$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/StE-piNdnNtJ9mQyB7y0U929XPI.roa File: StE-piNdnNtJ9mQyB7y0U929XPI.roa (raw, json) Hash identifier: qobxeEv+dajR1ecHrY6h3UyJBvUSwRX11NveMEv9Uyg= Subject key identifier: 4A:D1:3E:A6:23:5D:9C:DB:49:F6:64:32:07:BC:B4:53:DD:BD:5C:F2 Certificate issuer: /CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9 Certificate serial: 04 Authority key identifier: F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/StE-piNdnNtJ9mQyB7y0U929XPI.roa Signing time: Thu 16 Nov 2023 08:10:59 +0000 ROA not before: Thu 16 Nov 2023 08:10:59 +0000 ROA not after: Wed 13 Nov 2024 15:30:20 +0000 asID: 131642 IP address blocks: 202.47.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9 Validity Not Before: Nov 16 08:10:59 2023 GMT Not After : Nov 13 15:30:20 2024 GMT Subject: CN=4AD13EA6235D9CDB49F6643207BCB453DDBD5CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:70:2b:22:e5:db:a8:9b:9a:2a:ff:49:2a: 15:e8:83:ad:f3:0c:f0:11:ab:5b:14:47:5e:10:31: 15:40:f9:7a:c9:12:24:8d:ac:41:50:5b:a2:cd:2a: e0:ab:9f:ad:e9:1d:2f:61:fd:74:5a:67:9a:db:ed: 5e:40:9a:e0:1b:39:74:da:be:50:02:c3:7b:a3:b5: fa:e6:5f:a7:52:85:4d:09:a7:5b:c2:b0:a0:84:a2: 14:5c:4f:5c:7f:15:5c:25:84:43:c3:d2:65:a9:ea: 5b:03:a5:a6:14:67:be:02:d6:df:7a:e1:5e:2e:d4: bc:bd:11:7f:9b:52:8f:7a:03:42:40:fe:39:0d:96: de:22:38:20:0f:4d:cd:6d:18:29:37:0d:69:55:6d: 25:17:6c:42:3f:71:a6:b6:b2:67:49:36:fc:32:64: 9d:d7:67:dc:ff:ca:c9:09:4d:4b:0b:ad:cb:e1:2f: 03:73:52:1e:31:73:47:dc:81:7a:38:97:91:0c:3c: d0:c0:90:67:11:ea:70:4b:de:71:01:00:33:c2:0d: 29:9a:73:71:a9:2b:03:6b:67:1a:36:79:48:c1:bb: 8f:d0:45:1c:08:b5:b4:60:f3:00:c8:8e:28:60:64: f1:f3:35:58:d0:79:d8:65:31:e8:ff:5c:01:91:be: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D1:3E:A6:23:5D:9C:DB:49:F6:64:32:07:BC:B4:53:DD:BD:5C:F2 X509v3 Authority Key Identifier: keyid:F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/StE-piNdnNtJ9mQyB7y0U929XPI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.47.172.0/23 Signature Algorithm: sha256WithRSAEncryption b5:dc:7d:7e:35:ce:9b:42:3d:82:c2:ee:f6:13:79:9f:b8:a3: 3b:0b:69:52:8a:4d:b8:79:8a:92:26:9a:d1:78:86:69:52:08: 6f:a8:18:d7:b0:ec:f3:6e:d0:75:e6:9c:d5:53:8d:d9:77:81: 29:76:93:c1:f7:9a:6d:d9:68:16:98:6f:8d:24:62:c1:47:6e: 80:03:66:f4:0f:a7:c2:eb:7b:d8:e5:38:cc:b5:c0:ea:2e:7f: 74:2f:3d:ef:a9:aa:7e:0d:6c:33:b5:a9:2b:d1:79:b2:19:44: 49:cc:b2:14:4e:5b:da:df:fe:b3:93:81:63:2a:83:00:c5:97: f3:51:30:b3:d2:2a:63:fb:96:69:e7:5d:cc:7b:bd:39:fd:ad: b5:01:85:6d:91:c9:b0:b7:e4:ed:26:1b:95:c3:cf:16:89:e8: b0:39:be:19:17:48:6c:28:1f:bc:ba:1d:e8:38:7a:a4:ef:2f: 1f:17:85:44:ca:c5:4f:32:af:58:61:8c:08:c6:eb:b1:ce:8a: e0:b7:98:d0:82:62:3f:7c:6b:e9:d1:4f:8a:a9:96:f1:48:a9: c9:9a:1e:6d:4c:01:0d:25:d8:92:60:d3:ed:ac:60:05:64:62: 42:aa:9e:30:a4:ee:5a:93:c0:8b:fc:f2:12:45:45:e9:ab:0e: 84:02:c8:bc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOTVG MEFBNEVFRTM0NkYwNzdBMENFRUM4RDA2Q0M0OThGOUIxQUI5MB4XDTIzMTExNjA4 MTA1OVoXDTI0MTExMzE1MzAyMFowMzExMC8GA1UEAxMoNEFEMTNFQTYyMzVEOUNE QjQ5RjY2NDMyMDdCQ0I0NTNEREJENUNGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMDHcCsi5duom5oq/0kqFeiDrfMM8BGrWxRHXhAxFUD5eskSJI2s QVBbos0q4KufrekdL2H9dFpnmtvtXkCa4Bs5dNq+UALDe6O1+uZfp1KFTQmnW8Kw oISiFFxPXH8VXCWEQ8PSZanqWwOlphRnvgLW33rhXi7UvL0Rf5tSj3oDQkD+OQ2W 3iI4IA9NzW0YKTcNaVVtJRdsQj9xprayZ0k2/DJknddn3P/KyQlNSwuty+EvA3NS HjFzR9yBejiXkQw80MCQZxHqcEvecQEAM8INKZpzcakrA2tnGjZ5SMG7j9BFHAi1 tGDzAMiOKGBk8fM1WNB52GUx6P9cAZG+yw0CAwEAAaOCAe4wggHqMB0GA1UdDgQW BBRK0T6mI12c20n2ZDIHvLRT3b1c8jAfBgNVHSMEGDAWgBT5Xwqk7uNG8HegzuyN BsxJj5sauTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LQUlXRUkv LVY4S3BPN2pSdkIzb003c2pRYk1TWS1iR3JrLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8tVjhLcE83alJ2QjNvTTdzalFiTVNZLWJHcmsuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LQUlXRUkvU3RFLXBpTmRuTnRKOW1ReUI3 eTBVOTI5WFBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcov rDANBgkqhkiG9w0BAQsFAAOCAQEAtdx9fjXOm0I9gsLu9hN5n7ijOwtpUopNuHmK kiaa0XiGaVIIb6gY17Ds827Qdeac1VON2XeBKXaTwfeabdloFphvjSRiwUdugANm 9A+nwut72OU4zLXA6i5/dC8976mqfg1sM7WpK9F5shlEScyyFE5b2t/+s5OBYyqD AMWX81Ews9IqY/uWaeddzHu9Of2ttQGFbZHJsLfk7SYblcPPFonosDm+GRdIbCgf vLod6Dh6pO8vHxeFRMrFTzKvWGGMCMbrsc6K4LeY0IJiP3xr6dFPiqmW8UipyZoe bUwBDSXYkmDT7axgBWRiQqqeMKTuWpPAi/zyEkVF6asOhALIvA== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:01 2024 by rpki-client on console-fra.rpki-client.org