: 95:9b:1e:be:8d:27:62:e6:eb:60:36:5b:63:a1:82: 94:31:32:50:ac:43:28:76:4d:26:9e:74:31:0c:b0: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E9:90:9C:45:5C:D0:D8:29:9A:ED:17:24:9F:E2:A0:AE:80:F6:9F X509v3 Authority Key Identifier: keyid:CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/Z-mQnEVc0Ngpmu0XJJ_ioK6A9p8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.99.142.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:4c:17:f7:d7:cd:0b:d8:01:0d:0e:b4:ce:50:c1:ce:a9:9d: 62:e4:23:bb:c0:f3:e8:6d:4a:c2:04:2f:cb:34:5a:5c:f4:c1: 58:06:4d:4d:cc:29:ba:cf:e9:b1:88:82:5c:c2:a2:e8:13:ff: f3:be:85:99:f1:0f:e5:56:c1:fb:fe:ac:ed:af:b8:29:56:13: f7:c4:18:e2:c4:3e:9d:2e:02:19:23:ff:6a:77:c0:a5:13:cc: 20:df:10:2e:5a:c1:72:5d:d3:38:77:aa:e9:be:27:86:30:9b: a3:aa:e9:86:20:5d:10:2b:f2:2c:d2:bb:25:84:a1:f7:0d:c6: 81:07:91:08:2d:8c:4c:f2:70:77:8d:05:fa:f6:0a:25:43:fc: e5:9c:3d:18:51:ff:98:d0:6f:b7:fb:06:b7:c4:4f:0d:c9:20: 41:6c:9a:82:0b:79:a8:ff:a6:82:36:50:aa:0f:1a:d0:ce:9a: 93:d4:d9:ac:73:84:03:fb:1a:70:79:78:a4:a4:f5:fd:ed:fd: 66:db:1d:1c:e7:ce:f8:de:42:d1:08:21:e8:a7:d8:3e:0f:1f: 7b:c3:c7:9a:0a:90:09:2a:f7:96:54:9b:c6:02:06:ac:2c:db: b8:67:25:43:e2:d7:dc:2c:87:ef:2f:3f:e2:d8:ef:3b:69:23: ec:7e:c8:44 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQUE4 NDA1Q0JEOENFNkFFMUVBM0E5REFBNjc3OTc1NkVDNkVEQzQyMB4XDTIzMDkyMDE4 NTEzOFoXDTI0MDkxODA5MDgxNFowMzExMC8GA1UEAxMoNjdFOTkwOUM0NTVDRDBE ODI5OUFFRDE3MjQ5RkUyQTBBRTgwRjY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOhISTNJgKMCHIne/86Z/hUbBAzxAqy4zfEOvBqaTROWCMu8OzNa rvTouHWBNBYRcRDD7CN/cB1aqWZ6cLFJ1PepZKyniY9U7+rOTw0z3kYYWg1ZCgaX 8OxR34/IEnWPGZzgdTIeRQ1GOgLSsA/HiYcb7+1gnBo+Nhsf+74c8ax0D79Ux8JM xGXAIWeKk16j7MoWNJxn//goAiq9UYtMqOr/CcPnAsLyIdLh7dItfdEaDYg9HccQ Na02SbbVetQhi49TkYwD26wI/KGgs/NPCZY408r2o32Q4DzCSJ6XX9XOlZsevo0n YubrYDZbY6GClDEyUKxDKHZNJp50MQywt7sCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBRn6ZCcRVzQ2Cma7Rckn+KgroD2nzAfBgNVHSMEGDAWgBTKqEBcvYzmrh6jqdqm d5dW7G7cQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9IVUFOR0RF WElBL3lxaEFYTDJNNXE0ZW82bmFwbmVYVnV4dTNFSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EveXFoQVhMMk01cTRlbzZuYXBuZVhWdXh1M0VJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFVBTkdERVhJQS9aLW1RbkVWYzBO Z3BtdTBYSkpfaW9LNkE5cDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ2OOMA0GCSqGSIb3DQEBCwUAA4IBAQAcTBf3180L2AENDrTOUMHOqZ1i 5CO7wPPobUrCBC/LNFpc9MFYBk1NzCm6z+mxiIJcwqLoE//zvoWZ8Q/lVsH7/qzt r7gpVhP3xBjixD6dLgIZI/9qd8ClE8wg3xAuWsFyXdM4d6rpvieGMJujqumGIF0Q K/Is0rslhKH3DcaBB5EILYxM8nB3jQX69golQ/zlnD0YUf+Y0G+3+wa3xE8NySBB bJqCC3mo/6aCNlCqDxrQzpqT1Nmsc4QD+xpweXikpPX97f1m2x0c58743kLRCCHo p9g+Dx97w8eaCpAJKveWVJvGAgasLNu4ZyVD4tfcLIfvLz/i2O87aSPsfshE -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:40 2024 by rpki-client on console-fra.rpki-client.org