$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/XwfhjI3v9YkOhZb8pJL7JVPlvjQ.roa File: XwfhjI3v9YkOhZb8pJL7JVPlvjQ.roa (raw, json) Hash identifier: 2uI0iXM25+6oaROTK5IJQ2YWm1rdgrMz4A7awXikG4Q= Subject key identifier: 5F:07:E1:8C:8D:EF:F5:89:0E:85:96:FC:A4:92:FB:25:53:E5:BE:34 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F0F Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/XwfhjI3v9YkOhZb8pJL7JVPlvjQ.roa Signing time: Mon 26 Aug 2024 05:12:42 +0000 ROA not before: Mon 26 Aug 2024 05:12:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24168 IP address blocks: 103.136.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3855 (0xf0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Aug 26 05:12:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5F07E18C8DEFF5890E8596FCA492FB2553E5BE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c9:02:33:18:43:eb:a5:69:8e:c9:1a:12:38: df:ca:99:f9:d2:13:b5:82:96:5e:7d:40:a2:7c:14: 32:6e:42:89:42:3f:53:26:86:de:78:be:14:7f:4a: 82:bc:37:0a:2a:c9:a6:83:5e:71:68:e3:bf:15:d3: 8b:f6:eb:ec:7e:f9:9f:4e:5f:d7:f9:0c:33:9b:ec: 5e:06:10:9e:7d:16:d5:92:07:6e:1c:df:59:fe:23: cf:25:87:22:76:cf:30:7f:53:63:07:04:88:89:7f: ea:7a:1b:72:9d:e5:2c:c8:6a:8d:fe:28:8c:01:4c: d1:cd:91:03:da:b9:7c:f8:3e:be:22:2d:d1:fc:0b: 86:b7:fb:d4:a3:3e:fb:13:17:e8:71:ce:90:ed:ee: bd:ef:97:49:5f:e7:e4:72:f8:b2:6a:ad:3d:39:33: 10:60:78:39:bd:05:6f:88:fa:9b:51:42:40:60:59: 43:be:e3:11:80:be:ac:27:6e:05:9c:bc:96:0f:a8: 99:50:99:ec:78:da:da:d9:4e:e7:b7:68:a7:0e:e6: 9b:1e:68:bf:56:8c:89:24:bd:41:2e:72:5c:82:ba: c5:b3:56:9a:4f:a0:5e:fc:d8:00:0f:a7:e3:17:b0: eb:37:0c:94:ec:43:5b:7f:1a:b4:83:06:de:a7:fc: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:07:E1:8C:8D:EF:F5:89:0E:85:96:FC:A4:92:FB:25:53:E5:BE:34 X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/XwfhjI3v9YkOhZb8pJL7JVPlvjQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.61.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:fc:ea:a5:e6:35:21:42:d3:7b:04:a4:b3:b6:4b:e3:ba:97: fd:3d:a7:3c:b7:3b:91:17:a8:74:7f:48:f3:0f:d9:a2:62:ac: e1:3c:5c:39:fc:be:61:10:ed:bc:5a:a9:03:4a:73:8b:51:e9: 8c:8a:34:41:3c:79:fa:84:77:67:8e:8e:7c:68:dc:65:48:f8: 38:4b:6e:85:24:16:0c:81:fd:87:00:4e:85:fd:9f:c6:51:f9: 4b:c5:cf:33:c4:ad:e6:4d:8a:a9:a6:5d:7d:51:bc:40:5c:e4: 71:65:9d:64:1a:19:4d:a3:22:8b:f1:1b:ff:9d:64:38:a8:ac: 7a:7f:59:09:f1:88:a5:75:6a:ee:c5:55:e5:af:49:f4:fc:d0: 95:f3:93:89:92:96:70:c9:94:4c:d7:8d:25:3a:42:62:6f:64: e1:16:67:2f:4a:7e:21:c7:dd:cd:6b:f8:4e:6b:4f:b5:cb:0b: ed:34:26:59:66:25:87:93:2f:b1:3e:ce:c5:98:fa:3e:c8:fa: a3:fa:36:30:de:4a:74:bc:46:aa:2f:6a:f0:63:0e:d4:7a:ac: 2b:14:94:4d:5d:c6:31:f3:0b:c1:fe:60:1b:de:ee:ea:fd:94: 70:f1:c2:a3:fd:dd:bb:f6:b3:66:19:de:33:09:dc:36:62:c6: 7d:08:d5:c0 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNDA4MjYw NTEyNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVGMDdFMThDOERFRkY1 ODkwRTg1OTZGQ0E0OTJGQjI1NTNFNUJFMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvyQIzGEPrpWmOyRoSON/KmfnSE7WCll59QKJ8FDJuQolCP1Mm ht54vhR/SoK8NwoqyaaDXnFo478V04v26+x++Z9OX9f5DDOb7F4GEJ59FtWSB24c 31n+I88lhyJ2zzB/U2MHBIiJf+p6G3Kd5SzIao3+KIwBTNHNkQPauXz4Pr4iLdH8 C4a3+9SjPvsTF+hxzpDt7r3vl0lf5+Ry+LJqrT05MxBgeDm9BW+I+ptRQkBgWUO+ 4xGAvqwnbgWcvJYPqJlQmex42trZTue3aKcO5pseaL9WjIkkvUEuclyCusWzVppP oF782AAPp+MXsOs3DJTsQ1t/GrSDBt6n/I6fAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXwfhjI3v9YkOhZb8pJL7JVPlvjQwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL1h3ZmhqSTN2OVlrT2haYjhwSkw3SlZQ bHZqUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABniD0wDQYJ KoZIhvcNAQELBQADggEBAC386qXmNSFC03sEpLO2S+O6l/09pzy3O5EXqHR/SPMP 2aJirOE8XDn8vmEQ7bxaqQNKc4tR6YyKNEE8efqEd2eOjnxo3GVI+DhLboUkFgyB /YcAToX9n8ZR+UvFzzPEreZNiqmmXX1RvEBc5HFlnWQaGU2jIovxG/+dZDiorHp/ WQnxiKV1au7FVeWvSfT80JXzk4mSlnDJlEzXjSU6QmJvZOEWZy9KfiHH3c1r+E5r T7XLC+00JllmJYeTL7E+zsWY+j7I+qP6NjDeSnS8RqovavBjDtR6rCsUlE1dxjHz C8H+YBve7ur9lHDxwqP93bv2s2YZ3jMJ3DZixn0I1cA= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:03 2024 by rpki-client on console-ams.rpki-client.org