$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/kanAVKTzSdwum5_cp3a4qPM9mx4.roa File: kanAVKTzSdwum5_cp3a4qPM9mx4.roa (raw, json) Hash identifier: 26AwNiIlJ37rnj70tVacjWhXaDAkoF2NzPccFKvTaNg= Subject key identifier: 91:A9:C0:54:A4:F3:49:DC:2E:9B:9F:DC:A7:76:B8:A8:F3:3D:9B:1E Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F Certificate serial: 0BAE Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/kanAVKTzSdwum5_cp3a4qPM9mx4.roa Signing time: Mon 20 May 2024 15:08:02 +0000 ROA not before: Mon 20 May 2024 15:08:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7483 IP address blocks: 103.42.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F Validity Not Before: May 20 15:08:02 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=91A9C054A4F349DC2E9B9FDCA776B8A8F33D9B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:ad:5d:99:6b:f9:94:fd:de:02:da:4a:68: b9:72:e8:d5:a9:f0:e5:7a:de:4c:bd:6a:73:6d:52: 90:1c:cb:1b:cf:1a:a9:76:06:28:24:6f:b7:33:e7: e8:c3:57:75:02:0b:c1:e1:5a:7d:67:f7:6b:34:e5: 7d:46:45:26:44:24:5c:c3:1d:24:74:e8:d3:53:27: 0c:60:b6:1d:e8:d1:98:8e:e0:8a:dc:de:c5:f0:5a: 38:48:92:bc:56:c2:92:d1:2c:ec:f7:2c:11:fb:ff: 4f:67:0d:aa:85:f1:09:5a:f2:8b:67:7a:88:4a:0d: 0e:a5:87:f8:1b:78:03:e0:e0:81:63:65:31:57:ea: a1:aa:bb:70:07:36:1c:fb:8d:62:36:b8:a7:74:27: 1b:2a:82:d5:74:1a:71:33:44:f0:4b:6b:dd:d2:07: b5:6a:13:ed:73:82:75:9d:b7:9b:00:70:d2:23:81: d8:f8:b3:d7:69:e5:5a:4a:ac:46:2b:8f:90:1f:e9: d9:7e:5a:e7:17:ad:3c:65:c7:83:e2:13:2a:46:87: 4e:b2:98:48:6d:10:0a:31:7d:c5:e9:02:43:70:fe: 76:8b:08:89:3f:a2:c5:6b:a7:fb:ec:b1:51:53:9f: eb:30:b7:51:53:de:12:5a:f1:80:1f:2f:f1:bb:a2: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A9:C0:54:A4:F3:49:DC:2E:9B:9F:DC:A7:76:B8:A8:F3:3D:9B:1E X509v3 Authority Key Identifier: keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/kanAVKTzSdwum5_cp3a4qPM9mx4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.42.144.0/22 Signature Algorithm: sha256WithRSAEncryption 75:7c:31:36:e1:4c:df:99:c5:a7:f4:83:46:c9:e0:a8:33:df: 4b:ec:25:cd:19:97:3c:76:d4:b6:33:06:f5:da:96:dd:b8:6d: 51:c7:20:93:b5:17:e2:48:c1:b9:b1:e6:ee:de:78:75:2f:24: e5:1d:60:50:08:ab:53:a7:08:06:9e:a9:81:98:27:e5:5e:af: 84:45:70:0c:d6:a3:a6:56:ac:99:4c:09:84:71:46:aa:fb:91: 00:81:3e:66:a2:da:d5:8d:3b:2c:48:b6:73:37:87:54:d4:db: 0e:8d:99:e1:76:79:2d:18:53:17:25:ad:0f:7f:af:50:22:0c: fa:9e:bf:a9:b6:8e:5e:65:2c:f8:dc:f2:61:fb:06:1d:ea:24: cf:23:5b:1e:97:28:95:90:d6:9e:f1:96:53:9b:be:65:a1:48: c1:7d:97:53:e6:2e:da:df:e1:47:66:fe:05:80:11:79:b1:da: d3:6c:58:06:f4:b6:e8:01:b8:9b:9f:e1:7f:e9:e9:d2:83:1f: 56:f2:7c:a7:dd:25:95:21:12:b6:65:01:ad:d4:ea:fd:58:1f: 6c:d5:d9:11:dd:89:7f:b0:36:2a:d0:06:47:06:16:32:60:e9: c4:40:63:fa:3e:a1:57:a4:f2:d6:3b:bc:70:44:5a:1a:76:a5: bd:23:9b:21 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICC64wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yNDA1MjAx NTA4MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkxQTlDMDU0QTRGMzQ5 REMyRTlCOUZEQ0E3NzZCOEE4RjMzRDlCMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsYK1dmWv5lP3eAtpKaLly6NWp8OV63ky9anNtUpAcyxvPGql2 Bigkb7cz5+jDV3UCC8HhWn1n92s05X1GRSZEJFzDHSR06NNTJwxgth3o0ZiO4Irc 3sXwWjhIkrxWwpLRLOz3LBH7/09nDaqF8Qla8otneohKDQ6lh/gbeAPg4IFjZTFX 6qGqu3AHNhz7jWI2uKd0JxsqgtV0GnEzRPBLa93SB7VqE+1zgnWdt5sAcNIjgdj4 s9dp5VpKrEYrj5Af6dl+WucXrTxlx4PiEypGh06ymEhtEAoxfcXpAkNw/naLCIk/ osVrp/vssVFTn+swt1FT3hJa8YAfL/G7on65AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUkanAVKTzSdwum5/cp3a4qPM9mx4wHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL +wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9rYW5BVktUelNkd3Vt NV9jcDNhNHFQTTlteDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZyqQMA0GCSqGSIb3DQEBCwUAA4IBAQB1fDE24UzfmcWn9INGyeCoM99L7CXN GZc8dtS2Mwb12pbduG1RxyCTtRfiSMG5sebu3nh1LyTlHWBQCKtTpwgGnqmBmCfl Xq+ERXAM1qOmVqyZTAmEcUaq+5EAgT5motrVjTssSLZzN4dU1NsOjZnhdnktGFMX Ja0Pf69QIgz6nr+pto5eZSz43PJh+wYd6iTPI1selyiVkNae8ZZTm75loUjBfZdT 5i7a3+FHZv4FgBF5sdrTbFgG9LboAbibn+F/6enSgx9W8nyn3SWVIRK2ZQGt1Or9 WB9s1dkR3Yl/sDYq0AZHBhYyYOnEQGP6PqFXpPLWO7xwRFoadqW9I5sh -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org