$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Y78RTkpqE4ts782leGuHv0GROow.roa File: Y78RTkpqE4ts782leGuHv0GROow.roa (raw, json) Hash identifier: nEMd9s1R9QUXwf1SZyAD1SOQEbTlQNbnie1u7GX2XKs= Subject key identifier: 63:BF:11:4E:4A:6A:13:8B:6C:EF:CD:A5:78:6B:87:BF:41:91:3A:8C Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0BBA Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Y78RTkpqE4ts782leGuHv0GROow.roa Signing time: Fri 01 Sep 2023 09:45:01 +0000 ROA not before: Fri 01 Sep 2023 09:45:01 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 103.234.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Sep 1 09:45:01 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=63BF114E4A6A138B6CEFCDA5786B87BF41913A8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:a6:64:81:2e:06:4e:ac:e0:ff:87:c0:06: ad:a0:fa:06:02:01:c7:b1:3d:a3:33:0d:39:78:8e: 42:88:15:ce:ed:48:7d:57:be:ba:76:6b:74:f4:9f: 00:81:db:f4:d5:2f:b3:e5:b6:a6:7c:82:0d:72:61: ee:5e:a0:ad:33:59:f9:3f:87:a6:02:dc:7f:3f:3e: dc:b8:37:38:4a:af:ef:92:8e:77:97:f5:ad:69:ae: 4a:b8:b1:60:56:55:99:0f:e2:92:f2:38:6a:2b:b1: 7e:24:5f:17:ea:90:e9:e6:85:09:46:b0:ea:19:ff: e9:b1:62:7b:cf:5f:4c:0a:b0:85:d2:e2:a4:b6:9f: b1:9c:19:d3:87:86:6a:2a:d8:ac:29:03:8d:c7:1c: 7d:3b:92:10:4e:74:1e:2e:8b:11:e6:b5:25:79:92: 37:86:b5:00:6a:b4:60:a7:78:80:02:35:cd:6c:8e: dc:f6:e4:03:10:e1:0a:f6:35:0c:01:49:a3:36:42: 3d:ac:a0:2e:9e:8b:4a:50:83:d6:b6:f9:41:92:4d: 9e:0b:fc:5c:2a:33:c4:ed:7b:86:2a:9a:5e:f5:1f: 36:e9:c7:17:c2:61:0d:6c:a1:6f:d6:e4:27:40:86: 30:46:2b:78:14:1a:7a:c7:c3:cd:2e:1b:dc:54:c8: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:11:4E:4A:6A:13:8B:6C:EF:CD:A5:78:6B:87:BF:41:91:3A:8C X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/Y78RTkpqE4ts782leGuHv0GROow.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.228.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:14:6c:cf:33:ed:0f:cd:c9:0e:27:42:62:51:0a:36:6a:06: 6f:3f:fc:48:fd:43:d8:66:18:82:72:63:53:2e:7a:8b:da:1f: ae:4e:ce:e1:b1:23:39:c5:88:5c:95:c3:a6:42:0e:22:57:69: 15:11:83:7c:c9:65:e6:7c:b1:89:65:ec:5b:6e:99:df:d4:d3: d8:f0:43:6a:2d:98:1c:32:14:0f:54:9b:ed:2b:19:ad:7c:cd: 65:7f:04:10:15:79:23:b8:31:8f:65:06:7c:fa:ab:6b:d9:4d: 54:b1:34:08:06:6c:30:52:c3:b2:78:55:62:94:b3:f9:78:09: db:c4:ba:0a:b0:ad:de:b8:4b:9d:c0:f0:7e:91:fb:a7:bb:6b: 15:7a:b4:18:ed:ce:e7:8c:f8:25:f9:9e:1d:ee:27:53:8e:04: 89:d5:9c:5e:16:e3:d5:0c:30:09:a7:17:1e:cd:d8:7e:48:e8: 18:7f:17:19:3d:de:1f:2c:0e:6e:c5:7b:92:8b:e0:a7:cb:a2: ae:9a:9c:1e:a6:1b:31:7b:d2:16:ff:10:1c:8a:15:9b:d6:44: 55:4e:20:91:11:d4:fb:a7:d5:55:3b:a4:26:d0:6e:5c:0d:c8: 1e:ed:d3:14:42:46:49:ae:e0:55:ef:e1:db:8f:00:bb:95:71: 26:8f:57:63 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICC7owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yMzA5MDEw OTQ1MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYzQkYxMTRFNEE2QTEz OEI2Q0VGQ0RBNTc4NkI4N0JGNDE5MTNBOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0aaZkgS4GTqzg/4fABq2g+gYCAcexPaMzDTl4jkKIFc7tSH1X vrp2a3T0nwCB2/TVL7PltqZ8gg1yYe5eoK0zWfk/h6YC3H8/Pty4NzhKr++SjneX 9a1prkq4sWBWVZkP4pLyOGorsX4kXxfqkOnmhQlGsOoZ/+mxYnvPX0wKsIXS4qS2 n7GcGdOHhmoq2KwpA43HHH07khBOdB4uixHmtSV5kjeGtQBqtGCneIACNc1sjtz2 5AMQ4Qr2NQwBSaM2Qj2soC6ei0pQg9a2+UGSTZ4L/FwqM8Tte4Yqml71HzbpxxfC YQ1soW/W5CdAhjBGK3gUGnrHw80uG9xUyN/TAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUY78RTkpqE4ts782leGuHv0GROowwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9ZNzhSVGtwcUU0dHM3ODJsZUd1 SHYwR1JPb3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+rk MA0GCSqGSIb3DQEBCwUAA4IBAQAKFGzPM+0PzckOJ0JiUQo2agZvP/xI/UPYZhiC cmNTLnqL2h+uTs7hsSM5xYhclcOmQg4iV2kVEYN8yWXmfLGJZexbbpnf1NPY8ENq LZgcMhQPVJvtKxmtfM1lfwQQFXkjuDGPZQZ8+qtr2U1UsTQIBmwwUsOyeFVilLP5 eAnbxLoKsK3euEudwPB+kfunu2sVerQY7c7njPgl+Z4d7idTjgSJ1ZxeFuPVDDAJ pxcezdh+SOgYfxcZPd4fLA5uxXuSi+Cny6Kumpwephsxe9IW/xAcihWb1kRVTiCR EdT7p9VVO6Qm0G5cDcge7dMUQkZJruBV7+HbjwC7lXEmj1dj -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org