$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CTII/d1kKp5mx2FrJJcq5frPS4noUwlE.roa File: d1kKp5mx2FrJJcq5frPS4noUwlE.roa (raw, json) Hash identifier: n9Qtyyy2aK9igCZ/FUBcixnxJ8HCu8ROiQftsvTDARY= Subject key identifier: 77:59:0A:A7:99:B1:D8:5A:C9:25:CA:B9:7E:B3:D2:E2:7A:14:C2:51 Certificate issuer: /CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Certificate serial: 1243 Authority key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/d1kKp5mx2FrJJcq5frPS4noUwlE.roa Signing time: Mon 26 Aug 2024 05:11:54 +0000 ROA not before: Mon 26 Aug 2024 05:11:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 984 IP address blocks: 103.130.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 06:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4675 (0x1243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Validity Not Before: Aug 26 05:11:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=77590AA799B1D85AC925CAB97EB3D2E27A14C251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:57:4c:fd:14:84:57:55:62:be:18:89:ac:81: 5a:f9:6c:04:38:52:9d:b6:a5:50:90:75:5a:c8:a9: f9:de:4d:db:d7:1c:87:e5:3d:db:cc:45:1c:07:a3: a4:fc:fd:7e:60:28:f1:1b:b5:98:44:dd:a3:8a:2d: 62:b5:95:d5:ee:9b:47:98:67:e6:f4:be:8b:a0:40: b1:c6:33:99:59:19:03:18:cd:95:e3:d4:46:d3:11: f7:70:51:58:44:dc:06:14:fd:4e:e7:b7:66:d7:74: 2c:12:40:3b:58:43:7d:ef:98:bb:46:6a:90:79:b3: 61:27:d1:c6:73:f2:bf:ef:08:77:71:2a:ff:0c:07: 91:9e:dc:96:43:ba:a8:42:12:a0:c9:b7:c3:93:d1: 2f:ec:dd:e8:e0:1c:16:c8:1a:fd:0e:b0:82:29:f4: 76:74:63:3c:a8:92:d7:cf:b1:26:ea:10:aa:3a:18: 74:b6:f7:03:a1:34:06:86:95:ec:b8:db:17:b2:bf: 6d:37:a1:84:3d:43:bc:10:35:db:c3:d0:5c:a1:dc: 9b:7a:9f:78:ae:1a:13:62:c2:b1:dd:9f:61:6c:90: 78:06:87:cc:59:0e:77:5b:a3:4c:33:cf:2e:7c:0d: 45:10:da:54:7b:a0:5a:96:a8:e2:32:f3:fa:c1:f0: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:59:0A:A7:99:B1:D8:5A:C9:25:CA:B9:7E:B3:D2:E2:7A:14:C2:51 X509v3 Authority Key Identifier: keyid:FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/d1kKp5mx2FrJJcq5frPS4noUwlE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.249.0/24 Signature Algorithm: sha256WithRSAEncryption 29:be:c9:b9:93:3a:0d:2e:0a:23:bf:ac:b3:a0:5e:b1:e9:04: d2:47:52:af:53:49:63:e5:cc:87:d5:c7:59:77:92:cb:42:47: 14:f2:69:11:29:84:5a:92:bd:b6:4f:0b:23:c5:8c:dd:d4:45: f9:8a:c1:47:a0:fe:90:62:9c:3b:70:a9:4f:16:8a:f6:06:dc: ba:cf:61:94:f3:8c:07:8e:53:f3:af:5c:4a:8e:d8:20:a7:cc: 1c:d7:9e:42:a0:d3:34:dc:17:24:b6:18:6a:c9:50:4c:76:2b: cc:87:1e:a4:2e:1b:b1:e9:8c:3d:a9:f3:ba:4d:e0:52:78:a0: d9:23:43:a1:da:fa:7b:ff:7e:29:ca:41:88:0c:c0:de:f9:6f: 7b:be:bf:ef:ac:48:e5:cb:87:d5:3e:22:cd:f8:38:0f:9c:f1: b0:26:68:f0:11:a0:2e:2c:6b:d5:30:3b:c6:29:b4:75:b8:c9: 56:4e:9a:c1:0e:cc:cc:63:12:8d:4f:18:f7:32:b3:6d:84:4f: 00:21:64:55:29:92:db:a2:8a:86:41:86:88:cb:a1:68:09:1d: e0:66:c0:ad:cb:87:a8:34:82:ca:c4:1d:43:ee:9c:34:0c:b7: 46:4f:3c:03:35:2d:30:f7:7e:96:36:59:45:1c:b5:8a:7c:94: 1b:4c:db:37 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJE M0FDOUZDNDRDM0REMkFCN0I1RDIwQkMxNThDODJEODNEMjYwQTAeFw0yNDA4MjYw NTExNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc3NTkwQUE3OTlCMUQ4 NUFDOTI1Q0FCOTdFQjNEMkUyN0ExNEMyNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2V0z9FIRXVWK+GImsgVr5bAQ4Up22pVCQdVrIqfneTdvXHIfl PdvMRRwHo6T8/X5gKPEbtZhE3aOKLWK1ldXum0eYZ+b0vougQLHGM5lZGQMYzZXj 1EbTEfdwUVhE3AYU/U7nt2bXdCwSQDtYQ33vmLtGapB5s2En0cZz8r/vCHdxKv8M B5Ge3JZDuqhCEqDJt8OT0S/s3ejgHBbIGv0OsIIp9HZ0YzyoktfPsSbqEKo6GHS2 9wOhNAaGley42xeyv203oYQ9Q7wQNdvD0Fyh3Jt6n3iuGhNiwrHdn2FskHgGh8xZ Dndbo0wzzy58DUUQ2lR7oFqWqOIy8/rB8PkHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUd1kKp5mx2FrJJcq5frPS4noUwlEwHwYDVR0jBBgwFoAU+9Osn8RMPdKre10g vBWMgtg9JgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1RJSS8t OU9zbjhSTVBkS3JlMTBndkJXTWd0ZzlKZ28uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Ly05T3NuOFJNUGRLcmUxMGd2QldNZ3RnOUpnby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0NUSUkvZDFrS3A1bXgyRnJKSmNxNWZyUFM0 bm9Vd2xFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeC+TAN BgkqhkiG9w0BAQsFAAOCAQEAKb7JuZM6DS4KI7+ss6BesekE0kdSr1NJY+XMh9XH WXeSy0JHFPJpESmEWpK9tk8LI8WM3dRF+YrBR6D+kGKcO3CpTxaK9gbcus9hlPOM B45T869cSo7YIKfMHNeeQqDTNNwXJLYYaslQTHYrzIcepC4bsemMPanzuk3gUnig 2SNDodr6e/9+KcpBiAzA3vlve76/76xI5cuH1T4izfg4D5zxsCZo8BGgLixr1TA7 xim0dbjJVk6awQ7MzGMSjU8Y9zKzbYRPACFkVSmS26KKhkGGiMuhaAkd4GbArcuH qDSCysQdQ+6cNAy3Rk88AzUtMPd+ljZZRRy1inyUG0zbNw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:54 2024 by rpki-client on console-fra.rpki-client.org