$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/Bwi-R5FrYb4DnLSgztDCK_25t8g.roa File: Bwi-R5FrYb4DnLSgztDCK_25t8g.roa (raw, json) Hash identifier: qxtSylQfp+QgaKPzyLljdht3xeK5UGkunIW4C8o0XzQ= Subject key identifier: 07:08:BE:47:91:6B:61:BE:03:9C:B4:A0:CE:D0:C2:2B:FD:B9:B7:C8 Certificate issuer: /CN=DDA2DA33DF9088B68EDC6F74EA8B1C0EEE2E26C1 Certificate serial: F1 Authority key identifier: DD:A2:DA:33:DF:90:88:B6:8E:DC:6F:74:EA:8B:1C:0E:EE:2E:26:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/Bwi-R5FrYb4DnLSgztDCK_25t8g.roa Signing time: Fri 20 Oct 2023 01:35:17 +0000 ROA not before: Fri 20 Oct 2023 01:35:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 63902 IP address blocks: 103.116.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA2DA33DF9088B68EDC6F74EA8B1C0EEE2E26C1 Validity Not Before: Oct 20 01:35:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0708BE47916B61BE039CB4A0CED0C22BFDB9B7C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:b6:61:7c:e5:34:9e:66:be:17:37:83:de: fa:de:d9:82:e3:fc:25:a3:67:e6:ab:cb:b5:a5:e0: 33:74:f7:bc:89:17:0d:c8:7f:51:02:a1:e2:fe:db: 85:0c:2a:ef:77:c2:7f:e0:ed:50:c4:02:d7:3b:da: d4:58:00:8b:af:08:e0:2e:8a:d9:61:b4:cc:44:df: 6a:1a:b3:15:8f:fa:aa:19:c9:f4:c6:91:6c:14:68: 1b:4a:28:8b:23:16:5f:a0:7b:01:10:5c:cb:a4:e8: 3c:56:0c:34:ac:71:6e:41:a4:39:ee:cf:85:6f:ce: 97:d6:6c:27:46:5b:12:27:25:ef:c0:84:32:3a:58: 67:3c:5c:6f:50:ee:61:20:dd:5b:bc:0c:49:30:af: 32:79:1e:25:ca:47:2e:9c:c3:4e:92:4e:74:1d:0d: 8e:ea:9e:f7:99:19:32:10:b3:0d:5e:98:1b:9e:6c: c1:1b:ec:13:74:6d:f6:49:2a:5f:74:52:bd:7e:98: 58:8d:8e:87:d3:dd:8d:40:27:b5:6b:89:81:82:a5: 9a:29:92:c5:4f:16:4b:89:a4:89:14:6c:e7:8c:56: b7:5e:d8:65:e9:2a:2b:92:1c:17:f4:91:b3:d4:4a: 10:a1:b0:09:c3:6c:b9:6f:aa:60:e4:54:fd:c9:0b: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:08:BE:47:91:6B:61:BE:03:9C:B4:A0:CE:D0:C2:2B:FD:B9:B7:C8 X509v3 Authority Key Identifier: keyid:DD:A2:DA:33:DF:90:88:B6:8E:DC:6F:74:EA:8B:1C:0E:EE:2E:26:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/3aLaM9-QiLaO3G906oscDu4uJsE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3aLaM9-QiLaO3G906oscDu4uJsE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINETEL/Bwi-R5FrYb4DnLSgztDCK_25t8g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.14.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:36:22:d5:56:65:74:40:99:4b:13:26:13:6a:28:85:ea:2a: f0:70:06:9c:76:9f:4a:84:3d:71:44:2f:99:22:f9:f7:86:44: d7:ec:0c:cc:03:dd:3c:24:28:40:33:36:24:d4:2a:82:e1:7d: f1:91:63:8a:47:d1:36:c1:a3:42:71:f4:88:bb:40:44:b1:8f: 22:1a:d6:fb:e5:58:9c:42:2d:fc:9f:90:ea:2f:68:01:4c:6e: 91:5f:d0:2e:74:ae:59:af:f2:37:37:69:21:1d:c9:a0:22:05: b4:6d:3b:03:52:50:47:be:5f:1f:a2:fd:1d:ba:10:cd:ba:ff: 09:99:2f:69:72:ca:dd:d3:d6:b1:ef:cf:fd:02:3d:d2:dd:f7: 3f:70:18:c2:2f:a8:38:67:87:97:7e:38:23:36:1d:ee:92:57: ce:b8:41:6c:0f:da:01:b1:a3:4f:49:7f:ed:79:9f:cf:2d:c4: 67:16:6b:c0:b5:41:aa:ad:fa:84:3b:5c:1f:bd:ba:fc:23:46: 7b:b6:f4:34:75:42:79:95:18:86:c7:96:7b:4a:88:f8:9d:14: 75:f7:40:df:18:9f:92:bf:dd:94:16:64:81:1c:1f:00:1c:b7: 79:19:65:61:9a:36:72:49:13:b0:c8:3d:85:3d:74:18:25:12: e4:a5:58:22 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRERB MkRBMzNERjkwODhCNjhFREM2Rjc0RUE4QjFDMEVFRTJFMjZDMTAeFw0yMzEwMjAw MTM1MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA3MDhCRTQ3OTE2QjYx QkUwMzlDQjRBMENFRDBDMjJCRkRCOUI3QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtQbZhfOU0nma+FzeD3vre2YLj/CWjZ+ary7Wl4DN097yJFw3I f1ECoeL+24UMKu93wn/g7VDEAtc72tRYAIuvCOAuitlhtMxE32oasxWP+qoZyfTG kWwUaBtKKIsjFl+gewEQXMuk6DxWDDSscW5BpDnuz4VvzpfWbCdGWxInJe/AhDI6 WGc8XG9Q7mEg3Vu8DEkwrzJ5HiXKRy6cw06STnQdDY7qnveZGTIQsw1emBuebMEb 7BN0bfZJKl90Ur1+mFiNjofT3Y1AJ7VriYGCpZopksVPFkuJpIkUbOeMVrde2GXp KiuSHBf0kbPUShChsAnDbLlvqmDkVP3JCx5lAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUBwi+R5FrYb4DnLSgztDCK/25t8gwHwYDVR0jBBgwFoAU3aLaM9+QiLaO3G90 6oscDu4uJsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkVU RUwvM2FMYU05LVFpTGFPM0c5MDZvc2NEdTR1SnNFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8zYUxhTTktUWlMYU8zRzkwNm9zY0R1NHVKc0UuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSElORVRFTC9Cd2ktUjVGclliNERu TFNnenREQ0tfMjV0OGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3QOMA0GCSqGSIb3DQEBCwUAA4IBAQArNiLVVmV0QJlLEyYTaiiF6irwcAac dp9KhD1xRC+ZIvn3hkTX7AzMA908JChAMzYk1CqC4X3xkWOKR9E2waNCcfSIu0BE sY8iGtb75VicQi38n5DqL2gBTG6RX9AudK5Zr/I3N2khHcmgIgW0bTsDUlBHvl8f ov0duhDNuv8JmS9pcsrd09ax78/9Aj3S3fc/cBjCL6g4Z4eXfjgjNh3uklfOuEFs D9oBsaNPSX/teZ/PLcRnFmvAtUGqrfqEO1wfvbr8I0Z7tvQ0dUJ5lRiGx5Z7Soj4 nRR190DfGJ+Sv92UFmSBHB8AHLd5GWVhmjZySROwyD2FPXQYJRLkpVgi -----END CERTIFICATE-----Generated at Sat Jun 1 10:22:29 2024 by rpki-client on console-ams.rpki-client.org