$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/mHibf4xV4iWAn4kLlePElfB1iLw.roa File: mHibf4xV4iWAn4kLlePElfB1iLw.roa (raw, json) Hash identifier: eiP+RVPLQFQNrvvRXCarKDB03leL3vYUDqILblIglGY= Subject key identifier: 98:78:9B:7F:8C:55:E2:25:80:9F:89:0B:95:E3:C4:95:F0:75:88:BC Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Certificate serial: 0BD8 Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/mHibf4xV4iWAn4kLlePElfB1iLw.roa Signing time: Mon 11 Mar 2024 07:49:49 +0000 ROA not before: Mon 11 Mar 2024 07:49:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 138145 IP address blocks: 103.135.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Validity Not Before: Mar 11 07:49:49 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=98789B7F8C55E225809F890B95E3C495F07588BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:90:d3:a5:26:d4:25:a9:22:d1:76:ad:13: 74:9b:7e:da:20:62:5d:70:f6:dc:3f:e6:b4:0d:cc: 85:8b:7f:4f:7b:9c:8a:90:bf:54:44:59:f5:19:4b: f4:0c:20:a1:b5:8a:9f:33:84:4d:85:96:78:75:b2: 00:e1:22:e7:05:a8:cd:10:ee:15:a8:59:4f:a4:0a: 9a:1f:87:a1:c7:41:a9:d4:88:7b:0d:7b:a1:ea:b2: 60:4a:1d:8b:c0:42:2d:46:ab:84:a0:fd:c8:64:81: 30:46:f3:b2:08:98:2e:c2:c9:91:f7:17:66:f2:69: 12:55:86:6a:6f:f4:e9:de:95:f9:cb:50:8b:9a:19: 08:f6:e7:4f:c3:c9:c7:f5:28:ed:1c:ff:59:4f:46: 32:e0:e5:e4:9b:0a:8f:7d:54:db:94:57:56:6e:7f: e6:38:65:3d:00:03:c8:cb:3e:bc:ae:82:56:6f:48: 2f:bb:39:a4:fa:f4:0b:45:1e:2a:0e:35:d1:6f:66: 38:d1:b1:c5:8b:f3:9e:49:24:82:19:b9:d1:0b:73: 66:0b:fb:df:47:8f:6b:d4:48:28:b4:f1:79:37:eb: 55:49:9e:23:6f:53:ce:72:04:e9:5c:a9:7a:0c:dd: ff:1b:c5:f8:22:88:d0:35:d1:21:c1:52:2d:51:28: cd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:78:9B:7F:8C:55:E2:25:80:9F:89:0B:95:E3:C4:95:F0:75:88:BC X509v3 Authority Key Identifier: keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/mHibf4xV4iWAn4kLlePElfB1iLw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.19.0/24 Signature Algorithm: sha256WithRSAEncryption 51:68:96:38:fd:3b:dc:65:15:84:f1:98:88:43:7a:96:20:38: 26:86:86:82:d2:89:53:70:8d:78:12:47:81:ce:e9:66:75:e5: 08:ad:2e:29:86:b9:ec:2b:0c:fa:75:fb:19:72:33:02:2e:65: 67:bc:aa:1c:2f:d6:76:4d:61:00:2a:bf:b3:02:0a:46:92:6c: 75:19:e1:09:68:b4:51:d0:de:51:90:18:74:c0:f3:14:43:9a: e3:4c:54:1a:0c:62:2c:94:c4:cd:ed:b0:3a:6f:c4:86:e0:44: 13:9f:3d:f7:a0:c4:6a:c3:1e:e3:74:77:ba:7d:3d:7e:d9:28: da:f5:fd:1e:66:ce:09:f1:c4:3b:84:c1:89:42:73:1a:f5:96: 7d:4e:a0:ca:20:06:fa:a4:82:5e:9a:eb:41:44:13:e0:b7:03: 52:c7:e2:06:43:b0:64:5a:08:58:0f:9c:c8:f4:01:96:e9:56: 2d:19:82:d6:cc:25:8d:e3:fa:d9:53:f4:7b:20:b5:7b:98:e6: 8c:de:a2:c9:2e:c2:80:9a:e3:24:ea:fb:d3:d4:e3:a6:e8:cc: 00:f1:18:5b:b9:dd:5f:34:8b:8d:76:63:08:36:b5:1a:2b:ab: 96:2c:f2:cc:66:cd:df:a4:55:91:26:64:73:92:ba:5b:97:08: ff:83:7a:3d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yNDAzMTEw NzQ5NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk4Nzg5QjdGOEM1NUUy MjU4MDlGODkwQjk1RTNDNDk1RjA3NTg4QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvqJDTpSbUJaki0XatE3SbftogYl1w9tw/5rQNzIWLf097nIqQ v1REWfUZS/QMIKG1ip8zhE2Flnh1sgDhIucFqM0Q7hWoWU+kCpofh6HHQanUiHsN e6HqsmBKHYvAQi1Gq4Sg/chkgTBG87IImC7CyZH3F2byaRJVhmpv9OnelfnLUIua GQj250/Dycf1KO0c/1lPRjLg5eSbCo99VNuUV1Zuf+Y4ZT0AA8jLPryuglZvSC+7 OaT69AtFHioONdFvZjjRscWL855JJIIZudELc2YL+99Hj2vUSCi08Xk361VJniNv U85yBOlcqXoM3f8bxfgiiNA10SHBUi1RKM1lAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUmHibf4xV4iWAn4kLlePElfB1iLwwHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vbUhpYmY0eFY0aVdBbjRr TGxlUEVsZkIxaUx3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeHEzANBgkqhkiG9w0BAQsFAAOCAQEAUWiWOP073GUVhPGYiEN6liA4JoaGgtKJ U3CNeBJHgc7pZnXlCK0uKYa57CsM+nX7GXIzAi5lZ7yqHC/Wdk1hACq/swIKRpJs dRnhCWi0UdDeUZAYdMDzFEOa40xUGgxiLJTEze2wOm/EhuBEE58996DEasMe43R3 un09ftko2vX9HmbOCfHEO4TBiUJzGvWWfU6gyiAG+qSCXprrQUQT4LcDUsfiBkOw ZFoIWA+cyPQBlulWLRmC1swljeP62VP0eyC1e5jmjN6iyS7CgJrjJOr709TjpujM APEYW7ndXzSLjXZjCDa1GiurlizyzGbN36RVkSZkc5K6W5cI/4N6PQ== -----END CERTIFICATE-----Generated at Mon May 6 16:52:55 2024 by rpki-client on console-fra.rpki-client.org