$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/IphRJcn3FLMazP1SzoF9YseUj7U.roa File: IphRJcn3FLMazP1SzoF9YseUj7U.roa (raw, json) Hash identifier: QyPsBXb3KhJtdYG1sykKYy5x+KHk3rbKZF9NWw1NsiA= Subject key identifier: 22:98:51:25:C9:F7:14:B3:1A:CC:FD:52:CE:81:7D:62:C7:94:8F:B5 Certificate issuer: /CN=D330BC4E137B1512E2E4506806B870A4EAA860D7 Certificate serial: 03 Authority key identifier: D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/IphRJcn3FLMazP1SzoF9YseUj7U.roa Signing time: Thu 24 Aug 2023 01:03:35 +0000 ROA not before: Thu 24 Aug 2023 01:03:35 +0000 ROA not after: Thu 22 Aug 2024 08:50:57 +0000 asID: 131149 IP address blocks: 103.6.126.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D330BC4E137B1512E2E4506806B870A4EAA860D7 Validity Not Before: Aug 24 01:03:35 2023 GMT Not After : Aug 22 08:50:57 2024 GMT Subject: CN=22985125C9F714B31ACCFD52CE817D62C7948FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:97:a7:7c:be:35:f5:eb:6d:b0:3a:d7:15:c7: c9:d5:77:08:de:87:aa:b6:dd:25:71:b2:21:cc:44: 86:63:1b:6f:f5:bd:5a:59:0f:43:41:13:81:54:56: a2:c3:53:0f:b2:e0:9e:16:0e:78:a9:1c:30:a9:ce: 80:a9:ef:ab:69:37:61:12:69:4b:87:87:7f:41:ca: a2:1e:c5:08:22:db:df:0c:f0:27:02:35:eb:8d:05: 95:27:62:17:e7:9a:74:57:3e:8b:82:6e:85:6c:be: 8b:c7:c8:04:43:eb:fb:8d:48:0a:db:3c:f3:d6:21: 29:71:72:15:b9:3b:f5:68:b4:e9:98:fd:6e:30:ad: 19:73:cf:ca:ea:9e:68:2f:f7:51:0a:8e:89:f9:58: 79:90:cf:12:f3:0a:77:4d:f6:46:b4:d7:92:7f:fc: 1e:c6:d0:63:1c:9e:3f:27:6a:ae:cd:05:28:24:49: 38:95:c1:62:d0:0f:ed:49:87:4d:1e:4e:bf:94:ec: 8c:65:32:57:a4:08:b0:20:0a:47:19:27:79:fe:63: e0:fc:be:b1:c5:d8:35:86:10:49:ee:74:ab:6f:3f: 88:16:11:6e:7c:d3:81:ac:63:07:52:ee:39:b4:fc: 4a:5c:2c:4c:bf:ed:6c:5e:7f:6b:c2:82:c3:58:5a: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:98:51:25:C9:F7:14:B3:1A:CC:FD:52:CE:81:7D:62:C7:94:8F:B5 X509v3 Authority Key Identifier: keyid:D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/IphRJcn3FLMazP1SzoF9YseUj7U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.6.126.0/23 Signature Algorithm: sha256WithRSAEncryption 72:7b:81:05:9c:51:3a:3b:40:97:04:92:82:fe:8a:4c:e1:03: 16:65:50:4e:5e:cc:8d:e5:3d:ea:4e:61:60:aa:6f:13:0b:dd: c3:04:26:9a:a1:65:c3:7b:72:67:b9:22:a3:43:b7:39:e7:0f: 3e:03:dd:6e:29:a3:38:df:b0:7c:3a:93:d7:7c:3d:e3:1e:c0: 80:78:08:b7:67:a5:33:68:e3:c0:6d:80:04:0a:d6:e6:0e:87: d0:1e:7d:1f:39:cb:43:85:30:10:ce:33:c0:bc:eb:10:64:eb: 5a:d9:2e:5d:9e:79:bb:39:95:7f:f0:10:09:f2:fc:0d:e1:21: cf:02:6b:83:b1:2e:b5:ee:d5:a4:14:e4:92:83:42:14:80:39: 68:6f:28:a1:f2:65:80:7a:dd:e1:64:97:b2:c7:44:38:7d:2d: 14:f1:ca:9e:03:7f:7f:9c:62:a9:9d:82:7d:e8:68:28:52:39: 10:8b:f3:95:4e:47:0c:39:a5:48:95:f0:af:9a:0b:c7:da:2b: 83:5b:53:ad:6d:55:bd:f1:ec:1f:1f:95:ff:e1:84:21:a3:b7: cc:a0:a5:a1:e5:0f:64:07:4d:ed:fb:97:1d:fa:1b:4e:1d:12: 00:a9:21:75:3f:6e:5c:c1:26:d3:32:97:2e:36:55:32:96:19: 26:78:90:d7 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMzMw QkM0RTEzN0IxNTEyRTJFNDUwNjgwNkI4NzBBNEVBQTg2MEQ3MB4XDTIzMDgyNDAx MDMzNVoXDTI0MDgyMjA4NTA1N1owMzExMC8GA1UEAxMoMjI5ODUxMjVDOUY3MTRC MzFBQ0NGRDUyQ0U4MTdENjJDNzk0OEZCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPuXp3y+NfXrbbA61xXHydV3CN6HqrbdJXGyIcxEhmMbb/W9WlkP Q0ETgVRWosNTD7LgnhYOeKkcMKnOgKnvq2k3YRJpS4eHf0HKoh7FCCLb3wzwJwI1 640FlSdiF+eadFc+i4JuhWy+i8fIBEPr+41ICts889YhKXFyFbk79Wi06Zj9bjCt GXPPyuqeaC/3UQqOiflYeZDPEvMKd032RrTXkn/8HsbQYxyePydqrs0FKCRJOJXB YtAP7UmHTR5Ov5TsjGUyV6QIsCAKRxknef5j4Py+scXYNYYQSe50q28/iBYRbnzT gaxjB1LuObT8SlwsTL/tbF5/a8KCw1haK+0CAwEAAaOCAfQwggHwMB0GA1UdDgQW BBQimFElyfcUsxrM/VLOgX1ix5SPtTAfBgNVHSMEGDAWgBTTMLxOE3sVEuLkUGgG uHCk6qhg1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CRVNUQkFT SVMvMHpDOFRoTjdGUkxpNUZCb0JyaHdwT3FvWU5jLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8wekM4VGhON0ZSTGk1RkJvQnJod3BPcW9ZTmMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CRVNUQkFTSVMvSXBoUkpjbjNGTE1h elAxU3pvRjlZc2VVajdVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3 bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWcGfjANBgkqhkiG9w0BAQsFAAOCAQEAcnuBBZxROjtAlwSSgv6KTOEDFmVQ Tl7MjeU96k5hYKpvEwvdwwQmmqFlw3tyZ7kio0O3OecPPgPdbimjON+wfDqT13w9 4x7AgHgIt2elM2jjwG2ABArW5g6H0B59HznLQ4UwEM4zwLzrEGTrWtkuXZ55uzmV f/AQCfL8DeEhzwJrg7Eute7VpBTkkoNCFIA5aG8oofJlgHrd4WSXssdEOH0tFPHK ngN/f5xiqZ2CfehoKFI5EIvzlU5HDDmlSJXwr5oLx9org1tTrW1VvfHsHx+V/+GE IaO3zKCloeUPZAdN7fuXHfobTh0SAKkhdT9uXMEm0zKXLjZVMpYZJniQ1w== -----END CERTIFICATE-----Generated at Mon Jun 3 12:43:59 2024 by rpki-client on console-fra.rpki-client.org