$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/c45q-jgdv2bI588pKm-4tiVA8Fk.roa File: c45q-jgdv2bI588pKm-4tiVA8Fk.roa (raw, json) Hash identifier: NgFGPaKw1TntupTX29YydKusb2JgAxAo8dzxkKtrk2Q= Subject key identifier: 73:8E:6A:FA:38:1D:BF:66:C8:E7:CF:29:2A:6F:B8:B6:25:40:F0:59 Certificate issuer: /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F Certificate serial: 0D98 Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/c45q-jgdv2bI588pKm-4tiVA8Fk.roa Signing time: Fri 01 Sep 2023 09:02:34 +0000 ROA not before: Fri 01 Sep 2023 09:02:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 134823 IP address blocks: 103.137.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3480 (0xd98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F Validity Not Before: Sep 1 09:02:34 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=738E6AFA381DBF66C8E7CF292A6FB8B62540F059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:5a:d9:3c:ea:bc:fa:36:15:fa:d4:1b:8d: ea:be:4b:da:89:1f:f8:36:f6:6e:9f:54:2e:e8:5d: 55:c7:64:67:2c:4f:5c:c9:cf:4f:cf:43:1b:9a:ba: 9c:f5:62:4a:b8:e3:92:18:07:79:66:ac:be:de:56: fd:8d:85:5f:c4:6c:68:7b:11:3f:14:60:c1:be:4e: 69:95:7c:e2:03:07:9c:e7:b4:a5:c8:91:31:5a:82: f3:ec:d0:61:e1:d2:1a:49:85:b3:4d:21:16:90:59: 54:2c:9b:ad:e7:47:b0:48:b5:44:54:ab:84:41:e5: 77:35:6c:18:9a:2a:f5:87:fd:de:dc:39:c0:22:98: 71:fb:50:65:0a:93:59:0d:bc:58:81:f0:22:4e:54: f9:7e:f1:b1:c9:dc:a5:b0:9f:51:0d:92:5f:2c:60: af:7c:3b:14:8e:4a:70:5a:2a:8f:13:3e:24:85:cb: 60:31:d6:a5:c8:6e:7e:15:cb:d6:b4:a9:eb:7d:db: 05:d8:67:f8:51:dd:33:c1:08:75:d5:fc:e2:79:8c: a0:b0:f2:5b:0c:fe:f4:24:64:2b:50:7c:da:83:f6: 7b:73:0b:8d:4b:e9:b3:8a:11:96:6b:65:19:5c:c5: 95:35:2a:21:65:33:8e:e6:05:13:5d:85:1a:90:d4: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8E:6A:FA:38:1D:BF:66:C8:E7:CF:29:2A:6F:B8:B6:25:40:F0:59 X509v3 Authority Key Identifier: keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/c45q-jgdv2bI588pKm-4tiVA8Fk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.22.0/23 Signature Algorithm: sha256WithRSAEncryption af:ea:4a:14:26:e6:59:ed:08:42:ac:ba:59:9c:35:65:9e:48: d2:a8:a5:2a:a9:57:30:27:dd:45:5b:a7:4f:bd:aa:a8:8a:a1: f4:32:84:51:5e:8f:40:15:95:be:3a:98:a5:3b:4d:62:94:b1: fc:22:f6:92:cd:71:86:84:a2:49:d4:b7:bf:f0:b4:ad:3c:2d: 4e:52:6f:75:40:70:c4:66:64:1c:ac:fd:b6:a7:8b:58:53:59: d5:41:38:8e:4c:9b:78:de:10:88:db:3a:43:1b:60:c3:5d:9a: 14:92:c2:4b:45:dc:24:a6:eb:53:c6:f7:63:b5:9a:5f:3d:57: 87:f9:af:88:e2:e9:5c:cd:2c:1b:f0:8a:e6:4b:c7:7a:96:01: 92:06:99:27:37:fc:84:24:71:8a:75:e3:3a:cb:db:84:c1:21: 74:e2:48:91:11:f5:dd:c2:48:d0:f8:4d:09:60:5a:0a:8c:30: c9:2d:2b:d8:27:f7:d8:93:d2:6b:76:a2:14:8f:b0:bc:84:68: 82:37:d5:35:1d:d3:ce:e4:ea:c3:34:60:ff:76:cf:be:21:c4: 10:25:9b:df:cf:d1:9e:95:e7:40:95:c1:a6:d9:9a:74:f5:db: 34:be:31:1d:f9:fb:bd:63:7f:f8:b1:3c:a6:15:62:2f:35:2f: a5:a3:dc:76 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjFF MEVFNzk0MjhCODVFREFCQjVGNkVCOTU3OEVGQjE5RTYzQzk4RjAeFw0yMzA5MDEw OTAyMzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczOEU2QUZBMzgxREJG NjZDOEU3Q0YyOTJBNkZCOEI2MjU0MEYwNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIy1rZPOq8+jYV+tQbjeq+S9qJH/g29m6fVC7oXVXHZGcsT1zJ z0/PQxuaupz1Ykq445IYB3lmrL7eVv2NhV/EbGh7ET8UYMG+TmmVfOIDB5zntKXI kTFagvPs0GHh0hpJhbNNIRaQWVQsm63nR7BItURUq4RB5Xc1bBiaKvWH/d7cOcAi mHH7UGUKk1kNvFiB8CJOVPl+8bHJ3KWwn1ENkl8sYK98OxSOSnBaKo8TPiSFy2Ax 1qXIbn4Vy9a0qet92wXYZ/hR3TPBCHXV/OJ5jKCw8lsM/vQkZCtQfNqD9ntzC41L 6bOKEZZrZRlcxZU1KiFlM47mBRNdhRqQ1PDlAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUc45q+jgdv2bI588pKm+4tiVA8FkwHwYDVR0jBBgwFoAUYeDueUKLhe2rtfbr lXjvsZ5jyY8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9V RC9ZZUR1ZVVLTGhlMnJ0ZmJybFhqdnNaNWp5WTguY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1llRHVlVUtMaGUycnRmYnJsWGp2c1o1anlZOC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lNQ0xPVUQvYzQ1cS1qZ2R2MmJJNTg4 cEttLTR0aVZBOEZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWeJFjANBgkqhkiG9w0BAQsFAAOCAQEAr+pKFCbmWe0IQqy6WZw1ZZ5I0qilKqlX MCfdRVunT72qqIqh9DKEUV6PQBWVvjqYpTtNYpSx/CL2ks1xhoSiSdS3v/C0rTwt TlJvdUBwxGZkHKz9tqeLWFNZ1UE4jkybeN4QiNs6Qxtgw12aFJLCS0XcJKbrU8b3 Y7WaXz1Xh/mviOLpXM0sG/CK5kvHepYBkgaZJzf8hCRxinXjOsvbhMEhdOJIkRH1 3cJI0PhNCWBaCowwyS0r2Cf32JPSa3aiFI+wvIRogjfVNR3TzuTqwzRg/3bPviHE ECWb38/RnpXnQJXBptmadPXbNL4xHfn7vWN/+LE8phViLzUvpaPcdg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:46 2024 by rpki-client on console-ams.rpki-client.org