$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/pfXVBP4K8gRNYr9PMBkWnTL0G88.roa File: pfXVBP4K8gRNYr9PMBkWnTL0G88.roa (raw, json) Hash identifier: h4lTsUBEzGLJ9hwPsQ0y2+iDJ3MKMNq15HjQbhXVIRA= Subject key identifier: A5:F5:D5:04:FE:0A:F2:04:4D:62:BF:4F:30:19:16:9D:32:F4:1B:CF Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F14 Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/pfXVBP4K8gRNYr9PMBkWnTL0G88.roa Signing time: Mon 26 Aug 2024 05:12:43 +0000 ROA not before: Mon 26 Aug 2024 05:12:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18424 IP address blocks: 103.136.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3860 (0xf14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Aug 26 05:12:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A5F5D504FE0AF2044D62BF4F3019169D32F41BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:13:23:32:96:42:93:5a:2b:4c:b0:1a:95:fd: cb:ad:38:30:c9:de:b0:dd:9a:1d:20:50:19:22:ef: d8:97:bb:6f:75:09:9e:03:84:36:00:33:49:50:fd: c8:6e:2a:55:f6:92:4e:8d:32:0d:cb:29:31:b3:fd: 50:9f:33:4a:40:d2:ad:19:e0:b0:4a:8d:f2:2f:ce: 63:5a:3d:08:d4:70:19:ee:9b:c1:04:41:fb:86:ca: a6:cd:25:9d:7b:ac:17:80:3d:b1:16:4a:58:22:f2: 4e:38:55:6a:05:3a:98:dc:4a:f5:b8:a5:b2:6a:e4: 84:c2:79:90:85:2a:e3:9c:5a:ad:1d:21:75:7b:38: d6:81:4c:b1:14:31:e2:52:8b:ae:e9:f7:b4:55:f1: 45:0b:54:ea:14:5f:c5:49:09:d5:18:e7:65:97:50: 6f:b3:2c:b1:68:ca:79:ac:79:08:b1:3e:4c:85:e6: 97:a8:65:ce:26:dd:be:95:00:61:a6:b3:b2:56:03: 27:97:8e:e7:58:38:06:1b:01:1e:27:8a:7f:52:dc: 54:6d:e3:b9:09:fc:e2:4b:e1:44:e7:c5:7b:46:45: 66:84:9d:2a:d1:39:15:c6:fe:2a:4b:77:73:be:09: 0f:27:9a:1b:c6:21:9d:11:ee:cb:48:1e:59:4a:8d: b0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F5:D5:04:FE:0A:F2:04:4D:62:BF:4F:30:19:16:9D:32:F4:1B:CF X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/pfXVBP4K8gRNYr9PMBkWnTL0G88.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.60.0/23 Signature Algorithm: sha256WithRSAEncryption 98:24:c3:e0:1b:53:0c:61:3e:71:85:29:28:8c:80:a7:86:62: 13:96:9b:e9:6a:9a:7a:04:77:f8:cb:4b:34:bb:00:fe:c6:e8: cf:94:03:81:6c:c1:43:b6:37:3d:b2:b9:52:e3:88:cc:3e:f0: d7:f4:41:b6:83:72:65:ae:ba:7d:80:00:31:50:b5:e9:2a:aa: 5b:00:ba:cd:e5:10:f6:e5:b4:4c:8a:86:fa:54:9c:c0:f5:88: 3c:dd:1e:cb:67:9c:43:0c:d6:c3:f7:07:3b:c3:76:15:e3:8e: b9:aa:fd:1e:40:b5:eb:06:7f:7b:f2:9a:e2:68:d9:bb:47:91: 1e:6a:d1:92:4d:6f:6f:13:f3:5f:0d:ef:c5:b3:0b:e7:f0:64: 72:77:4a:fe:9a:7e:72:6a:dc:41:59:0b:46:34:c1:17:ed:7c: 5b:2f:3c:0d:d8:58:62:65:67:d4:10:1d:f6:e8:6b:ac:8a:bb: 47:d6:e9:aa:f0:a7:4b:42:5b:27:b8:23:91:97:5e:9f:ae:bd: 7e:d9:40:54:b2:f2:f3:f6:59:b5:88:cb:5d:5b:3e:c9:a3:bc: 85:08:26:81:4f:82:89:2b:52:31:07:14:37:2f:57:a0:3a:8f: f8:80:82:7f:03:9f:7e:7f:78:5b:70:36:92:3c:1d:a3:a3:93: 49:45:88:db -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNDA4MjYw NTEyNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1RjVENTA0RkUwQUYy MDQ0RDYyQkY0RjMwMTkxNjlEMzJGNDFCQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4EyMylkKTWitMsBqV/cutODDJ3rDdmh0gUBki79iXu291CZ4D hDYAM0lQ/chuKlX2kk6NMg3LKTGz/VCfM0pA0q0Z4LBKjfIvzmNaPQjUcBnum8EE QfuGyqbNJZ17rBeAPbEWSlgi8k44VWoFOpjcSvW4pbJq5ITCeZCFKuOcWq0dIXV7 ONaBTLEUMeJSi67p97RV8UULVOoUX8VJCdUY52WXUG+zLLFoynmseQixPkyF5peo Zc4m3b6VAGGms7JWAyeXjudYOAYbAR4nin9S3FRt47kJ/OJL4UTnxXtGRWaEnSrR ORXG/ipLd3O+CQ8nmhvGIZ0R7stIHllKjbARAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUpfXVBP4K8gRNYr9PMBkWnTL0G88wHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL3BmWFZCUDRLOGdSTllyOVBNQmtXblRM MEc4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniDwwDQYJ KoZIhvcNAQELBQADggEBAJgkw+AbUwxhPnGFKSiMgKeGYhOWm+lqmnoEd/jLSzS7 AP7G6M+UA4FswUO2Nz2yuVLjiMw+8Nf0QbaDcmWuun2AADFQtekqqlsAus3lEPbl tEyKhvpUnMD1iDzdHstnnEMM1sP3BzvDdhXjjrmq/R5AtesGf3vymuJo2btHkR5q 0ZJNb28T818N78WzC+fwZHJ3Sv6afnJq3EFZC0Y0wRftfFsvPA3YWGJlZ9QQHfbo a6yKu0fW6arwp0tCWye4I5GXXp+uvX7ZQFSy8vP2WbWIy11bPsmjvIUIJoFPgokr UjEHFDcvV6A6j/iAgn8Dn35/eFtwNpI8HaOjk0lFiNs= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:30 2024 by rpki-client on console-ams.rpki-client.org