$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CTII/pn1tZRYHV966m7JmGW_7q2-Hixw.roa File: pn1tZRYHV966m7JmGW_7q2-Hixw.roa (raw, json) Hash identifier: m26ikLbKJwDX3myhwz4FlnszH65kkTyKenJu9nPCf8c= Subject key identifier: A6:7D:6D:65:16:07:57:DE:BA:9B:B2:66:19:6F:FB:AB:6F:87:8B:1C Certificate issuer: /CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Certificate serial: 118B Authority key identifier: FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/pn1tZRYHV966m7JmGW_7q2-Hixw.roa Signing time: Fri 01 Dec 2023 01:33:41 +0000 ROA not before: Fri 01 Dec 2023 01:33:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 984 IP address blocks: 103.130.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 01:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4491 (0x118b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3AC9FC44C3DD2AB7B5D20BC158C82D83D260A Validity Not Before: Dec 1 01:33:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A67D6D65160757DEBA9BB266196FFBAB6F878B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:47:29:67:26:70:4a:0b:d6:86:e0:30:da:59: e0:67:0f:f9:06:85:91:3b:22:f3:09:ae:3c:b6:d4: 7b:73:18:d3:43:cd:9b:2c:4f:c1:9c:1b:16:de:8a: 72:ea:ec:d8:68:ba:e2:92:17:0b:e2:5b:c7:f3:9d: 31:ae:9f:c9:40:15:75:d3:21:15:2d:5d:b1:8b:b1: c4:b4:bb:87:16:79:fa:62:60:98:27:8c:17:08:39: 23:af:9d:49:53:c8:38:79:97:29:9f:f4:71:80:ca: 1f:a8:5f:f2:2f:c1:9e:44:5f:a8:3a:2f:94:3d:fd: e9:24:a3:7b:3c:b2:11:88:7c:25:6f:d6:03:4f:24: c9:f6:d9:f8:69:9d:48:7d:4f:b2:f4:07:f0:6c:3a: 31:4b:e4:c8:e4:a1:c4:c4:f6:5b:1b:3c:5e:97:99: b9:ff:51:a7:31:a4:52:6e:32:a3:f1:03:7c:4b:ee: d0:d2:ee:f0:b1:97:d2:55:27:72:91:d0:d2:d4:04: a1:db:ea:5c:8c:e5:57:f6:e4:64:4e:09:7b:46:e1: f1:81:d7:c4:b7:8f:5a:11:a6:d0:2b:fe:77:e7:cd: 4f:bb:92:85:7e:ce:d1:54:74:d1:ed:46:bc:5d:56: 71:47:35:4b:83:82:a0:75:47:72:9d:2f:8a:39:c7: 66:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7D:6D:65:16:07:57:DE:BA:9B:B2:66:19:6F:FB:AB:6F:87:8B:1C X509v3 Authority Key Identifier: keyid:FB:D3:AC:9F:C4:4C:3D:D2:AB:7B:5D:20:BC:15:8C:82:D8:3D:26:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/-9Osn8RMPdKre10gvBWMgtg9Jgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-9Osn8RMPdKre10gvBWMgtg9Jgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CTII/pn1tZRYHV966m7JmGW_7q2-Hixw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.249.0/24 Signature Algorithm: sha256WithRSAEncryption 95:bb:7c:58:f4:56:a7:1d:8e:03:00:c7:f2:ac:b7:6d:49:af: dc:7c:23:d5:28:71:49:0a:96:7f:2d:65:08:97:ff:12:3e:b0: 79:ea:a7:fa:7c:50:dc:ff:e9:f0:26:ae:a2:97:8e:ad:c9:96: 3f:f5:51:5b:37:77:21:05:36:2f:80:f5:56:c7:d0:c0:ca:4c: 45:05:4a:74:a2:4d:26:45:5f:ad:ab:5a:50:7c:32:40:1e:a0: 1f:82:c9:ee:d6:b4:26:0d:2c:74:35:27:74:73:8b:0f:9c:c2: cf:10:69:91:c9:82:f8:c2:0e:00:9a:ed:44:dd:5b:c9:4f:83: 67:38:50:3f:fc:58:ab:5c:10:28:cd:a0:63:d9:28:0e:da:45: 30:74:45:af:6e:ee:d9:ff:a7:c8:99:f6:e1:f9:c2:31:89:01: 0d:7d:91:0d:86:a4:89:58:75:8d:71:e2:36:41:e6:e5:4c:ee: a9:af:97:e7:d5:fb:74:63:41:3b:d3:ac:db:63:19:8c:a9:9e: 1b:a5:61:4e:d3:79:22:81:7d:8e:fe:60:c0:c8:d0:59:55:46: d2:1e:34:83:4c:e1:6a:67:46:6e:27:68:e3:1e:19:20:6e:37: d1:ea:c5:36:b8:71:b8:46:b4:62:1b:d3:1e:ba:ec:8f:bb:a1: 93:14:d2:46 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJE M0FDOUZDNDRDM0REMkFCN0I1RDIwQkMxNThDODJEODNEMjYwQTAeFw0yMzEyMDEw MTMzNDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2N0Q2RDY1MTYwNzU3 REVCQTlCQjI2NjE5NkZGQkFCNkY4NzhCMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwRylnJnBKC9aG4DDaWeBnD/kGhZE7IvMJrjy21HtzGNNDzZss T8GcGxbeinLq7NhouuKSFwviW8fznTGun8lAFXXTIRUtXbGLscS0u4cWefpiYJgn jBcIOSOvnUlTyDh5lymf9HGAyh+oX/IvwZ5EX6g6L5Q9/ekko3s8shGIfCVv1gNP JMn22fhpnUh9T7L0B/BsOjFL5MjkocTE9lsbPF6Xmbn/UacxpFJuMqPxA3xL7tDS 7vCxl9JVJ3KR0NLUBKHb6lyM5Vf25GROCXtG4fGB18S3j1oRptAr/nfnzU+7koV+ ztFUdNHtRrxdVnFHNUuDgqB1R3KdL4o5x2YBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUpn1tZRYHV966m7JmGW/7q2+HixwwHwYDVR0jBBgwFoAU+9Osn8RMPdKre10g vBWMgtg9JgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1RJSS8t OU9zbjhSTVBkS3JlMTBndkJXTWd0ZzlKZ28uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Ly05T3NuOFJNUGRLcmUxMGd2QldNZ3RnOUpnby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0NUSUkvcG4xdFpSWUhWOTY2bTdKbUdXXzdx Mi1IaXh3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeC+TAN BgkqhkiG9w0BAQsFAAOCAQEAlbt8WPRWpx2OAwDH8qy3bUmv3Hwj1ShxSQqWfy1l CJf/Ej6weeqn+nxQ3P/p8CauopeOrcmWP/VRWzd3IQU2L4D1VsfQwMpMRQVKdKJN JkVfrataUHwyQB6gH4LJ7ta0Jg0sdDUndHOLD5zCzxBpkcmC+MIOAJrtRN1byU+D ZzhQP/xYq1wQKM2gY9koDtpFMHRFr27u2f+nyJn24fnCMYkBDX2RDYakiVh1jXHi NkHm5Uzuqa+X59X7dGNBO9Os22MZjKmeG6VhTtN5IoF9jv5gwMjQWVVG0h40g0zh amdGbido4x4ZIG430erFNrhxuEa0YhvTHrrsj7uhkxTSRg== -----END CERTIFICATE-----Generated at Fri May 17 22:07:45 2024 by rpki-client on console-ams.rpki-client.org