$ rpki-client -vvf rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa File: 3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa (raw, json) Hash identifier: qljXfzZwzib83TFqbsIddRrLYvwswpBiqIUgH98aPUE= Subject key identifier: 2F:3B:75:FE:A0:70:F2:FB:5C:06:19:6A:99:C9:49:BE:D9:18:B7:A7 Certificate issuer: /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A Certificate serial: 03F2E2F24AFE74AE8EB46121D32B5B08A51FCC08 Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A Authority info access: rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer Subject info access: rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa Signing time: Mon 20 May 2024 23:58:40 +0000 ROA not before: Mon 20 May 2024 23:53:40 +0000 ROA not after: Mon 19 May 2025 23:58:40 +0000 asID: 7719 IP address blocks: 199.189.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.mft rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Jun 2024 14:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f2:e2:f2:4a:fe:74:ae:8e:b4:61:21:d3:2b:5b:08:a5:1f:cc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A Validity Not Before: May 20 23:53:40 2024 GMT Not After : May 19 23:58:40 2025 GMT Subject: CN=2F3B75FEA070F2FB5C06196A99C949BED918B7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:72:cd:4f:8b:c5:fa:ee:16:63:15:7e:68: 64:d6:bb:4e:77:b2:e0:60:c6:53:40:22:e1:4f:e2: 78:0f:8f:0f:4b:c0:bf:53:3e:c5:5f:ac:68:52:8e: 93:19:32:bb:84:85:e4:45:23:df:0d:ba:6d:ce:9a: 08:6b:b2:f8:58:0a:b2:06:b6:92:ce:c5:5a:ed:a3: 26:45:bf:02:b4:27:91:cb:dc:88:3d:e9:e8:da:29: 0b:a1:76:2d:46:6a:8b:31:ad:a3:85:2b:92:71:61: af:54:93:0b:7e:1d:11:b7:22:b3:66:bf:a9:33:3b: 37:40:36:98:45:91:01:2e:62:3a:f4:81:fd:7b:06: 39:1c:80:51:13:a6:92:c0:67:5f:93:e4:39:dc:98: 07:98:47:c5:2e:32:f3:d5:33:1b:ea:38:1b:07:13: 6a:e0:ce:4b:60:1d:e3:b4:8c:2f:f7:72:f9:47:fe: c5:02:c9:e0:d1:43:b3:12:94:f8:76:f2:8d:79:5c: ba:86:99:a4:cb:5d:26:90:2b:ee:93:30:84:96:76: e0:c6:df:b7:d5:39:b3:a2:b7:87:7d:cc:ad:4b:a9: 28:16:ab:df:22:54:24:ed:50:76:19:7c:2d:13:14: ea:42:58:27:86:6e:7e:49:a3:c1:00:01:ba:7f:36: 89:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3B:75:FE:A0:70:F2:FB:5C:06:19:6A:99:C9:49:BE:D9:18:B7:A7 X509v3 Authority Key Identifier: keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl Authority Information Access: CA Issuers - URI:rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.co/repo/AS945/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.189.156.0/22 Signature Algorithm: sha256WithRSAEncryption 54:be:ea:53:cf:5f:48:19:3c:92:de:51:78:16:47:c7:76:ce: 6d:9c:09:a0:89:f6:63:af:aa:ed:d3:b4:a3:6c:b7:1d:ff:b7: 57:05:25:f7:a6:9f:1d:2b:fa:7e:6c:9e:13:43:82:ee:20:6c: cf:52:d3:31:01:a9:01:a6:12:7b:95:ae:b6:d1:5b:36:31:88: 4b:21:83:9a:d9:c9:6e:85:5e:cc:9b:5c:d4:95:bb:de:ee:f4: 82:7f:db:25:ec:78:cd:66:32:20:8a:d9:72:ab:56:13:c0:cd: d8:6f:25:a1:a6:87:7f:39:5a:64:d9:89:c5:6f:94:72:8f:ee: 5c:f9:b8:67:7c:cf:90:d2:d1:a2:74:3c:17:87:41:fc:dd:03: 42:2e:b5:de:88:b0:d2:a2:6e:02:2c:1b:2d:c7:17:e2:57:af: 02:d0:be:db:50:5b:33:ec:e8:e8:37:5f:04:9c:1f:a8:39:9f: 9b:42:29:f6:42:82:e4:c7:79:02:cc:52:bf:0a:41:20:e8:d5: 1f:08:fa:88:87:26:0a:7c:84:cd:47:31:03:e1:e3:66:84:9d: 97:21:7d:9a:7d:d4:40:cd:d2:3f:5b:83:82:fb:84:e7:3c:22: a4:65:5f:fb:f8:52:d4:00:62:0f:25:74:1c:b4:34:51:8c:57: b4:c3:8a:cb -----BEGIN CERTIFICATE----- MIIEvzCCA6egAwIBAgIUA/Li8kr+dK6OtGEh0ytbCKUfzAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1NkI2MDBDNDQ2NkUxN0Q0NkIzREI4MDMwNjY1OEE1 NUVCNEUzQTAeFw0yNDA1MjAyMzUzNDBaFw0yNTA1MTkyMzU4NDBaMDMxMTAvBgNV BAMTKDJGM0I3NUZFQTA3MEYyRkI1QzA2MTk2QTk5Qzk0OUJFRDkxOEI3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XnLNT4vF+u4WYxV+aGTWu053 suBgxlNAIuFP4ngPjw9LwL9TPsVfrGhSjpMZMruEheRFI98Num3OmghrsvhYCrIG tpLOxVrtoyZFvwK0J5HL3Ig96ejaKQuhdi1GaosxraOFK5JxYa9Ukwt+HRG3IrNm v6kzOzdANphFkQEuFile: rpkica.twnic.tw/rpki/TWNICCA/FET/iBV8jWkzsVFDGivrWe_e26rDxH0.roa Hash identifier: 7hzspiBgzYGC+us4v6TCe4HsgfV4g9fhuWFZdys4qr0= Subject key identifier: 88:15:7C:8D:69:33:B1:51:43:1A:2B:EB:59:EF:DE:DB:AA:C3:C4:7D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DB2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iBV8jWkzsVFDGivrWe_e26rDxH0.roa Signing time: Mon 15 Jan 2024 21:30:13 +0000 ROA not before: Mon 15 Jan 2024 21:30:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 124.218.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 22:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3506 (0xdb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:30:13 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=88157C8D6933B151431A2BEB59EFDEDBAAC3C47D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:14:ad:96:b1:2e:17:e3:a8:87:ff:bd:c4:8f: 7e:4f:fb:b2:21:2f:5c:bb:c3:d6:d1:2b:c7:72:67: be:22:76:a4:7c:3d:60:3f:2e:8a:1d:8f:ba:79:99: c8:1c:c1:71:e4:f7:88:9f:4b:58:80:c3:d0:16:c7: 10:96:98:7e:a0:f1:b9:fe:af:3f:96:9d:93:ba:0f: 27:09:fd:e1:03:76:21:5d:ae:bc:c5:4d:ef:e2:4d: 55:e0:b3:76:0e:2f:58:28:ac:3b:11:63:6e:09:82: 33:59:b7:27:88:5e:d6:9c:ce:8e:cf:43:23:3c:ef: 9b:43:51:ff:8b:b1:83:7a:eb:47:44:8f:df:fb:b6: 57:41:5c:a4:30:0f:92:db:c8:09:56:c2:2a:cb:cc: a6:f6:c6:6f:00:e2:63:c0:b8:a9:88:4b:f9:f7:a4: 51:aa:4d:ca:5b:4a:ad:79:1e:4d:4d:8d:09:67:a1: 1f:ed:f1:74:7e:de:8f:92:ad:60:22:b9:d1:34:67: 40:7e:25:41:fe:0a:a0:93:66:a7:65:50:e1:23:82: c3:48:3e:bb:d0:65:18:ce:3c:76:b5:d9:64:2a:97: 6d:e8:ab:d4:91:4e:93:f7:b0:eb:68:ac:12:26:a4: 7e:ce:45:91:c4:29:18:b4:f2:26:31:25:3d:14:98: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:15:7C:8D:69:33:B1:51:43:1A:2B:EB:59:EF:DE:DB:AA:C3:C4:7D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iBV8jWkzsVFDGivrWe_e26rDxH0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.100.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:1e:2d:f7:ee:7c:ba:f0:95:25:3c:fb:b7:fc:6f:4a:2a:16: f8:e8:8b:75:ed:39:dc:23:4e:a1:68:67:39:b8:94:00:82:03: 98:fc:9b:4d:87:cd:5f:58:2b:f1:78:87:b3:d7:84:7f:e9:e7: 0d:62:a5:39:b3:af:0c:8d:98:ac:95:de:35:3a:66:b1:1c:56: 40:d1:58:29:9e:1b:9a:b9:2d:b1:74:06:8b:62:f7:2b:47:3c: 52:24:e1:9a:08:e6:cc:bf:d4:bb:ed:ff:c3:e7:66:b2:ef:0b: 3c:37:01:9e:f6:9b:ff:7b:08:5e:c4:d7:c9:5f:1e:2f:0d:49: fe:f8:b6:c5:2e:d8:5f:e5:0d:0e:bf:34:cc:36:71:95:8a:84: 1f:fb:62:e7:ad:9c:69:3a:b5:96:6c:32:93:89:bc:13:e2:38: 56:6b:fe:b3:d6:13:d3:5e:26:8e:0f:79:49:ad:75:34:27:33: 19:e7:cd:a4:30:64:28:98:ba:49:ba:9a:a6:c6:83:d3:0b:a0: ba:bf:84:35:a0:37:92:cd:d4:51:9b:a7:e8:8a:47:be:9a:e7: 29:6d:a9:2a:89:ba:ce:56:5c:28:99:c0:06:68:2c:a9:ea:be: d4:bc:b6:f1:e1:33:63:35:c8:f2:69:a1:14:6d:73:fd:81:d9: 30:49:ab:14 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTMwMTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg4MTU3QzhENjkzM0Ix NTE0MzFBMkJFQjU5RUZERURCQUFDM0M0N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeFK2WsS4X46iH/73Ej35P+7IhL1y7w9bRK8dyZ74idqR8PWA/ Loodj7p5mcgcwXHk94ifS1iAw9AWxxCWmH6g8bn+rz+WnZO6DycJ/eEDdiFdrrzF Te/iTVXgs3YOL1gorDsRY24JgjNZtyeIXtaczo7PQyM875tDUf+LsYN660dEj9/7 tldBXKQwD5LbyAlWwirLzKb2xm8A4mPAuKmIS/n3pFGqTcpbSq15Hk1NjQlnoR/t 8XR+3o+SrWAiudE0Z0B+JUH+CqCTZqdlUOEjgsNIPrvQZRjOPHa12WQql23oq9SR TpP3sOtorBImpH7ORZHEKRi08iYxJT0UmDi7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUiBV8jWkzsVFDGivrWe/e26rDxH0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2lCVjhqV2t6c1ZGREdpdnJXZV9lMjZy RHhIMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mQwDQYJ KoZIhvcNAQELBQADggEBAI0eLffufLrwlSU8+7f8b0oqFvjoi3XtOdwjTqFoZzm4 lACCA5j8m02HzV9YK/F4h7PXhH/p5w1ipTmzrwyNmKyV3jU6ZrEcVkDRWCmeG5q5 LbF0Boti9ytHPFIk4ZoI5sy/1Lvt/8PnZrLvCzw3AZ72m/97CF7E18lfHi8NSf74 tsUu2F/lDQ6/NMw2cZWKhB/7YuetnGk6tZZsMpOJvBPiOFZr/rPWE9NeJo4PeUmt dTQnMxnnzaQwZCiYukm6mqbGg9MLoLq/hDWgN5LN1FGbp+iKR76a5yltqSqJus5W XCiZwAZoLKnqvtS8tvHhM2M1yPJpoRRtc/2B2TBJqxQ= -----END CERTIFICATE-----Generated at Wed Jun 19 23:42:58 2024 by rpki-client on console.sobornost.net