$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ilI4GR4kR8G4iFJCv88-v-AfK7U.roa File: ilI4GR4kR8G4iFJCv88-v-AfK7U.roa (raw, json) Hash identifier: 00MI2D5WFNNKBqUo7Zwkta5EPmkB1b38o1c+EyHWENs= Subject key identifier: 8A:52:38:19:1E:24:47:C1:B8:88:52:42:BF:CF:3E:BF:E0:1F:2B:B5 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0C5A Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ilI4GR4kR8G4iFJCv88-v-AfK7U.roa Signing time: Fri 01 Sep 2023 10:20:36 +0000 ROA not before: Fri 01 Sep 2023 10:20:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18424 IP address blocks: 121.50.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Sep 1 10:20:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8A5238191E2447C1B8885242BFCF3EBFE01F2BB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:cd:a9:66:ba:66:55:6f:bd:d8:cd:d6:22: 26:dc:c8:50:69:1f:b8:05:fe:6a:92:0c:b5:66:e6: c2:19:75:3e:90:b7:2e:a6:d6:f7:de:37:cd:45:38: 98:c3:5d:94:bb:9c:47:de:db:bc:d6:e4:72:8f:4b: 6e:8e:39:3b:35:a8:24:77:cf:94:09:33:23:e3:5e: e6:fd:18:0a:d8:91:b3:a7:7e:64:81:59:fa:cf:be: 69:6f:10:f6:60:5a:ff:65:fd:44:5c:2e:29:aa:b7: f4:6c:e2:d7:31:f6:1b:f3:9d:f7:27:ce:45:d7:d7: 1d:fd:0c:7b:86:cf:74:b6:ac:34:58:d5:ae:6e:cd: 91:8d:ed:c8:4f:0a:15:1e:79:c0:fc:23:35:4a:76: e6:f8:a3:70:ec:92:ae:c6:7e:ef:47:1b:84:6c:3a: e3:14:f1:a5:91:2b:ab:ba:e6:29:8d:2e:19:fe:22: d9:3a:a3:ec:49:80:b3:8d:10:cc:8a:72:81:29:f4: 0f:d1:f6:92:a5:d4:0a:67:5f:3b:6d:c1:b5:cd:57: 1e:51:ba:00:ee:6a:2b:34:4d:2c:56:5b:d2:46:3c: 89:3b:d1:14:b3:58:60:3f:29:47:7d:17:f7:f7:b3: ef:ef:f8:36:f1:39:65:b1:33:0e:23:5c:8c:09:04: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:52:38:19:1E:24:47:C1:B8:88:52:42:BF:CF:3E:BF:E0:1F:2B:B5 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ilI4GR4kR8G4iFJCv88-v-AfK7U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.149.0/24 Signature Algorithm: sha256WithRSAEncryption 86:0a:9f:b6:a5:d5:16:01:49:78:83:77:df:50:4a:a3:34:e0: 09:06:16:9d:c8:4a:19:72:ac:07:b0:ac:29:08:67:08:15:6d: a5:99:de:a1:9f:8b:dc:32:87:5b:1a:e7:d0:d3:39:5e:3d:ba: 7a:1b:0a:06:12:ae:b8:e0:ef:86:ec:f7:11:b5:12:6a:08:5b: d5:a2:f5:4b:a5:9d:c6:3f:fd:b4:80:2f:03:10:c4:e0:c1:1d: 32:75:12:c5:5d:b1:12:85:47:a7:54:a7:fa:ee:49:c3:e5:8c: ed:59:fd:f0:70:1d:08:19:b2:a9:b0:cb:f1:dd:43:c7:2e:05: c7:cb:90:9e:06:56:a5:b5:d5:14:81:4d:e8:65:f7:75:70:85: 5c:26:7a:67:39:64:c7:bc:58:f3:b7:dc:4d:47:dc:98:ca:85: 65:1d:4c:96:b9:4e:89:a2:ed:70:4a:60:90:99:69:62:32:7c: 9f:d5:13:b0:01:c3:a7:d6:b3:56:a1:3f:dd:34:9b:5a:c2:15: ef:3e:3b:c5:4e:2e:1e:7f:33:e2:2f:9a:13:a4:40:17:38:f6: ac:da:90:84:a7:9f:a5:6d:09:e5:27:59:e3:7c:86:7f:f5:0d: fe:03:bc:f7:c2:14:1c:c1:11:3b:55:81:f6:aa:b6:81:12:82: d7:8f:37:61 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzA5MDEx MDIwMzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhBNTIzODE5MUUyNDQ3 QzFCODg4NTI0MkJGQ0YzRUJGRTAxRjJCQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYWM2pZrpmVW+92M3WIibcyFBpH7gF/mqSDLVm5sIZdT6Qty6m 1vfeN81FOJjDXZS7nEfe27zW5HKPS26OOTs1qCR3z5QJMyPjXub9GArYkbOnfmSB WfrPvmlvEPZgWv9l/URcLimqt/Rs4tcx9hvznfcnzkXX1x39DHuGz3S2rDRY1a5u zZGN7chPChUeecD8IzVKdub4o3Dskq7Gfu9HG4RsOuMU8aWRK6u65imNLhn+Itk6 o+xJgLONEMyKcoEp9A/R9pKl1ApnXzttwbXNVx5RugDuais0TSxWW9JGPIk70RSz WGA/KUd9F/f3s+/v+DbxOWWxMw4jXIwJBLb7AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUilI4GR4kR8G4iFJCv88+v+AfK7UwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL2lsSTRHUjRrUjhH NGlGSkN2ODgtdi1BZks3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB5MpUwDQYJKoZIhvcNAQELBQADggEBAIYKn7al1RYBSXiDd99QSqM04AkG Fp3IShlyrAewrCkIZwgVbaWZ3qGfi9wyh1sa59DTOV49unobCgYSrrjg74bs9xG1 EmoIW9Wi9UulncY//bSALwMQxODBHTJ1EsVdsRKFR6dUp/ruScPljO1Z/fBwHQgZ sqmwy/HdQ8cuBcfLkJ4GVqW11RSBTehl93VwhVwmemc5ZMe8WPO33E1H3JjKhWUd TJa5Tomi7XBKYJCZaWIyfJ/VE7ABw6fWs1ahP900m1rCFe8+O8VOLh5/M+IvmhOk QBc49qzakISnn6VtCeUnWeN8hn/1Df4DvPfCFBzBETtVgfaqtoESgtePN2E= -----END CERTIFICATE-----Generated at Fri May 3 00:49:03 2024 by rpki-client on console-fra.rpki-client.org