$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/ovB_pVIC1NDpVzMe6jXXNmTYwIQ.roa File: ovB_pVIC1NDpVzMe6jXXNmTYwIQ.roa (raw, json) Hash identifier: 93SV5YGLn/kk4Y5RKkWJKDc7kBFzkXKJuCSDDgb22cM= Subject key identifier: A2:F0:7F:A5:52:02:D4:D0:E9:57:33:1E:EA:35:D7:36:64:D8:C0:84 Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Certificate serial: 0C58 Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/ovB_pVIC1NDpVzMe6jXXNmTYwIQ.roa Signing time: Mon 26 Aug 2024 05:12:20 +0000 ROA not before: Mon 26 Aug 2024 05:12:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 138145 IP address blocks: 103.135.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Validity Not Before: Aug 26 05:12:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A2F07FA55202D4D0E957331EEA35D73664D8C084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:05:b8:04:6c:44:dc:11:f9:62:72:74:c1: 4a:16:f0:83:bf:99:5f:4e:33:00:0b:04:e2:09:87: d0:8c:9d:24:5e:7f:7d:44:8b:db:1c:31:30:38:c8: 44:a5:ae:64:5b:0e:df:31:97:5b:90:2c:66:07:a4: 46:a1:57:35:a7:a2:a3:50:2f:e9:0a:b2:49:5e:81: 09:b7:eb:b5:81:fd:b9:e6:fa:32:d1:09:25:5a:ac: b3:38:87:b1:c6:94:38:6b:bc:74:46:48:12:7c:5b: a6:3b:4c:d5:fc:e9:65:8e:75:20:df:07:10:4b:95: 72:13:82:f2:5c:9f:e3:51:fb:b2:32:7e:28:97:0c: 4a:f2:3d:6a:8c:40:40:0c:ca:e6:a6:97:13:87:e4: 05:f5:85:9a:f0:9a:ac:a1:af:a6:06:3f:6e:4d:54: fa:06:45:f5:1e:14:f2:65:1f:bd:d1:b2:d5:b3:f0: 69:07:05:a1:ce:97:21:bb:7e:8c:38:e0:c5:62:0e: 5a:d4:aa:e5:93:46:6a:90:6a:d4:61:1f:91:81:ea: 14:30:d7:72:6f:a4:2c:bd:95:45:2e:38:99:11:89: d3:e1:0f:fe:c8:75:66:6c:13:a9:f2:56:fe:ec:06: ed:1e:f5:ff:f2:2b:6f:c2:65:04:43:7e:6b:4e:59: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F0:7F:A5:52:02:D4:D0:E9:57:33:1E:EA:35:D7:36:64:D8:C0:84 X509v3 Authority Key Identifier: keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/ovB_pVIC1NDpVzMe6jXXNmTYwIQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.16.0/24 Signature Algorithm: sha256WithRSAEncryption bc:1f:8d:fd:cd:52:e0:53:e0:41:47:26:fa:df:dc:d5:36:38: 7a:74:bc:6b:7d:b2:bd:f1:d2:ad:60:1d:4d:4e:ad:5d:dc:5a: a4:8b:eb:ca:97:55:a3:2e:1c:c3:0b:27:30:c6:b8:bf:a1:9f: f9:fa:11:5f:eb:d2:86:7e:93:0e:b0:f0:91:b6:cf:45:77:9d: 49:44:d3:df:64:62:33:f9:9c:14:96:d7:89:e8:c6:9d:08:55: f3:e6:ca:9f:90:d5:b4:c8:1b:83:62:e8:7d:0a:cc:78:94:a9: 47:78:57:c9:88:41:b0:98:01:d2:f0:b0:eb:5e:cc:98:95:b3: b2:85:20:a6:c8:da:8a:49:0c:de:b3:7a:5b:f6:3b:77:34:be: a3:9f:cf:a4:16:1c:71:ee:e6:dd:5b:78:03:a9:41:a2:dc:37: 48:b0:cf:e2:38:d2:ae:2a:64:e2:8a:44:90:4c:8d:bc:cc:33: a5:58:74:16:c6:a2:b6:53:1c:45:91:4d:87:e1:c0:ab:44:4a: 54:b2:2b:24:e6:81:c2:22:48:9e:46:8f:c1:e4:2d:74:59:9c: 91:6d:f8:2d:30:9f:72:3e:25:6c:13:62:65:0a:5e:e0:02:58: 5f:fb:68:66:92:34:8e:28:87:d7:e2:2c:0b:fc:ce:f9:c1:a8: ad:d3:dd:ec -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yNDA4MjYw NTEyMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyRjA3RkE1NTIwMkQ0 RDBFOTU3MzMxRUVBMzVENzM2NjREOEMwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+5gW4BGxE3BH5YnJ0wUoW8IO/mV9OMwALBOIJh9CMnSRef31E i9scMTA4yESlrmRbDt8xl1uQLGYHpEahVzWnoqNQL+kKsklegQm367WB/bnm+jLR CSVarLM4h7HGlDhrvHRGSBJ8W6Y7TNX86WWOdSDfBxBLlXITgvJcn+NR+7IyfiiX DEryPWqMQEAMyuamlxOH5AX1hZrwmqyhr6YGP25NVPoGRfUeFPJlH73RstWz8GkH BaHOlyG7fow44MViDlrUquWTRmqQatRhH5GB6hQw13JvpCy9lUUuOJkRidPhD/7I dWZsE6nyVv7sBu0e9f/yK2/CZQRDfmtOWW6fAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUovB/pVIC1NDpVzMe6jXXNmTYwIQwHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vb3ZCX3BWSUMxTkRwVnpN ZTZqWFhObVRZd0lRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeHEDANBgkqhkiG9w0BAQsFAAOCAQEAvB+N/c1S4FPgQUcm+t/c1TY4enS8a32y vfHSrWAdTU6tXdxapIvrypdVoy4cwwsnMMa4v6Gf+foRX+vShn6TDrDwkbbPRXed SUTT32RiM/mcFJbXiejGnQhV8+bKn5DVtMgbg2LofQrMeJSpR3hXyYhBsJgB0vCw 617MmJWzsoUgpsjaikkM3rN6W/Y7dzS+o5/PpBYcce7m3Vt4A6lBotw3SLDP4jjS ripk4opEkEyNvMwzpVh0FsaitlMcRZFNh+HAq0RKVLIrJOaBwiJInkaPweQtdFmc kW34LTCfcj4lbBNiZQpe4AJYX/toZpI0jiiH1+IsC/zO+cGordPd7A== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org