$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/rmbFsNuaESRs8w_rsSRZQS7QY0k.roa File: rmbFsNuaESRs8w_rsSRZQS7QY0k.roa (raw, json) Hash identifier: 4G8ephqng9TgsXmGYoGMc01JfAdzsZYCJzCS090a5lw= Subject key identifier: AE:66:C5:B0:DB:9A:11:24:6C:F3:0F:EB:B1:24:59:41:2E:D0:63:49 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F16 Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/rmbFsNuaESRs8w_rsSRZQS7QY0k.roa Signing time: Mon 26 Aug 2024 05:12:44 +0000 ROA not before: Mon 26 Aug 2024 05:12:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131641 IP address blocks: 103.136.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3862 (0xf16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Aug 26 05:12:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AE66C5B0DB9A11246CF30FEBB12459412ED06349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:db:cb:90:59:1f:0e:70:9e:07:4c:bb:ba: b0:b3:3c:39:3d:79:2f:bb:d7:43:48:7d:ae:a2:0b: cf:78:a0:16:5c:3d:c7:04:25:5f:96:c4:41:ea:f9: d7:b1:3f:a4:9d:2e:f2:07:7e:5f:0f:be:2f:41:92: 44:61:7c:01:11:7a:8e:b5:d9:28:c8:8b:4c:19:a3: 19:cf:80:5e:17:3c:e1:87:7a:04:80:77:fb:ce:4d: 73:99:4d:d8:2f:6e:50:b7:a2:e0:de:dc:a0:30:c8: bb:62:4c:02:ee:b2:3f:48:31:2b:bf:5f:30:9d:8b: ba:f9:8f:7a:ed:93:ac:3f:ef:41:a6:a1:a5:2b:6d: 8f:4b:61:1b:26:c7:12:5e:b0:a3:cd:c9:29:a6:00: 0e:f0:b7:30:5b:a5:d3:30:c9:8c:fa:43:22:6e:9c: 90:b2:88:c3:59:c2:02:3a:3a:05:a3:a2:36:00:fb: e9:ae:52:ac:3c:27:fc:8e:69:0f:6e:76:99:a3:46: 67:08:9e:49:4f:8d:bd:36:24:c0:06:05:82:30:d8: ea:e7:f2:d4:f7:72:34:61:8c:d2:07:b9:29:fb:6c: 9f:7a:aa:1e:11:31:e1:f4:49:b4:41:e6:ba:85:e3: f2:9b:99:f1:79:f6:3c:d9:49:d9:d9:64:ad:f1:4c: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:66:C5:B0:DB:9A:11:24:6C:F3:0F:EB:B1:24:59:41:2E:D0:63:49 X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/rmbFsNuaESRs8w_rsSRZQS7QY0k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.136.60.0/23 Signature Algorithm: sha256WithRSAEncryption 76:f9:fe:96:59:e6:58:e1:34:26:c1:30:26:08:0a:e2:d3:2f: ac:cd:af:19:97:14:e9:ca:65:e3:79:78:80:18:92:5e:a8:fe: 06:d6:d6:2f:cc:2e:98:45:64:d6:66:06:e9:61:e9:e7:3e:2a: 57:82:2e:f5:cb:17:89:10:f2:81:c0:59:bf:27:ae:1f:31:d0: 76:69:2f:de:48:20:19:ce:1a:ab:df:58:4e:62:c3:79:ea:43: 50:4e:84:5e:1a:ee:a6:b8:30:2e:d4:88:9a:95:dc:71:f7:84: e9:7e:1c:c2:84:26:a1:c7:d5:4b:34:e7:da:9a:d3:c6:2b:a5: 73:58:d6:27:7a:03:15:76:f2:62:be:27:ff:e1:68:8a:39:17: d0:ef:5a:32:ff:4e:4c:68:7e:48:fd:a0:50:3b:fa:b4:22:33: fd:5b:59:b7:c5:2a:16:ce:29:a6:b0:b2:19:57:49:6a:1a:01: 53:3e:7d:35:e3:98:a7:14:ec:b5:a0:12:51:18:3b:a2:2f:eb: d8:1f:f5:69:0d:aa:40:6e:29:3a:37:fa:ae:22:54:8a:24:72: 21:ec:53:83:af:c3:ff:5f:b5:b3:85:f6:70:66:ce:48:f2:ab: 6f:89:4d:d9:06:05:5f:3b:6e:ac:ea:c6:92:a6:9d:37:0b:fd: a8:33:6e:6d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDxYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNDA4MjYw NTEyNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFNjZDNUIwREI5QTEx MjQ2Q0YzMEZFQkIxMjQ1OTQxMkVEMDYzNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPXdvLkFkfDnCeB0y7urCzPDk9eS+710NIfa6iC894oBZcPccE JV+WxEHq+dexP6SdLvIHfl8Pvi9BkkRhfAEReo612SjIi0wZoxnPgF4XPOGHegSA d/vOTXOZTdgvblC3ouDe3KAwyLtiTALusj9IMSu/XzCdi7r5j3rtk6w/70GmoaUr bY9LYRsmxxJesKPNySmmAA7wtzBbpdMwyYz6QyJunJCyiMNZwgI6OgWjojYA++mu Uqw8J/yOaQ9udpmjRmcInklPjb02JMAGBYIw2Orn8tT3cjRhjNIHuSn7bJ96qh4R MeH0SbRB5rqF4/KbmfF59jzZSdnZZK3xTNkpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUrmbFsNuaESRs8w/rsSRZQS7QY0kwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL3JtYkZzTnVhRVNSczh3X3JzU1JaUVM3 UVkway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniDwwDQYJ KoZIhvcNAQELBQADggEBAHb5/pZZ5ljhNCbBMCYICuLTL6zNrxmXFOnKZeN5eIAY kl6o/gbW1i/MLphFZNZmBulh6ec+KleCLvXLF4kQ8oHAWb8nrh8x0HZpL95IIBnO GqvfWE5iw3nqQ1BOhF4a7qa4MC7UiJqV3HH3hOl+HMKEJqHH1Us059qa08YrpXNY 1id6AxV28mK+J//haIo5F9DvWjL/Tkxofkj9oFA7+rQiM/1bWbfFKhbOKaawshlX SWoaAVM+fTXjmKcU7LWgElEYO6Iv69gf9WkNqkBuKTo3+q4iVIokciHsU4Ovw/9f tbOF9nBmzkjyq2+JTdkGBV87bqzqxpKmnTcL/agzbm0= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:30 2024 by rpki-client on console-ams.rpki-client.org