$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/Prl8QvLbXKnAuw7ChpxBxpkX6g4.roa File: Prl8QvLbXKnAuw7ChpxBxpkX6g4.roa (raw, json) Hash identifier: r7fQG+DHkfBLCy+7dj+2uY5NSy1mLsPF7q/W5aQgSM4= Subject key identifier: 3E:B9:7C:42:F2:DB:5C:A9:C0:BB:0E:C2:86:9C:41:C6:99:17:EA:0E Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Certificate serial: 0291 Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/Prl8QvLbXKnAuw7ChpxBxpkX6g4.roa Signing time: Mon 26 Aug 2024 05:27:50 +0000 ROA not before: Mon 26 Aug 2024 05:27:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.180.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 657 (0x291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Validity Not Before: Aug 26 05:27:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3EB97C42F2DB5CA9C0BB0EC2869C41C69917EA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:63:a6:d7:4d:2c:20:2e:d1:c9:02:bc:26:9c: 51:72:ab:65:c0:6e:fa:2f:f0:50:91:5f:47:8f:99: 0d:df:c3:2f:fe:2b:69:ab:8b:28:15:75:b7:b4:4e: a4:f0:28:29:81:5f:f6:d0:18:48:d0:ae:ca:36:b3: e8:d0:76:a1:aa:42:d1:fd:ad:07:38:f6:18:c4:bc: 42:99:0b:12:5e:b1:2f:ae:6c:8b:4f:9c:22:a7:49: c4:f4:89:70:e8:50:0f:7f:0c:b8:c9:c6:d1:f4:5b: 51:be:27:4d:52:90:83:b9:38:e9:79:5f:c1:65:4b: 11:91:59:1a:41:17:f3:23:6b:5a:d3:dc:fc:4b:c8: 50:fc:a4:73:d3:3c:3d:ef:df:e3:6a:4a:45:01:ea: 8d:a1:72:6c:5b:e5:e4:e2:ef:a3:b8:c5:35:c2:af: 09:6a:33:84:3a:26:f6:1b:6a:13:98:fe:19:eb:ae: b5:f7:2d:63:9d:14:cc:a4:75:c7:9b:5b:4c:e0:3a: fc:37:60:f9:dc:b7:d1:fc:fd:10:cd:7e:ce:2a:60: 0a:a7:50:ca:e9:e1:ea:bc:37:ee:9c:71:fd:ab:43: 4d:fe:47:43:4b:8f:81:4b:1b:9c:8c:be:e8:a7:bd: 14:9c:04:53:eb:c9:0b:25:15:6f:33:85:3d:37:42: fd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B9:7C:42:F2:DB:5C:A9:C0:BB:0E:C2:86:9C:41:C6:99:17:EA:0E X509v3 Authority Key Identifier: keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/Prl8QvLbXKnAuw7ChpxBxpkX6g4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.180.20.0/23 Signature Algorithm: sha256WithRSAEncryption bc:c5:dd:52:4c:5e:20:ab:d4:f4:ac:3d:1d:58:04:2e:e9:25: de:54:5d:1f:49:e2:85:73:33:9d:df:43:16:a2:76:2c:3f:b4: 2d:9d:b2:54:4b:7b:85:f4:39:0c:8f:7a:0b:68:9e:0c:bf:25: 61:74:76:6a:8f:d4:81:03:07:77:e9:59:33:2d:53:0d:a2:65: 73:c9:4e:d7:55:88:8e:36:82:b1:8d:a2:ca:24:ca:1d:cb:91: cc:d0:4f:db:f1:7a:b3:cc:42:7f:c6:91:61:7d:89:63:c8:c7: 63:01:89:3b:02:a7:07:2a:14:03:d9:be:3b:b4:4f:48:00:eb: a5:70:9d:14:57:f6:fc:29:9c:3b:c1:f2:1f:71:99:7e:57:2f: f6:64:61:97:fd:97:a4:d9:e3:1d:bc:b8:00:37:f1:ee:39:ba: d0:03:d4:59:de:37:60:53:1e:8a:2e:b6:c6:26:6d:d4:f8:30: 65:26:75:ed:30:5b:c8:6a:67:54:44:06:2a:be:77:aa:a2:f3: 44:c1:32:86:ca:f9:d7:b1:62:81:2b:05:d7:ef:4c:5e:a7:cb: ab:4c:6a:b2:aa:15:23:e7:36:3f:65:ea:40:8e:da:f3:9d:dc: 0b:56:48:aa:31:6d:b1:49:46:60:1b:14:f0:e3:81:ae:b3:a3: e1:88:ea:ad -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICApEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUI2 MDY5NkQ2ODc3M0FFMkU1MzJGMENENUQxMEZEQzBDODI3M0VBNTAeFw0yNDA4MjYw NTI3NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFQjk3QzQyRjJEQjVD QTlDMEJCMEVDMjg2OUM0MUM2OTkxN0VBMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpY6bXTSwgLtHJArwmnFFyq2XAbvov8FCRX0ePmQ3fwy/+K2mr iygVdbe0TqTwKCmBX/bQGEjQrso2s+jQdqGqQtH9rQc49hjEvEKZCxJesS+ubItP nCKnScT0iXDoUA9/DLjJxtH0W1G+J01SkIO5OOl5X8FlSxGRWRpBF/Mja1rT3PxL yFD8pHPTPD3v3+NqSkUB6o2hcmxb5eTi76O4xTXCrwlqM4Q6JvYbahOY/hnrrrX3 LWOdFMykdcebW0zgOvw3YPnct9H8/RDNfs4qYAqnUMrp4eq8N+6ccf2rQ03+R0NL j4FLG5yMvuinvRScBFPryQslFW8zhT03Qv1fAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUPrl8QvLbXKnAuw7ChpxBxpkX6g4wHwYDVR0jBBgwFoAUm2BpbWh3OuLlMvDN XRD9wMgnPqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL20y QnBiV2gzT3VMbE12RE5YUkQ5d01nblBxVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bTJCcGJXaDNPdUxsTXZETlhSRDl3TWduUHFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL1BybDhRdkxiWEtuQXV3N0NocHhCeHBr WDZnNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntBQwDQYJ KoZIhvcNAQELBQADggEBALzF3VJMXiCr1PSsPR1YBC7pJd5UXR9J4oVzM53fQxai diw/tC2dslRLe4X0OQyPegtongy/JWF0dmqP1IEDB3fpWTMtUw2iZXPJTtdViI42 grGNosokyh3LkczQT9vxerPMQn/GkWF9iWPIx2MBiTsCpwcqFAPZvju0T0gA66Vw nRRX9vwpnDvB8h9xmX5XL/ZkYZf9l6TZ4x28uAA38e45utAD1FneN2BTHooutsYm bdT4MGUmde0wW8hqZ1REBiq+d6qi80TBMobK+dexYoErBdfvTF6ny6tMarKqFSPn Nj9l6kCO2vOd3AtWSKoxbbFJRmAbFPDjga6zo+GI6q0= -----END CERTIFICATE-----Generated at Fri Sep 20 09:06:45 2024 by rpki-client on console-ams.rpki-client.org