$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/JX-WQrpu2A34i2Kia-zanb8VawE.roa File: JX-WQrpu2A34i2Kia-zanb8VawE.roa (raw, json) Hash identifier: ILVv2d2P3ieg8J3leagNDn0qUpwXBgbfNeokEkEIJXw= Subject key identifier: 25:7F:96:42:BA:6E:D8:0D:F8:8B:62:A2:6B:EC:DA:9D:BF:15:6B:01 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0B6D Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/JX-WQrpu2A34i2Kia-zanb8VawE.roa Signing time: Fri 01 Sep 2023 10:13:55 +0000 ROA not before: Fri 01 Sep 2023 10:13:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 132819 IP address blocks: 61.58.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 07:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Sep 1 10:13:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=257F9642BA6ED80DF88B62A26BECDA9DBF156B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c5:04:88:3d:12:65:ca:2d:4d:be:73:5c:28: 1e:1a:8c:10:39:8c:31:2b:19:63:22:7d:0d:fa:34: 10:84:df:d1:d3:a4:72:56:70:d7:e9:38:77:d5:61: 1e:8c:76:0a:f8:ab:39:dd:ba:08:ff:35:ed:e2:a7: de:c5:29:92:6f:e4:18:c8:ad:11:e7:63:d8:17:cd: 48:16:07:b8:1f:fb:f8:2f:89:78:6e:1d:18:38:38: 92:91:79:e2:d4:5c:b4:a0:39:b3:70:0d:51:0c:66: 05:e5:cb:c5:a3:ce:b4:f8:06:36:33:d4:ad:7a:64: 4f:22:05:eb:97:f8:21:a9:46:a2:c9:8e:b3:1a:57: bc:ec:0f:cb:93:6e:8a:96:85:da:aa:88:6e:44:e7: d8:9b:ab:16:21:21:9e:78:70:40:38:be:48:6e:b3: 17:3f:fb:4d:86:11:95:23:a8:db:a5:74:f7:72:73: fe:25:26:46:d1:64:34:ca:71:27:20:96:5c:44:bf: 51:38:d6:0f:99:5f:19:4d:60:91:d5:66:91:85:4d: be:8b:df:cf:7b:d1:dc:00:12:44:e9:64:92:60:be: c2:34:01:a7:06:54:a1:98:aa:c5:6a:b6:ca:ee:00: 2c:dd:94:d8:8e:60:0a:b4:e5:3b:de:7c:48:b2:c3: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7F:96:42:BA:6E:D8:0D:F8:8B:62:A2:6B:EC:DA:9D:BF:15:6B:01 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/JX-WQrpu2A34i2Kia-zanb8VawE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.38.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:05:e6:bf:4e:d3:fa:19:c7:4a:bb:e8:d9:49:6d:85:1f:5c: e2:ef:01:b9:ec:6c:94:7c:1d:d9:02:cd:13:8e:a7:7b:ca:20: aa:08:c9:a0:cd:00:8c:f7:b0:3e:a7:92:9b:0c:23:39:b9:4a: 31:87:f8:d3:fe:b8:d6:f0:28:fb:f0:aa:3e:64:47:07:3e:49: 1c:a3:a6:34:60:37:23:79:6e:3d:44:67:54:4c:0c:5b:e3:73: 60:af:74:06:a6:06:88:42:22:f3:d0:2e:82:42:9d:bb:29:b8: f3:13:e4:73:30:62:84:a6:50:9f:a2:c9:94:48:18:8e:30:40: e0:fb:de:a2:18:19:1d:6a:80:19:69:82:11:00:69:a7:29:2a: 7f:dc:a1:d0:1d:c0:c9:5f:c6:90:bd:99:39:14:e6:80:9e:89: 2d:de:a0:a9:a0:c9:1e:12:b1:0d:c4:e0:50:c0:a5:af:83:a6: ad:9f:29:d7:70:1e:64:3e:1b:97:ab:fd:44:bc:1c:b4:d3:b6: 30:d8:83:92:77:83:03:c6:2e:0a:cf:9a:a1:e4:18:58:97:6c: 0d:45:df:b8:84:7a:b8:f0:0e:b6:5e:2f:9b:7b:3d:53:95:9d: 21:3c:a1:30:85:36:68:cf:64:a0:d3:52:27:3c:b2:6b:24:75: 4a:8f:e7:ac -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICC20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yMzA5MDEx MDEzNTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI1N0Y5NjQyQkE2RUQ4 MERGODhCNjJBMjZCRUNEQTlEQkYxNTZCMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD6xQSIPRJlyi1NvnNcKB4ajBA5jDErGWMifQ36NBCE39HTpHJW cNfpOHfVYR6Mdgr4qzndugj/Ne3ip97FKZJv5BjIrRHnY9gXzUgWB7gf+/gviXhu HRg4OJKReeLUXLSgObNwDVEMZgXly8WjzrT4BjYz1K16ZE8iBeuX+CGpRqLJjrMa V7zsD8uTboqWhdqqiG5E59ibqxYhIZ54cEA4vkhusxc/+02GEZUjqNuldPdyc/4l JkbRZDTKcScgllxEv1E41g+ZXxlNYJHVZpGFTb6L38970dwAEkTpZJJgvsI0AacG VKGYqsVqtsruACzdlNiOYAq05TvefEiywzGpAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJX+WQrpu2A34i2Kia+zanb8VawEwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9KWC1XUXJwdTJBMzRpMktpYS16 YW5iOFZhd0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTom MA0GCSqGSIb3DQEBCwUAA4IBAQCMBea/TtP6GcdKu+jZSW2FH1zi7wG57GyUfB3Z As0Tjqd7yiCqCMmgzQCM97A+p5KbDCM5uUoxh/jT/rjW8Cj78Ko+ZEcHPkkco6Y0 YDcjeW49RGdUTAxb43Ngr3QGpgaIQiLz0C6CQp27KbjzE+RzMGKEplCfosmUSBiO MEDg+96iGBkdaoAZaYIRAGmnKSp/3KHQHcDJX8aQvZk5FOaAnokt3qCpoMkeErEN xOBQwKWvg6atnynXcB5kPhuXq/1EvBy007Yw2IOSd4MDxi4Kz5qh5BhYl2wNRd+4 hHq48A62Xi+bez1TlZ0hPKEwhTZoz2Sg01InPLJrJHVKj+es -----END CERTIFICATE-----Generated at Sat May 4 12:15:24 2024 by rpki-client on console-fra.rpki-client.org