$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/gTrJ-9PFBcC2LqGPlD37JFNIe6s.roa File: gTrJ-9PFBcC2LqGPlD37JFNIe6s.roa (raw, json) Hash identifier: IQbyezD+BmGZhEBzzU62FcBqy5+fKtw0NN4Tbo2E4m8= Subject key identifier: 81:3A:C9:FB:D3:C5:05:C0:B6:2E:A1:8F:94:3D:FB:24:53:48:7B:AB Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28 Certificate serial: 0B5C Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/gTrJ-9PFBcC2LqGPlD37JFNIe6s.roa Signing time: Fri 01 Sep 2023 10:00:10 +0000 ROA not before: Fri 01 Sep 2023 10:00:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131590 IP address blocks: 103.227.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28 Validity Not Before: Sep 1 10:00:10 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=813AC9FBD3C505C0B62EA18F943DFB2453487BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:90:39:9d:3b:8e:8f:bf:18:88:cc:a1:d6: 14:a9:d7:88:25:f7:e1:a9:ba:5a:1c:1c:04:41:06: b4:40:44:d8:7f:67:97:df:c5:ae:e5:e6:9a:90:4f: 39:80:e4:e2:c1:ed:2f:a5:99:3d:b9:6f:91:65:08: 77:b1:86:2a:0a:7b:de:10:11:a2:83:d6:0b:1e:72: 96:9b:0e:7b:4d:0c:0e:33:a9:d5:3b:c7:c0:33:aa: b9:2a:2c:e3:0a:6b:e2:55:d8:a2:17:3f:6e:ad:1d: 45:31:43:81:82:a2:fb:f6:aa:26:0a:dc:4a:5e:94: 96:15:8f:10:62:36:0c:ac:bb:c8:c0:ac:16:22:06: 78:9d:dd:b1:98:b0:39:f0:60:ff:29:6a:a8:d9:60: 41:f9:3d:92:ed:2f:53:03:a5:3f:fa:25:af:be:96: f8:57:60:2f:f4:02:d6:a0:2d:cc:43:08:b2:c1:33: 1e:26:0c:ad:ec:d9:2e:c0:5e:f3:16:49:2f:20:d1: 1d:12:02:a9:6f:b5:3f:51:c2:b3:54:ab:f2:ff:6b: 97:be:aa:a9:9e:82:6d:7f:07:40:63:63:64:83:5a: 7c:75:44:37:5b:c4:09:92:cd:8b:e8:bb:c2:08:f0: 88:1d:f9:7f:60:d4:73:e7:51:19:e2:35:1d:14:bd: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3A:C9:FB:D3:C5:05:C0:B6:2E:A1:8F:94:3D:FB:24:53:48:7B:AB X509v3 Authority Key Identifier: keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/gTrJ-9PFBcC2LqGPlD37JFNIe6s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.227.226.0/24 Signature Algorithm: sha256WithRSAEncryption 10:11:72:55:2b:a9:e5:a1:94:93:ce:ad:a9:91:a7:ec:8e:f5: 63:19:22:19:5a:63:40:bc:0a:71:15:ae:64:76:83:dc:19:59: 02:92:f0:8e:30:cc:d7:b5:7a:00:86:77:c6:4c:7e:95:3a:5a: 2a:d1:e8:b1:58:bd:bd:2d:8a:18:cf:30:13:df:8c:f5:5c:76: 0e:17:2e:a2:d3:af:58:ab:5f:1b:31:63:34:d0:10:19:c6:59: 64:53:b6:ae:3b:96:8d:5d:cf:d9:2c:67:f6:c3:b9:20:61:73: a6:13:07:36:26:ee:3c:c5:8a:f1:ae:4b:b9:79:64:f6:ee:5c: dc:f9:f1:6b:5c:03:58:ae:da:45:6d:fc:3c:ac:0f:7c:d3:77: 9e:b6:ce:c0:2f:02:81:f2:78:b7:01:1b:7a:1c:1f:a3:8a:d7: 10:88:3c:19:68:6b:31:f0:b6:6a:f2:09:f4:7d:e0:6e:66:b1: 03:30:5d:ae:5f:9d:b8:6a:32:41:d6:9c:03:d0:5c:51:9f:7c: 67:4a:ad:3a:60:7f:15:c3:f8:b3:c7:a4:20:38:b5:8e:f8:a1: 85:cb:43:b5:c7:ca:cd:59:8c:e1:3e:c7:45:50:a8:2b:94:5a: 34:88:dd:ea:55:2e:84:65:cf:30:3f:46:72:d6:52:8f:10:77: 2c:cf:ba:b5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY4 MkEzQUMxMTQ1NTAzMDc0M0MwQTc0MzcxMUY4QTBEOEVCQUUyODAeFw0yMzA5MDEx MDAwMTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgxM0FDOUZCRDNDNTA1 QzBCNjJFQTE4Rjk0M0RGQjI0NTM0ODdCQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9xpA5nTuOj78YiMyh1hSp14gl9+GpulocHARBBrRARNh/Z5ff xa7l5pqQTzmA5OLB7S+lmT25b5FlCHexhioKe94QEaKD1gsecpabDntNDA4zqdU7 x8AzqrkqLOMKa+JV2KIXP26tHUUxQ4GCovv2qiYK3EpelJYVjxBiNgysu8jArBYi Bnid3bGYsDnwYP8paqjZYEH5PZLtL1MDpT/6Ja++lvhXYC/0AtagLcxDCLLBMx4m DK3s2S7AXvMWSS8g0R0SAqlvtT9RwrNUq/L/a5e+qqmegm1/B0BjY2SDWnx1RDdb xAmSzYvou8II8Igd+X9g1HPnURniNR0UvbIfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUgTrJ+9PFBcC2LqGPlD37JFNIe6swHwYDVR0jBBgwFoAUv4KjrBFFUDB0PAp0 NxH4oNjrrigwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3Y0 S2pyQkZGVURCMFBBcDBOeEg0b05qcnJpZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djRLanJCRkZVREIwUEFwME54SDRvTmpycmlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL2dUckotOVBGQmNDMkxxR1BsRDM3SkZO SWU2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn4+IwDQYJ KoZIhvcNAQELBQADggEBABARclUrqeWhlJPOramRp+yO9WMZIhlaY0C8CnEVrmR2 g9wZWQKS8I4wzNe1egCGd8ZMfpU6WirR6LFYvb0tihjPMBPfjPVcdg4XLqLTr1ir XxsxYzTQEBnGWWRTtq47lo1dz9ksZ/bDuSBhc6YTBzYm7jzFivGuS7l5ZPbuXNz5 8WtcA1iu2kVt/DysD3zTd562zsAvAoHyeLcBG3ocH6OK1xCIPBloazHwtmryCfR9 4G5msQMwXa5fnbhqMkHWnAPQXFGffGdKrTpgfxXD+LPHpCA4tY74oYXLQ7XHys1Z jOE+x0VQqCuUWjSI3epVLoRlzzA/RnLWUo8QdyzPurU= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:43 2024 by rpki-client on console-fra.rpki-client.org