$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/_yOUUfL2sWefXH1pZgVPXHWRoEw.roa File: _yOUUfL2sWefXH1pZgVPXHWRoEw.roa (raw, json) Hash identifier: QRTQJdzhBAAYh8RsMp3gJl0yer3P8lXksvLPuiTu9CQ= Subject key identifier: FF:23:94:51:F2:F6:B1:67:9F:5C:7D:69:66:05:4F:5C:75:91:A0:4C Certificate issuer: /CN=D330BC4E137B1512E2E4506806B870A4EAA860D7 Certificate serial: FE Authority key identifier: D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/_yOUUfL2sWefXH1pZgVPXHWRoEw.roa Signing time: Mon 26 Aug 2024 05:09:51 +0000 ROA not before: Mon 26 Aug 2024 05:09:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131149 IP address blocks: 103.6.126.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D330BC4E137B1512E2E4506806B870A4EAA860D7 Validity Not Before: Aug 26 05:09:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FF239451F2F6B1679F5C7D6966054F5C7591A04C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:82:63:0e:3d:59:a8:59:5b:40:31:10:57: 3b:c2:a6:ab:5e:86:59:84:ae:d4:24:9f:7c:d2:6a: 75:88:10:4e:e2:10:91:ea:8b:ef:4d:8a:1a:74:ba: 43:f2:f7:af:7f:9d:cf:71:fe:b5:09:7f:c3:84:d2: f3:da:7e:0d:b6:7f:c4:72:98:67:e4:81:e1:f5:38: ce:e3:e7:5d:7a:06:1c:79:04:6b:18:5d:9d:c3:f6: 82:5b:ff:67:84:9d:f6:ac:e4:90:d0:7c:96:10:e9: e8:40:7c:58:2f:18:54:49:a8:af:f3:6a:0d:54:03: e6:0c:a8:47:11:e5:9e:3a:6b:fd:1d:1b:0a:1b:1e: b0:cd:13:c6:f8:51:2e:f8:28:de:60:12:af:dc:d1: 5c:a8:50:ac:ce:fe:2d:3b:5f:27:f6:9f:91:4b:bf: 6b:b5:be:95:f0:51:19:74:82:38:39:e0:0b:40:0e: 82:8a:d3:70:d1:f4:8b:c5:20:ee:12:2f:63:c4:6a: 92:2b:fb:5e:07:b2:c0:db:3a:55:31:51:c1:01:c6: 70:bb:f7:9e:60:e9:b2:25:d9:92:26:88:cd:6b:7b: 8c:03:88:15:61:92:03:03:49:6f:6a:a8:75:ea:45: 05:68:69:3b:27:f4:9d:12:b4:4b:fa:27:03:69:8f: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:94:51:F2:F6:B1:67:9F:5C:7D:69:66:05:4F:5C:75:91:A0:4C X509v3 Authority Key Identifier: keyid:D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/_yOUUfL2sWefXH1pZgVPXHWRoEw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.126.0/23 Signature Algorithm: sha256WithRSAEncryption 75:f2:a8:73:cd:b3:99:ff:2e:a9:55:e3:1c:1a:39:f2:33:22: 3d:11:56:86:d8:1d:e6:65:8e:ed:6d:d7:11:a7:b4:84:04:e2: a6:ad:c6:a5:7c:17:2f:43:f7:97:91:8b:a3:20:7d:12:e0:63: 36:7d:11:b8:19:45:37:49:b2:64:5d:1f:e7:8f:8d:05:6e:ac: db:30:8a:2c:96:4d:4b:7d:3f:70:ad:80:27:0c:42:b1:3c:f8: fd:c6:02:eb:02:a2:9b:4e:36:80:57:e2:42:61:1e:53:2f:5c: fd:95:fd:8d:d8:8e:87:fc:7a:7d:e8:66:eb:3a:01:c4:3a:96: ad:e3:98:6f:d7:ab:56:2e:ff:89:bb:41:6a:70:b0:b6:8b:11: cc:7b:0c:57:62:cb:ba:fc:fd:ae:1b:8d:6e:cd:03:8d:27:36: aa:53:d2:d5:71:fc:c9:60:1f:1d:49:79:ea:48:3d:ea:aa:19: 7c:82:8b:14:96:f8:57:8f:5e:5c:8b:4e:d9:4b:95:ae:f8:22: 8d:c4:fd:11:34:5e:aa:42:9a:25:77:14:e6:b9:0d:d7:42:dd: 1d:12:95:2e:71:5a:64:44:9a:53:5d:bc:8e:d1:03:0a:a4:f7: e7:95:e2:b4:cd:05:be:d1:25:07:73:c6:67:2b:e9:64:75:ca: 3f:3f:83:b7 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDMz MEJDNEUxMzdCMTUxMkUyRTQ1MDY4MDZCODcwQTRFQUE4NjBENzAeFw0yNDA4MjYw NTA5NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZGMjM5NDUxRjJGNkIx Njc5RjVDN0Q2OTY2MDU0RjVDNzU5MUEwNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK74JjDj1ZqFlbQDEQVzvCpqtehlmErtQkn3zSanWIEE7iEJHq i+9Nihp0ukPy969/nc9x/rUJf8OE0vPafg22f8RymGfkgeH1OM7j5116Bhx5BGsY XZ3D9oJb/2eEnfas5JDQfJYQ6ehAfFgvGFRJqK/zag1UA+YMqEcR5Z46a/0dGwob HrDNE8b4US74KN5gEq/c0VyoUKzO/i07Xyf2n5FLv2u1vpXwURl0gjg54AtADoKK 03DR9IvFIO4SL2PEapIr+14HssDbOlUxUcEBxnC7955g6bIl2ZImiM1re4wDiBVh kgMDSW9qqHXqRQVoaTsn9J0StEv6JwNpj7J/AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU/yOUUfL2sWefXH1pZgVPXHWRoEwwHwYDVR0jBBgwFoAU0zC8ThN7FRLi5FBo BrhwpOqoYNcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVTVEJB U0lTLzB6QzhUaE43RlJMaTVGQm9Ccmh3cE9xb1lOYy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMHpDOFRoTjdGUkxpNUZCb0JyaHdwT3FvWU5jLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVTVEJBU0lTL195T1VVZkwyc1dl ZlhIMXBaZ1ZQWEhXUm9Fdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnBn4wDQYJKoZIhvcNAQELBQADggEBAHXyqHPNs5n/LqlV4xwaOfIzIj0R VobYHeZlju1t1xGntIQE4qatxqV8Fy9D95eRi6MgfRLgYzZ9EbgZRTdJsmRdH+eP jQVurNswiiyWTUt9P3CtgCcMQrE8+P3GAusCoptONoBX4kJhHlMvXP2V/Y3Yjof8 en3oZus6AcQ6lq3jmG/Xq1Yu/4m7QWpwsLaLEcx7DFdiy7r8/a4bjW7NA40nNqpT 0tVx/MlgHx1JeepIPeqqGXyCixSW+FePXlyLTtlLla74Io3E/RE0XqpCmiV3FOa5 DddC3R0SlS5xWmREmlNdvI7RAwqk9+eV4rTNBb7RJQdzxmcr6WR1yj8/g7c= -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:41 2024 by rpki-client on console-fra.rpki-client.org