$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/1ul4Osq9HBuoyRyBoZN-n5jksow.roa File: 1ul4Osq9HBuoyRyBoZN-n5jksow.roa (raw, json) Hash identifier: sRc/T0Cmslns1KtvCfyCIuuE4ibNIA3I+Un+pAy4ICs= Subject key identifier: D6:E9:78:3A:CA:BD:1C:1B:A8:C9:1C:81:A1:93:7E:9F:98:E4:B2:8C Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0BA5 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/1ul4Osq9HBuoyRyBoZN-n5jksow.roa Signing time: Fri 01 Sep 2023 10:01:09 +0000 ROA not before: Fri 01 Sep 2023 10:01:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 27.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Sep 1 10:01:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D6E9783ACABD1C1BA8C91C81A1937E9F98E4B28C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:37:32:2d:34:85:4e:e0:3b:a2:ea:5b:ec: f6:c2:00:17:34:b2:a2:b4:bd:5e:04:7c:0f:00:1f: e7:63:1c:1d:5d:99:11:2d:fa:50:c9:5f:c9:dd:fa: e1:c7:4a:f7:34:60:08:24:54:38:79:f9:ee:16:90: 25:06:aa:3c:3f:d2:e4:80:a9:58:1c:e5:58:0d:a5: 30:58:69:10:fc:a1:4c:da:2f:27:a0:7b:c5:ee:0b: 83:e2:1e:ac:b7:5a:16:f5:69:2b:1c:a2:39:cb:87: a0:10:12:c1:fa:97:74:ff:12:7d:9e:8a:41:f0:a8: f3:94:93:26:5d:2a:5f:e2:57:b3:18:5d:21:df:3d: 96:76:52:55:96:d6:cb:b6:e7:e2:f8:7f:d2:24:30: aa:f3:f0:63:c2:7c:6b:e2:c3:32:db:fb:2d:b3:00: 91:b0:6d:82:c0:d9:8a:2e:2e:ba:f9:bc:58:c9:cb: 2f:db:7a:c7:fb:bc:ca:b9:3d:1d:0f:95:50:9d:bb: 02:dd:86:8d:6e:37:ff:13:38:57:55:61:7f:50:cd: bc:87:70:84:bd:8e:19:de:5b:ba:d6:83:68:1d:ea: ed:44:4b:db:06:88:fe:81:43:7d:5a:ac:f9:3c:8c: 46:c2:19:36:a6:62:e8:52:ba:f3:ae:e1:45:17:35: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:78:3A:CA:BD:1C:1B:A8:C9:1C:81:A1:93:7E:9F:98:E4:B2:8C X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/1ul4Osq9HBuoyRyBoZN-n5jksow.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 38:2e:b3:61:84:f0:63:c0:4d:64:c9:1f:56:de:34:c1:c9:c1: 4f:1b:8f:be:4e:3e:e3:93:4e:01:45:47:e8:42:eb:d6:85:d1: a0:e0:e4:21:46:4b:9c:47:2f:39:f2:bc:6f:4e:28:2a:53:a6: d3:6a:86:8b:57:8e:44:9b:80:0c:b4:6c:2f:29:e9:5f:87:58: a3:c8:78:4a:1f:68:43:d5:c5:a9:c7:5d:5a:bb:0f:23:0b:d1: e3:eb:fd:e6:16:f8:7e:4d:06:fa:5f:9c:01:eb:08:e3:51:b5: e7:5f:59:90:62:0a:4f:c9:3b:f8:ab:18:4d:ee:92:57:5f:d0: 10:ed:05:dc:85:fe:73:13:3d:8b:f0:d3:b8:74:a8:72:25:b3: 27:c6:e8:88:9e:bd:06:8d:e7:2d:82:0f:52:4d:76:f3:ec:a0: 4a:50:98:81:10:f7:fc:62:78:76:0e:d5:d7:ce:2e:fe:47:5a: 06:fd:a9:9a:8a:99:b5:59:59:0a:95:61:3a:24:0f:ce:a1:64: d3:00:81:5a:49:1d:7d:8f:bd:f3:c0:d3:1b:b9:ac:8a:12:c7: 91:2a:e9:56:5c:85:23:a8:39:2e:97:74:ee:0c:0e:4c:43:fe: 0f:5a:9c:04:7b:1d:0d:35:fa:66:91:88:95:75:dc:cf:70:3a: 6a:31:e2:dd -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMzA5MDEx MDAxMDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ2RTk3ODNBQ0FCRDFD MUJBOEM5MUM4MUExOTM3RTlGOThFNEIyOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7zTcyLTSFTuA7oupb7PbCABc0sqK0vV4EfA8AH+djHB1dmREt +lDJX8nd+uHHSvc0YAgkVDh5+e4WkCUGqjw/0uSAqVgc5VgNpTBYaRD8oUzaLyeg e8XuC4PiHqy3Whb1aSscojnLh6AQEsH6l3T/En2eikHwqPOUkyZdKl/iV7MYXSHf PZZ2UlWW1su25+L4f9IkMKrz8GPCfGviwzLb+y2zAJGwbYLA2YouLrr5vFjJyy/b esf7vMq5PR0PlVCduwLdho1uN/8TOFdVYX9QzbyHcIS9jhneW7rWg2gd6u1ES9sG iP6BQ31arPk8jEbCGTamYuhSuvOu4UUXNaXvAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU1ul4Osq9HBuoyRyBoZN+n5jksowwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvMXVsNE9zcTlIQnVveVJ5Qm9aTi1u NWprc293LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBhtkQDAN BgkqhkiG9w0BAQsFAAOCAQEAOC6zYYTwY8BNZMkfVt40wcnBTxuPvk4+45NOAUVH 6ELr1oXRoODkIUZLnEcvOfK8b04oKlOm02qGi1eORJuADLRsLynpX4dYo8h4Sh9o Q9XFqcddWrsPIwvR4+v95hb4fk0G+l+cAesI41G1519ZkGIKT8k7+KsYTe6SV1/Q EO0F3IX+cxM9i/DTuHSociWzJ8boiJ69Bo3nLYIPUk128+ygSlCYgRD3/GJ4dg7V 184u/kdaBv2pmoqZtVlZCpVhOiQPzqFk0wCBWkkdfY+988DTG7msihLHkSrpVlyF I6g5Lpd07gwOTEP+D1qcBHsdDTX6ZpGIlXXcz3A6ajHi3Q== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:53 2024 by rpki-client on console-ams.rpki-client.org