$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa File: wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa (raw, json) Hash identifier: yZF63z6ohbGtAwtmuzOgxyUcGIa0I4paanlHiuijYCk= Subject key identifier: C0:AE:6A:0E:BA:8D:C9:9B:31:5E:2D:E2:55:49:2F:39:65:01:96:9D Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E5D Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa Signing time: Mon 26 Aug 2024 05:27:20 +0000 ROA not before: Mon 26 Aug 2024 05:27:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 203.68.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3677 (0xe5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C0AE6A0EBA8DC99B315E2DE255492F396501969D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:02:15:43:bf:d2:52:4c:3b:4f:bf:8b:37: ec:30:6a:e1:ce:f0:f0:4d:a2:02:cc:5c:fe:89:00: 0f:50:6c:31:49:e3:43:cb:bc:ea:26:1c:ba:68:12: 70:39:96:a7:ad:b3:67:0c:56:0a:16:5b:80:de:b6: 18:42:4a:04:a7:5e:61:fa:81:ca:0d:0f:9f:9c:b0: 80:d3:61:34:1f:12:df:c2:76:27:b0:5c:5c:b1:88: 53:d4:4f:3d:e6:35:69:1b:8a:b0:47:4d:eb:6c:4e: 29:e2:e4:f8:10:c4:9a:81:17:46:57:6f:c0:d2:80: 84:84:86:b8:b8:dd:88:68:cb:b8:22:6f:bd:d4:10: 09:4b:88:e2:3c:a0:1c:cb:35:64:94:0f:3b:88:bd: 33:42:ab:0f:9b:4d:51:84:f1:5c:64:18:2d:c3:90: 2e:ad:03:46:66:9b:e2:13:ed:6b:47:13:21:10:62: ee:ea:e1:00:17:c9:a4:92:01:64:11:25:cb:da:6b: 5a:1a:f8:1c:42:a8:2c:7c:65:78:6e:57:66:68:91: 32:c0:66:1c:6b:85:ca:66:5e:c0:b6:e2:fc:8a:a1: 3c:41:32:05:1d:8b:31:57:f5:ca:44:81:b6:08:dc: 42:a5:c4:e0:0b:1c:50:17:e2:d9:de:e6:f7:2b:e4: 86:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AE:6A:0E:BA:8D:C9:9B:31:5E:2D:E2:55:49:2F:39:65:01:96:9D X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/wK5qDrqNyZsxXi3iVUkvOWUBlp0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.68.203.0/24 Signature Algorithm: sha256WithRSAEncryption 88:e1:d7:1c:1d:47:af:90:67:0a:c1:bc:48:db:f7:e5:ed:a0: b6:e6:87:f3:3d:c0:0b:dd:25:a7:97:0f:1c:b0:89:d2:32:15: 2f:7c:2a:98:0e:5f:1c:fc:14:ec:f3:f7:57:9f:5e:bb:5e:91: ac:2b:e9:d0:5a:f9:f3:17:7f:a6:cf:5d:d9:8f:61:64:67:cf: df:91:de:61:a7:5c:be:1a:fd:92:fb:03:a0:fb:5b:8b:c6:9b: 6d:48:99:50:6f:09:9b:23:0b:01:d9:a0:bc:f8:1a:8f:5a:00: be:98:09:3f:cf:62:f0:ec:10:02:47:10:f9:d6:0f:a0:8f:7d: 00:91:ff:8c:54:ab:40:37:30:32:28:b8:2f:3d:f7:73:01:0e: 0b:0d:2f:26:b4:7f:07:25:ea:64:08:40:bd:34:ba:61:10:ff: b5:f5:ed:ea:ac:58:6c:09:3e:e7:80:20:b7:b2:02:9a:ba:b6: 29:6e:13:04:70:c1:a5:6f:12:72:dc:47:27:01:95:1c:ce:d1: 03:c5:0c:e8:de:66:87:42:91:87:46:be:d6:ec:29:fb:57:73: b4:7e:b5:f8:46:bf:09:66:9b:39:f9:01:4b:d7:7e:06:18:ee: f5:9a:39:e0:76:91:26:bc:c6:39:36:7f:bb:bc:15:d5:6a:f1: 1e:02:bc:68 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwQUU2QTBFQkE4REM5 OUIzMTVFMkRFMjU1NDkyRjM5NjUwMTk2OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0QQIVQ7/SUkw7T7+LN+wwauHO8PBNogLMXP6JAA9QbDFJ40PL vOomHLpoEnA5lqets2cMVgoWW4DethhCSgSnXmH6gcoND5+csIDTYTQfEt/Cdiew XFyxiFPUTz3mNWkbirBHTetsTini5PgQxJqBF0ZXb8DSgISEhri43Yhoy7gib73U EAlLiOI8oBzLNWSUDzuIvTNCqw+bTVGE8VxkGC3DkC6tA0Zmm+IT7WtHEyEQYu7q 4QAXyaSSAWQRJcvaa1oa+BxCqCx8ZXhuV2ZokTLAZhxrhcpmXsC24vyKoTxBMgUd izFX9cpEgbYI3EKlxOALHFAX4tne5vcr5IbRAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUwK5qDrqNyZsxXi3iVUkvOWUBlp0wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC93SzVxRHJxTnlac3hYaTNpVlVr dk9XVUJscDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy0TL MA0GCSqGSIb3DQEBCwUAA4IBAQCI4dccHUevkGcKwbxI2/fl7aC25ofzPcAL3SWn lw8csInSMhUvfCqYDl8c/BTs8/dXn167XpGsK+nQWvnzF3+mz13Zj2FkZ8/fkd5h p1y+Gv2S+wOg+1uLxpttSJlQbwmbIwsB2aC8+BqPWgC+mAk/z2Lw7BACRxD51g+g j30Akf+MVKtANzAyKLgvPfdzAQ4LDS8mtH8HJepkCEC9NLphEP+19e3qrFhsCT7n gCC3sgKaurYpbhMEcMGlbxJy3EcnAZUcztEDxQzo3maHQpGHRr7W7Cn7V3O0frX4 Rr8JZps5+QFL134GGO71mjngdpEmvMY5Nn+7vBXVavEeArxo -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org