$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLARK/0RoJn1kOpPb74NwfG3wag4PeNX0.roa File: 0RoJn1kOpPb74NwfG3wag4PeNX0.roa (raw, json) Hash identifier: so4/Wr/D5vu/sU2bUC82n0aVYN4OSwos2WYCL67AxfQ= Subject key identifier: D1:1A:09:9F:59:0E:A4:F6:FB:E0:DC:1F:1B:7C:1A:83:83:DE:35:7D Certificate issuer: /CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C Certificate serial: 0169 Authority key identifier: 74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/0RoJn1kOpPb74NwfG3wag4PeNX0.roa Signing time: Mon 26 Aug 2024 05:11:31 +0000 ROA not before: Mon 26 Aug 2024 05:11:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63910 IP address blocks: 103.130.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74AF0402FEF56C34A192D1D2185E6FB546AA702C Validity Not Before: Aug 26 05:11:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D11A099F590EA4F6FBE0DC1F1B7C1A8383DE357D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:cb:ab:c2:f4:f7:f4:5c:04:e2:27:24:66: 83:77:67:b5:1d:5d:9f:23:fe:c9:d8:cc:02:22:49: 4b:fd:57:01:1d:7d:50:67:46:41:5e:8f:22:c4:31: 46:7c:fa:6d:63:54:cc:16:df:fa:3e:c4:00:93:a4: d8:99:63:69:ef:e2:10:55:65:94:17:c4:08:d6:e4: 39:5a:06:76:ee:20:28:74:89:c0:64:94:9f:35:55: 96:f7:87:9e:01:25:1b:ab:14:75:79:1a:e4:e8:bf: be:94:b0:06:c3:4d:34:68:9d:5e:2b:20:f3:29:27: 73:11:08:52:99:92:a4:bf:fe:40:8f:09:4c:d1:75: 42:97:07:42:9b:c1:8d:a6:c8:c1:a4:0f:ca:3f:7c: 35:17:dd:3b:df:40:77:f2:3d:5f:6b:a7:d2:28:41: 66:7f:f9:64:00:10:18:73:11:25:26:8d:57:54:98: aa:81:cf:cf:24:22:55:76:b0:1b:14:7f:e6:cb:70: 64:c8:6a:ba:9e:e8:90:90:3b:b5:25:23:84:5b:ee: 12:25:a7:81:11:4e:9c:4e:b8:97:a5:ff:0b:a1:66: e6:ae:7f:fb:eb:0e:20:12:79:b2:5e:97:58:9e:a6: 3c:87:d5:e8:14:12:16:cb:01:2c:95:55:93:00:66: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1A:09:9F:59:0E:A4:F6:FB:E0:DC:1F:1B:7C:1A:83:83:DE:35:7D X509v3 Authority Key Identifier: keyid:74:AF:04:02:FE:F5:6C:34:A1:92:D1:D2:18:5E:6F:B5:46:AA:70:2C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/dK8EAv71bDShktHSGF5vtUaqcCw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dK8EAv71bDShktHSGF5vtUaqcCw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLARK/0RoJn1kOpPb74NwfG3wag4PeNX0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.237.0/24 Signature Algorithm: sha256WithRSAEncryption 97:80:22:2b:3a:8a:86:05:34:e0:5c:39:55:9c:9b:21:cd:20: c3:8e:5b:d0:7b:b8:f3:e2:1b:ce:34:10:f7:38:ea:80:10:6e: 73:03:6d:3e:1e:63:d8:f0:00:28:4b:e4:0a:57:b7:07:e9:3a: 36:72:71:89:cc:c1:0b:0f:50:48:c3:f7:e8:32:c6:4e:d8:ea: 7d:d0:20:0d:d2:8f:f0:e2:24:2a:68:8e:c1:a7:f3:10:3c:d8: 34:f5:f8:6c:a4:5a:58:ef:d5:96:14:84:da:c9:d6:45:ae:9c: ac:7d:83:8e:1b:6a:55:ca:cc:59:28:58:e7:83:97:0b:7b:ed: 38:cf:b9:05:42:84:2c:3e:a7:16:25:de:22:04:ea:13:45:84: b4:79:8a:8a:5f:d8:cf:12:7a:c2:db:ef:c5:c3:bc:9a:bd:f2: 68:0e:13:26:fb:31:e3:df:d8:5a:c0:b3:8d:d9:10:26:1c:72: f7:e7:20:c2:0a:49:f2:a9:2c:da:b7:c8:19:60:23:5e:a1:60: 20:7f:59:94:33:d7:c5:5d:b4:84:3a:50:07:33:4c:35:fb:9e: 6a:7a:88:87:57:a3:09:4d:0c:15:f4:ac:9b:c9:63:31:90:c8: 6b:42:c7:ff:af:b5:6a:a4:06:bc:60:2f:6a:a9:e3:8d:5c:fb: 6d:51:44:c6 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzRB RjA0MDJGRUY1NkMzNEExOTJEMUQyMTg1RTZGQjU0NkFBNzAyQzAeFw0yNDA4MjYw NTExMzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxMUEwOTlGNTkwRUE0 RjZGQkUwREMxRjFCN0MxQTgzODNERTM1N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXqcurwvT39FwE4ickZoN3Z7UdXZ8j/snYzAIiSUv9VwEdfVBn RkFejyLEMUZ8+m1jVMwW3/o+xACTpNiZY2nv4hBVZZQXxAjW5DlaBnbuICh0icBk lJ81VZb3h54BJRurFHV5GuTov76UsAbDTTRonV4rIPMpJ3MRCFKZkqS//kCPCUzR dUKXB0KbwY2myMGkD8o/fDUX3TvfQHfyPV9rp9IoQWZ/+WQAEBhzESUmjVdUmKqB z88kIlV2sBsUf+bLcGTIarqe6JCQO7UlI4Rb7hIlp4ERTpxOuJel/wuhZuauf/vr DiASebJel1iepjyH1egUEhbLASyVVZMAZtyDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU0RoJn1kOpPb74NwfG3wag4PeNX0wHwYDVR0jBBgwFoAUdK8EAv71bDShktHS GF5vtUaqcCwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xBUksv ZEs4RUF2NzFiRFNoa3RIU0dGNXZ0VWFxY0N3LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9kSzhFQXY3MWJEU2hrdEhTR0Y1dnRVYXFjQ3cuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DTEFSSy8wUm9KbjFrT3BQYjc0TndmRzN3 YWc0UGVOWDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4Lt MA0GCSqGSIb3DQEBCwUAA4IBAQCXgCIrOoqGBTTgXDlVnJshzSDDjlvQe7jz4hvO NBD3OOqAEG5zA20+HmPY8AAoS+QKV7cH6To2cnGJzMELD1BIw/foMsZO2Op90CAN 0o/w4iQqaI7Bp/MQPNg09fhspFpY79WWFITaydZFrpysfYOOG2pVysxZKFjng5cL e+04z7kFQoQsPqcWJd4iBOoTRYS0eYqKX9jPEnrC2+/Fw7yavfJoDhMm+zHj39ha wLON2RAmHHL35yDCCknyqSzat8gZYCNeoWAgf1mUM9fFXbSEOlAHM0w1+55qeoiH V6MJTQwV9KybyWMxkMhrQsf/r7VqpAa8YC9qqeONXPttUUTG -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org