$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FAs3a4by-f09HWQAAgkuF-tcJjU.roa File: FAs3a4by-f09HWQAAgkuF-tcJjU.roa (raw, json) Hash identifier: 4ZeBG6PIXlivhqKDhlfa0oKP7pTdSabmGGNZd4C+VEk= Subject key identifier: 14:0B:37:6B:86:F2:F9:FD:3D:1D:64:00:02:09:2E:17:EB:5C:26:35 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 0552 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FAs3a4by-f09HWQAAgkuF-tcJjU.roa Signing time: Mon 26 Aug 2024 05:09:29 +0000 ROA not before: Mon 26 Aug 2024 05:09:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7480 IP address blocks: 103.156.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Aug 26 05:09:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=140B376B86F2F9FD3D1D640002092E17EB5C2635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:e6:63:5e:80:99:d3:14:01:79:60:05:49: c5:c7:22:15:7c:53:30:95:12:01:21:7e:7e:c3:b0: e3:02:a5:e0:dd:4d:7b:1e:b2:21:cf:ad:bd:81:60: 03:a6:b4:04:23:9e:12:99:90:70:78:1c:06:5f:54: 3f:a7:f9:8a:91:8d:31:a0:98:f3:f2:69:f8:e2:bd: e0:09:11:8a:8c:82:28:6e:4d:f5:cb:1f:21:97:fe: 25:ce:51:ae:d6:bc:d8:2a:ac:07:e6:ec:41:84:c1: 81:3c:75:67:37:12:59:c7:02:07:f9:b9:65:63:72: 35:38:39:8d:6a:ff:5c:12:17:7f:54:ee:1c:60:4f: 27:d5:b8:88:5a:85:6b:2b:6f:0f:7d:f9:10:a7:5c: 1b:1d:65:8b:c2:e5:31:59:7b:50:6d:6b:c5:4f:dd: 81:04:91:f2:69:59:85:3e:4d:40:79:c1:7e:84:b1: 10:29:fa:03:b8:75:c0:5f:93:30:69:03:a5:8e:01: d4:0c:cc:d4:b4:55:1b:d2:45:62:a3:68:4a:cf:41: fc:06:40:d6:25:0f:de:b2:ed:86:68:07:77:9b:8f: a0:69:87:1f:56:57:61:8e:5d:9d:c5:e9:df:61:c0: 10:69:db:bf:34:36:6b:08:e9:d4:2f:39:02:ee:d6: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0B:37:6B:86:F2:F9:FD:3D:1D:64:00:02:09:2E:17:EB:5C:26:35 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/FAs3a4by-f09HWQAAgkuF-tcJjU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.156.184.0/23 Signature Algorithm: sha256WithRSAEncryption 39:e0:3c:65:02:5c:ee:eb:dd:47:ee:3b:3e:35:a3:22:f7:f5: 9c:cc:48:95:84:4b:b0:27:ab:fc:11:33:81:18:3d:f0:eb:e0: d8:c6:f5:e3:40:6a:63:75:77:18:8b:74:de:b8:98:4f:91:c0: 63:dd:57:66:99:85:0e:ad:83:86:9c:a0:71:46:81:6c:2e:6d: 93:a0:78:5b:8a:3d:04:d0:40:0c:39:8c:8e:1d:08:74:e4:12: b4:81:36:96:f0:41:d6:4d:50:a7:45:48:71:17:17:a3:91:e6: f6:c0:ea:f2:5a:90:e4:ec:7c:c1:03:73:5c:40:5b:ba:87:f3: 16:dd:e9:36:5c:48:14:b3:61:2c:fc:ea:fa:47:84:d3:0a:db: 20:3f:2e:68:25:b7:a1:77:ec:70:3f:cf:48:a5:47:c1:09:78: 95:dc:fa:f4:82:ac:ca:06:df:fc:b7:24:06:66:09:1c:35:05: bf:ad:c7:83:98:02:85:77:83:a4:3d:b6:64:14:52:32:f4:39: 5f:25:9d:fb:f9:cf:13:34:52:1a:f1:99:28:a2:8f:34:f8:1c: 8b:f9:b6:26:d9:b0:cd:84:f4:01:93:74:18:fc:de:ad:22:74: 42:ab:92:6c:72:7d:41:8b:03:76:59:be:ce:f4:a2:5a:96:c7: 15:8d:aa:41 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNDA4MjYw NTA5MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0MEIzNzZCODZGMkY5 RkQzRDFENjQwMDAyMDkyRTE3RUI1QzI2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI7uZjXoCZ0xQBeWAFScXHIhV8UzCVEgEhfn7DsOMCpeDdTXse siHPrb2BYAOmtAQjnhKZkHB4HAZfVD+n+YqRjTGgmPPyafjiveAJEYqMgihuTfXL HyGX/iXOUa7WvNgqrAfm7EGEwYE8dWc3ElnHAgf5uWVjcjU4OY1q/1wSF39U7hxg TyfVuIhahWsrbw99+RCnXBsdZYvC5TFZe1Bta8VP3YEEkfJpWYU+TUB5wX6EsRAp +gO4dcBfkzBpA6WOAdQMzNS0VRvSRWKjaErPQfwGQNYlD96y7YZoB3ebj6Bphx9W V2GOXZ3F6d9hwBBp2780NmsI6dQvOQLu1toFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUFAs3a4by+f09HWQAAgkuF+tcJjUwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvRkFzM2E0YnktZjA5SFdR QUFna3VGLXRjSmpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWecuDANBgkqhkiG9w0BAQsFAAOCAQEAOeA8ZQJc7uvdR+47PjWjIvf1nMxIlYRL sCer/BEzgRg98Ovg2Mb140BqY3V3GIt03riYT5HAY91XZpmFDq2DhpygcUaBbC5t k6B4W4o9BNBADDmMjh0IdOQStIE2lvBB1k1Qp0VIcRcXo5Hm9sDq8lqQ5Ox8wQNz XEBbuofzFt3pNlxIFLNhLPzq+keE0wrbID8uaCW3oXfscD/PSKVHwQl4ldz69IKs ygbf/LckBmYJHDUFv63Hg5gChXeDpD22ZBRSMvQ5XyWd+/nPEzRSGvGZKKKPNPgc i/m2JtmwzYT0AZN0GPzerSJ0QquSbHJ9QYsDdlm+zvSiWpbHFY2qQQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:29 2024 by rpki-client on console-ams.rpki-client.org