$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JDA/ig2ovI9HAWFiX-LCA3miDNZLLfg.roa File: ig2ovI9HAWFiX-LCA3miDNZLLfg.roa (raw, json) Hash identifier: lt9M33qeKqzotlJ8BOATADerwZ4aCmJwytbdWYhA138= Subject key identifier: 8A:0D:A8:BC:8F:47:01:61:62:5F:E2:C2:03:79:A2:0C:D6:4B:2D:F8 Certificate issuer: /CN=86F6D06B4049386A106E5ED22656A93D9F355274 Certificate serial: 03 Authority key identifier: 86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/ig2ovI9HAWFiX-LCA3miDNZLLfg.roa Signing time: Wed 06 Dec 2023 07:13:35 +0000 ROA not before: Wed 06 Dec 2023 07:13:35 +0000 ROA not after: Thu 28 Nov 2024 15:30:20 +0000 asID: 38136 IP address blocks: 210.79.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86F6D06B4049386A106E5ED22656A93D9F355274 Validity Not Before: Dec 6 07:13:35 2023 GMT Not After : Nov 28 15:30:20 2024 GMT Subject: CN=8A0DA8BC8F470161625FE2C20379A20CD64B2DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:a3:7e:2d:c9:e4:12:e2:2b:fb:b5:dd:00: ab:49:ac:9e:73:d1:38:23:fe:ad:4b:7d:90:b1:a0: fc:0a:49:a2:b6:7a:5b:2e:44:f9:ab:38:a1:a8:8a: e0:5b:3b:3c:e4:64:fb:fc:1a:cb:f4:13:6e:3c:ec: cc:8d:a9:0b:fb:db:2e:f6:78:cf:a1:ac:ba:cf:b3: 95:41:b0:5c:e1:3a:64:14:55:29:a5:44:ec:28:f6: 6c:6c:41:0a:f3:4f:b4:cb:e8:61:17:e4:bd:ca:ed: 56:b5:a3:53:1a:35:6d:a3:b2:81:84:fe:9c:e0:3e: 61:96:ff:1f:69:8c:28:5d:2a:f1:01:37:bd:45:49: 4c:f0:bb:e9:45:de:73:33:d5:56:13:dc:1f:99:96: 69:82:1d:23:64:69:df:fa:c2:57:76:08:51:45:b3: 9c:86:7c:80:80:d8:57:ad:7c:75:7c:05:4f:45:a4: 75:45:d1:9d:36:b2:66:60:5b:80:75:88:42:a1:6d: f5:46:1b:db:b5:ab:25:e0:e3:3e:d1:10:c1:35:58: 9d:1a:e1:9c:42:e3:55:b4:22:5a:6e:02:d2:2c:be: 81:07:e2:e0:b7:94:6a:9c:75:68:e9:50:5c:42:a1: 13:d5:8d:77:b6:25:87:4a:9e:33:f0:a2:7c:41:38: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0D:A8:BC:8F:47:01:61:62:5F:E2:C2:03:79:A2:0C:D6:4B:2D:F8 X509v3 Authority Key Identifier: keyid:86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/ig2ovI9HAWFiX-LCA3miDNZLLfg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.79.154.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:c6:e7:d2:c0:18:f8:f4:5a:8f:69:b4:7f:b4:d1:d9:57:51: b0:7a:fb:5b:af:26:a1:fb:b0:7d:a6:90:cc:fc:6d:8a:9a:db: 8c:81:6b:a5:2b:22:6f:7f:86:92:c0:05:da:bf:3a:20:49:95: 00:62:0a:5a:b4:26:90:ab:28:2e:65:69:14:29:2c:db:a9:f5: a5:fd:1f:25:e5:fb:1b:1f:65:5a:49:46:d2:86:33:ae:23:41: bb:60:a9:1c:8a:5d:2c:3a:69:8c:7f:b4:5e:29:9f:1d:cd:77: 8b:02:4f:39:b6:8c:7a:a5:75:37:4b:3c:81:2a:22:21:e2:8d: f9:e9:6c:a2:cc:d6:85:f1:c7:54:68:57:af:ed:4f:71:4d:30: 99:e2:89:1e:14:d5:39:09:7c:8f:13:17:a6:74:14:2d:87:a3: 5d:18:b6:bd:41:58:32:a2:2a:db:3f:18:66:c1:a1:49:31:dc: b5:07:a8:6b:a7:d2:21:e4:20:cd:ab:05:86:eb:00:fd:9c:b3: cb:a4:14:64:6c:71:0b:0b:7e:6c:68:9a:c1:c5:cb:35:b9:21: 8a:ad:ae:c3:b6:7f:35:c3:36:c7:50:4c:3b:8b:21:36:e4:78: 3a:3d:26:11:dd:0a:af:c5:ff:1c:15:c4:06:22:f0:e4:54:ba: 99:97:00:58 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NkY2 RDA2QjQwNDkzODZBMTA2RTVFRDIyNjU2QTkzRDlGMzU1Mjc0MB4XDTIzMTIwNjA3 MTMzNVoXDTI0MTEyODE1MzAyMFowMzExMC8GA1UEAxMoOEEwREE4QkM4RjQ3MDE2 MTYyNUZFMkMyMDM3OUEyMENENjRCMkRGODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALbZo34tyeQS4iv7td0Aq0msnnPROCP+rUt9kLGg/ApJorZ6Wy5E +as4oaiK4Fs7PORk+/way/QTbjzszI2pC/vbLvZ4z6Gsus+zlUGwXOE6ZBRVKaVE 7Cj2bGxBCvNPtMvoYRfkvcrtVrWjUxo1baOygYT+nOA+YZb/H2mMKF0q8QE3vUVJ TPC76UXeczPVVhPcH5mWaYIdI2Rp3/rCV3YIUUWznIZ8gIDYV618dXwFT0WkdUXR nTayZmBbgHWIQqFt9UYb27WrJeDjPtEQwTVYnRrhnELjVbQiWm4C0iy+gQfi4LeU apx1aOlQXEKhE9WNd7Ylh0qeM/CifEE4Nw8CAwEAAaOCAegwggHkMB0GA1UdDgQW BBSKDai8j0cBYWJf4sIDeaIM1kst+DAfBgNVHSMEGDAWgBSG9tBrQEk4ahBuXtIm Vqk9nzVSdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KREEvaHZi UWEwQkpPR29RYmw3U0psYXBQWjgxVW5RLmNybDBgBggrBgEFBQcBAQRUMFIwUAYI KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9o dmJRYTBCSk9Hb1FibDdTSmxhcFBaODFVblEuY2VyMA4GA1UdDwEB/wQEAwIHgDCB mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS9KREEvaWcyb3ZJOUhBV0ZpWC1MQ0EzbWlETlpM TGZnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdJPmjANBgkq hkiG9w0BAQsFAAOCAQEAHcbn0sAY+PRaj2m0f7TR2VdRsHr7W68mofuwfaaQzPxt iprbjIFrpSsib3+GksAF2r86IEmVAGIKWrQmkKsoLmVpFCks26n1pf0fJeX7Gx9l WklG0oYzriNBu2CpHIpdLDppjH+0XimfHc13iwJPObaMeqV1N0s8gSoiIeKN+els oszWhfHHVGhXr+1PcU0wmeKJHhTVOQl8jxMXpnQULYejXRi2vUFYMqIq2z8YZsGh STHctQeoa6fSIeQgzasFhusA/Zyzy6QUZGxxCwt+bGiawcXLNbkhiq2uw7Z/NcM2 x1BMO4shNuR4Oj0mEd0Kr8X/HBXEBiLw5FS6mZcAWA== -----END CERTIFICATE-----Generated at Tue May 21 08:01:34 2024 by rpki-client on console-fra.rpki-client.org