$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYVC/GeazUuf46mEyj3o2jIdggdIbDyw.roa File: GeazUuf46mEyj3o2jIdggdIbDyw.roa (raw, json) Hash identifier: iVUyyySqa7cgEiyqsrJ2+hhMyKjxyCWRMc1WZ4hE2YY= Subject key identifier: 19:E6:B3:52:E7:F8:EA:61:32:8F:7A:36:8C:87:60:81:D2:1B:0F:2C Certificate issuer: /CN=370F3943433AD963E299A9BE9239D0F3E37A082A Certificate serial: 0261 Authority key identifier: 37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/GeazUuf46mEyj3o2jIdggdIbDyw.roa Signing time: Mon 26 Aug 2024 05:12:09 +0000 ROA not before: Mon 26 Aug 2024 05:12:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 45102 IP address blocks: 103.183.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/Nw85Q0M62WPimam-kjnQ8-N6CCo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/Nw85Q0M62WPimam-kjnQ8-N6CCo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370F3943433AD963E299A9BE9239D0F3E37A082A Validity Not Before: Aug 26 05:12:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=19E6B352E7F8EA61328F7A368C876081D21B0F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:32:ea:fa:af:87:d9:b2:4b:7c:1a:56:0c: 09:3b:d2:8d:20:99:1c:4d:4b:cf:2e:57:cc:bb:9e: 4f:d8:20:48:2b:06:79:55:04:3f:7b:2c:8a:34:ec: 26:cd:0a:04:d0:61:1f:e0:d2:2a:75:df:9a:66:9e: 33:e4:cb:c2:9b:bc:3c:7f:7d:fd:0f:96:75:f3:c5: ca:b7:35:15:97:cc:14:3c:10:a3:c7:c8:00:9c:10: 20:4a:1b:c1:d9:16:63:a7:bc:d0:23:99:ab:77:b5: 53:31:ca:87:11:75:e5:66:a1:8c:9a:f5:d9:f6:6c: 46:b7:d7:e2:65:02:81:2c:0f:a0:20:18:72:53:88: 61:1c:87:98:5f:17:fc:1c:ee:cc:a0:93:33:db:6a: d5:85:d4:e8:27:bc:93:89:24:fa:04:df:00:01:2f: 36:28:76:43:4b:44:52:74:4c:2d:fa:ae:be:1d:cc: 21:e2:5a:f9:69:3e:6b:ce:94:d7:b9:0a:72:dd:8e: 1f:b5:11:f2:4a:f4:8e:2c:c2:67:c7:f3:21:90:b8: c0:e9:25:fd:a2:a5:24:f1:ef:22:60:d2:a7:4d:a9: 1d:8b:fe:19:62:45:17:f9:8e:4f:08:06:cf:7a:3c: c1:6d:37:ee:50:c1:de:28:ae:c2:ff:70:21:3b:3d: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:B3:52:E7:F8:EA:61:32:8F:7A:36:8C:87:60:81:D2:1B:0F:2C X509v3 Authority Key Identifier: keyid:37:0F:39:43:43:3A:D9:63:E2:99:A9:BE:92:39:D0:F3:E3:7A:08:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/Nw85Q0M62WPimam-kjnQ8-N6CCo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nw85Q0M62WPimam-kjnQ8-N6CCo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYVC/GeazUuf46mEyj3o2jIdggdIbDyw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.183.154.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:11:d9:52:15:b9:e5:b1:f0:75:e0:46:e1:52:8e:3a:0a:89: bc:2c:d3:b4:36:19:7d:a4:9c:25:a7:30:b0:5b:df:32:59:b3: 7c:31:04:49:68:cd:e1:2d:b2:3d:0f:f5:d0:92:cb:31:ab:c3: 50:35:d8:58:93:6b:83:d6:80:97:0a:3d:05:be:0e:60:3e:13: bf:e1:32:23:db:e4:bb:38:36:5b:8c:d0:59:48:7c:82:d0:53: f4:7f:de:0a:f3:5e:a7:e1:fe:3f:aa:fe:87:81:70:1d:a4:43: 00:ee:2c:0e:db:c5:5a:75:a9:4e:06:4b:7d:a3:c3:ef:ed:df: cf:49:48:bf:2f:9a:c4:14:20:38:6b:13:26:af:4c:3f:43:2e: 1b:99:13:46:b8:e0:67:ff:16:a3:99:1d:ae:f7:a3:ee:0b:95: 01:c1:18:f7:29:75:95:60:de:74:fb:c2:ed:99:a7:63:14:46: 52:3e:89:90:d9:c3:b7:b0:f3:03:b5:66:2d:53:0e:4b:19:bd: 48:3e:b6:89:5a:66:20:07:a5:51:5b:67:fa:56:e8:30:94:15: 36:54:ce:c9:4b:3c:0c:7b:42:8d:da:97:25:d1:aa:13:35:3a: 26:fc:a7:10:9f:b1:59:ea:4e:ef:20:f7:ab:cc:57:05:82:59: b6:71:04:97 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzcw RjM5NDM0MzNBRDk2M0UyOTlBOUJFOTIzOUQwRjNFMzdBMDgyQTAeFw0yNDA4MjYw NTEyMDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE5RTZCMzUyRTdGOEVB NjEzMjhGN0EzNjhDODc2MDgxRDIxQjBGMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIAjLq+q+H2bJLfBpWDAk70o0gmRxNS88uV8y7nk/YIEgrBnlV BD97LIo07CbNCgTQYR/g0ip135pmnjPky8KbvDx/ff0PlnXzxcq3NRWXzBQ8EKPH yACcECBKG8HZFmOnvNAjmat3tVMxyocRdeVmoYya9dn2bEa31+JlAoEsD6AgGHJT iGEch5hfF/wc7sygkzPbatWF1OgnvJOJJPoE3wABLzYodkNLRFJ0TC36rr4dzCHi WvlpPmvOlNe5CnLdjh+1EfJK9I4swmfH8yGQuMDpJf2ipSTx7yJg0qdNqR2L/hli RRf5jk8IBs96PMFtN+5Qwd4orsL/cCE7PaoBAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUGeazUuf46mEyj3o2jIdggdIbDywwHwYDVR0jBBgwFoAUNw85Q0M62WPimam+ kjnQ8+N6CCowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lWQy9O dzg1UTBNNjJXUGltYW0ta2puUTgtTjZDQ28uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L053ODVRME02MldQaW1hbS1ram5ROC1ONkNDby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0NZVkMvR2VhelV1ZjQ2bUV5ajNvMmpJZGdn ZEliRHl3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe3mjAN BgkqhkiG9w0BAQsFAAOCAQEAbRHZUhW55bHwdeBG4VKOOgqJvCzTtDYZfaScJacw sFvfMlmzfDEESWjN4S2yPQ/10JLLMavDUDXYWJNrg9aAlwo9Bb4OYD4Tv+EyI9vk uzg2W4zQWUh8gtBT9H/eCvNep+H+P6r+h4FwHaRDAO4sDtvFWnWpTgZLfaPD7+3f z0lIvy+axBQgOGsTJq9MP0MuG5kTRrjgZ/8Wo5kdrvej7guVAcEY9yl1lWDedPvC 7ZmnYxRGUj6JkNnDt7DzA7VmLVMOSxm9SD62iVpmIAelUVtn+lboMJQVNlTOyUs8 DHtCjdqXJdGqEzU6JvynEJ+xWepO7yD3q8xXBYJZtnEElw== -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org