$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/S8UDrwg3W1Rq9pkNSleU6nKkFLw.roa File: S8UDrwg3W1Rq9pkNSleU6nKkFLw.roa (raw, json) Hash identifier: 2/czRi3OkNW60xAUNqXLkxNyfISZhSiFbGWNn0JF9Lo= Subject key identifier: 4B:C5:03:AF:08:37:5B:54:6A:F6:99:0D:4A:57:94:EA:72:A4:14:BC Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0BA8 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/S8UDrwg3W1Rq9pkNSleU6nKkFLw.roa Signing time: Fri 01 Sep 2023 10:01:09 +0000 ROA not before: Fri 01 Sep 2023 10:01:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 61.67.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Sep 1 10:01:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4BC503AF08375B546AF6990D4A5794EA72A414BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:52:54:3b:41:9b:d4:af:07:b5:7f:20:51:41: 34:9b:95:90:4c:7f:f9:d1:0d:eb:96:10:69:f8:c0: d3:0c:af:07:bf:a1:9b:b2:03:4f:7d:60:98:04:8e: 9b:59:48:32:1c:8b:35:8d:0d:5f:6d:73:63:1d:1c: 0e:18:11:58:0e:2f:e6:84:7a:21:33:e6:2c:c2:9b: d2:ed:cb:cf:7e:de:76:fb:80:eb:51:e4:1c:37:e3: 3c:89:df:0a:6a:d7:0b:74:19:03:8a:31:ae:3b:d2: 96:8a:f2:09:2f:6a:c9:a7:72:29:19:15:13:59:cf: b3:45:29:66:a5:31:0a:8c:b1:de:29:4d:9f:00:35: ca:4d:42:5a:12:d8:10:0f:df:f9:06:85:24:3a:5a: d1:4c:a6:6d:b5:06:94:59:ff:de:20:8b:88:18:3c: 21:3f:e0:2d:67:f1:42:4a:78:95:59:ad:36:7f:15: f9:b9:2a:93:13:b5:fd:ee:e0:cb:57:22:0f:ec:5f: 84:44:c2:f4:2a:61:08:c1:15:b5:d8:31:73:ab:0b: 6f:cd:d5:42:ef:a0:d4:51:35:2f:6d:9f:ef:a6:aa: ae:10:d7:07:fa:ab:5b:80:a2:59:b7:dc:10:10:e2: 9f:ff:89:09:c9:e4:c4:47:4b:af:22:22:cb:d3:d7: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C5:03:AF:08:37:5B:54:6A:F6:99:0D:4A:57:94:EA:72:A4:14:BC X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/S8UDrwg3W1Rq9pkNSleU6nKkFLw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.67.32.0/20 Signature Algorithm: sha256WithRSAEncryption 11:8a:a4:f6:f1:61:1f:b9:08:6d:55:a8:95:e5:f3:db:2c:09: 1f:6c:1b:4b:47:61:2c:2c:ff:e4:2a:c5:e5:e6:15:a6:5f:25: b2:c7:3c:5b:25:38:20:91:81:de:fb:2b:d1:84:7d:84:00:d9: 42:11:62:8a:b3:6d:32:cd:c1:04:85:80:73:16:e6:d0:63:b7: db:15:82:65:5f:72:37:c7:3b:5d:ca:0c:87:af:a4:62:58:9f: 86:29:a5:21:28:1a:8e:af:f8:de:68:ee:7e:3d:c5:ca:2d:66: 0d:1e:89:fd:13:eb:ec:63:90:58:6e:a5:e1:09:42:3f:3b:3e: ea:b6:dd:f6:d1:1e:50:45:76:ba:44:70:b6:fe:85:60:38:41: 62:3a:4d:ff:3a:78:19:66:a5:da:22:fd:70:6d:63:9c:92:ff: 2c:8c:a4:3d:8d:8c:90:c3:1b:d1:76:e1:ea:1f:e3:78:10:f5: 81:19:47:eb:17:d0:44:fe:be:57:cc:c9:81:15:a9:58:2c:ce: 4b:66:31:bf:ba:e8:f4:d8:a1:79:c6:54:6a:32:73:ac:23:2a: d0:19:cf:cd:5c:57:83:66:0f:8f:8b:12:07:75:42:a5:4b:e0: 17:1b:a0:50:ed:8f:54:c1:48:7b:3e:33:5e:fb:8e:d4:01:d7: 67:30:cd:58 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMzA5MDEx MDAxMDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRCQzUwM0FGMDgzNzVC NTQ2QUY2OTkwRDRBNTc5NEVBNzJBNDE0QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfUlQ7QZvUrwe1fyBRQTSblZBMf/nRDeuWEGn4wNMMrwe/oZuy A099YJgEjptZSDIcizWNDV9tc2MdHA4YEVgOL+aEeiEz5izCm9Lty89+3nb7gOtR 5Bw34zyJ3wpq1wt0GQOKMa470paK8gkvasmncikZFRNZz7NFKWalMQqMsd4pTZ8A NcpNQloS2BAP3/kGhSQ6WtFMpm21BpRZ/94gi4gYPCE/4C1n8UJKeJVZrTZ/Ffm5 KpMTtf3u4MtXIg/sX4REwvQqYQjBFbXYMXOrC2/N1ULvoNRRNS9tn++mqq4Q1wf6 q1uAolm33BAQ4p//iQnJ5MRHS68iIsvT1+HJAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUS8UDrwg3W1Rq9pkNSleU6nKkFLwwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvUzhVRHJ3ZzNXMVJxOXBrTlNsZVU2 bktrRkx3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD1DIDAN BgkqhkiG9w0BAQsFAAOCAQEAEYqk9vFhH7kIbVWoleXz2ywJH2wbS0dhLCz/5CrF 5eYVpl8lssc8WyU4IJGB3vsr0YR9hADZQhFiirNtMs3BBIWAcxbm0GO32xWCZV9y N8c7XcoMh6+kYlifhimlISgajq/43mjufj3Fyi1mDR6J/RPr7GOQWG6l4QlCPzs+ 6rbd9tEeUEV2ukRwtv6FYDhBYjpN/zp4GWal2iL9cG1jnJL/LIykPY2MkMMb0Xbh 6h/jeBD1gRlH6xfQRP6+V8zJgRWpWCzOS2Yxv7ro9NihecZUajJzrCMq0BnPzVxX g2YPj4sSB3VCpUvgFxugUO2PVMFIez4zXvuO1AHXZzDNWA== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org