$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/r94PRjFaGKPSi_PFzF_UsCsqR2M.roa File: r94PRjFaGKPSi_PFzF_UsCsqR2M.roa (raw, json) Hash identifier: MfBoxtr1MqGBbWhTfeIyzsJeWBRschy1MQZmvvV9TR0= Subject key identifier: AF:DE:0F:46:31:5A:18:A3:D2:8B:F3:C5:CC:5F:D4:B0:2B:2A:47:63 Certificate issuer: /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Certificate serial: 0C30 Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/r94PRjFaGKPSi_PFzF_UsCsqR2M.roa Signing time: Mon 26 Aug 2024 05:34:43 +0000 ROA not before: Mon 26 Aug 2024 05:34:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131618 IP address blocks: 103.122.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Validity Not Before: Aug 26 05:34:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AFDE0F46315A18A3D28BF3C5CC5FD4B02B2A4763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:06:2d:2b:1d:ee:db:23:cd:6d:cd:4f:d2: 1a:d7:5b:dd:63:bc:5a:17:d7:b1:d8:21:64:cc:b5: b8:6d:38:b7:03:b9:21:5e:59:53:6b:07:b8:f0:7e: bc:8f:d9:41:d7:8b:fb:eb:49:78:f7:64:c8:fe:bb: 1b:31:87:cc:56:66:1a:45:5d:01:aa:eb:65:13:7d: d3:c1:33:d6:be:2a:7a:66:ad:49:bb:95:1b:65:47: 6f:a4:16:36:7e:7a:1b:a7:8d:6b:d9:0f:22:12:4f: 46:d5:04:38:0c:f5:58:ae:5f:85:42:9b:5d:82:ee: 2c:87:5a:82:a7:6d:d8:9e:be:50:17:0b:30:c7:e7: b8:f5:94:a7:65:e6:ec:5e:b2:35:2f:3d:4e:9b:20: 04:41:2e:26:fc:7c:79:4e:0f:b2:c3:75:f3:e7:49: fe:4d:11:4f:f6:e5:f1:54:0c:f9:72:1d:92:14:4b: f0:7a:9c:84:d4:ea:dd:01:7b:b5:35:61:0c:5a:c8: a3:d8:c7:2c:17:a7:78:3d:52:f8:39:45:e3:c6:52: 57:bd:fb:1c:01:ac:5c:24:be:5f:20:46:8c:3f:4a: 06:86:39:97:36:d6:5b:f4:7a:55:c2:a0:84:e1:4c: 27:e3:cd:7b:ee:32:d8:08:2f:23:f5:31:8a:de:cc: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DE:0F:46:31:5A:18:A3:D2:8B:F3:C5:CC:5F:D4:B0:2B:2A:47:63 X509v3 Authority Key Identifier: keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/r94PRjFaGKPSi_PFzF_UsCsqR2M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.227.0/24 Signature Algorithm: sha256WithRSAEncryption 83:6b:50:c6:c3:f6:a7:ff:83:e2:55:45:0b:7e:03:f4:79:03: b6:3e:d8:ba:a0:05:05:be:fd:7f:ae:0a:23:35:08:4b:17:34: 3b:9c:ae:fa:d0:56:c7:96:96:2a:18:03:66:00:f1:ef:d2:49: d1:ef:d0:9c:07:1e:09:a6:ee:48:f5:f5:1c:56:9b:51:2a:3c: 3a:bc:10:05:52:54:83:ec:a5:af:7b:20:62:fc:9f:85:e8:ad: 02:30:e5:8e:6c:03:f9:d3:da:7f:5b:a4:6b:87:e5:03:7a:21: 29:80:41:65:87:62:37:38:32:4d:1c:58:b8:d6:cd:4e:56:f4: 61:d4:32:8f:c5:71:dd:94:a3:ac:81:42:7b:ab:52:b7:06:b2: 66:06:54:5d:ba:70:8a:41:d2:c8:3d:ee:8a:67:dd:df:af:48: bb:61:f3:27:6f:5b:6d:3f:1e:de:5c:b5:8b:37:f3:03:fe:1b: c4:1b:08:72:a9:16:1f:6f:08:8e:58:7e:61:a8:21:4d:52:25: 08:b7:4d:d9:c2:bc:0a:86:37:db:0d:80:b0:84:50:8b:2f:ca: 68:a5:29:62:0e:dd:65:cc:b2:c5:64:ca:cf:2b:fb:5a:c9:fc: 62:53:65:25:48:6a:a0:b8:08:a1:a8:1f:c3:2a:9d:f4:3c:56: 59:c5:81:4d -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjM0 MDBBQTZFNkM2OEIxM0REREM5QzAwQjgyNTg2MTI0MjczRkE5QjAeFw0yNDA4MjYw NTM0NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFGREUwRjQ2MzE1QTE4 QTNEMjhCRjNDNUNDNUZENEIwMkIyQTQ3NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCapgYtKx3u2yPNbc1P0hrXW91jvFoX17HYIWTMtbhtOLcDuSFe WVNrB7jwfryP2UHXi/vrSXj3ZMj+uxsxh8xWZhpFXQGq62UTfdPBM9a+KnpmrUm7 lRtlR2+kFjZ+ehunjWvZDyIST0bVBDgM9ViuX4VCm12C7iyHWoKnbdievlAXCzDH 57j1lKdl5uxesjUvPU6bIARBLib8fHlOD7LDdfPnSf5NEU/25fFUDPlyHZIUS/B6 nITU6t0Be7U1YQxayKPYxywXp3g9Uvg5RePGUle9+xwBrFwkvl8gRow/SgaGOZc2 1lv0elXCoIThTCfjzXvuMtgILyP1MYrezBRVAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUr94PRjFaGKPSi/PFzF/UsCsqR2MwHwYDVR0jBBgwFoAUY0AKpubGixPd3JwA uCWGEkJz+pswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklTSU9O NFlFUy9ZMEFLcHViR2l4UGQzSndBdUNXR0VrSnotcHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1kwQUtwdWJHaXhQZDNKd0F1Q1dHRWtKei1wcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1ZJU0lPTjRZRVMvcjk0UFJqRmFH S1BTaV9QRnpGX1VzQ3NxUjJNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGd64zANBgkqhkiG9w0BAQsFAAOCAQEAg2tQxsP2p/+D4lVFC34D9HkD tj7YuqAFBb79f64KIzUISxc0O5yu+tBWx5aWKhgDZgDx79JJ0e/QnAceCabuSPX1 HFabUSo8OrwQBVJUg+ylr3sgYvyfheitAjDljmwD+dPaf1uka4flA3ohKYBBZYdi NzgyTRxYuNbNTlb0YdQyj8Vx3ZSjrIFCe6tStwayZgZUXbpwikHSyD3uimfd369I u2HzJ29bbT8e3ly1izfzA/4bxBsIcqkWH28Ijlh+YaghTVIlCLdN2cK8CoY32w2A sIRQiy/KaKUpYg7dZcyyxWTKzyv7Wsn8YlNlJUhqoLgIoagfwyqd9DxWWcWBTQ== -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:49 2024 by rpki-client on console-ams.rpki-client.org