$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/eYmaamoQa5bYuDKujJCZaNSrt78.roa File: eYmaamoQa5bYuDKujJCZaNSrt78.roa (raw, json) Hash identifier: gbqxnEUFmbvjje2pLHiB3Myaa3M1K2q/jFiviJHtjyY= Subject key identifier: 79:89:9A:6A:6A:10:6B:96:D8:B8:32:AE:8C:90:99:68:D4:AB:B7:BF Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Certificate serial: F1 Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/eYmaamoQa5bYuDKujJCZaNSrt78.roa Signing time: Wed 27 Mar 2024 15:28:58 +0000 ROA not before: Wed 27 Mar 2024 15:28:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 8075 IP address blocks: 103.131.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Validity Not Before: Mar 27 15:28:58 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=79899A6A6A106B96D8B832AE8C909968D4ABB7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6e:8e:82:56:17:82:f6:26:cf:7a:d2:bc:5f: 05:b9:96:f9:bf:35:93:62:89:ce:9a:2c:24:c4:4f: 54:aa:f4:37:63:ae:18:4b:a9:ba:d8:26:a5:92:49: d4:81:ac:75:88:40:74:47:e4:f4:8d:70:f3:0d:c8: 43:03:82:3b:8c:1b:d5:da:d1:82:49:35:ab:b3:a2: a9:fa:2a:8e:27:ec:f2:e4:5c:df:dd:52:d2:8a:a8: 9e:2c:41:97:4d:b0:32:00:f1:9f:5f:72:54:01:1b: 50:15:64:61:bf:71:9e:58:c6:6d:af:39:0c:4a:08: 5b:a3:f4:8c:f9:70:0f:61:76:fa:2d:02:9b:24:9a: 64:06:02:97:72:b1:c8:ec:cc:68:d7:30:85:e2:36: bf:07:81:e7:94:dc:8c:f2:34:25:64:35:32:b5:1a: 94:3a:aa:f2:bb:3d:d0:96:56:0d:0a:a5:6f:d3:44: 9f:c1:52:a9:2f:54:71:d4:32:c2:f1:74:73:c4:28: 04:34:39:eb:6a:69:89:d3:ad:ff:df:45:ac:ec:d4: 25:4d:df:80:d1:46:bc:60:db:15:38:32:48:12:34: ff:3b:de:35:18:f2:88:d0:2b:eb:09:17:dc:84:55: 66:b7:6c:42:1a:e8:83:28:d4:2b:e7:22:1c:7f:9f: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:89:9A:6A:6A:10:6B:96:D8:B8:32:AE:8C:90:99:68:D4:AB:B7:BF X509v3 Authority Key Identifier: keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/eYmaamoQa5bYuDKujJCZaNSrt78.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.131.149.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:3d:3b:31:42:ae:e0:0a:31:0f:6d:13:ed:2d:f3:c0:c8:1d: d1:e9:57:1a:c7:46:d4:51:99:3a:14:7a:1c:5d:6a:e6:56:d0: 17:a8:67:53:74:0e:d8:6b:0c:09:cc:2c:4d:d7:e4:f1:dd:30: c9:78:17:45:8d:0e:c1:37:56:4a:ce:a8:5a:86:95:eb:7b:ca: 8b:4f:6e:f4:73:cf:eb:d0:6e:dd:ba:85:8e:2e:62:6a:1d:ff: f5:44:ac:99:7d:6a:a7:fc:09:b2:f7:ad:f2:28:20:31:e8:a9: 19:5d:5f:89:1a:9d:0d:fb:16:5c:c5:94:a1:10:61:4e:af:b2: 24:e1:d4:07:8e:4c:2b:de:f7:19:82:02:34:fa:49:c4:5a:fd: e6:f8:b6:bf:1e:e2:cb:ee:85:42:f3:d5:84:f4:e5:5d:3f:2f: 45:34:5d:84:26:56:d7:7f:df:b3:72:25:0a:dd:22:aa:ef:bf: 10:8e:bd:30:38:78:80:c0:b2:ec:74:92:6d:e9:ae:f4:bc:95: 75:43:d7:6e:2c:cc:6a:8f:63:17:c8:a8:7a:52:a5:fe:f7:d4: 1f:b7:22:a3:da:17:96:f0:03:8f:cb:a6:6a:64:47:f8:7f:c5: 47:eb:bb:51:66:53:61:d8:9a:2d:ed:4f:9a:c5:6c:8d:ca:47: 88:fb:62:20 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVB NDRCNUUwNzg4NjVCQUVGOTM1MTM2OUQ5NjFENkJBMjU1NkQ0NzAeFw0yNDAzMjcx NTI4NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc5ODk5QTZBNkExMDZC OTZEOEI4MzJBRThDOTA5OTY4RDRBQkI3QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcbo6CVheC9ibPetK8XwW5lvm/NZNiic6aLCTET1Sq9DdjrhhL qbrYJqWSSdSBrHWIQHRH5PSNcPMNyEMDgjuMG9Xa0YJJNauzoqn6Ko4n7PLkXN/d UtKKqJ4sQZdNsDIA8Z9fclQBG1AVZGG/cZ5Yxm2vOQxKCFuj9Iz5cA9hdvotApsk mmQGApdyscjszGjXMIXiNr8HgeeU3IzyNCVkNTK1GpQ6qvK7PdCWVg0KpW/TRJ/B UqkvVHHUMsLxdHPEKAQ0OetqaYnTrf/fRazs1CVN34DRRrxg2xU4MkgSNP873jUY 8ojQK+sJF9yEVWa3bEIa6IMo1CvnIhx/n0yVAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUeYmaamoQa5bYuDKujJCZaNSrt78wHwYDVR0jBBgwFoAU9aRLXgeIZbrvk1E2 nZYda6JVbUcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVH UkVFLzlhUkxYZ2VJWmJydmsxRTJuWllkYTZKVmJVYy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvOWFSTFhnZUlaYnJ2azFFMm5aWWRhNkpWYlVjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVHUkVFL2VZbWFhbW9RYTVi WXVES3VqSkNaYU5TcnQ3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABng5UwDQYJKoZIhvcNAQELBQADggEBAC89OzFCruAKMQ9tE+0t88DIHdHp VxrHRtRRmToUehxdauZW0BeoZ1N0DthrDAnMLE3X5PHdMMl4F0WNDsE3VkrOqFqG let7yotPbvRzz+vQbt26hY4uYmod//VErJl9aqf8CbL3rfIoIDHoqRldX4kanQ37 FlzFlKEQYU6vsiTh1AeOTCve9xmCAjT6ScRa/eb4tr8e4svuhULz1YT05V0/L0U0 XYQmVtd/37NyJQrdIqrvvxCOvTA4eIDAsux0km3prvS8lXVD124szGqPYxfIqHpS pf731B+3IqPaF5bwA4/LpmpkR/h/xUfru1FmU2HYmi3tT5rFbI3KR4j7YiA= -----END CERTIFICATE-----Generated at Mon May 20 08:32:43 2024 by rpki-client on console-fra.rpki-client.org