$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JHKtxhdpVeXZrYwbLDY_TqVzPpE.roa File: JHKtxhdpVeXZrYwbLDY_TqVzPpE.roa (raw, json) Hash identifier: E4AnTDPrE4yFkoNOrKE0ca7nUB9GwXRAGvKUoEmEKyU= Subject key identifier: 24:72:AD:C6:17:69:55:E5:D9:AD:8C:1B:2C:36:3F:4E:A5:73:3E:91 Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0CA9 Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JHKtxhdpVeXZrYwbLDY_TqVzPpE.roa Signing time: Wed 04 Sep 2024 01:37:41 +0000 ROA not before: Wed 04 Sep 2024 01:37:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 103.234.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Sep 4 01:37:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2472ADC6176955E5D9AD8C1B2C363F4EA5733E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4f:45:0a:05:1a:ba:45:fa:69:42:fe:be:d9: 35:a6:e5:4c:6f:23:2b:f9:5a:b3:ec:c6:a3:5d:1f: 58:d4:7f:c4:49:f1:82:27:a4:f5:c3:ea:54:f6:6e: 2c:e4:67:ad:6c:86:59:f2:2c:b8:e0:95:45:b6:34: 5d:bf:ec:59:ea:ef:8c:22:79:1c:83:9b:36:3f:20: 4c:80:72:33:d5:f4:5c:7f:1e:50:76:61:b8:83:7b: c5:70:82:63:40:f8:66:77:5b:79:14:db:25:c9:f2: 18:44:c6:27:2d:bb:a6:74:36:61:b5:0a:ed:25:a9: 71:8c:89:63:4d:24:ae:16:29:ac:3d:75:82:8a:a1: 97:ad:2b:ea:b7:dd:0c:c1:6e:6d:1e:88:d5:09:40: 22:83:8d:fc:19:4e:6d:c0:45:ad:47:cd:8b:a2:28: 13:9a:bb:72:28:b4:2d:cd:e0:e7:d9:1c:80:f5:4d: 8d:b8:f7:fe:2b:c9:6e:17:7c:91:9e:70:8b:90:f4: 22:bd:2d:e0:3c:b5:05:eb:a6:82:de:3e:1d:64:64: f5:08:2a:5f:08:6d:bd:4b:9f:94:69:aa:a7:22:e0: a9:eb:e3:bf:d2:b1:4c:84:bc:ba:f3:8f:03:92:a1: c7:c9:6b:ad:4b:cc:b7:19:b3:50:e2:80:08:59:e3: 9a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:72:AD:C6:17:69:55:E5:D9:AD:8C:1B:2C:36:3F:4E:A5:73:3E:91 X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/JHKtxhdpVeXZrYwbLDY_TqVzPpE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.76.0/22 Signature Algorithm: sha256WithRSAEncryption aa:91:fb:1c:a5:83:5d:16:9f:63:24:67:d0:1f:33:00:e4:36: 40:e9:41:67:b9:d3:f7:9a:3b:61:b9:73:92:67:9d:18:1c:f0: 2f:94:3c:2f:66:3f:ba:ae:84:e5:ca:e8:08:91:d2:42:12:8b: c3:16:f4:7c:1c:3a:60:f8:2f:cc:64:fa:b0:3c:80:a3:62:1e: 2b:94:a5:4a:ee:f5:18:d1:64:89:f2:50:41:68:21:44:7f:49: 17:3f:d8:6c:c7:84:a9:8a:b2:58:a9:af:fb:d6:e6:9b:87:60: 03:c6:79:db:8a:db:c7:0c:1e:19:21:62:40:93:c6:2c:1a:e9: 5a:92:c2:b9:cb:c4:d0:0b:88:63:ca:c5:c7:4c:2a:b5:59:d1: 77:b4:b5:61:fa:89:a6:18:f1:2d:7d:f5:9f:5e:28:87:73:37: 73:7d:75:25:53:cb:0f:3c:e8:75:90:07:b3:10:2e:6b:0e:b6: 97:ae:b9:3a:31:27:52:4e:cb:bd:dc:b5:3d:68:4c:29:90:19: 4c:75:02:7e:05:c8:9f:81:5b:a0:e0:e4:79:25:4e:f4:6e:5f: 17:f5:cd:43:91:0a:2a:e4:3b:7a:ca:82:0f:ea:c3:99:7c:bf: 53:2d:38:53:db:27:7a:9b:3c:de:58:7a:6d:e7:d9:17:12:39: 6c:eb:08:3f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNDA5MDQw MTM3NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI0NzJBREM2MTc2OTU1 RTVEOUFEOEMxQjJDMzYzRjRFQTU3MzNFOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiT0UKBRq6RfppQv6+2TWm5UxvIyv5WrPsxqNdH1jUf8RJ8YIn pPXD6lT2bizkZ61shlnyLLjglUW2NF2/7Fnq74wieRyDmzY/IEyAcjPV9Fx/HlB2 YbiDe8VwgmNA+GZ3W3kU2yXJ8hhExictu6Z0NmG1Cu0lqXGMiWNNJK4WKaw9dYKK oZetK+q33QzBbm0eiNUJQCKDjfwZTm3ARa1HzYuiKBOau3IotC3N4OfZHID1TY24 9/4ryW4XfJGecIuQ9CK9LeA8tQXrpoLePh1kZPUIKl8Ibb1Ln5Rpqqci4Knr47/S sUyEvLrzjwOSocfJa61LzLcZs1DigAhZ45qBAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUJHKtxhdpVeXZrYwbLDY/TqVzPpEwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9KSEt0eGhkcFZlWFpy WXdiTERZX1RxVnpQcEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ+pMMA0GCSqGSIb3DQEBCwUAA4IBAQCqkfscpYNdFp9jJGfQHzMA5DZA6UFn udP3mjthuXOSZ50YHPAvlDwvZj+6roTlyugIkdJCEovDFvR8HDpg+C/MZPqwPICj Yh4rlKVK7vUY0WSJ8lBBaCFEf0kXP9hsx4SpirJYqa/71uabh2ADxnnbitvHDB4Z IWJAk8YsGulaksK5y8TQC4hjysXHTCq1WdF3tLVh+ommGPEtffWfXiiHczdzfXUl U8sPPOh1kAezEC5rDraXrrk6MSdSTsu93LU9aEwpkBlMdQJ+BcifgVug4OR5JU70 bl8X9c1DkQoq5Dt6yoIP6sOZfL9TLThT2yd6mzzeWHpt59kXEjls6wg/ -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:24 2024 by rpki-client on console-fra.rpki-client.org