$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BOOKS/JF8nFcCBH8TjseboynkYPU4GqYw.roa File: JF8nFcCBH8TjseboynkYPU4GqYw.roa (raw, json) Hash identifier: V5c0jXw9JSXHpM7tp/ypo7LHifgnwhIpvMZxiLH+Llw= Subject key identifier: 24:5F:27:15:C0:81:1F:C4:E3:B1:E6:E8:CA:79:18:3D:4E:06:A9:8C Certificate issuer: /CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA Certificate serial: 0FFB Authority key identifier: 1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/JF8nFcCBH8TjseboynkYPU4GqYw.roa Signing time: Fri 01 Sep 2023 08:24:55 +0000 ROA not before: Fri 01 Sep 2023 08:24:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 103.125.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 22:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4091 (0xffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AADEB4D45D7941D9B53EF4C2CC61B9602476FCA Validity Not Before: Sep 1 08:24:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=245F2715C0811FC4E3B1E6E8CA79183D4E06A98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:77:20:da:62:39:71:aa:51:e9:f7:70:04:d1: 5f:24:5b:54:95:cd:96:0a:b4:41:2b:20:01:ad:bc: ad:c3:2d:47:ea:e5:75:1b:bc:fc:b1:35:65:dc:f1: 07:7d:cf:7b:e9:b7:dd:97:d7:58:68:a5:74:a9:38: 67:06:ba:f6:e3:fa:86:51:4f:13:bc:16:db:66:57: 98:3e:60:68:be:12:0c:73:95:e0:20:9e:08:7c:4e: 54:1d:34:72:4f:6b:f8:32:e3:45:06:c8:ad:de:58: df:3c:4b:da:42:88:21:25:0b:32:f3:93:01:f8:12: 55:f9:5a:53:2e:8a:e5:02:01:0a:fe:b4:73:00:d1: f9:18:fe:28:76:78:b4:85:41:40:cf:85:07:3c:21: 2c:e9:bc:f8:c2:12:e1:e2:aa:46:f5:19:46:41:85: 6a:ee:9a:27:a7:34:dd:65:b2:9b:b9:fe:da:87:17: 6b:7b:65:fc:e3:81:bf:87:e9:82:96:70:25:ec:16: 54:01:0a:c7:3e:b1:f2:a8:1e:8f:e2:88:b4:cc:d4: bd:d2:96:32:f1:16:6e:57:e6:92:6e:b1:ee:91:ac: 1f:ca:66:6c:9c:94:cb:59:16:ed:f5:5a:7e:d0:42: cb:25:23:cb:d7:4e:0a:cd:98:27:b4:85:e3:bd:fe: 1d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5F:27:15:C0:81:1F:C4:E3:B1:E6:E8:CA:79:18:3D:4E:06:A9:8C X509v3 Authority Key Identifier: keyid:1A:AD:EB:4D:45:D7:94:1D:9B:53:EF:4C:2C:C6:1B:96:02:47:6F:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/Gq3rTUXXlB2bU-9MLMYblgJHb8o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Gq3rTUXXlB2bU-9MLMYblgJHb8o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BOOKS/JF8nFcCBH8TjseboynkYPU4GqYw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.125.228.0/22 Signature Algorithm: sha256WithRSAEncryption 33:d9:70:cc:7c:76:49:1c:b6:f8:02:8e:17:12:a1:c0:d8:c8: 3e:9a:db:8f:24:77:cc:67:e2:d1:3a:8c:4b:2e:44:32:b5:8a: 80:e3:bd:83:08:e5:b2:ba:ec:05:b0:13:03:d6:10:3b:4f:b0: 20:ab:f3:46:8e:14:53:97:b9:3c:af:32:0f:bf:7f:83:f4:49: 83:48:ad:37:bb:3a:d1:b3:5b:82:58:e3:e4:81:a6:9c:e2:1d: 80:90:c2:9b:44:a0:b8:b2:e3:f6:51:e5:5e:a3:d8:08:a0:dd: 76:e8:e8:ee:67:94:28:bc:9f:f5:08:e4:e3:f2:ff:ab:44:b4: 67:c1:9b:98:24:3c:f0:dc:d7:dc:75:b1:65:37:cc:16:8a:4d: 49:ab:49:d8:f6:ff:31:63:74:70:85:8f:ae:a4:8c:7c:39:21: 3f:d2:eb:38:75:98:76:c6:9c:21:b0:32:69:7f:12:1a:8a:0f: f0:18:08:f5:62:71:64:ff:7f:68:fd:b0:16:95:4e:e6:15:bc: 04:f4:09:eb:80:ad:ca:4e:67:07:30:cc:d2:08:2b:cb:57:0a: 6b:b4:8a:f6:d0:d9:cc:cc:3c:41:94:30:11:bd:28:2a:04:7a: f8:2c:a7:6f:0e:2a:1d:8c:9e:88:4e:37:ba:5b:d2:c4:11:57: db:22:48:79 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUFB REVCNEQ0NUQ3OTQxRDlCNTNFRjRDMkNDNjFCOTYwMjQ3NkZDQTAeFw0yMzA5MDEw ODI0NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI0NUYyNzE1QzA4MTFG QzRFM0IxRTZFOENBNzkxODNENEUwNkE5OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDydyDaYjlxqlHp93AE0V8kW1SVzZYKtEErIAGtvK3DLUfq5XUb vPyxNWXc8Qd9z3vpt92X11hopXSpOGcGuvbj+oZRTxO8FttmV5g+YGi+EgxzleAg ngh8TlQdNHJPa/gy40UGyK3eWN88S9pCiCElCzLzkwH4ElX5WlMuiuUCAQr+tHMA 0fkY/ih2eLSFQUDPhQc8ISzpvPjCEuHiqkb1GUZBhWrumienNN1lspu5/tqHF2t7 Zfzjgb+H6YKWcCXsFlQBCsc+sfKoHo/iiLTM1L3SljLxFm5X5pJuse6RrB/KZmyc lMtZFu31Wn7QQsslI8vXTgrNmCe0heO9/h0jAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJF8nFcCBH8TjseboynkYPU4GqYwwHwYDVR0jBBgwFoAUGq3rTUXXlB2bU+9M LMYblgJHb8owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQk9PS1Mv R3EzclRVWFhsQjJiVS05TUxNWWJsZ0pIYjhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9HcTNyVFVYWGxCMmJVLTlNTE1ZYmxnSkhiOG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CT09LUy9KRjhuRmNDQkg4VGpzZWJveW5r WVBVNEdxWXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ33k MA0GCSqGSIb3DQEBCwUAA4IBAQAz2XDMfHZJHLb4Ao4XEqHA2Mg+mtuPJHfMZ+LR OoxLLkQytYqA472DCOWyuuwFsBMD1hA7T7Agq/NGjhRTl7k8rzIPv3+D9EmDSK03 uzrRs1uCWOPkgaac4h2AkMKbRKC4suP2UeVeo9gIoN126OjuZ5QovJ/1COTj8v+r RLRnwZuYJDzw3NfcdbFlN8wWik1Jq0nY9v8xY3RwhY+upIx8OSE/0us4dZh2xpwh sDJpfxIaig/wGAj1YnFk/39o/bAWlU7mFbwE9AnrgK3KTmcHMMzSCCvLVwprtIr2 0NnMzDxBlDARvSgqBHr4LKdvDiodjJ6ITje6W9LEEVfbIkh5 -----END CERTIFICATE-----Generated at Thu Jun 20 04:01:19 2024 by rpki-client on console-fra.rpki-client.org