$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/_A83U_H9A5abDve8j_GUFv4fSa0.roa File: _A83U_H9A5abDve8j_GUFv4fSa0.roa (raw, json) Hash identifier: 6GnbgRBRddqiv8SCzccf5iVFqG0g4rXnOCsiQLnskSY= Subject key identifier: FC:0F:37:53:F1:FD:03:96:9B:0E:F7:BC:8F:F1:94:16:FE:1F:49:AD Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0C9A Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/_A83U_H9A5abDve8j_GUFv4fSa0.roa Signing time: Mon 26 Aug 2024 05:12:28 +0000 ROA not before: Mon 26 Aug 2024 05:12:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 150.107.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 06:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Aug 26 05:12:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FC0F3753F1FD03969B0EF7BC8FF19416FE1F49AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:cb:80:c4:b8:71:b8:40:05:23:c4:aa:f5: 0c:1f:02:12:18:de:e4:3e:9e:55:1d:2b:c4:cb:11: 01:f0:5a:5f:2b:95:ec:80:b0:c3:29:31:b9:64:98: 3c:b4:88:99:1e:00:17:5a:0e:65:4f:07:52:97:77: 72:57:fe:f4:ac:e0:9f:9b:ae:97:c1:90:02:da:74: 20:02:ba:2d:94:38:f4:f4:80:be:91:f6:4d:7a:d8: 7c:7d:09:5b:52:87:ee:1d:ac:d0:db:87:73:86:2c: ee:2d:4e:23:85:1d:bc:d9:04:a5:7d:a4:ee:71:43: 1b:c3:4e:fe:18:c6:a3:c9:51:40:ff:a7:7f:49:03: d0:81:0b:71:e4:41:d3:90:ca:5a:58:c1:89:be:c8: a6:9a:33:98:c1:d2:8d:98:ec:2a:29:6e:2f:54:4a: 84:e7:d1:df:09:c9:de:88:d6:ed:d9:a0:43:64:1e: d1:3e:ad:8e:ed:1e:9c:28:44:ca:0b:b9:64:09:1f: a1:ce:22:4b:c2:9a:44:6b:7e:5f:75:49:32:19:8a: 7f:f4:d9:23:8a:d0:e1:ff:ea:f9:76:aa:d7:48:27: 26:65:9b:7d:e8:67:6b:9c:6e:74:39:9f:b7:5a:4f: 6f:c8:99:81:e7:34:94:7e:b5:24:9e:5b:ee:3b:29: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:37:53:F1:FD:03:96:9B:0E:F7:BC:8F:F1:94:16:FE:1F:49:AD X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/_A83U_H9A5abDve8j_GUFv4fSa0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.107.56.0/22 Signature Algorithm: sha256WithRSAEncryption 11:24:bb:6c:5e:1a:99:40:aa:49:25:e2:dc:00:3e:a7:53:10: 74:97:8a:f1:cc:fa:63:00:3e:e4:15:aa:fc:3e:0e:62:29:c8: 18:5c:9e:cd:40:d2:7d:2d:0a:f5:d6:ce:9d:4c:20:56:48:2e: db:f8:62:10:c8:09:5b:16:5d:a7:56:24:c4:f5:ff:1a:8a:f3: e5:a7:48:9a:26:07:ed:7e:5a:77:89:04:48:b7:4c:a1:5b:db: 4b:9d:42:d5:51:1b:3f:de:14:72:e6:4b:a6:be:4a:09:c3:94: fa:0e:11:b2:20:37:e7:20:f2:38:61:b7:a4:0e:f0:f8:bd:ba: a1:88:c9:0b:8b:3e:cd:46:20:39:ae:cc:ed:39:04:17:4a:5f: 73:91:1b:ec:4b:e9:59:ed:ac:ce:fc:d2:cd:68:be:40:cd:3d: 6c:f9:91:18:de:86:19:55:b5:9f:0f:d1:c5:48:d6:ac:3a:dc: 09:3a:cb:f9:21:ae:1f:e3:7b:0c:3e:21:49:6b:9b:75:3a:9f: 15:e5:77:98:08:cb:ff:a0:f7:d4:d1:fe:df:db:dd:fd:3c:01: a8:c2:15:d3:92:30:48:35:ec:7b:42:4a:35:b8:2a:bd:30:3b: 11:b3:ed:b2:7f:cd:8e:35:af:f3:81:7d:ef:0c:05:36:fd:c9: c8:2b:30:d8 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNDA4MjYw NTEyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDMEYzNzUzRjFGRDAz OTY5QjBFRjdCQzhGRjE5NDE2RkUxRjQ5QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCguMuAxLhxuEAFI8Sq9QwfAhIY3uQ+nlUdK8TLEQHwWl8rleyA sMMpMblkmDy0iJkeABdaDmVPB1KXd3JX/vSs4J+brpfBkALadCACui2UOPT0gL6R 9k162Hx9CVtSh+4drNDbh3OGLO4tTiOFHbzZBKV9pO5xQxvDTv4YxqPJUUD/p39J A9CBC3HkQdOQylpYwYm+yKaaM5jB0o2Y7Copbi9USoTn0d8Jyd6I1u3ZoENkHtE+ rY7tHpwoRMoLuWQJH6HOIkvCmkRrfl91STIZin/02SOK0OH/6vl2qtdIJyZlm33o Z2ucbnQ5n7daT2/ImYHnNJR+tSSeW+47Ka6BAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU/A83U/H9A5abDve8j/GUFv4fSa0wHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy9fQTgzVV9IOUE1YWJE dmU4al9HVUZ2NGZTYTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClms4MA0GCSqGSIb3DQEBCwUAA4IBAQARJLtsXhqZQKpJJeLcAD6nUxB0l4rx zPpjAD7kFar8Pg5iKcgYXJ7NQNJ9LQr11s6dTCBWSC7b+GIQyAlbFl2nViTE9f8a ivPlp0iaJgftflp3iQRIt0yhW9tLnULVURs/3hRy5kumvkoJw5T6DhGyIDfnIPI4 YbekDvD4vbqhiMkLiz7NRiA5rsztOQQXSl9zkRvsS+lZ7azO/NLNaL5AzT1s+ZEY 3oYZVbWfD9HFSNasOtwJOsv5Ia4f43sMPiFJa5t1Op8V5XeYCMv/oPfU0f7f2939 PAGowhXTkjBINex7Qko1uCq9MDsRs+2yf82ONa/zgX3vDAU2/cnIKzDY -----END CERTIFICATE-----Generated at Fri Nov 22 04:36:55 2024 by rpki-client on console-fra.rpki-client.org