$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DQWL/IPyjBSlK0rKCn_6QkNIhzvM0kcE.roa File: IPyjBSlK0rKCn_6QkNIhzvM0kcE.roa (raw, json) Hash identifier: LmvloseTRHRVaO882OlwkbWc47C6ki0l8bOYHhl13Jg= Subject key identifier: 20:FC:A3:05:29:4A:D2:B2:82:9F:FE:90:90:D2:21:CE:F3:34:91:C1 Certificate issuer: /CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D Certificate serial: 071D Authority key identifier: 7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/IPyjBSlK0rKCn_6QkNIhzvM0kcE.roa Signing time: Fri 01 Sep 2023 08:35:54 +0000 ROA not before: Fri 01 Sep 2023 08:35:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131678 IP address blocks: 103.149.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CBA374F4F7A0D1E6CB59F8A7B564066C67DD19D Validity Not Before: Sep 1 08:35:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=20FCA305294AD2B2829FFE9090D221CEF33491C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d2:27:cd:77:9f:e2:e3:54:fb:6e:ec:e5:e7: 6c:a9:7c:ca:80:f1:20:bf:b7:94:20:c2:82:45:a2: 54:5c:f3:90:df:2c:79:c4:37:29:89:a2:f3:c1:7e: 66:8d:9d:98:42:4b:42:73:b4:5c:4e:1c:a4:ce:bd: a5:ff:72:85:55:9f:7d:f7:c4:40:f5:c7:26:44:89: 3e:8f:42:1d:0b:38:77:b0:a4:1d:c3:65:51:ca:32: ac:c0:99:9c:10:ea:21:43:ca:dd:d0:71:be:2e:89: f2:53:0e:20:22:a9:04:f4:86:1b:7f:56:6b:d7:15: 08:df:8a:a2:a5:23:fc:c0:db:4f:53:b5:b0:51:98: 4d:69:64:a8:b1:81:34:72:d8:b6:f0:d9:6f:0c:3e: 48:28:65:39:19:94:5b:56:48:ff:b2:44:0c:e6:6a: 1e:30:67:be:62:bd:61:47:bd:b3:04:a8:29:b5:ad: 06:b4:d9:17:15:3b:62:6d:00:7c:78:21:b6:bc:73: b9:10:1c:af:20:a5:87:d2:f1:b8:c6:ab:68:33:6e: ff:c9:be:d8:cf:ee:83:5b:22:b4:a3:2b:56:98:0e: f6:63:4f:3e:40:cf:cf:8b:30:1b:4a:50:46:7d:6d: dc:d2:29:56:3d:fd:80:cb:4c:75:0b:7a:8e:ee:a1: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FC:A3:05:29:4A:D2:B2:82:9F:FE:90:90:D2:21:CE:F3:34:91:C1 X509v3 Authority Key Identifier: keyid:7C:BA:37:4F:4F:7A:0D:1E:6C:B5:9F:8A:7B:56:40:66:C6:7D:D1:9D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fLo3T096DR5stZ-Ke1ZAZsZ90Z0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DQWL/IPyjBSlK0rKCn_6QkNIhzvM0kcE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.149.66.0/24 Signature Algorithm: sha256WithRSAEncryption 99:9c:58:bc:fa:0b:b6:da:d1:2f:94:95:c9:11:3e:5a:ab:0b: 3c:e1:7c:a6:a2:ca:64:09:2c:6c:64:e0:c8:d4:5c:e5:35:55: 77:5c:9c:18:29:db:6d:c1:b4:9f:91:dd:7b:16:4c:44:8d:ea: b7:89:9a:f7:90:3a:a8:20:78:be:02:c8:e5:3a:13:6b:cd:e0: 7e:60:08:1d:ba:80:6b:9e:f6:c8:cf:53:cf:1b:e3:32:6f:f2: ad:50:84:c3:52:c7:c2:af:a7:3b:03:8f:30:fd:e0:f4:aa:81: 8b:d4:ab:18:16:7b:08:c5:8a:4c:cb:e7:06:35:ef:e7:38:46: 8d:48:73:81:d6:98:77:d8:35:52:bb:c6:7e:29:23:29:bf:09: d4:41:28:41:e2:11:50:6b:f4:aa:f5:0f:a6:66:b7:b6:57:0b: 5d:51:0b:c6:82:2c:46:a9:10:d3:b5:97:f8:e9:ca:23:a5:5f: 6b:e3:42:05:12:a7:bb:86:2d:ca:5f:0f:d2:53:83:e6:dd:06: a4:14:42:ea:55:38:c7:93:cd:9f:5f:3a:30:6d:b5:09:c4:3b: 71:bf:fd:26:53:93:c9:f9:96:74:6c:0d:7b:e5:4c:ef:de:e6: ee:7c:81:fd:69:d8:b7:63:93:9b:9b:c2:87:f1:47:ef:31:8c: 07:9d:da:0a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0NC QTM3NEY0RjdBMEQxRTZDQjU5RjhBN0I1NjQwNjZDNjdERDE5RDAeFw0yMzA5MDEw ODM1NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIwRkNBMzA1Mjk0QUQy QjI4MjlGRkU5MDkwRDIyMUNFRjMzNDkxQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDU0ifNd5/i41T7buzl52ypfMqA8SC/t5QgwoJFolRc85DfLHnE NymJovPBfmaNnZhCS0JztFxOHKTOvaX/coVVn333xED1xyZEiT6PQh0LOHewpB3D ZVHKMqzAmZwQ6iFDyt3Qcb4uifJTDiAiqQT0hht/VmvXFQjfiqKlI/zA209TtbBR mE1pZKixgTRy2Lbw2W8MPkgoZTkZlFtWSP+yRAzmah4wZ75ivWFHvbMEqCm1rQa0 2RcVO2JtAHx4Iba8c7kQHK8gpYfS8bjGq2gzbv/JvtjP7oNbIrSjK1aYDvZjTz5A z8+LMBtKUEZ9bdzSKVY9/YDLTHULeo7uoZUHAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUIPyjBSlK0rKCn/6QkNIhzvM0kcEwHwYDVR0jBBgwFoAUfLo3T096DR5stZ+K e1ZAZsZ90Z0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFFXTC9m TG8zVDA5NkRSNXN0Wi1LZTFaQVpzWjkwWjAuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L2ZMbzNUMDk2RFI1c3RaLUtlMVpBWnNaOTBaMC5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0RRV0wvSVB5akJTbEswcktDbl82UWtOSWh6 dk0wa2NFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeVQjAN BgkqhkiG9w0BAQsFAAOCAQEAmZxYvPoLttrRL5SVyRE+WqsLPOF8pqLKZAksbGTg yNRc5TVVd1ycGCnbbcG0n5HdexZMRI3qt4ma95A6qCB4vgLI5ToTa83gfmAIHbqA a572yM9TzxvjMm/yrVCEw1LHwq+nOwOPMP3g9KqBi9SrGBZ7CMWKTMvnBjXv5zhG jUhzgdaYd9g1UrvGfikjKb8J1EEoQeIRUGv0qvUPpma3tlcLXVELxoIsRqkQ07WX +OnKI6Vfa+NCBRKnu4Ytyl8P0lOD5t0GpBRC6lU4x5PNn186MG21CcQ7cb/9JlOT yfmWdGwNe+VM797m7nyB/WnYt2OTm5vCh/FH7zGMB53aCg== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:38 2024 by rpki-client on console-fra.rpki-client.org