$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/iVJA7XGqOvvlMKGGS7iH_wElSLo.roa File: iVJA7XGqOvvlMKGGS7iH_wElSLo.roa (raw, json) Hash identifier: J67/fcfLsYQ5zDHZkL7theBIvkx7Q+OmHF8oodYQBLU= Subject key identifier: 89:52:40:ED:71:AA:3A:FB:E5:30:A1:86:4B:B8:87:FF:01:25:48:BA Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0C60 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/iVJA7XGqOvvlMKGGS7iH_wElSLo.roa Signing time: Fri 01 Sep 2023 10:20:37 +0000 ROA not before: Fri 01 Sep 2023 10:20:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18424 IP address blocks: 121.50.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Sep 1 10:20:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=895240ED71AA3AFBE530A1864BB887FF012548BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:84:75:42:19:b4:eb:d0:ae:be:35:b2:d9: a4:43:fd:35:0f:c7:fa:80:fc:27:d6:d7:6c:29:af: bd:ec:2a:12:b1:04:ad:00:ee:f3:06:bf:5d:4d:7c: d7:b7:38:e8:01:ba:b0:84:22:1b:86:ef:e8:6f:5f: bd:00:ee:eb:17:28:fe:ed:1e:ab:5b:52:5f:d2:3f: ec:79:09:e4:23:84:a3:9c:d8:4c:46:d5:be:be:da: 12:92:b5:2e:87:d0:ac:30:c1:8f:05:e2:33:d3:e3: ed:58:a7:6b:4e:28:28:48:ea:e9:73:c5:6a:6d:21: c2:57:d9:70:bb:8c:31:f2:5b:b2:cf:4f:6e:95:7c: 63:b3:4e:70:f5:1b:6c:89:ae:76:ed:d6:42:7c:a3: 80:0a:57:35:95:4f:84:26:41:2d:55:9c:5e:6e:4e: 2b:f8:e7:92:5f:b9:68:7a:ff:b4:31:df:c6:05:61: 4e:9f:74:e4:f3:5b:b7:0d:e7:9b:97:52:5d:ab:36: 09:0e:f8:bc:0d:ec:38:cb:4a:23:e8:a1:e9:6b:85: 36:8d:ab:99:bf:34:5e:fd:28:29:75:3b:dd:20:a8: 3f:a6:b8:a8:ef:0d:a5:ab:08:37:0f:33:93:67:24: 65:06:7a:98:10:9d:a1:2c:25:ab:89:83:75:5a:b5: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:40:ED:71:AA:3A:FB:E5:30:A1:86:4B:B8:87:FF:01:25:48:BA X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/iVJA7XGqOvvlMKGGS7iH_wElSLo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.144.0/21 Signature Algorithm: sha256WithRSAEncryption 3f:70:8f:0e:ba:b6:ef:ed:86:b0:b8:64:58:6b:d5:c3:2b:bf: 95:6b:7d:4f:19:12:31:ba:d4:92:f0:7b:04:4a:7a:5d:62:50: b8:80:bb:ae:31:30:85:69:61:8a:7a:2a:83:9e:34:66:2c:0e: 16:67:b0:36:1e:57:80:ee:61:87:35:9d:d8:8b:5f:11:38:2f: dd:d6:ff:3b:1a:6e:34:43:27:f9:c2:3a:3a:84:74:b0:b9:41: 15:2b:c8:55:b8:ad:6b:d0:f8:82:0e:08:e4:31:c8:67:68:4d: 75:f4:84:51:bc:34:1e:1b:47:dc:cc:0a:a6:5a:75:0b:da:92: da:5d:75:10:73:20:83:6c:32:05:64:a8:d4:9c:d9:d3:af:bf: e7:8e:11:73:f5:ff:1c:69:b0:28:9e:3a:cb:18:48:7f:31:7d: d7:7c:bf:a7:89:0b:46:6e:43:93:1b:73:96:e9:03:cb:b9:84: cd:06:99:0d:a5:41:9d:ce:9e:c5:32:89:48:b4:9b:43:c2:29: 08:11:2c:16:31:2a:52:2a:10:b9:81:90:0a:5a:53:5b:a7:2c: f8:18:01:f8:0e:31:ac:57:61:08:5d:eb:63:0c:23:78:ac:ab: 05:82:72:05:6b:32:55:2f:42:38:77:fe:68:f4:4e:66:d5:5d: 92:07:d1:d5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzA5MDEx MDIwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg5NTI0MEVENzFBQTNB RkJFNTMwQTE4NjRCQjg4N0ZGMDEyNTQ4QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCYIR1Qhm069CuvjWy2aRD/TUPx/qA/CfW12wpr73sKhKxBK0A 7vMGv11NfNe3OOgBurCEIhuG7+hvX70A7usXKP7tHqtbUl/SP+x5CeQjhKOc2ExG 1b6+2hKStS6H0KwwwY8F4jPT4+1Yp2tOKChI6ulzxWptIcJX2XC7jDHyW7LPT26V fGOzTnD1G2yJrnbt1kJ8o4AKVzWVT4QmQS1VnF5uTiv455JfuWh6/7Qx38YFYU6f dOTzW7cN55uXUl2rNgkO+LwN7DjLSiPooelrhTaNq5m/NF79KCl1O90gqD+muKjv DaWrCDcPM5NnJGUGepgQnaEsJauJg3VatZtFAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUiVJA7XGqOvvlMKGGS7iH/wElSLowHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2lWSkE3WEdxT3Z2 bE1LR0dTN2lIX3dFbFNMby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN5MpAwDQYJKoZIhvcNAQELBQADggEBAD9wjw66tu/thrC4ZFhr1cMrv5Vr fU8ZEjG61JLwewRKel1iULiAu64xMIVpYYp6KoOeNGYsDhZnsDYeV4DuYYc1ndiL XxE4L93W/zsabjRDJ/nCOjqEdLC5QRUryFW4rWvQ+IIOCOQxyGdoTXX0hFG8NB4b R9zMCqZadQvaktpddRBzIINsMgVkqNSc2dOvv+eOEXP1/xxpsCieOssYSH8xfdd8 v6eJC0ZuQ5Mbc5bpA8u5hM0GmQ2lQZ3OnsUyiUi0m0PCKQgRLBYxKlIqELmBkApa U1unLPgYAfgOMaxXYQhd62MMI3isqwWCcgVrMlUvQjh3/mj0TmbVXZIH0dU= -----END CERTIFICATE-----Generated at Thu May 2 04:47:42 2024 by rpki-client on console-fra.rpki-client.org