$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/5Gy_U_s2XsP-evc8iNvp6oGOZcQ.roa File: 5Gy_U_s2XsP-evc8iNvp6oGOZcQ.roa (raw, json) Hash identifier: 3nwaU3ukBhrVLRlie8iKD5VSkOhyD7xjKEODvQ8bBGw= Subject key identifier: E4:6C:BF:53:FB:36:5E:C3:FE:7A:F7:3C:88:DB:E9:EA:81:8E:65:C4 Certificate issuer: /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2 Certificate serial: 0B09 Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/5Gy_U_s2XsP-evc8iNvp6oGOZcQ.roa Signing time: Fri 01 Sep 2023 09:46:11 +0000 ROA not before: Fri 01 Sep 2023 09:46:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131634 IP address blocks: 103.117.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2 Validity Not Before: Sep 1 09:46:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E46CBF53FB365EC3FE7AF73C88DBE9EA818E65C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:95:45:7d:81:20:b1:6d:0f:f4:e9:94:93: 5c:1e:d9:c2:ca:c6:6b:aa:e0:35:bd:4e:c5:02:63: 97:9a:c7:71:67:22:09:f8:fd:f0:94:a9:31:af:cf: 81:72:18:26:83:f0:d4:d4:0e:93:f4:4c:43:1e:d5: 5d:3d:59:2c:74:1d:b0:73:82:05:01:7f:a4:ba:e7: da:4d:0d:98:48:3e:46:43:87:6f:b5:ce:7e:78:d2: f3:3b:74:91:58:ab:5d:0c:8e:a3:00:d1:36:84:f4: 0c:fa:9b:42:3d:30:98:4c:fe:c7:f9:ba:12:c1:a3: b8:dc:c4:90:e1:07:d8:0e:e2:d1:21:31:aa:3b:17: 4d:d2:0f:bf:85:69:a8:5d:18:d8:7f:d7:5e:fd:c1: a2:42:a8:83:12:2b:9b:88:91:7d:48:4c:66:6e:ea: e8:c8:1a:f8:df:63:aa:83:c8:c2:b0:7f:6e:35:a4: e6:26:28:69:2d:cc:c6:7a:6a:c6:a9:dd:f0:1f:75: cf:65:73:fd:51:17:cf:d2:b4:0d:bb:81:1d:fb:d3: 0c:1c:8e:a6:fe:84:23:f8:0c:58:f4:65:39:1b:c9: 86:cf:14:8b:74:10:e1:ba:7c:fa:bb:9a:19:81:23: 04:77:74:fa:eb:de:c3:ba:e1:14:df:03:d5:4b:c3: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6C:BF:53:FB:36:5E:C3:FE:7A:F7:3C:88:DB:E9:EA:81:8E:65:C4 X509v3 Authority Key Identifier: keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/5Gy_U_s2XsP-evc8iNvp6oGOZcQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.117.4.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:f6:d5:d8:81:14:39:1e:b2:ee:a0:6c:a6:67:8a:ba:54:cc: 84:0a:76:37:a5:81:85:d6:ab:eb:5e:b5:55:25:6f:38:cc:f8: 10:c2:98:21:a2:ef:f0:a8:e8:6f:e4:53:6b:1b:d3:4c:f3:64: f6:9b:7c:b7:ad:87:c5:80:e6:2c:ac:82:87:a5:38:b4:3d:12: 0e:ea:0e:fa:2d:95:b9:f0:8b:2f:ef:cc:62:d7:bd:4e:1f:50: 1f:52:7f:b7:35:c7:58:78:2c:9a:43:af:ec:81:d7:e3:5f:71: 4b:2e:0d:d2:27:60:ad:34:90:c1:5d:d7:15:5d:05:6e:a8:38: 65:db:93:42:69:d7:37:cb:50:4e:98:90:17:ae:cf:f0:fd:09: 7e:90:50:30:c0:ab:94:66:30:6c:80:d0:c3:b5:92:24:c8:c2: a8:8a:0c:99:ce:51:22:89:56:2e:e4:24:7b:14:3f:0f:ad:85: 1f:9c:19:4f:b2:e2:fe:00:3e:9a:a4:b4:70:58:66:b2:19:84: 56:0e:7b:f2:c3:3b:70:5e:e4:7d:1e:e6:b6:5d:b4:c2:f2:0e: 13:34:70:90:0d:60:e1:dc:72:83:5b:9e:77:24:62:8c:48:bb: 9d:88:b6:b4:f3:49:65:08:5c:4e:24:4e:07:0d:06:a7:3d:05: 62:43:ce:ac -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkY4 QzkyREZDNzhDQkZFOEM1RUZENkJBNUEzN0ExNjI4MjIxRkZFMjAeFw0yMzA5MDEw OTQ2MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU0NkNCRjUzRkIzNjVF QzNGRTdBRjczQzg4REJFOUVBODE4RTY1QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT5ZVFfYEgsW0P9OmUk1we2cLKxmuq4DW9TsUCY5eax3FnIgn4 /fCUqTGvz4FyGCaD8NTUDpP0TEMe1V09WSx0HbBzggUBf6S659pNDZhIPkZDh2+1 zn540vM7dJFYq10MjqMA0TaE9Az6m0I9MJhM/sf5uhLBo7jcxJDhB9gO4tEhMao7 F03SD7+FaahdGNh/1179waJCqIMSK5uIkX1ITGZu6ujIGvjfY6qDyMKwf241pOYm KGktzMZ6asap3fAfdc9lc/1RF8/StA27gR370wwcjqb+hCP4DFj0ZTkbyYbPFIt0 EOG6fPq7mhmBIwR3dPrr3sO64RTfA9VLwy47AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU5Gy/U/s2XsP+evc8iNvp6oGOZcQwHwYDVR0jBBgwFoAUb4yS38eMv+jF79a6 WjehYoIh/+IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1BFVFcv YjR5UzM4ZU12LWpGNzlhNldqZWhZb0loXy1JLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9iNHlTMzhlTXYtakY3OWE2V2plaFlvSWhfLUkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TUEVUVy81R3lfVV9zMlhzUC1ldmM4aU52 cDZvR09aY1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3UE MA0GCSqGSIb3DQEBCwUAA4IBAQAK9tXYgRQ5HrLuoGymZ4q6VMyECnY3pYGF1qvr XrVVJW84zPgQwpghou/wqOhv5FNrG9NM82T2m3y3rYfFgOYsrIKHpTi0PRIO6g76 LZW58Isv78xi171OH1AfUn+3NcdYeCyaQ6/sgdfjX3FLLg3SJ2CtNJDBXdcVXQVu qDhl25NCadc3y1BOmJAXrs/w/Ql+kFAwwKuUZjBsgNDDtZIkyMKoigyZzlEiiVYu 5CR7FD8PrYUfnBlPsuL+AD6apLRwWGayGYRWDnvywztwXuR9Hua2XbTC8g4TNHCQ DWDh3HKDW553JGKMSLudiLa080llCFxOJE4HDQanPQViQ86s -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org