$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/vqCa_gAQg_lVSjcrmb9rP9QXlAQ.roa File: vqCa_gAQg_lVSjcrmb9rP9QXlAQ.roa (raw, json) Hash identifier: 1Tu/fHgmzP9DBG5liGraxzVD1TuoaXEidzAXyXQztEk= Subject key identifier: BE:A0:9A:FE:00:10:83:F9:55:4A:37:2B:99:BF:6B:3F:D4:17:94:04 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0B69 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/vqCa_gAQg_lVSjcrmb9rP9QXlAQ.roa Signing time: Fri 01 Sep 2023 10:13:54 +0000 ROA not before: Fri 01 Sep 2023 10:13:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18018 IP address blocks: 122.255.94.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 23:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2921 (0xb69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Sep 1 10:13:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BEA09AFE001083F9554A372B99BF6B3FD4179404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:bd:1d:6c:54:f3:67:9a:62:d0:57:bc:94: 82:c5:55:2a:6f:27:d3:2d:e3:fb:9c:64:9d:31:e8: 25:57:86:d9:04:e7:ac:51:49:85:28:f7:c9:d6:a9: 12:0c:c6:fc:37:2d:e7:6c:2e:7f:ab:52:58:01:84: fa:ed:3f:3f:7a:fa:43:08:ac:1e:79:fb:1f:4b:ca: f5:d2:6e:27:a1:43:e9:21:74:8d:dd:42:3a:95:bd: e1:cb:45:8f:3f:ef:a9:09:38:32:2b:50:aa:e2:62: 09:74:81:e8:5a:d5:d0:aa:60:ad:98:06:d6:2a:59: 47:8c:a7:1a:71:d8:27:60:ae:e0:1a:69:8e:29:7e: 61:83:cd:22:bd:63:43:29:17:65:40:87:ca:11:fd: fc:61:3a:40:dd:6b:d0:90:7e:05:b0:72:fc:e5:3a: 22:cd:21:49:3d:a6:e8:3e:0b:90:ce:9a:32:8e:dc: 87:3e:58:81:05:ff:ff:2a:83:de:03:74:f6:95:a5: 67:38:c8:7d:00:d5:e7:f0:79:77:0d:62:ee:e4:d6: 5e:48:54:e7:40:19:22:5d:75:2c:60:f0:d1:1a:23: 43:a9:c8:7e:dd:f4:2d:35:8c:b2:42:b0:67:4f:c7: 0b:ca:cc:dd:0f:8f:d3:c0:03:0b:5c:4f:1d:39:92: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A0:9A:FE:00:10:83:F9:55:4A:37:2B:99:BF:6B:3F:D4:17:94:04 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/vqCa_gAQg_lVSjcrmb9rP9QXlAQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.94.64/26 Signature Algorithm: sha256WithRSAEncryption 0e:43:41:27:34:d9:99:d9:5b:66:c9:28:c3:eb:29:78:c8:76: b5:b7:4a:11:5b:0e:d6:ec:39:a6:60:4b:e7:aa:cb:93:8e:3d: e1:5b:0e:1f:1b:df:d4:5a:29:53:03:04:3b:0b:f1:e3:e3:b3: 74:e3:c8:4a:ec:c9:a1:1b:94:af:cb:69:4d:d8:30:83:c1:49: 5a:49:e0:1f:d1:4f:1c:88:9b:1a:26:d3:72:d7:a2:e9:f6:fe: e9:60:1f:36:ca:f3:fd:2b:95:e7:13:d9:cf:3c:fd:6d:74:30: 1a:a4:77:45:7c:90:02:42:22:d2:38:75:bb:bf:91:cb:7e:3a: 9a:83:9a:78:db:fd:76:23:3e:aa:4a:b9:40:eb:19:76:57:17: 25:bb:49:c1:6a:de:b0:37:39:6d:b4:b2:58:cc:0a:e2:8c:ba: 4b:b3:2d:ba:1e:8a:b1:84:f0:09:32:be:ab:ae:50:c1:df:a8: 67:6e:5b:77:00:ab:d2:8a:51:e2:37:5b:4e:51:d3:3f:77:1f: df:5c:fe:b6:05:ba:9d:b1:f7:d8:83:f7:e2:c9:53:b8:a5:cf: de:11:d6:3e:d0:00:b5:a5:60:57:0b:de:7a:88:03:52:b7:cd: a6:0a:b3:33:56:2c:de:b6:e3:23:6d:5a:f4:96:93:1f:90:72: a7:93:26:4b -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICC2kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yMzA5MDEx MDEzNTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJFQTA5QUZFMDAxMDgz Rjk1NTRBMzcyQjk5QkY2QjNGRDQxNzk0MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3zr0dbFTzZ5pi0Fe8lILFVSpvJ9Mt4/ucZJ0x6CVXhtkE56xR SYUo98nWqRIMxvw3LedsLn+rUlgBhPrtPz96+kMIrB55+x9LyvXSbiehQ+khdI3d QjqVveHLRY8/76kJODIrUKriYgl0geha1dCqYK2YBtYqWUeMpxpx2CdgruAaaY4p fmGDzSK9Y0MpF2VAh8oR/fxhOkDda9CQfgWwcvzlOiLNIUk9pug+C5DOmjKO3Ic+ WIEF//8qg94DdPaVpWc4yH0A1efweXcNYu7k1l5IVOdAGSJddSxg8NEaI0OpyH7d 9C01jLJCsGdPxwvKzN0Pj9PAAwtcTx05kqYRAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUvqCa/gAQg/lVSjcrmb9rP9QXlAQwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC92cUNhX2dBUWdfbFZTamNybWI5 clA5UVhsQVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGev9e QDANBgkqhkiG9w0BAQsFAAOCAQEADkNBJzTZmdlbZskow+speMh2tbdKEVsO1uw5 pmBL56rLk4494VsOHxvf1FopUwMEOwvx4+OzdOPISuzJoRuUr8tpTdgwg8FJWkng H9FPHIibGibTctei6fb+6WAfNsrz/SuV5xPZzzz9bXQwGqR3RXyQAkIi0jh1u7+R y346moOaeNv9diM+qkq5QOsZdlcXJbtJwWresDc5bbSyWMwK4oy6S7Mtuh6KsYTw CTK+q65Qwd+oZ25bdwCr0opR4jdbTlHTP3cf31z+tgW6nbH32IP34slTuKXP3hHW PtAAtaVgVwveeogDUrfNpgqzM1Ys3rbjI21a9JaTH5Byp5MmSw== -----END CERTIFICATE-----Generated at Fri May 3 16:58:00 2024 by rpki-client on console-ams.rpki-client.org