$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DNSNET/aY54gnbixJ6U42UH5iXq-t__TGE.roa File: aY54gnbixJ6U42UH5iXq-t__TGE.roa (raw, json) Hash identifier: QbV7nPemWEDBc5NIPsE7Fa64jdF925vl650KXEpq9LY= Subject key identifier: 69:8E:78:82:76:E2:C4:9E:94:E3:65:07:E6:25:EA:FA:DF:FF:4C:61 Certificate issuer: /CN=277895E64BE41B7182664E1345CD57E5D36A1AF2 Certificate serial: 7A Authority key identifier: 27:78:95:E6:4B:E4:1B:71:82:66:4E:13:45:CD:57:E5:D3:6A:1A:F2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/aY54gnbixJ6U42UH5iXq-t__TGE.roa Signing time: Tue 24 Oct 2023 11:31:38 +0000 ROA not before: Tue 24 Oct 2023 11:31:38 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38842 IP address blocks: 103.160.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/J3iV5kvkG3GCZk4TRc1X5dNqGvI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/J3iV5kvkG3GCZk4TRc1X5dNqGvI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 16:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277895E64BE41B7182664E1345CD57E5D36A1AF2 Validity Not Before: Oct 24 11:31:38 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=698E788276E2C49E94E36507E625EAFADFFF4C61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:4f:ef:98:c3:37:dd:1e:a4:58:32:5a:65: 2e:f2:7f:ee:b5:3f:9c:14:d1:99:ba:3f:f5:ac:07: fe:2c:5c:df:89:52:29:11:57:79:44:9c:4b:40:c5: 41:0c:05:4e:2a:05:c8:85:fe:75:36:9c:f6:75:c7: d3:93:3c:61:9b:da:37:2b:b1:27:68:17:c2:2b:c8: 55:d3:56:23:0e:0e:da:9c:de:b1:1d:05:f4:2a:d8: a3:cd:ba:a0:39:d8:6b:52:a8:e1:f1:7e:0f:a1:c8: 45:4b:da:15:ed:ad:4c:bd:b7:47:74:82:a8:25:e4: 5c:10:74:78:e0:bf:a3:34:de:26:b2:c1:be:05:40: 66:c5:e0:cf:19:29:78:d5:21:f8:90:9c:32:3f:71: 19:ee:31:3f:58:af:db:aa:32:d9:18:e5:e4:ca:d0: d4:4c:5d:44:2b:0c:21:56:c9:54:b5:80:4f:4c:c1: 44:34:6d:11:1b:05:c4:05:bb:e3:8f:74:7b:31:cc: 63:b7:15:52:7c:15:74:18:79:bf:99:f0:18:2f:6f: 72:b1:0b:5f:55:70:4f:c7:7a:97:e0:c0:14:c7:21: fa:8b:71:09:6d:14:64:52:1e:ba:27:5a:8e:d9:94: 98:da:ce:4f:a8:99:44:64:d0:42:df:bd:c1:f3:e3: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8E:78:82:76:E2:C4:9E:94:E3:65:07:E6:25:EA:FA:DF:FF:4C:61 X509v3 Authority Key Identifier: keyid:27:78:95:E6:4B:E4:1B:71:82:66:4E:13:45:CD:57:E5:D3:6A:1A:F2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/J3iV5kvkG3GCZk4TRc1X5dNqGvI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/J3iV5kvkG3GCZk4TRc1X5dNqGvI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DNSNET/aY54gnbixJ6U42UH5iXq-t__TGE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.160.226.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:28:dc:e6:db:2f:c7:52:92:2b:c1:8d:f7:e8:40:2b:2f:c9: 43:60:17:43:2b:dd:62:12:0b:93:05:aa:83:bb:35:f1:01:e5: 00:40:59:17:18:54:08:06:aa:75:dc:b2:9c:4e:7b:76:ce:a0: c9:26:93:8c:bf:51:1c:da:bd:ce:d1:83:82:fc:5e:f9:29:e4: 8b:bb:8f:5f:f3:81:84:cf:1c:80:07:9f:83:bd:13:95:28:a8: d9:f1:0e:fa:f5:d3:d8:a8:bb:1d:66:26:9d:6b:e6:3a:ff:30: 76:f2:70:82:4a:4b:b2:79:39:e9:62:36:a2:5e:e4:95:2a:84: 26:b8:f0:47:ba:63:e0:2c:ab:f1:aa:d8:5a:98:03:12:39:90: 1c:22:26:69:64:e9:2f:73:8b:5a:02:aa:b3:ea:e3:7c:6d:71: 54:85:79:0d:99:1b:2f:82:de:ff:ec:74:4f:de:49:75:31:d9: 92:ea:5a:13:0f:5c:21:78:0f:01:97:4b:25:e8:3e:58:d8:87: 8c:f9:7e:36:17:44:60:49:10:3d:5d:72:c9:e9:84:53:83:88: 5e:42:f8:c4:5a:84:5e:f3:b3:74:5b:52:e0:a5:25:fe:c4:d1: cb:e9:18:e6:ed:93:56:9c:af:65:06:70:4a:0a:32:4a:25:8b: 4f:22:98:f7 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzc4 OTVFNjRCRTQxQjcxODI2NjRFMTM0NUNENTdFNUQzNkExQUYyMB4XDTIzMTAyNDEx MzEzOFoXDTI0MDgzMTAzMTA1M1owMzExMC8GA1UEAxMoNjk4RTc4ODI3NkUyQzQ5 RTk0RTM2NTA3RTYyNUVBRkFERkZGNEM2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu5T++YwzfdHqRYMlplLvJ/7rU/nBTRmbo/9awH/ixc34lSKRFX eUScS0DFQQwFTioFyIX+dTac9nXH05M8YZvaNyuxJ2gXwivIVdNWIw4O2pzesR0F 9CrYo826oDnYa1Ko4fF+D6HIRUvaFe2tTL23R3SCqCXkXBB0eOC/ozTeJrLBvgVA ZsXgzxkpeNUh+JCcMj9xGe4xP1iv26oy2Rjl5MrQ1ExdRCsMIVbJVLWAT0zBRDRt ERsFxAW74490ezHMY7cVUnwVdBh5v5nwGC9vcrELX1VwT8d6l+DAFMch+otxCW0U ZFIeuidajtmUmNrOT6iZRGTQQt+9wfPjOgUCAwEAAaOCAe4wggHqMB0GA1UdDgQW BBRpjniCduLEnpTjZQfmJer63/9MYTAfBgNVHSMEGDAWgBQneJXmS+QbcYJmThNF zVfl02oa8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ETlNORVQv SjNpVjVrdmtHM0dDWms0VFJjMVg1ZE5xR3ZJLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9KM2lWNWt2a0czR0NaazRUUmMxWDVkTnFHdkkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ETlNORVQvYVk1NGduYml4SjZVNDJVSDVp WHEtdF9fVEdFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeg 4jANBgkqhkiG9w0BAQsFAAOCAQEATCjc5tsvx1KSK8GN9+hAKy/JQ2AXQyvdYhIL kwWqg7s18QHlAEBZFxhUCAaqddyynE57ds6gySaTjL9RHNq9ztGDgvxe+Snki7uP X/OBhM8cgAefg70TlSio2fEO+vXT2Ki7HWYmnWvmOv8wdvJwgkpLsnk56WI2ol7k lSqEJrjwR7pj4Cyr8arYWpgDEjmQHCImaWTpL3OLWgKqs+rjfG1xVIV5DZkbL4Le /+x0T95JdTHZkupaEw9cIXgPAZdLJeg+WNiHjPl+NhdEYEkQPV1yyemEU4OIXkL4 xFqEXvOzdFtS4KUl/sTRy+kY5u2TVpyvZQZwSgoySiWLTyKY9w== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:41 2024 by rpki-client on console-ams.rpki-client.org