$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mit-czQEH1pxKI-8-QqLDJhAj6A.roa File: mit-czQEH1pxKI-8-QqLDJhAj6A.roa (raw, json) Hash identifier: A9kS2oD/EE/oSSQ3ZWBx9RIhdzEJ+XL/50L0+2tfSUU= Subject key identifier: 9A:2B:7E:73:34:04:1F:5A:71:28:8F:BC:F9:0A:8B:0C:98:40:8F:A0 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0C64 Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mit-czQEH1pxKI-8-QqLDJhAj6A.roa Signing time: Fri 01 Sep 2023 10:20:38 +0000 ROA not before: Fri 01 Sep 2023 10:20:38 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18424 IP address blocks: 121.50.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Sep 1 10:20:38 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9A2B7E7334041F5A71288FBCF90A8B0C98408FA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:ba:8a:ca:da:fb:68:af:38:48:d5:a0:62: c3:b1:31:52:19:18:4a:42:54:a3:d6:53:31:ca:cb: 4c:6e:11:77:af:83:67:8b:95:f4:4b:ec:59:eb:67: ec:e3:a0:96:8b:ab:25:bd:e0:f5:73:d0:d6:1a:59: 2a:6d:62:ca:29:a3:a1:e3:60:8a:b4:46:2c:7a:70: 36:91:70:4f:1e:fb:11:8a:9e:5b:d4:73:e8:01:5b: 31:d3:29:74:15:9f:88:d3:d0:5e:12:8f:a5:54:9b: e5:cc:4a:e0:43:7b:fb:b6:e6:ca:a6:9c:59:dd:23: 8d:ef:48:6d:4e:07:62:b0:12:ba:71:e5:a6:97:73: ef:8e:59:b3:78:24:da:1c:80:c9:58:d0:30:54:ee: bb:a9:e8:f7:3c:02:de:51:b3:23:17:b4:19:f7:ca: 3c:e6:1a:bc:5a:73:4f:26:c7:30:e6:82:be:e7:6b: a1:49:c5:96:05:50:d0:2b:1c:62:ac:83:94:fb:66: 6e:1c:32:76:a7:f7:bb:48:67:6b:92:d6:f5:ac:f4: 27:6b:54:b9:30:37:2e:ab:43:1c:49:fa:ad:81:70: ae:49:7d:2b:78:3c:4b:92:b0:5b:2d:54:70:ad:95: 39:51:87:ed:bb:3e:2b:63:85:db:fa:6c:d3:3b:0b: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2B:7E:73:34:04:1F:5A:71:28:8F:BC:F9:0A:8B:0C:98:40:8F:A0 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/mit-czQEH1pxKI-8-QqLDJhAj6A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.148.0/24 Signature Algorithm: sha256WithRSAEncryption 48:20:2c:3d:d5:5a:37:b9:24:a9:bd:65:27:ea:38:93:35:d4: 4b:c4:d3:49:bb:37:0a:60:62:71:a8:cd:18:41:7b:7f:ad:f4: de:17:bc:9d:65:d7:18:00:88:a7:91:e2:1e:a6:1f:66:41:ff: 51:1b:10:3b:9b:8c:94:5b:ff:90:53:53:75:6b:31:80:4d:4a: 7e:29:21:53:73:e5:db:34:57:d6:21:56:f4:e9:45:1d:d6:96: d3:f8:f8:4e:ef:40:8e:12:d7:c9:5f:8f:9e:d5:6a:40:3b:7f: 9f:8e:c4:71:8b:7e:15:9b:76:f8:d3:67:eb:e0:55:32:cd:5b: e0:fc:9a:91:41:52:16:6d:2b:33:e1:b8:06:4e:4f:02:f4:fb: 03:1f:ca:88:da:17:3b:26:34:ac:3a:09:ec:bd:1e:b5:07:7a: f3:bd:cb:55:86:2c:de:91:8f:45:41:54:0f:cc:99:89:ff:cb: 27:ae:4e:d1:4a:56:41:e8:55:a1:43:4c:b1:03:40:42:a5:fa: ae:e6:6e:4a:7b:11:a2:ee:e2:27:85:78:15:43:f3:db:f6:8f: 6b:d0:d7:0f:93:d4:84:9b:0e:58:c4:fa:ca:38:f2:28:b2:3d: 3e:ee:96:94:61:9a:5c:e1:cd:44:ea:a3:fa:8b:78:df:d8:c0: 48:56:6f:f9 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzA5MDEx MDIwMzhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlBMkI3RTczMzQwNDFG NUE3MTI4OEZCQ0Y5MEE4QjBDOTg0MDhGQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJZ7qKytr7aK84SNWgYsOxMVIZGEpCVKPWUzHKy0xuEXevg2eL lfRL7FnrZ+zjoJaLqyW94PVz0NYaWSptYsopo6HjYIq0Rix6cDaRcE8e+xGKnlvU c+gBWzHTKXQVn4jT0F4Sj6VUm+XMSuBDe/u25sqmnFndI43vSG1OB2KwErpx5aaX c++OWbN4JNocgMlY0DBU7rup6Pc8At5RsyMXtBn3yjzmGrxac08mxzDmgr7na6FJ xZYFUNArHGKsg5T7Zm4cMnan97tIZ2uS1vWs9CdrVLkwNy6rQxxJ+q2BcK5JfSt4 PEuSsFstVHCtlTlRh+27Pitjhdv6bNM7CyERAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUmit+czQEH1pxKI+8+QqLDJhAj6AwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL21pdC1jelFFSDFw eEtJLTgtUXFMREpoQWo2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAB5MpQwDQYJKoZIhvcNAQELBQADggEBAEggLD3VWje5JKm9ZSfqOJM11EvE 00m7NwpgYnGozRhBe3+t9N4XvJ1l1xgAiKeR4h6mH2ZB/1EbEDubjJRb/5BTU3Vr MYBNSn4pIVNz5ds0V9YhVvTpRR3WltP4+E7vQI4S18lfj57VakA7f5+OxHGLfhWb dvjTZ+vgVTLNW+D8mpFBUhZtKzPhuAZOTwL0+wMfyojaFzsmNKw6Cey9HrUHevO9 y1WGLN6Rj0VBVA/MmYn/yyeuTtFKVkHoVaFDTLEDQEKl+q7mbkp7EaLu4ieFeBVD 89v2j2vQ1w+T1ISbDljE+so48iiyPT7ulpRhmlzhzUTqo/qLeN/YwEhWb/k= -----END CERTIFICATE-----Generated at Fri May 3 00:49:03 2024 by rpki-client on console-fra.rpki-client.org