$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DQWL/FTofLJ5r2lokvTXTAoRL9W0U-8w.roa File: FTofLJ5r2lokvTXTAoRL9W0U-8w.roa (raw, json) Hash identifier: JkHxeJ9f40/Km8ktdzaj4Tjjzxv/VvRdR0YdQBIGRMA= Subject key identifier: 15:3A:1F:2C:9E:6B:DA:5A:24:BD:35:D3:02:84:4B:F5:6D:14:FB:CC Certificate issuer: /CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D Certificate serial: 0814 Authority key identifier: 7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/FTofLJ5r2lokvTXTAoRL9W0U-8w.roa Signing time: Mon 26 Aug 2024 05:12:36 +0000 ROA not before: Mon 26 Aug 2024 05:12:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131678 IP address blocks: 103.149.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D Validity Not Before: Aug 26 05:12:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=153A1F2C9E6BDA5A24BD35D302844BF56D14FBCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2d:9b:7d:89:22:17:2d:5f:6f:41:a1:86:e0: e4:bd:8e:5a:2b:fb:cc:1c:6b:f9:61:a5:4a:c0:ea: d4:3b:53:e5:34:d0:26:97:c6:d9:d7:41:83:9e:48: c9:0a:27:8a:ca:0f:27:0b:34:5a:9c:c9:68:83:40: 37:ab:6b:b9:9b:20:40:68:65:18:19:4b:29:e1:b1: fd:00:73:0f:f8:ac:64:a1:cb:d4:b4:6d:b4:93:e2: 4e:b3:11:c4:4c:74:c4:3c:2b:8e:09:da:4c:be:a8: 78:8d:f1:ae:0e:f0:26:7c:4a:04:92:97:7a:45:fd: 09:bb:b4:3c:8c:0d:37:ef:26:d8:a8:13:54:25:2f: 75:22:77:ea:1f:e1:3d:3e:4a:74:10:cc:43:54:36: 6f:75:5c:06:61:ba:f3:e8:62:92:2d:90:26:cb:dd: c9:29:15:89:a3:25:35:97:f5:58:43:a6:0e:96:34: 35:be:00:ad:b2:b7:c8:9f:bf:fb:06:7b:da:2f:35: 24:c1:de:7b:c7:65:86:bd:e6:9e:85:85:40:de:19: 40:d3:14:83:f7:86:f7:eb:0c:92:a9:9f:e6:49:f5: b8:80:02:c2:22:14:ed:59:5f:fb:dd:a1:9e:0b:e2: 2c:9a:fc:06:c8:87:e5:55:9c:43:90:5f:3b:bd:b3: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3A:1F:2C:9E:6B:DA:5A:24:BD:35:D3:02:84:4B:F5:6D:14:FB:CC X509v3 Authority Key Identifier: keyid:7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/FTofLJ5r2lokvTXTAoRL9W0U-8w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.149.66.0/24 Signature Algorithm: sha256WithRSAEncryption 78:a8:43:d7:eb:75:37:41:d0:07:25:d1:4c:de:bc:59:9d:b6: 65:3e:63:b9:c7:84:c1:a6:e5:03:1d:f0:6a:55:61:08:39:3d: 05:7a:4c:9c:25:5f:4c:db:e5:f5:62:f7:42:35:00:9d:5f:6a: c6:14:5e:eb:35:70:1d:6c:eb:e6:b8:bc:0b:7b:a3:20:3a:87: eb:9b:a8:4c:b1:c9:50:8b:22:86:25:52:30:2a:c2:40:76:3a: 2e:de:0d:b0:e8:d4:38:20:0a:56:3a:c9:ab:90:a8:18:81:da: 9c:18:f4:1a:1b:0d:3f:51:a3:b3:4b:ec:c1:ae:40:23:b3:80: 33:34:2b:0b:53:c6:db:23:5d:37:2b:c5:62:a4:2c:b6:71:30: b5:e0:74:4a:2e:09:16:53:ca:12:e2:e3:a4:c3:f0:0e:36:88: 42:48:70:7e:e6:93:86:16:48:0c:19:6c:47:71:6d:ba:29:87: 4a:a2:73:53:53:6b:a8:e1:2e:e2:4d:0f:fa:00:c9:7e:3a:60: 8f:b5:7b:3b:a8:48:33:c3:76:eb:2a:76:80:99:38:be:8f:b1: de:4c:fc:1c:0f:45:84:79:14:57:b3:9b:61:1f:56:c9:69:a0: e2:31:3d:64:e8:a7:a1:a9:8b:c8:73:d1:ae:23:21:8a:46:d9: 9a:66:1c:e7 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0NC QTM3NEY0RjdBMEQxRTZDQjU5RjhBN0I1NjQwNjZDNjdERDE5RDAeFw0yNDA4MjYw NTEyMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE1M0ExRjJDOUU2QkRB NUEyNEJEMzVEMzAyODQ0QkY1NkQxNEZCQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcLZt9iSIXLV9vQaGG4OS9jlor+8wca/lhpUrA6tQ7U+U00CaX xtnXQYOeSMkKJ4rKDycLNFqcyWiDQDera7mbIEBoZRgZSynhsf0Acw/4rGShy9S0 bbST4k6zEcRMdMQ8K44J2ky+qHiN8a4O8CZ8SgSSl3pF/Qm7tDyMDTfvJtioE1Ql L3Uid+of4T0+SnQQzENUNm91XAZhuvPoYpItkCbL3ckpFYmjJTWX9VhDpg6WNDW+ AK2yt8ifv/sGe9ovNSTB3nvHZYa95p6FhUDeGUDTFIP3hvfrDJKpn+ZJ9biAAsIi FO1ZX/vdoZ4L4iya/AbIh+VVnEOQXzu9s8QNAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUFTofLJ5r2lokvTXTAoRL9W0U+8wwHwYDVR0jBBgwFoAUfLo3T096DR5stZ+K e1ZAZsZ90Z0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFFXTC9m TG8zVDA5NkRSNXN0Wi1LZTFaQVpzWjkwWjAuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2ZMbzNUMDk2RFI1c3RaLUtlMVpBWnNaOTBaMC5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0RRV0wvRlRvZkxKNXIybG9rdlRYVEFvUkw5 VzBVLTh3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeVQjAN BgkqhkiG9w0BAQsFAAOCAQEAeKhD1+t1N0HQByXRTN68WZ22ZT5juceEwablAx3w alVhCDk9BXpMnCVfTNvl9WL3QjUAnV9qxhRe6zVwHWzr5ri8C3ujIDqH65uoTLHJ UIsihiVSMCrCQHY6Lt4NsOjUOCAKVjrJq5CoGIHanBj0GhsNP1Gjs0vswa5AI7OA MzQrC1PG2yNdNyvFYqQstnEwteB0Si4JFlPKEuLjpMPwDjaIQkhwfuaThhZIDBls R3FtuimHSqJzU1NrqOEu4k0P+gDJfjpgj7V7O6hIM8N26yp2gJk4vo+x3kz8HA9F hHkUV7ObYR9WyWmg4jE9ZOinoamLyHPRriMhikbZmmYc5w== -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:42 2024 by rpki-client on console-fra.rpki-client.org