$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/Ero1zU7ZBHakAC_ocRNMCweSDxc.roa File: Ero1zU7ZBHakAC_ocRNMCweSDxc.roa (raw, json) Hash identifier: OzUIrWkLWkbadLjD6wtZYtZkLBnLUTzPWfrbGURymm0= Subject key identifier: 12:BA:35:CD:4E:D9:04:76:A4:00:2F:E8:71:13:4C:0B:07:92:0F:17 Certificate issuer: /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA Certificate serial: 0E Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/Ero1zU7ZBHakAC_ocRNMCweSDxc.roa Signing time: Wed 13 Dec 2023 02:42:37 +0000 ROA not before: Wed 13 Dec 2023 02:42:37 +0000 ROA not after: Fri 06 Dec 2024 15:30:22 +0000 asID: 14618 IP address blocks: 113.192.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 17:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA Validity Not Before: Dec 13 02:42:37 2023 GMT Not After : Dec 6 15:30:22 2024 GMT Subject: CN=12BA35CD4ED90476A4002FE871134C0B07920F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:5d:59:42:65:c8:32:0f:1a:e5:72:e2:d9:3c: c8:e2:4f:3c:39:95:92:a5:48:8a:96:85:40:e8:73: 40:00:30:f2:8d:99:11:65:1c:66:fa:ca:6f:d3:f7: 74:95:2e:0a:21:40:66:4e:e2:c6:5e:9b:b6:ea:ed: 9d:d8:f2:f0:bc:f4:bc:a4:18:35:37:21:b4:bb:4f: 1c:7d:84:25:3a:1b:58:b8:48:d7:0e:c0:81:55:5a: ca:57:1e:0d:ff:13:00:53:fe:3a:00:f8:b0:12:7b: 89:f3:49:de:84:df:f1:41:cd:50:0d:9a:60:03:7f: 0c:64:37:2f:4e:40:37:53:4c:82:38:55:d7:68:13: 5b:de:ed:8b:4d:7f:2a:a7:cc:7c:d3:98:4e:59:fb: 47:8c:3e:55:ab:4d:a1:38:1a:be:e8:4f:5a:e6:e3: 23:5e:4e:87:e2:7e:0b:c6:99:0e:f0:6b:cd:fc:57: a8:e6:e9:2d:1e:7c:e2:e0:2f:94:cd:f8:20:d6:60: 8a:88:a6:1b:f4:c1:92:d7:be:8f:bb:2c:26:a9:76: de:53:5d:eb:09:44:95:d4:c7:53:a1:bd:5d:5e:45: bd:ef:a7:ae:25:38:ab:c0:c5:52:d7:cf:81:85:1b: 0a:54:b3:45:1e:45:82:ad:18:06:d3:27:ba:47:32: 75:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BA:35:CD:4E:D9:04:76:A4:00:2F:E8:71:13:4C:0B:07:92:0F:17 X509v3 Authority Key Identifier: keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/Ero1zU7ZBHakAC_ocRNMCweSDxc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.192.24.0/23 Signature Algorithm: sha256WithRSAEncryption ac:8e:16:fa:e0:ad:6d:f5:49:ee:e2:49:86:b4:aa:0d:f2:ef: 88:72:87:c0:17:f4:50:b6:3e:64:4b:c0:8f:e8:2f:42:ed:37: 67:4c:fc:92:a2:29:d3:67:46:96:5f:db:06:46:7c:35:c2:63: e4:31:4c:70:7a:9f:86:7b:55:3b:5e:59:05:a2:2f:eb:40:b3: f0:e3:9d:94:f3:50:78:16:5b:a2:0c:3b:40:64:07:15:e6:20: ee:8d:e2:9c:c0:f2:53:2a:f1:58:33:34:5d:09:ac:bc:cc:b6: e9:ba:e6:30:97:ae:1b:8e:9c:b1:4e:dc:13:dc:1a:da:e6:88: ff:1e:b4:3a:75:1a:c0:14:ee:74:2c:4a:4a:09:d6:e7:7c:a9: 84:43:a2:b7:45:1d:f0:7b:d4:23:29:5a:b7:58:d4:a2:d1:8a: 8f:d0:29:59:5a:64:c5:e2:b2:5b:8d:e5:53:6a:05:1b:6f:b7: e9:99:1d:e2:4d:06:61:33:10:8b:f8:9f:e6:db:f2:5d:85:3e: b2:86:ec:24:42:d7:f3:fd:fc:f0:01:8d:01:48:e8:84:dd:5a: 95:3a:ea:69:1e:bd:3f:f6:a6:79:7c:99:84:f7:98:21:46:62: de:f9:0f:bb:e5:81:19:1c:9d:0f:06:78:7c:9b:54:b4:cf:b7: a8:72:01:36 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjg0 RkFFRDZDQjQ3RTExMkYyNEM2QjAyNzdBNDg2MjI3MDY3MkNBMB4XDTIzMTIxMzAy NDIzN1oXDTI0MTIwNjE1MzAyMlowMzExMC8GA1UEAxMoMTJCQTM1Q0Q0RUQ5MDQ3 NkE0MDAyRkU4NzExMzRDMEIwNzkyMEYxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPhdWUJlyDIPGuVy4tk8yOJPPDmVkqVIipaFQOhzQAAw8o2ZEWUc ZvrKb9P3dJUuCiFAZk7ixl6bturtndjy8Lz0vKQYNTchtLtPHH2EJTobWLhI1w7A gVVaylceDf8TAFP+OgD4sBJ7ifNJ3oTf8UHNUA2aYAN/DGQ3L05AN1NMgjhV12gT W97ti01/KqfMfNOYTln7R4w+VatNoTgavuhPWubjI15Oh+J+C8aZDvBrzfxXqObp LR584uAvlM34INZgioimG/TBkte+j7ssJql23lNd6wlEldTHU6G9XV5Fve+nriU4 q8DFUtfPgYUbClSzRR5Fgq0YBtMnukcydbcCAwEAAaOCAfYwggHyMB0GA1UdDgQW BBQSujXNTtkEdqQAL+hxE0wLB5IPFzAfBgNVHSMEGDAWgBQ/hPrtbLR+ES8kxrAn ekhiJwZyyjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LUk9OT1NU RUNIL1A0VDY3V3kwZmhFdkpNYXdKM3BJWWljR2Nzby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvUDRUNjdXeTBmaEV2Sk1hd0ozcElZaWNHY3NvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1JPTk9TVEVDSC9Fcm8xelU3WkJI YWtBQ19vY1JOTUN3ZVNEeGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBccAYMA0GCSqGSIb3DQEBCwUAA4IBAQCsjhb64K1t9Unu4kmGtKoN8u+I cofAF/RQtj5kS8CP6C9C7TdnTPySoinTZ0aWX9sGRnw1wmPkMUxwep+Ge1U7XlkF oi/rQLPw452U81B4FluiDDtAZAcV5iDujeKcwPJTKvFYMzRdCay8zLbpuuYwl64b jpyxTtwT3Bra5oj/HrQ6dRrAFO50LEpKCdbnfKmEQ6K3RR3we9QjKVq3WNSi0YqP 0ClZWmTF4rJbjeVTagUbb7fpmR3iTQZhMxCL+J/m2/JdhT6yhuwkQtfz/fzwAY0B SOiE3VqVOuppHr0/9qZ5fJmE95ghRmLe+Q+75YEZHJ0PBnh8m1S0z7eocgE2 -----END CERTIFICATE-----Generated at Wed May 1 12:38:18 2024 by rpki-client on console-ams.rpki-client.org