$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/JnZB9UdIv6pveTdg13K2KjBR0S4.roa File: JnZB9UdIv6pveTdg13K2KjBR0S4.roa (raw, json) Hash identifier: W+X8++cBxPCRpfjy9e+RMt+HvrRQsqzrkq6RfYHVO/g= Subject key identifier: 26:76:41:F5:47:48:BF:AA:6F:79:37:60:D7:72:B6:2A:30:51:D1:2E Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Certificate serial: 1037 Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/JnZB9UdIv6pveTdg13K2KjBR0S4.roa Signing time: Fri 01 Sep 2023 09:44:20 +0000 ROA not before: Fri 01 Sep 2023 09:44:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131633 IP address blocks: 103.127.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 05:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4151 (0x1037) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Validity Not Before: Sep 1 09:44:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=267641F54748BFAA6F793760D772B62A3051D12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:b1:b1:84:c7:e2:60:41:65:6d:5e:a8:64: 34:d9:03:cd:05:7c:b0:41:b8:e4:45:c3:02:17:4e: 78:a3:95:ed:1c:ac:8f:7d:8b:b5:7e:d1:a4:ec:8f: d9:46:75:f5:f9:f9:ff:fb:e6:5f:d2:89:4c:13:a6: 52:49:91:4e:c9:22:10:93:25:b2:49:b1:01:62:f0: 31:6d:a9:4e:b6:b7:e6:16:cd:12:54:ab:8f:52:b2: f9:b3:81:72:8a:0a:89:4a:ca:77:84:05:28:37:82: c3:e4:d7:21:86:71:6a:72:ed:d5:86:3b:08:ef:67: d1:a4:1f:79:82:39:2f:bd:25:39:f3:c7:ed:71:29: 03:98:8c:21:e0:2f:7d:34:4d:b9:60:c2:55:07:eb: 1d:72:d6:3e:87:43:77:07:3a:d2:15:07:fb:44:13: d0:1f:5b:f7:ca:30:3c:91:cb:05:66:71:f6:cd:1c: 46:8e:ad:c6:3b:0e:db:2a:d4:31:58:fb:22:ab:31: 1e:10:44:15:93:24:fc:13:65:b1:09:a4:57:bd:75: 3f:69:b3:26:aa:7a:f0:9f:d8:b7:3a:63:2b:b5:10: 5c:15:c3:55:d9:2c:d1:24:c0:53:d8:07:3d:7a:e7: cf:e7:b9:4b:b6:5b:64:7d:c8:89:cf:52:2e:55:f0: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:76:41:F5:47:48:BF:AA:6F:79:37:60:D7:72:B6:2A:30:51:D1:2E X509v3 Authority Key Identifier: keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/JnZB9UdIv6pveTdg13K2KjBR0S4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.236.0/22 Signature Algorithm: sha256WithRSAEncryption ea:32:65:8b:31:c9:f6:20:f6:a7:af:3d:92:44:85:39:e9:1b: bf:24:e9:50:58:f7:36:4c:37:6e:ad:53:b6:c0:84:23:ed:56: 09:99:74:d0:44:c6:b9:6b:0f:ef:c0:95:62:f5:53:61:f2:94: 15:b2:69:1e:08:bd:af:1e:f2:f0:59:2a:b8:be:62:ef:57:c2: 35:d1:aa:94:22:03:0a:ea:5a:76:98:e9:4f:97:99:5b:66:e5: 06:48:80:e8:b2:96:16:92:d1:39:97:50:72:af:6a:5e:f9:17: 8b:78:16:6d:c6:1b:4a:48:3e:8a:88:1f:dc:f9:69:8e:87:e2: 1d:77:c7:6d:5d:77:51:7d:b6:00:b2:1f:7f:39:b0:6e:62:79: 3a:36:9d:f5:b8:f7:0d:76:50:7b:77:92:27:d5:ec:97:bc:5f: b5:5a:25:6c:19:73:7c:de:be:17:d4:86:40:48:0b:0c:f1:57: 07:75:24:c4:14:91:e8:30:e6:47:b1:96:d3:63:2d:a8:b1:81: 13:08:17:b8:c0:b1:73:3b:46:c4:82:f0:c3:51:7b:7c:ff:76: 46:93:0c:da:ab:54:d5:1a:46:24:81:b7:12:d2:da:67:e3:c6: 64:fe:8b:cd:c0:ba:4a:30:93:50:36:b1:85:c7:af:94:ad:6b: fc:52:cc:84 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yMzA5MDEw OTQ0MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI2NzY0MUY1NDc0OEJG QUE2Rjc5Mzc2MEQ3NzJCNjJBMzA1MUQxMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuIbGxhMfiYEFlbV6oZDTZA80FfLBBuORFwwIXTnijle0crI99 i7V+0aTsj9lGdfX5+f/75l/SiUwTplJJkU7JIhCTJbJJsQFi8DFtqU62t+YWzRJU q49SsvmzgXKKColKyneEBSg3gsPk1yGGcWpy7dWGOwjvZ9GkH3mCOS+9JTnzx+1x KQOYjCHgL300TblgwlUH6x1y1j6HQ3cHOtIVB/tEE9AfW/fKMDyRywVmcfbNHEaO rcY7Dtsq1DFY+yKrMR4QRBWTJPwTZbEJpFe9dT9psyaqevCf2Lc6Yyu1EFwVw1XZ LNEkwFPYBz1658/nuUu2W2R9yInPUi5V8EyTAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUJnZB9UdIv6pveTdg13K2KjBR0S4wHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7 k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9KblpCOVVkSXY2cHZl VGRnMTNLMktqQlIwUzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ3/sMA0GCSqGSIb3DQEBCwUAA4IBAQDqMmWLMcn2IPanrz2SRIU56Ru/JOlQ WPc2TDdurVO2wIQj7VYJmXTQRMa5aw/vwJVi9VNh8pQVsmkeCL2vHvLwWSq4vmLv V8I10aqUIgMK6lp2mOlPl5lbZuUGSIDospYWktE5l1Byr2pe+ReLeBZtxhtKSD6K iB/c+WmOh+Idd8dtXXdRfbYAsh9/ObBuYnk6Np31uPcNdlB7d5In1eyXvF+1WiVs GXN83r4X1IZASAsM8VcHdSTEFJHoMOZHsZbTYy2osYETCBe4wLFzO0bEgvDDUXt8 /3ZGkwzaq1TVGkYkgbcS0tpn48Zk/ovNwLpKMJNQNrGFx6+UrWv8UsyE -----END CERTIFICATE-----Generated at Wed May 1 12:38:20 2024 by rpki-client on console-ams.rpki-client.org