$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/9IbmFFHgGlLRJUsBwdMXqZYUTp8.roa File: 9IbmFFHgGlLRJUsBwdMXqZYUTp8.roa (raw, json) Hash identifier: Wg4uHmTVyB4HG7CQ1bONXOLgvy7WQyNLp2FbEzeWG7s= Subject key identifier: F4:86:E6:14:51:E0:1A:52:D1:25:4B:01:C1:D3:17:A9:96:14:4E:9F Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0BA3 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/9IbmFFHgGlLRJUsBwdMXqZYUTp8.roa Signing time: Fri 01 Sep 2023 10:01:08 +0000 ROA not before: Fri 01 Sep 2023 10:01:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 61.60.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2979 (0xba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Sep 1 10:01:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F486E61451E01A52D1254B01C1D317A996144E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:50:8c:ba:1f:f8:b3:4d:0c:44:af:4c:3a:1c: f1:17:e4:85:06:d1:bd:33:6c:df:a9:77:3d:db:d7: 91:6c:08:ce:93:f7:52:9f:e7:c1:7b:50:b3:b4:f5: 10:21:34:11:03:de:f6:70:04:6c:6f:bb:73:db:a9: 45:97:9d:f8:f7:b5:1d:97:9c:fa:0a:e6:05:08:e8: ab:74:bf:be:19:29:0c:3a:32:9e:f4:d7:3d:a0:22: 2f:24:a6:92:d7:4e:95:66:c3:6e:0f:db:f8:2c:9c: 34:58:e4:cb:c8:c3:69:55:2e:5b:28:e2:ba:7f:00: 2a:e0:58:35:18:37:82:b1:07:77:64:d5:bb:93:7c: 58:20:6c:2c:84:2b:33:50:3d:be:b4:c0:56:96:5a: f2:09:e6:fe:03:be:2a:c3:c4:8f:84:15:1c:5d:a0: d6:4a:c7:12:7b:a7:b8:7d:43:58:3f:99:1a:fd:8e: 05:9c:bd:00:9a:ad:70:61:11:64:16:d2:09:37:38: 4d:9b:59:1f:be:9c:c4:5e:5b:6d:67:f5:12:1a:0f: a6:49:f1:c5:71:df:58:7b:af:5d:87:ea:6b:05:91: ae:c3:ac:12:51:d5:60:f6:f5:8f:1b:87:19:75:62: b7:d2:b7:a9:b0:e2:d3:2f:a7:7d:c9:92:2e:c3:1c: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:86:E6:14:51:E0:1A:52:D1:25:4B:01:C1:D3:17:A9:96:14:4E:9F X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/9IbmFFHgGlLRJUsBwdMXqZYUTp8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.224.0/20 Signature Algorithm: sha256WithRSAEncryption 88:83:6b:54:26:83:48:11:af:91:93:f0:44:64:7b:b0:1d:de: 1b:f4:e3:11:19:f2:78:5b:07:cb:76:45:62:91:ab:3f:bb:db: 84:9b:5f:d1:b4:2e:a8:98:eb:13:29:4a:82:36:79:5a:55:f1: c6:df:2a:f7:9c:0c:9a:47:cd:1c:8e:7c:a4:d9:35:64:ed:55: 91:e4:be:e4:ca:45:b9:ee:fe:85:6d:87:da:99:90:0b:13:51: 8a:91:42:76:3c:41:bd:d0:34:15:8a:db:c4:4a:a8:c1:e8:3a: 2d:20:a6:ca:58:d5:71:18:a1:90:bc:af:b6:78:65:9c:04:0b: 55:72:c8:a2:e9:6e:70:d0:4e:07:1c:43:3f:2f:da:c9:ea:8d: 98:39:bd:72:cc:b8:01:f1:b7:4f:5c:7a:1d:35:dd:f0:64:e6: f7:19:6a:a1:ef:30:18:9f:cc:02:af:0f:75:ef:72:d8:72:7a: fd:df:39:5c:3b:6b:4b:56:bc:a3:94:38:61:6c:90:4e:9a:9f: b9:dc:06:65:fa:26:24:2c:c2:c0:f3:41:c0:bd:9f:ca:a5:68: 50:33:6d:15:a6:c5:b1:be:e2:86:45:df:23:85:85:cc:10:22: f7:74:03:2f:50:1f:e0:2c:9d:87:d9:a6:7b:c0:b7:a0:5c:bb: 3b:09:c0:28 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMzA5MDEx MDAxMDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY0ODZFNjE0NTFFMDFB NTJEMTI1NEIwMUMxRDMxN0E5OTYxNDRFOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvUIy6H/izTQxEr0w6HPEX5IUG0b0zbN+pdz3b15FsCM6T91Kf 58F7ULO09RAhNBED3vZwBGxvu3PbqUWXnfj3tR2XnPoK5gUI6Kt0v74ZKQw6Mp70 1z2gIi8kppLXTpVmw24P2/gsnDRY5MvIw2lVLlso4rp/ACrgWDUYN4KxB3dk1buT fFggbCyEKzNQPb60wFaWWvIJ5v4DvirDxI+EFRxdoNZKxxJ7p7h9Q1g/mRr9jgWc vQCarXBhEWQW0gk3OE2bWR++nMReW21n9RIaD6ZJ8cVx31h7r12H6msFka7DrBJR 1WD29Y8bhxl1YrfSt6mw4tMvp33Jki7DHLSjAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU9IbmFFHgGlLRJUsBwdMXqZYUTp8wHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvOUlibUZGSGdHbExSSlVzQndkTVhx WllVVHA4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD084DAN BgkqhkiG9w0BAQsFAAOCAQEAiINrVCaDSBGvkZPwRGR7sB3eG/TjERnyeFsHy3ZF YpGrP7vbhJtf0bQuqJjrEylKgjZ5WlXxxt8q95wMmkfNHI58pNk1ZO1VkeS+5MpF ue7+hW2H2pmQCxNRipFCdjxBvdA0FYrbxEqoweg6LSCmyljVcRihkLyvtnhlnAQL VXLIoulucNBOBxxDPy/ayeqNmDm9csy4AfG3T1x6HTXd8GTm9xlqoe8wGJ/MAq8P de9y2HJ6/d85XDtrS1a8o5Q4YWyQTpqfudwGZfomJCzCwPNBwL2fyqVoUDNtFabF sb7ihkXfI4WFzBAi93QDL1Af4Cydh9mme8C3oFy7OwnAKA== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org