$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/noXEI-g9xkX_XyOQcrMosdouIYE.roa File: noXEI-g9xkX_XyOQcrMosdouIYE.roa (raw, json) Hash identifier: eebArVfIRz3eYtB4lzjScfs/DPFeS4qfS1RvTawbLEo= Subject key identifier: 9E:85:C4:23:E8:3D:C6:45:FF:5F:23:90:72:B3:28:B1:DA:2E:21:81 Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0C32 Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/noXEI-g9xkX_XyOQcrMosdouIYE.roa Signing time: Wed 20 Mar 2024 02:17:19 +0000 ROA not before: Wed 20 Mar 2024 02:17:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 103.133.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Mar 20 02:17:19 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9E85C423E83DC645FF5F239072B328B1DA2E2181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:1e:79:98:95:91:af:e0:55:53:0b:7d:62: b1:d1:c4:c8:48:7a:7a:3a:5b:27:67:8e:67:18:db: 00:93:f7:ac:51:d1:df:04:f5:86:36:08:01:c7:ef: 17:c3:14:b3:2d:d8:ca:91:21:7a:60:c0:a4:82:8f: 2e:b7:9f:4f:c5:ad:94:a9:b3:69:a3:fd:55:f6:7d: 42:2e:1b:8e:48:93:06:4b:33:fe:22:9f:97:ce:57: 8c:f1:06:bc:77:49:9e:ff:c3:db:c9:20:65:ca:40: f6:d5:32:b7:a2:e4:24:ca:df:89:97:0f:b5:a7:94: cc:ae:82:1f:ea:d9:a6:58:e3:07:28:71:7e:9d:cb: 8f:c3:e4:1e:d8:ff:89:73:a8:22:29:3f:3b:bd:c7: 91:b7:8d:b5:02:c5:23:49:ef:b5:85:4a:93:11:92: 4a:c2:43:86:e3:63:b7:cf:27:f6:81:8f:06:6a:2e: df:29:cc:3f:89:c1:9c:44:ff:9e:0b:f8:26:df:d4: 5b:8a:63:a9:4d:cc:61:de:88:76:91:95:fe:b4:87: 49:b7:4e:d0:9a:c6:2f:bf:44:4c:7a:f1:9a:62:c0: e3:28:67:d5:ea:d2:23:18:5a:41:a0:34:64:9f:38: c4:7b:e3:56:5f:b2:52:76:e1:0a:3f:15:6a:2d:28: e5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:85:C4:23:E8:3D:C6:45:FF:5F:23:90:72:B3:28:B1:DA:2E:21:81 X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/noXEI-g9xkX_XyOQcrMosdouIYE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.133.154.0/24 Signature Algorithm: sha256WithRSAEncryption 30:20:7c:56:22:db:a7:04:c7:66:34:20:34:33:46:7b:1c:28: 0b:ab:ca:b9:30:74:08:b9:05:de:1b:d2:73:c8:f4:b6:62:22: c0:f9:96:38:32:1d:72:9e:6f:c6:97:a5:f9:47:66:5c:0f:79: b5:4c:28:b4:61:56:36:ed:cd:78:bf:c8:35:c2:92:9b:10:74: 40:e1:30:34:2d:5a:70:7d:e3:75:40:ff:90:23:72:87:e7:b9: ea:77:82:6e:e3:60:bd:37:fa:39:2e:e6:46:14:16:4e:b1:56: 43:e1:e0:88:ed:59:c0:c4:07:9b:12:1d:92:e4:8d:b6:d2:29: 62:98:05:59:bd:6a:0c:e5:fd:20:12:b8:3b:b0:e5:37:4a:08: 68:6a:39:c8:81:f1:53:56:36:51:57:01:3d:be:04:dd:bc:09: f6:b0:0a:4d:93:de:c7:a5:f1:e5:d2:bb:3f:14:be:f1:63:af: 5d:10:16:6a:f0:d4:17:04:7c:4d:0f:03:69:9a:8d:fe:0e:91: f6:90:60:35:5d:bb:60:7c:32:ca:6d:95:b2:df:19:5d:c1:ed: 99:6f:d1:62:ae:ff:11:79:1a:ee:6f:18:80:b1:4d:1a:98:9c: af:44:fb:84:f7:9d:06:ff:8b:e9:b1:5e:09:06:44:37:c3:d1: d1:db:37:84 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNDAzMjAw MjE3MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlFODVDNDIzRTgzREM2 NDVGRjVGMjM5MDcyQjMyOEIxREEyRTIxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgqB55mJWRr+BVUwt9YrHRxMhIeno6WydnjmcY2wCT96xR0d8E 9YY2CAHH7xfDFLMt2MqRIXpgwKSCjy63n0/FrZSps2mj/VX2fUIuG45IkwZLM/4i n5fOV4zxBrx3SZ7/w9vJIGXKQPbVMrei5CTK34mXD7WnlMyugh/q2aZY4wcocX6d y4/D5B7Y/4lzqCIpPzu9x5G3jbUCxSNJ77WFSpMRkkrCQ4bjY7fPJ/aBjwZqLt8p zD+JwZxE/54L+Cbf1FuKY6lNzGHeiHaRlf60h0m3TtCaxi+/REx68ZpiwOMoZ9Xq 0iMYWkGgNGSfOMR741ZfslJ24Qo/FWotKOXRAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUnoXEI+g9xkX/XyOQcrMosdouIYEwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL25vWEVJLWc5eGtY X1h5T1Fjck1vc2RvdUlZRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnhZowDQYJKoZIhvcNAQELBQADggEBADAgfFYi26cEx2Y0IDQzRnscKAur yrkwdAi5Bd4b0nPI9LZiIsD5ljgyHXKeb8aXpflHZlwPebVMKLRhVjbtzXi/yDXC kpsQdEDhMDQtWnB943VA/5Ajcofnuep3gm7jYL03+jku5kYUFk6xVkPh4IjtWcDE B5sSHZLkjbbSKWKYBVm9agzl/SASuDuw5TdKCGhqOciB8VNWNlFXAT2+BN28Cfaw Ck2T3sel8eXSuz8UvvFjr10QFmrw1BcEfE0PA2majf4OkfaQYDVdu2B8MsptlbLf GV3B7Zlv0WKu/xF5Gu5vGICxTRqYnK9E+4T3nQb/i+mxXgkGRDfD0dHbN4Q= -----END CERTIFICATE-----Generated at Sun Jun 23 13:19:18 2024 by rpki-client on console-fra.rpki-client.org