$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bxVDCtLywsPGgUCRrfVOj69hy0M.roa File: bxVDCtLywsPGgUCRrfVOj69hy0M.roa (raw, json) Hash identifier: y6h5Yr7m6xZYHokEoBbghaOE1ZsIDcRK8VMLH9/7Svw= Subject key identifier: 6F:15:43:0A:D2:F2:C2:C3:C6:81:40:91:AD:F5:4E:8F:AF:61:CB:43 Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0C34 Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bxVDCtLywsPGgUCRrfVOj69hy0M.roa Signing time: Wed 20 Mar 2024 02:17:36 +0000 ROA not before: Wed 20 Mar 2024 02:17:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 103.133.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Mar 20 02:17:36 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6F15430AD2F2C2C3C6814091ADF54E8FAF61CB43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:52:bf:bb:26:24:f6:e3:5d:60:21:f2:18: 22:95:2d:a2:e0:23:75:90:94:80:d6:8d:80:28:cf: af:50:16:7a:42:9f:49:57:3d:61:00:6d:1d:a0:ef: 95:dd:85:4e:c0:5c:23:6b:5d:b4:ea:68:53:8f:dd: a4:9f:d3:07:3c:5b:48:e3:0e:7c:ee:28:2d:d0:7d: 87:5d:dc:6d:74:1e:e0:ef:4d:8b:f1:6b:b5:bc:8a: bd:1f:6a:f5:76:49:01:db:12:30:80:65:a4:60:35: a1:28:d7:26:17:ef:0f:28:df:40:9b:3f:d1:69:95: dd:5e:55:22:db:55:f0:cc:47:14:0b:6d:5b:37:ae: b9:ae:65:4a:17:9d:98:23:25:90:56:50:93:3b:4e: 9b:8f:06:45:59:f7:ba:3d:75:af:5c:c5:26:19:f5: 83:47:24:7b:73:b1:ad:c5:e2:9d:c6:67:8f:5e:96: e4:8f:f5:04:05:20:d9:09:c4:7d:f7:d0:83:34:92: 6e:26:5c:d1:c1:5c:3d:2a:9a:19:7c:aa:b0:fb:b8: 1f:e9:29:93:5b:d4:31:df:47:61:c0:2a:43:90:bd: 5b:c8:76:07:21:cd:18:f9:9e:01:b9:44:85:7d:97: 06:6e:c2:1f:4a:be:e4:f8:ea:b5:4f:45:de:80:2a: 8b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:15:43:0A:D2:F2:C2:C3:C6:81:40:91:AD:F5:4E:8F:AF:61:CB:43 X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/bxVDCtLywsPGgUCRrfVOj69hy0M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.133.155.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:ab:66:a1:77:db:99:36:76:42:36:d3:0a:0c:76:5e:6c:8d: f2:e9:71:53:20:f0:62:fb:b7:c7:0f:cf:7b:48:cf:68:33:9b: 56:d8:9a:a2:f2:fe:f0:30:fa:be:04:8c:96:92:4b:b6:88:d2: b4:1e:42:74:27:bc:80:7c:f1:f2:8d:c4:08:5d:2a:89:06:80: cb:42:4b:ea:90:45:e1:4e:41:5f:d4:ae:35:f6:68:40:6f:cf: 00:fb:48:b3:ed:2e:7c:4d:3f:e1:8e:1e:dc:8e:da:c1:10:eb: 6a:86:3b:0a:09:74:81:be:69:28:f0:cf:f6:2d:d4:da:2d:de: cf:e8:bf:1d:69:f1:72:e0:d4:d4:da:e3:b5:c9:1b:83:2c:b0: db:f9:a4:10:cc:d8:69:8b:cb:43:b6:fc:a1:57:7e:38:a3:b3: 22:46:1d:7b:0d:79:e4:b4:32:63:26:c7:87:b7:ee:d7:73:c1: 33:d3:85:96:b3:95:4e:5e:9c:aa:da:66:e0:62:6a:b9:f5:bc: 09:41:42:7e:de:17:30:0f:e2:56:f7:a8:69:ad:49:a2:2c:82: 79:5e:9a:13:ab:14:e1:4e:16:a4:de:5d:92:60:bd:84:54:82: d8:0c:46:bc:89:ce:65:b1:aa:f6:57:c5:03:9c:42:be:56:9c: 43:75:9a:a6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNDAzMjAw MjE3MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZGMTU0MzBBRDJGMkMy QzNDNjgxNDA5MUFERjU0RThGQUY2MUNCNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+wlK/uyYk9uNdYCHyGCKVLaLgI3WQlIDWjYAoz69QFnpCn0lX PWEAbR2g75XdhU7AXCNrXbTqaFOP3aSf0wc8W0jjDnzuKC3QfYdd3G10HuDvTYvx a7W8ir0favV2SQHbEjCAZaRgNaEo1yYX7w8o30CbP9Fpld1eVSLbVfDMRxQLbVs3 rrmuZUoXnZgjJZBWUJM7TpuPBkVZ97o9da9cxSYZ9YNHJHtzsa3F4p3GZ49eluSP 9QQFINkJxH330IM0km4mXNHBXD0qmhl8qrD7uB/pKZNb1DHfR2HAKkOQvVvIdgch zRj5ngG5RIV9lwZuwh9KvuT46rVPRd6AKosLAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUbxVDCtLywsPGgUCRrfVOj69hy0MwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL2J4VkRDdEx5d3NQ R2dVQ1JyZlZPajY5aHkwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnhZswDQYJKoZIhvcNAQELBQADggEBAFqrZqF325k2dkI20woMdl5sjfLp cVMg8GL7t8cPz3tIz2gzm1bYmqLy/vAw+r4EjJaSS7aI0rQeQnQnvIB88fKNxAhd KokGgMtCS+qQReFOQV/UrjX2aEBvzwD7SLPtLnxNP+GOHtyO2sEQ62qGOwoJdIG+ aSjwz/Yt1Not3s/ovx1p8XLg1NTa47XJG4MssNv5pBDM2GmLy0O2/KFXfjijsyJG HXsNeeS0MmMmx4e37tdzwTPThZazlU5enKraZuBiarn1vAlBQn7eFzAP4lb3qGmt SaIsgnlemhOrFOFOFqTeXZJgvYRUgtgMRryJzmWxqvZXxQOcQr5WnEN1mqY= -----END CERTIFICATE-----Generated at Sun Jun 23 13:19:18 2024 by rpki-client on console-fra.rpki-client.org