$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/JBohKoHhqd-jPFHVK3dnAsmJ_w4.roa File: JBohKoHhqd-jPFHVK3dnAsmJ_w4.roa (raw, json) Hash identifier: +idbc2e9VX+HrXcFb+q5i7osXbzrbCkXq5MFpQ/FSpw= Subject key identifier: 24:1A:21:2A:81:E1:A9:DF:A3:3C:51:D5:2B:77:67:02:C9:89:FF:0E Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0B6A Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/JBohKoHhqd-jPFHVK3dnAsmJ_w4.roa Signing time: Fri 01 Sep 2023 09:45:57 +0000 ROA not before: Fri 01 Sep 2023 09:45:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18182 IP address blocks: 219.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 10:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2922 (0xb6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Sep 1 09:45:57 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=241A212A81E1A9DFA33C51D52B776702C989FF0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:91:c0:8c:5f:36:09:73:4f:95:bf:6c:d9: 61:1f:85:dc:cf:f1:2b:98:0a:e6:a8:38:96:2d:52: 8b:e9:7f:be:e0:01:c6:cb:a1:b2:f7:fd:ca:1c:3e: aa:ac:31:3f:30:9f:55:5d:de:a1:97:5e:52:96:bc: f3:4c:88:66:6e:4a:f2:ea:78:93:56:b2:81:45:e9: a5:74:bf:c8:d3:6a:0c:d2:9e:59:81:3b:20:bc:cc: 8c:43:56:a7:03:0d:d6:40:6d:cf:12:e1:df:f5:2c: 7e:f0:d0:30:09:3c:55:2b:6f:20:de:ff:4a:fc:75: ca:49:3d:cd:14:ab:86:84:e4:23:8a:63:fa:57:70: dd:18:4e:48:a2:0b:7f:c0:1b:46:ad:07:d0:44:33: 6e:64:07:fa:9c:76:3d:2a:fb:26:e6:40:de:52:4f: e9:f6:f9:7d:4f:da:4b:91:4a:87:4a:13:3d:40:cf: d8:17:a5:a5:66:6e:14:07:65:8f:fa:63:6a:eb:2e: fe:f8:d0:d9:33:ba:78:4a:aa:8c:ea:97:66:12:c5: 02:69:00:9a:69:ba:20:e7:6b:33:41:8e:ed:f0:ad: a3:14:87:d3:fa:3c:a8:ec:c1:6c:0f:0c:9d:2e:6e: 61:b9:d0:85:b5:8c:9b:e9:52:a4:fc:d5:4a:5c:05: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1A:21:2A:81:E1:A9:DF:A3:3C:51:D5:2B:77:67:02:C9:89:FF:0E X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/JBohKoHhqd-jPFHVK3dnAsmJ_w4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 08:d1:54:cc:5c:9a:d2:58:cc:e5:8d:39:b9:09:66:6f:ce:82: e0:1e:ab:72:cd:16:28:3b:a1:d6:94:b2:bb:fe:04:13:73:59: c9:dc:3b:5c:7b:0a:38:db:99:8d:b0:a2:59:f0:b1:6f:af:e5: 7d:6b:0e:c1:34:02:b8:ff:9f:3d:ff:b5:41:8c:a6:d8:84:16: 64:e0:39:d1:d4:b8:0b:8d:e1:13:8b:0c:59:7e:be:b9:0c:df: c0:60:eb:e9:7a:57:0b:f1:ad:fa:55:b0:7e:f9:fe:89:d7:40: e1:9a:46:5f:55:db:45:73:b9:0e:5d:98:7c:20:ce:07:84:7d: 7d:95:3d:0a:b2:7d:ff:d9:b1:06:e9:01:01:2c:9e:1f:7f:f9: e0:ac:24:f8:e4:ef:81:ab:d0:98:cf:1c:aa:7c:5e:cc:6a:03: e8:06:be:e6:b4:b9:03:3f:f2:a0:3d:82:8c:d7:0f:e0:5a:34: 7d:da:2a:b5:54:45:25:1a:70:53:7a:30:40:b6:28:f2:ba:d7: 8d:8e:fe:fa:bf:0a:b5:56:54:b2:70:55:3c:24:5d:d9:39:8b: 80:b9:64:bc:65:34:8b:07:15:7b:87:39:f5:2c:99:b1:33:f5: 33:21:49:b8:7a:99:57:7b:3f:bd:0e:f3:ae:e5:35:1b:79:1b: bf:40:22:8b -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICC2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yMzA5MDEw OTQ1NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI0MUEyMTJBODFFMUE5 REZBMzNDNTFENTJCNzc2NzAyQzk4OUZGMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp8ZHAjF82CXNPlb9s2WEfhdzP8SuYCuaoOJYtUovpf77gAcbL obL3/cocPqqsMT8wn1Vd3qGXXlKWvPNMiGZuSvLqeJNWsoFF6aV0v8jTagzSnlmB OyC8zIxDVqcDDdZAbc8S4d/1LH7w0DAJPFUrbyDe/0r8dcpJPc0Uq4aE5COKY/pX cN0YTkiiC3/AG0atB9BEM25kB/qcdj0q+ybmQN5ST+n2+X1P2kuRSodKEz1Az9gX paVmbhQHZY/6Y2rrLv740NkzunhKqozql2YSxQJpAJppuiDnazNBju3wraMUh9P6 PKjswWwPDJ0ubmG50IW1jJvpUqT81UpcBbmPAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUJBohKoHhqd+jPFHVK3dnAsmJ/w4wHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9KQm9oS29IaHFkLWpQRkhWSzNk bkFzbUpfdzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA21Uw DQYJKoZIhvcNAQELBQADggEBAAjRVMxcmtJYzOWNObkJZm/OguAeq3LNFig7odaU srv+BBNzWcncO1x7CjjbmY2wolnwsW+v5X1rDsE0Arj/nz3/tUGMptiEFmTgOdHU uAuN4ROLDFl+vrkM38Bg6+l6VwvxrfpVsH75/onXQOGaRl9V20VzuQ5dmHwgzgeE fX2VPQqyff/ZsQbpAQEsnh9/+eCsJPjk74Gr0JjPHKp8XsxqA+gGvua0uQM/8qA9 gozXD+BaNH3aKrVURSUacFN6MEC2KPK6142O/vq/CrVWVLJwVTwkXdk5i4C5ZLxl NIsHFXuHOfUsmbEz9TMhSbh6mVd7P70O867lNRt5G79AIos= -----END CERTIFICATE-----Generated at Sat Jun 1 15:05:03 2024 by rpki-client on console-fra.rpki-client.org