$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/iYHSHlwQlPpRS5h8VAiYytnm7ZM.roa File: iYHSHlwQlPpRS5h8VAiYytnm7ZM.roa (raw, json) Hash identifier: 6Ote3D0rrDpzIf8Xpz1HWOVppXUfpBFUf4z2rsWF/Yw= Subject key identifier: 89:81:D2:1E:5C:10:94:FA:51:4B:98:7C:54:08:98:CA:D9:E6:ED:93 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0B6A Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/iYHSHlwQlPpRS5h8VAiYytnm7ZM.roa Signing time: Fri 01 Sep 2023 10:13:54 +0000 ROA not before: Fri 01 Sep 2023 10:13:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131618 IP address blocks: 61.58.41.128/29 maxlen: 29 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 07:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2922 (0xb6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Sep 1 10:13:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8981D21E5C1094FA514B987C540898CAD9E6ED93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:e5:c3:ba:41:f8:98:f4:8b:6b:e2:f1:08: 47:80:a7:80:1a:f2:09:c7:0e:6b:16:8f:3f:cd:9b: d9:d5:b1:89:1c:92:bc:08:18:d3:9b:15:ac:c9:a0: bc:b4:8c:a9:0d:3f:0b:e4:77:18:39:27:0c:19:73: 72:06:81:c8:0e:e3:f1:49:b7:76:d2:d1:ba:f9:58: c3:aa:c7:1f:7e:3c:9a:41:63:11:0b:ed:ad:fe:c3: ce:e7:53:96:ea:20:03:bd:33:20:51:d5:9f:65:a4: 4e:de:03:c1:be:3a:a3:91:12:7e:a2:40:49:ff:3d: 27:7e:67:6e:6d:00:09:05:73:86:e2:ec:88:cb:ee: 64:12:75:a3:e0:6b:cb:34:da:c6:11:e9:03:1f:df: 1a:ed:17:96:a7:c2:d6:1f:d5:30:ed:a8:67:9b:05: f9:11:c6:a9:6d:7e:36:2b:0d:04:e6:b0:54:eb:b5: 6f:42:b0:6f:b4:e7:36:ae:d9:21:47:8e:2e:d1:64: c3:7a:86:a2:b6:70:7a:77:de:09:e7:3b:fc:40:6b: f6:e4:a9:e9:2f:21:f4:3d:98:7c:b5:a7:a4:b2:03: b0:62:a5:6a:91:77:65:f6:8a:34:c4:b4:42:3c:04: 59:8a:ab:9e:94:bb:87:7a:ca:27:31:08:eb:82:d8: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:81:D2:1E:5C:10:94:FA:51:4B:98:7C:54:08:98:CA:D9:E6:ED:93 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/iYHSHlwQlPpRS5h8VAiYytnm7ZM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.41.128/29 Signature Algorithm: sha256WithRSAEncryption 5d:63:de:74:e0:62:5d:30:4f:31:18:fa:2b:3f:cb:ea:9e:ba: a0:01:04:83:8d:a8:9d:d3:e2:79:69:2a:60:c4:27:ac:5a:a6: 06:d2:e7:27:29:21:3d:e3:1b:60:86:43:73:c4:f2:80:c8:f7: 48:07:87:ab:f6:64:17:92:be:a2:33:22:9d:87:a8:90:81:19: 2e:4a:a5:5a:7d:d4:a6:95:45:6a:13:2f:30:2c:55:c1:2f:e1: 35:3c:af:77:5e:50:e5:73:ff:a5:9f:5c:69:15:6c:f4:de:5f: 69:9c:35:b0:cd:cd:88:18:ca:fa:5f:9e:d3:5b:f7:72:b0:8e: 78:32:6b:36:19:8e:65:4f:de:d6:bd:7b:b8:93:8a:6f:4e:ba: 72:08:4e:82:b6:4d:47:3f:ed:05:7b:55:21:46:92:33:dd:be: 32:49:7d:96:73:af:d4:aa:e2:17:d5:c6:91:6c:45:37:cd:a8: d4:d4:44:27:b3:36:c6:fb:97:fb:de:1c:01:81:11:59:ca:33: ec:60:4f:d8:dd:51:19:f9:f5:9f:cb:c2:d0:fe:b4:c2:03:d2: fb:72:75:80:f9:c8:12:d1:bf:03:44:c4:53:fc:6a:3a:c7:84: 85:3c:21:10:d4:94:41:67:ad:3c:2f:7c:63:94:6f:3a:62:34: b3:76:9f:bb -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICC2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yMzA5MDEx MDEzNTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg5ODFEMjFFNUMxMDk0 RkE1MTRCOTg3QzU0MDg5OENBRDlFNkVEOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE8eXDukH4mPSLa+LxCEeAp4Aa8gnHDmsWjz/Nm9nVsYkckrwI GNObFazJoLy0jKkNPwvkdxg5JwwZc3IGgcgO4/FJt3bS0br5WMOqxx9+PJpBYxEL 7a3+w87nU5bqIAO9MyBR1Z9lpE7eA8G+OqOREn6iQEn/PSd+Z25tAAkFc4bi7IjL 7mQSdaPga8s02sYR6QMf3xrtF5anwtYf1TDtqGebBfkRxqltfjYrDQTmsFTrtW9C sG+05zau2SFHji7RZMN6hqK2cHp33gnnO/xAa/bkqekvIfQ9mHy1p6SyA7BipWqR d2X2ijTEtEI8BFmKq56Uu4d6yicxCOuC2D5hAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUiYHSHlwQlPpRS5h8VAiYytnm7ZMwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9pWUhTSGx3UWxQcFJTNWg4VkFp WXl0bm03Wk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDPTop gDANBgkqhkiG9w0BAQsFAAOCAQEAXWPedOBiXTBPMRj6Kz/L6p66oAEEg42ondPi eWkqYMQnrFqmBtLnJykhPeMbYIZDc8TygMj3SAeHq/ZkF5K+ojMinYeokIEZLkql Wn3UppVFahMvMCxVwS/hNTyvd15Q5XP/pZ9caRVs9N5faZw1sM3NiBjK+l+e01v3 crCOeDJrNhmOZU/e1r17uJOKb066cghOgrZNRz/tBXtVIUaSM92+Mkl9lnOv1Kri F9XGkWxFN82o1NREJ7M2xvuX+94cAYERWcoz7GBP2N1RGfn1n8vC0P60wgPS+3J1 gPnIEtG/A0TEU/xqOseEhTwhENSUQWetPC98Y5RvOmI0s3afuw== -----END CERTIFICATE-----Generated at Sat May 4 12:14:02 2024 by rpki-client on console-ams.rpki-client.org