$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/Z134V77ziNX1USE4fc_7iQfFMSI.roa File: Z134V77ziNX1USE4fc_7iQfFMSI.roa (raw, json) Hash identifier: HFH8Z0vsMLN3TsazKTXPhuff9E6NaSEpNUIqJPeh9AQ= Subject key identifier: 67:5D:F8:57:BE:F3:88:D5:F5:51:21:38:7D:CF:FB:89:07:C5:31:22 Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Certificate serial: 0B12 Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/Z134V77ziNX1USE4fc_7iQfFMSI.roa Signing time: Fri 01 Sep 2023 09:35:53 +0000 ROA not before: Fri 01 Sep 2023 09:35:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17710 IP address blocks: 150.107.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Validity Not Before: Sep 1 09:35:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=675DF857BEF388D5F55121387DCFFB8907C53122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:a9:d9:c5:94:cb:78:be:70:26:1b:f3:bd: 00:50:7f:fc:f1:68:a0:4e:ce:62:22:ef:81:04:36: 11:cd:c3:66:9c:f0:61:b3:c6:53:b1:d1:84:80:c1: 09:fa:78:98:c1:00:c5:2c:fb:20:0a:a8:3f:e7:45: 31:34:fb:05:a6:a2:e8:d1:18:3c:f7:ab:08:ac:3f: 6e:2a:ad:36:4e:99:69:ef:1f:48:60:aa:0c:f9:d6: 7a:44:d3:db:95:3f:8f:d9:e1:88:1e:7f:14:9d:91: 67:3d:b3:91:a5:44:6e:50:ea:bb:c6:68:1c:ef:97: 36:65:c0:7e:00:fd:0e:cf:25:c0:d6:0d:2b:4f:36: 2d:03:04:8a:a0:12:37:bd:0d:5d:03:2f:dc:78:b8: 20:11:66:88:69:c6:ec:00:0d:de:6d:c6:1d:6c:2c: 41:d5:79:91:68:b2:d9:47:7a:81:cc:59:48:46:6a: 78:ca:8a:5a:83:da:5e:4b:1b:68:89:f0:69:80:fc: 4d:b5:1a:47:00:c4:b5:bf:12:c4:ea:68:97:de:8f: 9b:6e:2d:61:45:80:ab:bd:0d:bf:e4:e3:42:a9:33: c1:58:80:3e:a0:41:5d:4d:c5:10:3a:81:ba:1a:32: 46:4a:d7:4f:c5:ec:f7:72:96:a7:2a:41:f9:fb:02: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5D:F8:57:BE:F3:88:D5:F5:51:21:38:7D:CF:FB:89:07:C5:31:22 X509v3 Authority Key Identifier: keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/Z134V77ziNX1USE4fc_7iQfFMSI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.107.64.0/22 Signature Algorithm: sha256WithRSAEncryption 86:04:bb:fa:61:e3:3a:de:7e:a1:e6:00:58:a8:b1:17:c3:9b: fa:0a:96:88:44:67:d0:3b:81:71:71:08:97:e9:0e:0e:ec:c2: b1:4f:8e:3a:36:68:3e:b5:81:15:15:bd:5d:7d:6b:33:57:ce: 11:c8:0f:aa:76:28:af:ae:64:8d:8a:5d:55:e9:d2:e2:9e:94: 85:09:a2:37:13:08:b6:43:ba:30:5a:c2:6a:38:e9:41:40:20: 86:e6:0d:fc:95:d5:8c:58:ab:d6:c3:85:49:a9:c1:3a:4f:57: 5e:f1:6d:cd:60:ce:ad:8f:20:36:78:1e:e9:40:32:58:1f:7b: 30:b4:ef:ce:4d:e8:0e:a7:57:cf:8f:7f:8c:cd:7a:2b:a9:1a: 6c:c4:bb:dd:a1:7c:c0:a6:77:37:0a:0d:a4:4d:dc:86:0b:46: b0:ef:f2:1a:15:bd:b4:eb:5e:b6:2a:10:85:a0:ac:ec:7b:61: 05:09:87:e9:1e:24:f3:aa:6f:d5:de:aa:63:15:b4:a0:70:08: 79:0a:87:16:ad:9b:71:19:11:58:e1:9f:d1:d5:be:d4:44:c8: ba:1a:c2:53:24:75:07:1a:1e:4a:64:6a:4a:52:b8:38:5d:cb: 8b:67:9a:92:bf:e2:15:1f:2d:b5:d7:6d:c2:e7:a1:08:f8:b8: d0:28:86:75 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3 OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yMzA5MDEw OTM1NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY3NURGODU3QkVGMzg4 RDVGNTUxMjEzODdEQ0ZGQjg5MDdDNTMxMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSFKnZxZTLeL5wJhvzvQBQf/zxaKBOzmIi74EENhHNw2ac8GGz xlOx0YSAwQn6eJjBAMUs+yAKqD/nRTE0+wWmoujRGDz3qwisP24qrTZOmWnvH0hg qgz51npE09uVP4/Z4YgefxSdkWc9s5GlRG5Q6rvGaBzvlzZlwH4A/Q7PJcDWDStP Ni0DBIqgEje9DV0DL9x4uCARZohpxuwADd5txh1sLEHVeZFostlHeoHMWUhGanjK ilqD2l5LG2iJ8GmA/E21GkcAxLW/EsTqaJfej5tuLWFFgKu9Db/k40KpM8FYgD6g QV1NxRA6gboaMkZK10/F7PdylqcqQfn7Ah77AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUZ134V77ziNX1USE4fc/7iQfFMSIwHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVUL1oxMzRWNzd6aU5YMVVTRTRm Y183aVFmRk1TSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKW a0AwDQYJKoZIhvcNAQELBQADggEBAIYEu/ph4zrefqHmAFiosRfDm/oKlohEZ9A7 gXFxCJfpDg7swrFPjjo2aD61gRUVvV19azNXzhHID6p2KK+uZI2KXVXp0uKelIUJ ojcTCLZDujBawmo46UFAIIbmDfyV1YxYq9bDhUmpwTpPV17xbc1gzq2PIDZ4HulA MlgfezC0785N6A6nV8+Pf4zNeiupGmzEu92hfMCmdzcKDaRN3IYLRrDv8hoVvbTr XrYqEIWgrOx7YQUJh+keJPOqb9XeqmMVtKBwCHkKhxatm3EZEVjhn9HVvtREyLoa wlMkdQcaHkpkakpSuDhdy4tnmpK/4hUfLbXXbcLnoQj4uNAohnU= -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:35 2024 by rpki-client on console-ams.rpki-client.org