$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/LgXOkaw1IdDPjB4ZWUwOYvATgew.roa File: LgXOkaw1IdDPjB4ZWUwOYvATgew.roa (raw, json) Hash identifier: hci0Byt8U5VWuPDdADIfKDbJt2qBu0bjZMegALYOVMc= Subject key identifier: 2E:05:CE:91:AC:35:21:D0:CF:8C:1E:19:59:4C:0E:62:F0:13:81:EC Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 580E Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/LgXOkaw1IdDPjB4ZWUwOYvATgew.roa Signing time: Fri 01 Sep 2023 09:33:50 +0000 ROA not before: Fri 01 Sep 2023 09:33:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38851 IP address blocks: 103.46.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 04:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22542 (0x580e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Sep 1 09:33:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2E05CE91AC3521D0CF8C1E19594C0E62F01381EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:3b:63:e7:e9:14:4b:13:68:bd:32:ec:c6: 7f:e8:79:b4:e3:9f:80:ee:89:c7:34:4c:64:e8:06: 4f:93:01:b3:9c:a9:fe:d4:6b:d8:dc:51:56:45:00: 9d:e3:be:6e:12:f5:95:eb:cd:70:b8:18:0b:c7:6f: 1c:d8:69:22:f0:81:68:c5:6c:ae:82:57:14:14:2d: 4f:93:08:b7:36:a4:cd:81:84:03:e4:d9:a2:6a:88: df:92:43:df:2c:a0:93:f3:38:d6:a0:c9:c2:61:28: d5:89:36:e4:ff:d6:f3:14:3c:2a:f3:eb:0f:b3:60: 7d:da:d4:5b:85:eb:d6:3e:20:42:73:03:a1:2f:c0: 4e:c0:12:c7:2c:f5:98:30:09:26:a2:8f:ff:b1:ea: 5d:a2:16:59:38:67:7b:60:24:66:82:ff:84:42:81: b9:fd:94:ec:1c:bb:a6:c7:d9:a5:55:58:e8:ba:38: b8:a1:b0:ac:09:75:33:c5:4d:f5:9e:b5:1f:e3:9f: e8:da:d7:2a:6e:88:bc:1f:ea:5a:cb:84:8d:1b:fc: 59:df:78:4c:41:33:9b:35:3f:91:fa:57:fb:b7:01: a3:e1:16:9f:1d:71:07:99:67:19:a3:78:29:93:26: 03:a0:75:04:c4:75:22:4b:fe:e5:40:55:30:35:ee: e7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:05:CE:91:AC:35:21:D0:CF:8C:1E:19:59:4C:0E:62:F0:13:81:EC X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/LgXOkaw1IdDPjB4ZWUwOYvATgew.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.46.188.0/23 Signature Algorithm: sha256WithRSAEncryption 17:4a:74:12:88:4c:4b:d2:e3:85:1b:f5:ef:e5:47:f1:86:95: d5:ce:27:7f:59:59:cf:5c:b4:b2:d9:a4:f5:cf:b8:17:47:98: 62:d8:d5:d8:65:51:2f:07:66:b0:a5:20:a5:37:23:c6:b3:c6: 6f:8f:f3:0c:85:53:f5:b6:b4:1a:e0:c0:03:42:7b:bd:bc:72: b4:41:f3:46:33:88:a4:50:e0:d4:3a:a9:d7:82:28:16:32:72: 53:41:32:f8:2b:72:57:ef:51:97:38:7c:d1:3e:ad:a1:d7:bf: fa:2f:01:0d:d2:da:10:63:fb:93:8c:29:d4:f6:1c:74:e8:b2: 06:28:91:66:5d:ce:44:b5:98:9d:bc:be:7d:5e:be:35:e7:55: a0:96:bf:68:d9:b4:a5:35:df:35:4c:3f:76:00:93:85:bb:69: c7:46:6d:c5:c7:4f:cc:f4:7d:73:01:c1:b5:cc:32:1c:27:d4: a9:e3:57:89:79:37:88:78:00:fe:eb:33:f8:97:1e:32:c6:33: 88:9d:81:2b:28:b2:e8:da:0a:99:7a:d9:ed:12:8f:eb:80:8f: 1a:49:c2:0d:d9:02:c5:54:4f:ce:52:e6:eb:8b:86:4a:0a:65: e4:32:49:0c:e5:7e:56:95:54:bb:0d:50:49:68:1f:17:e7:86: 2b:ac:47:3c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICWA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yMzA5MDEw OTMzNTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJFMDVDRTkxQUMzNTIx RDBDRjhDMUUxOTU5NEMwRTYyRjAxMzgxRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe1Ttj5+kUSxNovTLsxn/oebTjn4Duicc0TGToBk+TAbOcqf7U a9jcUVZFAJ3jvm4S9ZXrzXC4GAvHbxzYaSLwgWjFbK6CVxQULU+TCLc2pM2BhAPk 2aJqiN+SQ98soJPzONagycJhKNWJNuT/1vMUPCrz6w+zYH3a1FuF69Y+IEJzA6Ev wE7AEscs9ZgwCSaij/+x6l2iFlk4Z3tgJGaC/4RCgbn9lOwcu6bH2aVVWOi6OLih sKwJdTPFTfWetR/jn+ja1ypuiLwf6lrLhI0b/FnfeExBM5s1P5H6V/u3AaPhFp8d cQeZZxmjeCmTJgOgdQTEdSJL/uVAVTA17ufrAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQULgXOkaw1IdDPjB4ZWUwOYvATgewwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvTGdYT2thdzFJZERQakI0 WldVd09ZdkFUZ2V3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWcuvDANBgkqhkiG9w0BAQsFAAOCAQEAF0p0EohMS9LjhRv17+VH8YaV1c4nf1lZ z1y0stmk9c+4F0eYYtjV2GVRLwdmsKUgpTcjxrPGb4/zDIVT9ba0GuDAA0J7vbxy tEHzRjOIpFDg1Dqp14IoFjJyU0Ey+CtyV+9Rlzh80T6tode/+i8BDdLaEGP7k4wp 1PYcdOiyBiiRZl3ORLWYnby+fV6+NedVoJa/aNm0pTXfNUw/dgCThbtpx0ZtxcdP zPR9cwHBtcwyHCfUqeNXiXk3iHgA/usz+JceMsYziJ2BKyiy6NoKmXrZ7RKP64CP GknCDdkCxVRPzlLm64uGSgpl5DJJDOV+VpVUuw1QSWgfF+eGK6xHPA== -----END CERTIFICATE-----Generated at Sat Jun 29 14:32:01 2024 by rpki-client on console-ams.rpki-client.org