$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/hqxNaYCPLTuuoAA0ZZYUvwL7eOs.roa File: hqxNaYCPLTuuoAA0ZZYUvwL7eOs.roa (raw, json) Hash identifier: PX80KYWV195E7QKu1uRMYcqEs1msksaoptP1oaHJf/w= Subject key identifier: 86:AC:4D:69:80:8F:2D:3B:AE:A0:00:34:65:96:14:BF:02:FB:78:EB Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Certificate serial: 0C55 Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/hqxNaYCPLTuuoAA0ZZYUvwL7eOs.roa Signing time: Mon 26 Aug 2024 05:12:19 +0000 ROA not before: Mon 26 Aug 2024 05:12:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131662 IP address blocks: 103.123.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Validity Not Before: Aug 26 05:12:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=86AC4D69808F2D3BAEA00034659614BF02FB78EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dd:1a:d2:30:ae:3f:1a:ee:c7:fa:48:ce:ea: 3e:97:00:cb:e1:77:25:e6:eb:13:90:37:b1:7e:c2: 39:15:91:0f:2d:93:b4:6c:f1:3c:bf:8c:21:e6:73: b3:eb:4e:3f:97:c2:04:2e:4b:44:01:34:72:05:30: 9c:a1:a2:cc:b6:a1:f1:94:02:21:3b:e6:a3:ee:f4: a1:6f:2b:c5:ec:09:60:30:83:c7:ec:76:0a:26:fe: 35:95:5d:59:c1:fe:9f:5a:96:5e:12:01:08:eb:1b: 15:60:fa:7a:7a:e0:10:7a:4f:b2:fa:51:dd:cd:ff: 2a:2d:47:76:b6:3f:ed:3f:50:ee:d5:3d:01:7c:77: 35:04:0d:87:6d:38:07:7c:ab:02:be:7e:da:9a:b4: 88:ab:32:f3:b2:bb:f1:90:dd:eb:67:e8:32:68:bc: d0:f0:b7:df:e0:16:e9:f0:a4:d2:47:ec:bd:df:38: d3:32:1d:c8:2f:3d:8b:ba:44:e2:0d:f2:eb:24:71: bd:15:2e:b9:63:27:b9:ef:64:1d:1d:b3:b1:48:bc: af:83:c1:b3:c7:de:e9:e3:eb:20:45:fe:a9:00:7b: 7e:08:68:f8:b4:9b:4c:94:5f:09:c1:89:08:3a:c3: 75:bd:6c:8e:b5:15:e5:9f:38:d2:1f:64:b6:38:13: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AC:4D:69:80:8F:2D:3B:AE:A0:00:34:65:96:14:BF:02:FB:78:EB X509v3 Authority Key Identifier: keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/hqxNaYCPLTuuoAA0ZZYUvwL7eOs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.128.0/22 Signature Algorithm: sha256WithRSAEncryption 23:a4:28:6f:8f:46:40:df:a3:a7:2c:8c:38:11:37:84:08:63: 91:73:0e:fc:ee:9c:3d:e5:79:da:4c:d5:cd:b3:e6:32:97:f5: 5d:48:a8:01:d8:9e:70:96:72:c4:66:bc:c3:f9:a2:37:9e:7f: b0:dd:dc:e1:51:4e:35:86:84:3f:df:1f:c3:2a:2c:4a:63:01: a5:cc:1f:0b:92:34:00:8f:13:3a:d3:aa:9c:9f:e6:55:98:17: 3b:99:2e:45:ee:17:ab:b7:57:fa:92:d6:be:2f:3d:08:cc:64: 58:8c:c7:1f:0f:0c:d1:58:61:7c:ca:ff:61:75:c0:c9:c9:54: cd:3f:e4:a6:17:4a:ce:a0:15:86:8b:d2:73:48:a0:87:82:c1: 71:78:61:7c:92:2a:ca:55:1a:c6:a1:30:0b:e0:19:fa:60:c3: cf:57:f5:ff:4e:b3:f3:6d:63:41:bc:ab:c3:35:dd:15:fd:0b: 14:e1:5f:d1:a3:0c:9d:f5:c7:ca:83:4f:82:8b:29:59:39:b1: 7f:78:af:5c:6f:dd:74:b4:99:03:fc:93:2c:5b:29:c8:8f:78: 7b:73:fe:3f:3a:7b:eb:6e:32:4d:76:b3:79:aa:79:aa:5e:f5: 91:75:6f:68:42:34:9b:7c:31:36:c9:09:97:79:b7:89:91:ea: 65:e6:5f:a2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yNDA4MjYw NTEyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg2QUM0RDY5ODA4RjJE M0JBRUEwMDAzNDY1OTYxNEJGMDJGQjc4RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx3RrSMK4/Gu7H+kjO6j6XAMvhdyXm6xOQN7F+wjkVkQ8tk7Rs 8Ty/jCHmc7PrTj+XwgQuS0QBNHIFMJyhosy2ofGUAiE75qPu9KFvK8XsCWAwg8fs dgom/jWVXVnB/p9all4SAQjrGxVg+np64BB6T7L6Ud3N/yotR3a2P+0/UO7VPQF8 dzUEDYdtOAd8qwK+ftqatIirMvOyu/GQ3etn6DJovNDwt9/gFunwpNJH7L3fONMy HcgvPYu6ROIN8uskcb0VLrljJ7nvZB0ds7FIvK+DwbPH3unj6yBF/qkAe34IaPi0 m0yUXwnBiQg6w3W9bI61FeWfONIfZLY4E66xAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUhqxNaYCPLTuuoAA0ZZYUvwL7eOswHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vaHF4TmFZQ1BMVHV1b0FB MFpaWVV2d0w3ZU9zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Amd7gDANBgkqhkiG9w0BAQsFAAOCAQEAI6Qob49GQN+jpyyMOBE3hAhjkXMO/O6c PeV52kzVzbPmMpf1XUioAdiecJZyxGa8w/miN55/sN3c4VFONYaEP98fwyosSmMB pcwfC5I0AI8TOtOqnJ/mVZgXO5kuRe4Xq7dX+pLWvi89CMxkWIzHHw8M0VhhfMr/ YXXAyclUzT/kphdKzqAVhovSc0igh4LBcXhhfJIqylUaxqEwC+AZ+mDDz1f1/06z 821jQbyrwzXdFf0LFOFf0aMMnfXHyoNPgospWTmxf3ivXG/ddLSZA/yTLFspyI94 e3P+Pzp7624yTXazeap5ql71kXVvaEI0m3wxNskJl3m3iZHqZeZfog== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org