$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1mERHD1QE9hpE_Pa9Q9cmKJGjdI.roa File: 1mERHD1QE9hpE_Pa9Q9cmKJGjdI.roa (raw, json) Hash identifier: TQMVD0zv6Clvw9ETByChjhfhBU0ZpSXA4UQmdceiP5U= Subject key identifier: D6:61:11:1C:3D:50:13:D8:69:13:F3:DA:F5:0F:5C:98:A2:46:8D:D2 Certificate issuer: /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Certificate serial: 0BED Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1mERHD1QE9hpE_Pa9Q9cmKJGjdI.roa Signing time: Mon 26 Aug 2024 05:10:14 +0000 ROA not before: Mon 26 Aug 2024 05:10:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131618 IP address blocks: 103.104.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3053 (0xbed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8 Validity Not Before: Aug 26 05:10:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D661111C3D5013D86913F3DAF50F5C98A2468DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d8:d5:f7:fb:45:cb:18:1c:f1:e5:e1:af:81: b6:d2:d1:bd:33:60:eb:67:e0:0f:0b:1d:79:56:c0: 76:69:1a:61:c7:dc:9c:93:72:9e:41:b7:f4:77:49: ba:01:17:20:71:28:25:93:72:6f:a3:70:01:f8:8a: 51:26:b6:5d:00:6b:4e:a2:2a:ee:9c:04:8e:ee:e1: 1b:c7:86:4f:ac:04:2b:2c:e6:f1:b7:81:d2:d4:28: b9:37:6a:61:54:67:91:0f:dd:21:ce:46:e6:d5:73: e4:40:45:0e:4b:49:e8:e5:35:a9:6f:66:2d:2a:75: e2:53:50:8b:34:58:8a:71:2b:ba:b9:19:14:c8:19: e2:81:c2:6f:a3:78:04:19:5f:22:e1:d8:4c:58:09: 05:89:45:ec:fa:9b:b6:37:82:e3:e7:1c:85:2a:c5: 38:c0:2b:20:db:7f:1f:43:5d:1c:c5:25:a6:bc:e1: 3a:d6:43:b0:bb:90:a7:c5:57:a1:c8:e1:45:43:26: 3f:4f:04:29:20:a6:26:70:96:d7:ab:86:b0:c1:6b: 53:74:c2:49:02:04:16:c8:e1:9a:ba:55:c3:64:3a: 9c:5c:6d:bc:61:9e:f3:ec:cc:9a:61:d4:31:ae:cf: 85:9b:67:7c:39:a8:e3:59:cb:6a:42:72:15:46:29: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:61:11:1C:3D:50:13:D8:69:13:F3:DA:F5:0F:5C:98:A2:46:8D:D2 X509v3 Authority Key Identifier: keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/1mERHD1QE9hpE_Pa9Q9cmKJGjdI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.104.151.0/24 Signature Algorithm: sha256WithRSAEncryption b4:b2:a6:bc:2f:0c:45:f2:74:87:94:73:ba:10:dc:71:8d:2b: 95:c2:b7:e6:60:55:fd:8e:2d:e1:dd:56:92:b9:b4:c4:0e:12: 84:42:32:72:1b:20:f0:25:17:f8:96:f7:f4:f9:1e:52:8b:0a: a6:7c:23:08:34:9c:44:79:da:a1:1c:04:f2:d1:c9:f7:8a:9c: 88:7a:2f:be:6e:dc:c8:5f:f1:cc:3d:f1:d9:64:e7:0f:40:cb: 3e:5c:d5:48:87:62:57:7a:ce:9f:9f:4c:aa:e9:a9:56:94:17: 7e:2c:07:01:e3:36:48:24:ef:63:74:52:72:33:4b:bb:83:c2: 0c:94:f5:3c:26:43:09:e3:93:77:4d:c0:8d:aa:dd:e9:5a:47: da:79:33:eb:f8:80:28:6d:7a:78:f5:d7:b0:99:c2:db:55:cb: 79:9d:b6:88:da:b7:1c:82:ae:6a:17:0a:92:b6:dd:ad:41:60: ef:c4:c8:ee:7a:95:8d:5c:d6:8f:75:3b:1b:d7:e2:7d:c0:98: d6:36:40:c9:07:84:9a:86:d7:f0:eb:01:49:3c:0b:2e:e0:bf: 79:76:a9:51:f5:45:77:2d:81:e5:30:b6:57:10:a9:51:93:5d: 14:3f:cb:2f:2f:45:3b:1e:ce:68:ec:ad:ce:d0:38:ed:cc:b5: b7:0c:07:94 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 QTkxRUQ0MEFBQTE1QjlBQkNBMjFDMjA1QjM2RUM3NDk0OUZDODAeFw0yNDA4MjYw NTEwMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2NjExMTFDM0Q1MDEz RDg2OTEzRjNEQUY1MEY1Qzk4QTI0NjhERDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDb2NX3+0XLGBzx5eGvgbbS0b0zYOtn4A8LHXlWwHZpGmHH3JyT cp5Bt/R3SboBFyBxKCWTcm+jcAH4ilEmtl0Aa06iKu6cBI7u4RvHhk+sBCss5vG3 gdLUKLk3amFUZ5EP3SHORubVc+RARQ5LSejlNalvZi0qdeJTUIs0WIpxK7q5GRTI GeKBwm+jeAQZXyLh2ExYCQWJRez6m7Y3guPnHIUqxTjAKyDbfx9DXRzFJaa84TrW Q7C7kKfFV6HI4UVDJj9PBCkgpiZwlterhrDBa1N0wkkCBBbI4Zq6VcNkOpxcbbxh nvPszJph1DGuz4WbZ3w5qONZy2pCchVGKcjnAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU1mERHD1QE9hpE/Pa9Q9cmKJGjdIwHwYDVR0jBBgwFoAUeVqR7UCqoVuavKIc IFs27HSUn8gwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0VOVFJP SUQvZVZxUjdVQ3FvVnVhdktJY0lGczI3SFNVbjhnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9lVnFSN1VDcW9WdWF2S0ljSUZzMjdIU1VuOGcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DRU5UUk9JRC8xbUVSSEQxUUU5aHBF X1BhOVE5Y21LSkdqZEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ2iXMA0GCSqGSIb3DQEBCwUAA4IBAQC0sqa8LwxF8nSHlHO6ENxxjSuVwrfm YFX9ji3h3VaSubTEDhKEQjJyGyDwJRf4lvf0+R5SiwqmfCMINJxEedqhHATy0cn3 ipyIei++btzIX/HMPfHZZOcPQMs+XNVIh2JXes6fn0yq6alWlBd+LAcB4zZIJO9j dFJyM0u7g8IMlPU8JkMJ45N3TcCNqt3pWkfaeTPr+IAobXp49dewmcLbVct5nbaI 2rccgq5qFwqStt2tQWDvxMjuepWNXNaPdTsb1+J9wJjWNkDJB4Sahtfw6wFJPAsu 4L95dqlR9UV3LYHlMLZXEKlRk10UP8svL0U7Hs5o7K3O0DjtzLW3DAeU -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:23 2024 by rpki-client on console-fra.rpki-client.org