$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/1yve6mQhTYcW5OtrvnGHw-v8nEA.roa File: 1yve6mQhTYcW5OtrvnGHw-v8nEA.roa (raw, json) Hash identifier: i5LG/yFgQPU/UAM0mWy8ObJXU5AHUd1aliSqpzw6Bv4= Subject key identifier: D7:2B:DE:EA:64:21:4D:87:16:E4:EB:6B:BE:71:87:C3:EB:FC:9C:40 Certificate issuer: /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439 Certificate serial: 0F4D Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/1yve6mQhTYcW5OtrvnGHw-v8nEA.roa Signing time: Mon 26 Aug 2024 05:24:13 +0000 ROA not before: Mon 26 Aug 2024 05:24:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.137.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3917 (0xf4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439 Validity Not Before: Aug 26 05:24:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D72BDEEA64214D8716E4EB6BBE7187C3EBFC9C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:e8:d4:9c:a4:08:28:1e:4f:f4:65:61:8d: c2:2d:45:55:a4:14:0b:cf:f7:1b:78:15:54:37:db: e5:b4:f3:dc:d0:52:84:e6:59:53:6d:f3:66:20:28: bd:51:48:27:43:0c:de:49:ab:0c:c7:33:64:94:0f: 8d:f9:55:1f:e9:63:a2:5b:52:0c:7a:b5:18:fb:9a: 63:7b:db:b6:27:f3:5d:df:52:c8:54:2c:e7:d2:99: 0b:87:cb:86:bf:11:62:a4:e6:61:52:ae:db:dd:58: cd:cb:f4:23:60:ff:db:53:9e:13:5c:ed:2b:86:17: df:ef:ed:33:aa:34:1a:93:00:40:c6:a9:c9:20:0e: 60:39:e3:7b:16:81:92:ca:f6:a4:b1:60:9c:d9:c6: 92:7e:80:c9:d8:71:2f:96:6c:39:58:3f:27:ad:27: 60:eb:d9:4e:06:56:35:c0:36:87:b3:d8:5f:35:6c: 66:44:60:43:6c:d5:4b:3d:98:08:f7:b6:56:2b:71: 86:23:64:ee:d3:59:2e:f7:bc:47:0c:77:9c:a9:55: a0:9a:3a:ea:1a:6e:b1:84:d1:62:12:b1:71:81:a9: 39:c6:53:0d:18:21:6c:81:be:ab:de:31:e4:6e:d8: 14:d0:d9:55:46:ff:b6:cc:c4:a0:99:74:44:7a:7e: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2B:DE:EA:64:21:4D:87:16:E4:EB:6B:BE:71:87:C3:EB:FC:9C:40 X509v3 Authority Key Identifier: keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/1yve6mQhTYcW5OtrvnGHw-v8nEA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.62.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:1b:67:b9:37:5e:d6:88:a5:86:2c:b0:bd:b0:32:13:82:cc: f5:6b:be:ec:a6:41:e5:38:26:28:45:56:21:39:b2:79:5a:2a: 56:1e:cf:f8:01:03:3e:3f:5a:a9:c3:c7:26:ee:fc:25:2b:bc: f0:34:94:65:f4:50:c2:91:64:88:e5:b5:cd:d6:65:66:0f:ca: 7b:e6:84:39:cb:1b:a3:32:bd:e7:65:d8:ee:5a:86:85:f6:84: 2c:0d:a4:3a:e6:1b:38:c4:76:1c:4b:8f:ac:1e:62:95:06:06: 98:7b:b8:90:76:e0:f6:b6:9a:e7:ab:10:7f:6c:dc:cd:88:fd: e0:99:20:12:ee:cc:d9:e5:29:e5:1d:00:8c:8c:9d:94:6a:d0: 22:85:09:04:e3:f1:c5:51:9c:4b:a5:40:20:28:31:44:9c:7d: bf:8c:fc:c5:7e:e6:18:12:50:86:30:dd:9f:85:96:55:3e:71: ce:f6:1f:f7:18:a0:62:81:74:11:bd:e2:ae:db:4a:f4:5a:df: d4:c4:f9:e5:23:be:fe:74:4f:5c:c6:66:6c:17:fc:19:de:c1: a0:90:57:fc:cd:83:51:81:dd:f3:a4:c0:57:6a:01:bb:7e:48: b9:2d:00:b5:e6:26:eb:81:01:7b:a0:ef:eb:70:a7:e8:fa:03: b3:00:0c:95 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzE0 RkFDRkQ0NUMyQzAyNzY4RTgyNzJGNEZCODNGQjJFREFGNzQzOTAeFw0yNDA4MjYw NTI0MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ3MkJERUVBNjQyMTRE ODcxNkU0RUI2QkJFNzE4N0MzRUJGQzlDNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEUOjUnKQIKB5P9GVhjcItRVWkFAvP9xt4FVQ32+W089zQUoTm WVNt82YgKL1RSCdDDN5JqwzHM2SUD435VR/pY6JbUgx6tRj7mmN727Yn813fUshU LOfSmQuHy4a/EWKk5mFSrtvdWM3L9CNg/9tTnhNc7SuGF9/v7TOqNBqTAEDGqckg DmA543sWgZLK9qSxYJzZxpJ+gMnYcS+WbDlYPyetJ2Dr2U4GVjXANoez2F81bGZE YENs1Us9mAj3tlYrcYYjZO7TWS73vEcMd5ypVaCaOuoabrGE0WISsXGBqTnGUw0Y IWyBvqveMeRu2BTQ2VVG/7bMxKCZdER6fhpzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU1yve6mQhTYcW5OtrvnGHw+v8nEAwHwYDVR0jBBgwFoAUwU+s/UXCwCdo6Ccv T7g/su2vdDkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL3dV LXNfVVhDd0NkbzZDY3ZUN2dfc3UydmREay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev d1Utc19VWEN3Q2RvNkNjdlQ3Z19zdTJ2ZERrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTLzF5dmU2bVFoVFljVzVPdHJ2bkdIdy12 OG5FQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniT4wDQYJ KoZIhvcNAQELBQADggEBAF8bZ7k3XtaIpYYssL2wMhOCzPVrvuymQeU4JihFViE5 snlaKlYez/gBAz4/WqnDxybu/CUrvPA0lGX0UMKRZIjltc3WZWYPynvmhDnLG6My vedl2O5ahoX2hCwNpDrmGzjEdhxLj6weYpUGBph7uJB24Pa2muerEH9s3M2I/eCZ IBLuzNnlKeUdAIyMnZRq0CKFCQTj8cVRnEulQCAoMUScfb+M/MV+5hgSUIYw3Z+F llU+cc72H/cYoGKBdBG94q7bSvRa39TE+eUjvv50T1zGZmwX/BnewaCQV/zNg1GB 3fOkwFdqAbt+SLktALXmJuuBAXug7+twp+j6A7MADJU= -----END CERTIFICATE-----Generated at Fri Sep 20 08:12:14 2024 by rpki-client on console-fra.rpki-client.org