$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/i4KUENoEbFD8c3tDMNYOEAReq3w.roa File: i4KUENoEbFD8c3tDMNYOEAReq3w.roa (raw, json) Hash identifier: eIc5cVDCAMLXGZWSfGBuAjuwUTOmwJ4E52LAhLL5Z/o= Subject key identifier: 8B:82:94:10:DA:04:6C:50:FC:73:7B:43:30:D6:0E:10:04:5E:AB:7C Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0B36 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/i4KUENoEbFD8c3tDMNYOEAReq3w.roa Signing time: Fri 01 Sep 2023 09:34:45 +0000 ROA not before: Fri 01 Sep 2023 09:34:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17420 IP address blocks: 211.73.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Sep 1 09:34:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8B829410DA046C50FC737B4330D60E10045EAB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:d2:9f:45:80:8f:3c:59:86:04:e4:18:16: 67:15:da:7d:b8:46:7d:ed:33:93:69:ad:6e:d3:22: e2:62:9c:9c:67:81:97:41:8f:73:fe:64:3b:6d:0b: e9:e2:a4:c6:0c:9b:73:97:c3:12:01:7f:52:1b:d7: eb:42:99:c9:57:7d:0c:4a:88:df:2b:12:86:f9:de: cc:cd:83:1c:94:54:37:67:b2:e2:56:08:9d:80:7a: 43:6c:55:db:7d:0a:e4:5a:cf:47:81:da:41:44:ac: 3e:9d:d1:c8:dc:1b:90:96:fa:cc:f3:3e:d7:51:ee: 7c:63:9f:c3:78:34:03:3f:79:e3:85:8c:b5:1c:a0: 21:4b:78:f5:31:10:b6:a9:7e:29:49:30:a6:ad:2c: c6:4d:19:99:08:ad:49:21:69:28:ea:bb:48:11:ed: cb:d0:60:b2:a6:6a:25:ae:b3:d7:2c:ed:8c:0f:f6: 5d:68:af:1c:8d:f6:36:a8:48:fa:41:a4:95:85:74: 50:b0:4f:9f:3a:ce:bb:cd:0b:da:59:57:a9:e8:bc: f0:0f:5c:6b:23:5e:06:db:00:8b:e4:94:b7:62:dc: 9c:d3:c7:cb:36:4e:58:3d:04:9e:95:b0:42:e3:b9: 39:4b:6c:0c:6e:3e:aa:30:87:01:d3:46:1d:9b:98: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:82:94:10:DA:04:6C:50:FC:73:7B:43:30:D6:0E:10:04:5E:AB:7C X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/i4KUENoEbFD8c3tDMNYOEAReq3w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.73.192.0/19 Signature Algorithm: sha256WithRSAEncryption 5a:95:e9:84:b5:46:8a:6b:0f:b9:d9:65:88:df:4a:4a:e9:3c: ea:34:ba:6e:c4:79:18:7d:86:62:95:c4:09:bb:81:22:e9:ca: f9:5a:44:b3:e2:58:dc:2e:13:49:b5:8a:c4:0c:c7:1c:39:c6: ca:9f:91:ce:d0:61:ba:c6:51:7e:a5:8e:9e:eb:a8:ba:02:34: d6:fe:74:5b:4b:7a:0c:cb:4c:95:76:03:73:66:a6:bc:2d:9a: e9:45:8f:d1:8d:15:6d:f7:27:b0:ec:c0:08:8a:9a:73:7b:1a: 11:7d:84:86:18:0d:32:5a:8e:88:71:a6:fc:89:1b:43:b3:ab: 85:f5:be:79:78:ec:d9:3f:8f:d3:f6:86:81:19:72:dc:1a:e0: 83:9f:a6:eb:a9:62:9c:3d:19:53:e8:5d:9a:b5:eb:15:d7:a3: f6:e6:44:a8:27:dc:d4:7c:eb:0e:66:a5:0a:be:8b:05:24:0c: 97:72:ab:bb:ad:51:a5:10:28:87:63:96:57:4c:3c:d6:4b:fc: 8b:e7:97:09:82:99:e2:77:30:43:55:13:52:ae:52:a8:5c:1e: 4a:e4:7c:5d:cd:41:04:d8:7e:39:70:d2:19:7d:48:3d:df:40: b5:51:57:c7:83:2c:4b:b2:d0:e5:27:a1:94:84:22:7b:15:8a: 87:5e:fd:29 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yMzA5MDEw OTM0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhCODI5NDEwREEwNDZD NTBGQzczN0I0MzMwRDYwRTEwMDQ1RUFCN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdHtKfRYCPPFmGBOQYFmcV2n24Rn3tM5NprW7TIuJinJxngZdB j3P+ZDttC+nipMYMm3OXwxIBf1Ib1+tCmclXfQxKiN8rEob53szNgxyUVDdnsuJW CJ2AekNsVdt9CuRaz0eB2kFErD6d0cjcG5CW+szzPtdR7nxjn8N4NAM/eeOFjLUc oCFLePUxELapfilJMKatLMZNGZkIrUkhaSjqu0gR7cvQYLKmaiWus9cs7YwP9l1o rxyN9jaoSPpBpJWFdFCwT586zrvNC9pZV6novPAPXGsjXgbbAIvklLdi3JzTx8s2 Tlg9BJ6VsELjuTlLbAxuPqowhwHTRh2bmGW3AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUi4KUENoEbFD8c3tDMNYOEAReq3wwHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9pNEtVRU5vRWJGRDhjM3RETU5Z T0VBUmVxM3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF00nA MA0GCSqGSIb3DQEBCwUAA4IBAQBalemEtUaKaw+52WWI30pK6TzqNLpuxHkYfYZi lcQJu4Ei6cr5WkSz4ljcLhNJtYrEDMccOcbKn5HO0GG6xlF+pY6e66i6AjTW/nRb S3oMy0yVdgNzZqa8LZrpRY/RjRVt9yew7MAIippzexoRfYSGGA0yWo6Icab8iRtD s6uF9b55eOzZP4/T9oaBGXLcGuCDn6brqWKcPRlT6F2atesV16P25kSoJ9zUfOsO ZqUKvosFJAyXcqu7rVGlECiHY5ZXTDzWS/yL55cJgpnidzBDVRNSrlKoXB5K5Hxd zUEE2H45cNIZfUg930C1UVfHgyxLstDlJ6GUhCJ7FYqHXv0p -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:42 2024 by rpki-client on console-fra.rpki-client.org