$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/Bv118Itz2fiwTLfZOgJn23OvC9g.roa File: Bv118Itz2fiwTLfZOgJn23OvC9g.roa (raw, json) Hash identifier: s0MmSQcxnMyKfmejGG4xL/lTS28Dr1/SQ3uwtwdZ6AI= Subject key identifier: 06:FD:75:F0:8B:73:D9:F8:B0:4C:B7:D9:3A:02:67:DB:73:AF:0B:D8 Certificate issuer: /CN=A082F5D992E6BC25E08997538616180702E857C3 Certificate serial: 03A6 Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/Bv118Itz2fiwTLfZOgJn23OvC9g.roa Signing time: Mon 26 Aug 2024 05:11:51 +0000 ROA not before: Mon 26 Aug 2024 05:11:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38839 IP address blocks: 103.159.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3 Validity Not Before: Aug 26 05:11:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=06FD75F08B73D9F8B04CB7D93A0267DB73AF0BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9b:c6:cb:32:02:27:03:37:86:c4:bb:e8:d0: a6:a2:7c:9e:6e:3c:5a:fa:c9:c5:b5:46:2c:7b:a7: a2:d4:00:b6:67:7c:17:e2:bf:1e:35:c8:e1:8e:52: 61:31:d5:f4:bd:23:09:c0:c6:7e:46:f5:bd:2a:2a: 64:32:5e:40:ac:4f:17:2e:cd:47:b3:d8:8f:ce:38: fe:0c:0c:d8:02:fb:fe:77:6a:16:e4:62:af:0e:3f: a2:99:79:36:4c:bb:39:86:57:bd:a2:50:86:7b:ad: 8b:a3:f7:98:9a:a2:11:2c:c6:1d:90:e5:74:52:47: 17:d1:68:fa:2d:61:86:07:56:2a:6e:c1:5d:4e:e0: fd:c1:ee:ce:10:fd:b4:98:65:9f:84:47:21:45:24: f9:1b:7d:58:24:c6:62:30:48:7e:a9:29:90:c4:80: 9c:16:03:72:80:0b:d7:4d:cd:df:fd:f6:9a:04:b9: 2f:a3:34:d5:57:32:df:9e:72:43:3e:26:b4:23:ae: 52:80:81:cd:f1:02:a5:b7:54:72:42:df:c5:49:c2: 06:c4:cf:0f:19:eb:8c:79:d8:70:ce:43:f7:f0:2f: a1:80:9b:9a:10:35:00:eb:9f:b3:7f:89:9a:85:1a: 55:8a:e9:b8:72:34:5f:9c:ce:c1:82:6e:66:63:d8: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FD:75:F0:8B:73:D9:F8:B0:4C:B7:D9:3A:02:67:DB:73:AF:0B:D8 X509v3 Authority Key Identifier: keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/Bv118Itz2fiwTLfZOgJn23OvC9g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.176.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:45:83:e8:8c:66:30:fb:e8:dc:04:3e:74:8b:f5:70:f9:af: a6:f3:c5:e2:b1:41:29:41:76:b7:19:e1:be:a6:d3:d0:fd:a1: 6f:52:f9:3a:43:04:05:80:e5:d3:e7:cc:28:65:1d:bb:45:a7: 69:62:1c:78:db:fa:dc:69:d8:d2:e1:4e:08:19:4c:18:61:3d: 2a:7d:32:65:68:90:02:5d:70:79:d3:d0:77:75:5e:75:0f:ef: d6:c8:9d:84:1e:c0:d7:7d:4b:4e:7e:d3:c2:59:b3:4a:59:fa: 7e:d7:f7:76:22:0f:f0:3d:c6:b1:05:d4:ee:a7:31:08:56:ce: 84:ce:ba:1b:08:1b:4f:33:b3:43:b1:be:6d:61:77:e1:35:45: df:e8:ce:41:99:db:54:75:15:40:c4:a5:65:64:88:6e:8a:73: b7:5e:e4:7b:60:5e:02:f3:2f:83:14:e5:e0:63:0d:7b:8d:cc: c5:81:25:dd:80:5b:c1:55:e1:ec:58:eb:d8:87:48:4c:c5:89: 24:60:6a:4f:cf:06:1b:b5:b7:45:88:1a:18:f2:2d:67:3d:54: 90:10:2a:27:4d:0f:69:29:71:80:48:22:04:cc:76:fd:34:c5: dc:51:37:a7:37:b3:14:9d:fd:be:79:a4:cd:f0:fd:29:73:80: 91:d6:54:a0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA4 MkY1RDk5MkU2QkMyNUUwODk5NzUzODYxNjE4MDcwMkU4NTdDMzAeFw0yNDA4MjYw NTExNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA2RkQ3NUYwOEI3M0Q5 RjhCMDRDQjdEOTNBMDI2N0RCNzNBRjBCRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvm8bLMgInAzeGxLvo0KaifJ5uPFr6ycW1Rix7p6LUALZnfBfi vx41yOGOUmEx1fS9IwnAxn5G9b0qKmQyXkCsTxcuzUez2I/OOP4MDNgC+/53ahbk Yq8OP6KZeTZMuzmGV72iUIZ7rYuj95iaohEsxh2Q5XRSRxfRaPotYYYHVipuwV1O 4P3B7s4Q/bSYZZ+ERyFFJPkbfVgkxmIwSH6pKZDEgJwWA3KAC9dNzd/99poEuS+j NNVXMt+eckM+JrQjrlKAgc3xAqW3VHJC38VJwgbEzw8Z64x52HDOQ/fwL6GAm5oQ NQDrn7N/iZqFGlWK6bhyNF+czsGCbmZj2FoLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBv118Itz2fiwTLfZOgJn23OvC9gwHwYDVR0jBBgwFoAUoIL12ZLmvCXgiZdT hhYYBwLoV8MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVL L29JTDEyWkxtdkNYZ2laZFRoaFlZQndMb1Y4TS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0lMMTJaTG12Q1hnaVpkVGhoWVlCd0xvVjhNLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVLL0J2MTE4SXR6MmZpd1RMZlpP Z0puMjNPdkM5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn n7AwDQYJKoZIhvcNAQELBQADggEBAE9Fg+iMZjD76NwEPnSL9XD5r6bzxeKxQSlB drcZ4b6m09D9oW9S+TpDBAWA5dPnzChlHbtFp2liHHjb+txp2NLhTggZTBhhPSp9 MmVokAJdcHnT0Hd1XnUP79bInYQewNd9S05+08JZs0pZ+n7X93YiD/A9xrEF1O6n MQhWzoTOuhsIG08zs0Oxvm1hd+E1Rd/ozkGZ21R1FUDEpWVkiG6Kc7de5HtgXgLz L4MU5eBjDXuNzMWBJd2AW8FV4exY69iHSEzFiSRgak/PBhu1t0WIGhjyLWc9VJAQ KidND2kpcYBIIgTMdv00xdxRN6c3sxSd/b55pM3w/SlzgJHWVKA= -----END CERTIFICATE-----Generated at Mon Nov 25 06:08:43 2024 by rpki-client on console-fra.rpki-client.org