$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa File: Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa (raw, json) Hash identifier: G6LAvVVeemPfca9YNhEWfwcNZ0YMCCvdm+3msIWgQgk= Subject key identifier: 51:DF:0F:BC:36:3A:9E:3E:9F:84:25:31:33:CA:6B:2D:29:FD:BB:0E Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 116C Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa Signing time: Fri 01 Sep 2023 03:14:20 +0000 ROA not before: Fri 01 Sep 2023 03:14:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 16509 IP address blocks: 103.235.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 23:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4460 (0x116c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Sep 1 03:14:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=51DF0FBC363A9E3E9F84253133CA6B2D29FDBB0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:7f:99:64:9c:11:50:0c:97:78:11:a3:c3: 29:06:48:bc:6a:bc:00:15:06:65:68:d0:cb:f9:9c: 50:f3:48:1b:8d:38:94:14:e3:6f:0f:51:8c:c9:4b: ec:85:cb:ec:a7:42:38:e5:68:41:77:22:17:22:92: 8e:cd:58:61:4d:70:ff:b7:2a:d0:c9:d3:07:2e:83: 23:fa:bc:c5:e1:89:62:b3:3b:26:b0:51:ae:19:5f: 04:b8:a1:e5:b3:3f:21:fb:51:f3:4a:fd:8b:a0:72: be:c9:44:e4:61:1c:cc:59:57:a9:ed:7d:17:b5:af: 5b:fe:53:fa:cc:47:25:d6:84:8c:19:4b:77:22:4b: 37:4e:11:de:1f:50:33:80:4e:99:42:75:f2:97:72: 12:75:d1:06:d8:12:10:ee:e9:33:56:3f:bc:72:cf: f8:60:79:80:a4:a8:e5:f7:8c:b4:5a:a3:c2:7d:71: 50:32:9b:96:8f:28:0b:6d:08:69:79:ad:44:d2:a9: 76:cc:c4:b9:79:5c:18:e5:17:75:64:04:17:3e:b4: 80:0f:24:5f:4b:ad:92:d9:08:62:06:9e:d8:92:b7: 6d:11:f6:29:cc:c8:45:c1:2d:1f:d2:85:02:c2:5a: a4:0f:66:38:4b:8a:c2:ac:aa:ca:ed:a1:e2:79:89: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DF:0F:BC:36:3A:9E:3E:9F:84:25:31:33:CA:6B:2D:29:FD:BB:0E X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.235.88.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:db:9a:57:ac:a9:25:8e:0b:03:16:b0:5f:f7:93:77:27:e4: 2c:41:33:9a:57:60:10:ad:49:c6:d1:19:3c:48:c3:f2:de:21: 05:92:a1:33:ac:24:71:17:f9:86:ee:11:a3:34:9a:46:c5:00: c9:81:0b:9d:b9:23:56:10:53:67:d2:6e:07:0f:71:02:de:3a: ea:f5:a2:f1:e5:b5:d0:f1:02:88:dc:8f:22:bf:66:b1:22:27: 95:c4:11:2a:d2:e3:db:e2:1d:93:00:cd:3f:64:7d:1e:4c:a4: 79:5c:d3:57:f8:0d:a8:83:b8:2c:38:82:be:b0:7c:0a:52:11: 65:d1:53:1b:59:0e:80:57:ac:eb:55:40:db:84:2b:33:99:14: 48:10:70:ce:be:50:94:79:e0:97:0c:c5:a9:7a:a7:04:10:28: b4:10:f4:ef:e4:45:44:6c:0f:dd:c5:ad:47:6a:c9:7d:d6:df: 21:6a:b4:02:54:a9:8b:c0:39:6e:92:2c:50:f6:ab:5e:a4:97: e0:a9:92:b0:2d:6c:e9:c3:de:b9:c7:3b:32:22:04:15:5b:b5: 7b:8a:cc:03:7a:87:63:74:41:c7:31:a0:55:8d:fa:38:68:75: 14:0f:9a:fb:7d:b6:82:0b:1a:ad:ad:2b:69:a5:5b:39:4e:96: 18:64:ab:d4 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMzA5MDEw MzE0MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUxREYwRkJDMzYzQTlF M0U5Rjg0MjUzMTMzQ0E2QjJEMjlGREJCMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSJn+ZZJwRUAyXeBGjwykGSLxqvAAVBmVo0Mv5nFDzSBuNOJQU 428PUYzJS+yFy+ynQjjlaEF3Ihciko7NWGFNcP+3KtDJ0wcugyP6vMXhiWKzOyaw Ua4ZXwS4oeWzPyH7UfNK/Yugcr7JRORhHMxZV6ntfRe1r1v+U/rMRyXWhIwZS3ci SzdOEd4fUDOATplCdfKXchJ10QbYEhDu6TNWP7xyz/hgeYCkqOX3jLRao8J9cVAy m5aPKAttCGl5rUTSqXbMxLl5XBjlF3VkBBc+tIAPJF9LrZLZCGIGntiSt20R9inM yEXBLR/ShQLCWqQPZjhLisKsqsrtoeJ5id+/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUUd8PvDY6nj6fhCUxM8prLSn9uw4wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9VZDhQdkRZNm5qNmZoQ1V4TThw ckxTbjl1dzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+tY MA0GCSqGSIb3DQEBCwUAA4IBAQAr25pXrKkljgsDFrBf95N3J+QsQTOaV2AQrUnG 0Rk8SMPy3iEFkqEzrCRxF/mG7hGjNJpGxQDJgQuduSNWEFNn0m4HD3EC3jrq9aLx 5bXQ8QKI3I8iv2axIieVxBEq0uPb4h2TAM0/ZH0eTKR5XNNX+A2og7gsOIK+sHwK UhFl0VMbWQ6AV6zrVUDbhCszmRRIEHDOvlCUeeCXDMWpeqcEECi0EPTv5EVEbA/d xa1Hasl91t8harQCVKmLwDlukixQ9qtepJfgqZKwLWzpw965xzsyIgQVW7V7iswD eodjdEHHMaBVjfo4aHUUD5r7fbaCCxqtrStppVs5TpYYZKvU -----END CERTIFICATE-----Generated at Thu May 2 04:47:41 2024 by rpki-client on console-fra.rpki-client.org