$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TN_dm3kjlfbQXOrrh9blMLEbBPw.roa File: TN_dm3kjlfbQXOrrh9blMLEbBPw.roa (raw, json) Hash identifier: cShbaj9Izqj/fnsXSmKa49YaCRdmpB1ennBC/Ka6LNs= Subject key identifier: 4C:DF:DD:9B:79:23:95:F6:D0:5C:EA:EB:87:D6:E5:30:B1:1B:04:FC Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0C9D Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TN_dm3kjlfbQXOrrh9blMLEbBPw.roa Signing time: Mon 26 Aug 2024 05:12:28 +0000 ROA not before: Mon 26 Aug 2024 05:12:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 103.234.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Aug 26 05:12:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4CDFDD9B792395F6D05CEAEB87D6E530B11B04FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:b2:4d:fc:30:b9:a5:c8:0f:35:9a:d3:89: e4:f3:87:82:65:a2:e7:c7:88:f4:34:d6:32:33:70: 4c:ec:e8:66:9b:c7:5c:ca:52:c0:0b:9e:6b:1f:f7: 97:d9:9b:dd:54:bc:27:a3:30:c2:69:d1:c9:f1:36: af:92:5c:3b:71:6a:7d:38:5f:a1:d3:85:1f:a5:6f: 6d:0c:b1:ae:12:67:a3:40:20:c3:ed:d2:77:c8:2e: 78:2f:e8:77:6a:ee:89:e1:7d:01:07:49:a8:71:ec: 7c:0c:bf:b6:a0:44:89:e2:d8:f6:5a:7d:97:c6:f4: 4e:91:71:51:fe:72:77:97:27:d7:c0:19:b7:54:1e: 36:4f:d7:02:b9:c8:51:67:d7:e9:c5:0a:75:39:17: cc:1f:2c:28:1a:1b:b1:cb:dc:68:99:04:29:fe:60: 57:d5:06:43:c7:05:bf:e8:44:08:d7:fd:66:82:53: b2:3d:80:88:2c:27:2f:c6:b8:19:03:5c:8f:62:a8: f1:c8:0e:b7:11:58:b3:33:28:c3:f5:96:48:b9:d0: 00:26:05:7b:d6:da:b2:26:62:d1:9c:4d:68:ec:80: 0f:78:8f:90:15:40:6f:a1:a3:e8:66:2f:98:da:76: 61:00:11:44:bc:9c:43:ff:ac:31:1e:cc:9a:14:87: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DF:DD:9B:79:23:95:F6:D0:5C:EA:EB:87:D6:E5:30:B1:1B:04:FC X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/TN_dm3kjlfbQXOrrh9blMLEbBPw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.234.76.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:70:dd:6f:a4:3f:af:c3:94:23:8b:e3:0d:77:6f:56:8f:6d: 32:80:63:53:56:70:8b:ec:fc:c6:33:2c:16:dc:4f:9e:d2:04: 7f:4f:35:ef:42:95:80:cb:5c:0c:c5:84:ef:99:4f:09:bf:29: dc:f3:5b:16:49:03:87:45:95:c4:5a:3b:4e:59:32:dd:60:a7: e1:aa:fb:b1:c0:71:77:6c:1e:94:06:da:2a:28:03:de:2e:a0: 07:be:20:90:26:06:b2:c5:2a:ad:76:bb:a8:69:af:ce:0d:84: 38:ee:96:52:26:f1:ef:ef:f9:4e:85:16:d6:11:ca:ec:e8:0b: 23:85:74:85:75:ba:6f:64:8b:18:9c:a4:57:14:b2:dc:af:28: 18:b7:d0:30:31:1c:10:30:b3:d7:58:93:76:f7:cf:58:43:e0: fa:e6:f0:30:5a:c5:0b:56:f9:15:4f:51:e4:b4:c2:4c:b4:bd: 38:25:62:44:6a:e5:63:76:67:61:89:47:65:f1:02:5e:46:33: 46:bf:4c:54:16:bf:40:36:2f:45:30:ed:3e:a8:59:aa:a3:c8: 42:0d:9b:bb:b7:44:29:7e:26:7c:38:8a:75:c0:14:e9:6b:6e: b6:cc:b5:33:3e:3c:70:8d:50:91:37:8b:d6:12:e7:03:de:e4: 12:63:62:cb -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNDA4MjYw NTEyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRDREZERDlCNzkyMzk1 RjZEMDVDRUFFQjg3RDZFNTMwQjExQjA0RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCj9rJN/DC5pcgPNZrTieTzh4JloufHiPQ01jIzcEzs6Gabx1zK UsALnmsf95fZm91UvCejMMJp0cnxNq+SXDtxan04X6HThR+lb20Msa4SZ6NAIMPt 0nfILngv6Hdq7onhfQEHSahx7HwMv7agRIni2PZafZfG9E6RcVH+cneXJ9fAGbdU HjZP1wK5yFFn1+nFCnU5F8wfLCgaG7HL3GiZBCn+YFfVBkPHBb/oRAjX/WaCU7I9 gIgsJy/GuBkDXI9iqPHIDrcRWLMzKMP1lki50AAmBXvW2rImYtGcTWjsgA94j5AV QG+ho+hmL5jadmEAEUS8nEP/rDEezJoUh3SLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUTN/dm3kjlfbQXOrrh9blMLEbBPwwHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9UTl9kbTNramxmYlFY T3JyaDlibE1MRWJCUHcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ+pMMA0GCSqGSIb3DQEBCwUAA4IBAQAecN1vpD+vw5Qji+MNd29Wj20ygGNT VnCL7PzGMywW3E+e0gR/TzXvQpWAy1wMxYTvmU8Jvync81sWSQOHRZXEWjtOWTLd YKfhqvuxwHF3bB6UBtoqKAPeLqAHviCQJgayxSqtdruoaa/ODYQ47pZSJvHv7/lO hRbWEcrs6AsjhXSFdbpvZIsYnKRXFLLcrygYt9AwMRwQMLPXWJN2989YQ+D65vAw WsULVvkVT1HktMJMtL04JWJEauVjdmdhiUdl8QJeRjNGv0xUFr9ANi9FMO0+qFmq o8hCDZu7t0QpfiZ8OIp1wBTpa262zLUzPjxwjVCRN4vWEucD3uQSY2LL -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:03 2024 by rpki-client on console-ams.rpki-client.org