$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/sweixy4Vr0-xBSCVvUVugk1HnCo.roa File: sweixy4Vr0-xBSCVvUVugk1HnCo.roa (raw, json) Hash identifier: zDb/n9uFWQivQ5DLk426CpWlc4J41FUwqpdZfyPSu/Q= Subject key identifier: B3:07:A2:C7:2E:15:AF:4F:B1:05:20:95:BD:45:6E:82:4D:47:9C:2A Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 05A3 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/sweixy4Vr0-xBSCVvUVugk1HnCo.roa Signing time: Thu 12 Oct 2023 08:24:45 +0000 ROA not before: Thu 12 Oct 2023 08:24:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 20473 IP address blocks: 103.122.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 21:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Oct 12 08:24:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B307A2C72E15AF4FB1052095BD456E824D479C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:50:a3:f7:88:7e:35:b8:84:80:f8:65:f3: 6b:a6:84:0b:cc:81:09:06:16:b7:81:e2:13:03:1a: bb:7d:61:6e:14:eb:32:21:34:35:13:f0:8e:45:c0: 3f:84:92:4e:bc:09:e6:e6:13:11:63:33:8a:f7:e9: 0e:99:60:b3:68:6a:23:e0:61:95:7d:0a:04:7c:46: a3:61:ec:f9:67:cd:3c:6a:32:4c:38:84:be:61:76: 34:e8:89:ba:58:cf:80:07:a2:e4:27:2f:98:85:88: 6d:f6:80:57:90:dc:e4:7d:7f:84:b0:dd:d8:f4:f0: 1c:71:50:aa:46:26:4e:05:bc:ff:6a:5b:cb:08:bc: 18:14:1c:53:04:cb:1c:dd:64:7b:20:6f:36:57:7c: 22:ce:4c:5c:0e:31:31:26:e9:0e:0c:11:1a:7d:87: 20:4e:93:a0:dc:30:6e:41:63:9f:2e:3c:29:1d:0a: db:56:65:8e:c1:a5:af:38:5c:74:3d:1a:92:af:a6: 72:9f:85:b5:9c:5b:c3:72:f5:ea:ab:1c:2c:dd:88: 59:24:5b:8d:54:55:4c:0c:17:9c:62:30:1a:85:0e: 32:e8:c3:cc:f0:2a:df:fb:93:50:4d:bd:68:a7:9a: cb:90:2d:b1:b7:63:c3:88:55:ed:77:5e:fa:a1:27: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:07:A2:C7:2E:15:AF:4F:B1:05:20:95:BD:45:6E:82:4D:47:9C:2A X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/sweixy4Vr0-xBSCVvUVugk1HnCo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/24 Signature Algorithm: sha256WithRSAEncryption 90:e0:ca:09:f5:b9:80:09:9d:b9:26:3f:f2:cd:c8:97:18:4a: 2a:1d:f4:1a:eb:d0:3e:87:f0:0e:31:be:a7:5d:b0:e2:93:44: 8b:a0:02:04:9e:12:80:04:1f:5a:93:bd:75:05:61:97:7e:86: 94:3f:06:a6:4d:9f:94:49:3e:b3:c2:40:f9:21:99:4c:a2:98: ef:38:55:59:de:d3:5a:58:60:dd:5c:3c:3d:8d:99:8f:16:b2: a7:50:ee:34:20:53:be:6e:dc:42:85:0d:d0:ba:45:9b:6b:09: d1:c9:f7:4c:8c:e7:3c:d7:9a:9f:55:a5:3a:67:4a:a1:4e:87: 93:e9:b5:fe:98:96:9d:f0:69:31:c4:a4:7d:51:01:8a:fb:06: d5:7e:7c:e1:ef:58:0d:36:09:f6:56:54:9f:ba:1b:d1:90:a5: 50:c6:a9:88:08:d0:24:96:af:6c:c0:f1:94:e4:7a:bb:35:19: 6f:d2:1e:c9:09:84:10:36:55:9f:75:58:a5:cf:a5:9e:65:5d: 62:4b:fd:ac:17:b8:c0:cc:5f:eb:86:54:40:c3:75:5e:e8:b5: 0a:d1:a7:bc:12:89:6b:74:2c:98:00:cc:31:29:7d:97:d0:93: ea:b6:29:60:9e:3e:ef:1b:a4:eb:15:5d:f1:63:e6:08:a9:44: a8:19:a1:28 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzEwMTIw ODI0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIzMDdBMkM3MkUxNUFG NEZCMTA1MjA5NUJENDU2RTgyNEQ0NzlDMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChWVCj94h+NbiEgPhl82umhAvMgQkGFreB4hMDGrt9YW4U6zIh NDUT8I5FwD+Ekk68CebmExFjM4r36Q6ZYLNoaiPgYZV9CgR8RqNh7PlnzTxqMkw4 hL5hdjToibpYz4AHouQnL5iFiG32gFeQ3OR9f4Sw3dj08BxxUKpGJk4FvP9qW8sI vBgUHFMEyxzdZHsgbzZXfCLOTFwOMTEm6Q4MERp9hyBOk6DcMG5BY58uPCkdCttW ZY7Bpa84XHQ9GpKvpnKfhbWcW8Ny9eqrHCzdiFkkW41UVUwMF5xiMBqFDjLow8zw Kt/7k1BNvWinmsuQLbG3Y8OIVe13XvqhJ/HpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUsweixy4Vr0+xBSCVvUVugk1HnCowHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL3N3ZWl4eTRWcjAteEJTQ1Z2 VVZ1Z2sxSG5Dby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn erwwDQYJKoZIhvcNAQELBQADggEBAJDgygn1uYAJnbkmP/LNyJcYSiod9Brr0D6H 8A4xvqddsOKTRIugAgSeEoAEH1qTvXUFYZd+hpQ/BqZNn5RJPrPCQPkhmUyimO84 VVne01pYYN1cPD2NmY8WsqdQ7jQgU75u3EKFDdC6RZtrCdHJ90yM5zzXmp9VpTpn SqFOh5Pptf6Ylp3waTHEpH1RAYr7BtV+fOHvWA02CfZWVJ+6G9GQpVDGqYgI0CSW r2zA8ZTkers1GW/SHskJhBA2VZ91WKXPpZ5lXWJL/awXuMDMX+uGVEDDdV7otQrR p7wSiWt0LJgAzDEpfZfQk+q2KWCePu8bpOsVXfFj5gipRKgZoSg= -----END CERTIFICATE-----Generated at Tue May 7 15:44:11 2024 by rpki-client on console-ams.rpki-client.org