$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LIRUN/88gPUEKKqg4WAPhS7X2AtQDtPbk.roa File: 88gPUEKKqg4WAPhS7X2AtQDtPbk.roa (raw, json) Hash identifier: heuwQMRqbIKKRZQ6zkiVf7R5hnpXcijpVFo/sW451oI= Subject key identifier: F3:C8:0F:50:42:8A:AA:0E:16:00:F8:52:ED:7D:80:B5:00:ED:3D:B9 Certificate issuer: /CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Certificate serial: 08 Authority key identifier: D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/88gPUEKKqg4WAPhS7X2AtQDtPbk.roa Signing time: Mon 29 Apr 2024 13:27:49 +0000 ROA not before: Mon 29 Apr 2024 13:27:49 +0000 ROA not after: Sat 26 Apr 2025 10:00:55 +0000 asID: 131147 IP address blocks: 157.66.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 01:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D966B55909324180A88A45E1F683CF4D2ED9BCA5 Validity Not Before: Apr 29 13:27:49 2024 GMT Not After : Apr 26 10:00:55 2025 GMT Subject: CN=F3C80F50428AAA0E1600F852ED7D80B500ED3DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:ef:ad:9f:13:c0:7f:b6:0f:ed:a1:0d:2f: 76:41:4c:6f:00:d4:78:b3:6d:f5:ae:6a:f8:b3:69: 1e:43:1d:38:ee:65:f9:a8:82:22:f6:2f:45:ca:6c: d6:bb:14:a3:38:8a:10:05:9e:e4:cb:59:c3:e9:1d: d9:43:4a:ea:9a:97:19:ee:69:c7:d8:70:e5:8a:7e: b4:ae:9d:ca:02:e6:e3:1e:b2:87:fb:b3:82:4a:6f: e9:a5:e9:5b:26:9d:93:1b:d7:b2:ec:46:52:4c:e8: 46:db:9d:7f:24:cb:16:b8:14:7a:c2:ae:1c:7b:ea: 20:8c:90:c9:b3:69:1a:99:9d:18:66:de:c5:30:08: 48:c9:ee:66:7b:eb:29:c9:cb:4e:6d:e9:39:ab:71: 9e:28:8a:87:6c:9d:0f:d0:79:4e:16:12:b4:1d:ae: 36:5a:54:ee:81:72:1c:73:54:3a:ef:6a:a7:5b:ef: e2:7b:de:1d:2a:98:e9:97:47:c0:b7:b5:59:9f:9a: 1b:45:c5:77:60:c7:d2:5e:23:2d:e7:1d:00:17:63: 56:a8:f0:67:9d:59:0c:5e:22:19:93:39:23:35:e1: 78:f7:1f:5a:05:cf:1c:6c:c8:ed:d4:d8:f4:26:13: 2f:7a:31:14:05:9f:03:06:8d:dc:82:a9:38:39:9f: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C8:0F:50:42:8A:AA:0E:16:00:F8:52:ED:7D:80:B5:00:ED:3D:B9 X509v3 Authority Key Identifier: keyid:D9:66:B5:59:09:32:41:80:A8:8A:45:E1:F6:83:CF:4D:2E:D9:BC:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LIRUN/88gPUEKKqg4WAPhS7X2AtQDtPbk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.66.167.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:be:c2:ae:f4:aa:7c:02:ec:95:cb:db:04:1b:98:5a:6f:2b: 14:a9:b9:c8:4e:2c:69:22:67:67:6a:85:ba:fd:46:45:57:d9: 89:c2:bf:03:ef:c9:a0:20:d3:08:15:a1:ef:34:fc:4d:8c:a4: 38:b8:25:0a:0d:78:df:11:4d:20:d2:d1:68:9c:a9:c0:0f:c5: 3c:58:6e:c7:6a:cc:08:a8:ab:d8:06:e7:00:5b:13:76:1d:b6: 04:e1:00:9b:7d:ab:85:f4:3b:e1:18:11:8c:78:1b:0d:d9:06: 51:c8:77:2d:45:cf:49:28:32:6e:61:64:37:01:81:fb:81:5f: f5:38:1c:b0:af:1b:2b:aa:54:06:fa:8e:1a:a0:12:74:a6:99: 2b:d8:c9:a9:b7:c7:15:52:bb:56:b0:72:af:1f:0f:16:bd:af: a6:57:5d:52:e5:a5:06:80:d3:26:65:a7:8d:a1:7a:ba:0d:81: e6:45:e0:af:81:f7:51:ce:e6:6e:a0:cb:da:21:63:b8:05:21: 3a:a7:4e:01:4f:ea:07:4c:92:da:c0:1e:8a:f5:3c:f5:7e:d7: 26:43:59:cb:08:da:e8:bd:e4:6e:6d:f6:ce:aa:28:54:1f:8e: 78:14:5a:af:66:3f:da:56:ef:59:67:63:70:80:de:0b:e2:c5: 2b:57:2f:a3 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOTY2 QjU1OTA5MzI0MTgwQTg4QTQ1RTFGNjgzQ0Y0RDJFRDlCQ0E1MB4XDTI0MDQyOTEz Mjc0OVoXDTI1MDQyNjEwMDA1NVowMzExMC8GA1UEAxMoRjNDODBGNTA0MjhBQUEw RTE2MDBGODUyRUQ3RDgwQjUwMEVEM0RCOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKAi762fE8B/tg/toQ0vdkFMbwDUeLNt9a5q+LNpHkMdOO5l+aiC IvYvRcps1rsUoziKEAWe5MtZw+kd2UNK6pqXGe5px9hw5Yp+tK6dygLm4x6yh/uz gkpv6aXpWyadkxvXsuxGUkzoRtudfyTLFrgUesKuHHvqIIyQybNpGpmdGGbexTAI SMnuZnvrKcnLTm3pOatxniiKh2ydD9B5ThYStB2uNlpU7oFyHHNUOu9qp1vv4nve HSqY6ZdHwLe1WZ+aG0XFd2DH0l4jLecdABdjVqjwZ51ZDF4iGZM5IzXhePcfWgXP HGzI7dTY9CYTL3oxFAWfAwaN3IKpODmfnfECAwEAAaOCAewwggHoMB0GA1UdDgQW BBTzyA9QQoqqDhYA+FLtfYC1AO09uTAfBgNVHSMEGDAWgBTZZrVZCTJBgKiKReH2 g89NLtm8pTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MSVJVTi8y V2ExV1FreVFZQ29pa1hoOW9QUFRTN1p2S1UuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzJXYTFXUWt5UVlDb2lrWGg5b1BQVFM3WnZLVS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0xJUlVOLzg4Z1BVRUtLcWc0V0FQaFM3WDJB dFFEdFBiay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdQqcw DQYJKoZIhvcNAQELBQADggEBADu+wq70qnwC7JXL2wQbmFpvKxSpuchOLGkiZ2dq hbr9RkVX2YnCvwPvyaAg0wgVoe80/E2MpDi4JQoNeN8RTSDS0WicqcAPxTxYbsdq zAioq9gG5wBbE3YdtgThAJt9q4X0O+EYEYx4Gw3ZBlHIdy1Fz0koMm5hZDcBgfuB X/U4HLCvGyuqVAb6jhqgEnSmmSvYyam3xxVSu1awcq8fDxa9r6ZXXVLlpQaA0yZl p42heroNgeZF4K+B91HO5m6gy9ohY7gFITqnTgFP6gdMktrAHor1PPV+1yZDWcsI 2ui95G5t9s6qKFQfjngUWq9mP9pW71lnY3CA3gvixStXL6M= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:46 2024 by rpki-client on console-ams.rpki-client.org