$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/4SmXbPaKP4zEgURZomCUFJLyF2o.roa File: 4SmXbPaKP4zEgURZomCUFJLyF2o.roa (raw, json) Hash identifier: nafQ1/1ErKGHaxnLp2N8WoBjsjmeaINLk3VlkN/F4BQ= Subject key identifier: E1:29:97:6C:F6:8A:3F:8C:C4:81:44:59:A2:60:94:14:92:F2:17:6A Certificate issuer: /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7 Certificate serial: 0231 Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/4SmXbPaKP4zEgURZomCUFJLyF2o.roa Signing time: Mon 26 Aug 2024 05:13:40 +0000 ROA not before: Mon 26 Aug 2024 05:13:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38136 IP address blocks: 103.160.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7 Validity Not Before: Aug 26 05:13:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E129976CF68A3F8CC4814459A260941492F2176A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:41:27:fe:d2:c4:60:65:4a:cc:2a:d6:a4: 19:8a:da:55:db:e8:ec:45:42:95:93:9e:38:a7:79: 19:49:a8:9c:80:1b:07:01:2f:f3:c6:93:41:44:d7: 09:ce:c0:37:fc:d2:d9:af:52:a7:0f:93:36:6a:99: 86:4d:7b:af:b5:c0:e4:79:a9:fd:dd:2e:69:91:31: 39:58:6b:57:59:14:a3:9a:ed:48:74:b0:fe:67:66: 2a:a8:12:f0:af:1c:91:89:93:a8:bc:66:44:99:38: 19:4a:9a:a9:ee:f5:f6:77:ea:6d:28:53:e2:ed:73: 91:7a:24:e7:f4:30:56:75:15:a5:1b:3f:c8:6a:46: f0:a8:5c:4d:4c:5b:fb:3c:1c:c3:27:76:32:b2:b6: 6a:3c:50:b5:56:8d:43:62:01:46:d0:a7:31:e5:1b: 39:90:f6:d0:b9:72:f7:a3:ea:9d:9c:00:4d:c6:e7: 23:d6:3b:38:b9:45:e4:b2:e1:7f:42:44:19:ef:a9: 81:0e:50:d8:e6:40:d8:82:c6:03:1a:71:b4:3f:31: 26:f3:e3:c9:19:87:8f:92:a5:ba:d6:85:ac:54:0e: 5e:62:27:a4:3b:1b:87:7e:83:bf:33:51:d9:00:65: 88:6b:cf:35:bd:43:55:db:26:ef:93:8c:ac:cc:13: 26:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:97:6C:F6:8A:3F:8C:C4:81:44:59:A2:60:94:14:92:F2:17:6A X509v3 Authority Key Identifier: keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/4SmXbPaKP4zEgURZomCUFJLyF2o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.160.180.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:a0:97:eb:77:30:7e:f7:0a:8c:b8:d7:df:48:36:e0:81:ec: f2:11:ee:a2:f9:34:fe:58:10:c5:0f:fe:a5:c2:e9:dc:6b:5f: 45:28:34:b3:5a:92:50:83:74:a7:3e:cc:2e:e8:e2:d0:09:34: 1e:c5:d6:46:c0:71:11:b1:a6:48:5f:d7:7e:83:a7:45:75:0c: c9:e9:32:97:77:8b:58:2b:2d:61:cc:8a:c1:0a:57:82:c2:3f: 3d:fb:1d:41:e1:b8:c7:ad:3a:ff:4a:36:47:1b:64:0a:84:96: 93:02:fa:60:37:e9:a0:94:76:80:db:d5:f8:cf:b2:4a:89:7e: 7e:06:55:91:56:b5:2d:34:82:95:76:89:5e:8f:05:6b:6b:a2: 47:ab:6c:8e:dc:c8:56:e7:27:3b:f0:63:87:c7:7e:92:33:ab: b7:4f:35:25:fe:43:d5:1a:08:02:e0:78:6c:36:d0:87:61:06: 80:3f:3b:a1:43:50:ec:4c:af:c1:89:f4:98:cd:c3:0a:a5:56: d1:67:4e:ab:b1:dd:0f:ab:0e:ab:38:1a:38:a6:19:ff:9e:b7: 99:3f:c0:3c:76:30:45:1c:5e:a2:86:56:97:e2:b4:a7:e5:31: 6b:38:3e:ed:94:92:a0:11:d4:3a:63:a4:d8:82:e2:23:b4:0d: 83:6e:9f:9a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JG NDQxQjU3Qzg2QkQ5RDE5MzQ1MUEwMDVEMjZDRTFBM0M2REVFNzAeFw0yNDA4MjYw NTEzNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxMjk5NzZDRjY4QTNG OENDNDgxNDQ1OUEyNjA5NDE0OTJGMjE3NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz2UEn/tLEYGVKzCrWpBmK2lXb6OxFQpWTnjineRlJqJyAGwcB L/PGk0FE1wnOwDf80tmvUqcPkzZqmYZNe6+1wOR5qf3dLmmRMTlYa1dZFKOa7Uh0 sP5nZiqoEvCvHJGJk6i8ZkSZOBlKmqnu9fZ36m0oU+Ltc5F6JOf0MFZ1FaUbP8hq RvCoXE1MW/s8HMMndjKytmo8ULVWjUNiAUbQpzHlGzmQ9tC5cvej6p2cAE3G5yPW Ozi5ReSy4X9CRBnvqYEOUNjmQNiCxgMacbQ/MSbz48kZh4+SpbrWhaxUDl5iJ6Q7 G4d+g78zUdkAZYhrzzW9Q1XbJu+TjKzMEyaxAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU4SmXbPaKP4zEgURZomCUFJLyF2owHwYDVR0jBBgwFoAUO/RBtXyGvZ0ZNFGg BdJs4aPG3ucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRVJBWUlO Rk8vT19SQnRYeUd2WjBaTkZHZ0JkSnM0YVBHM3VjLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9PX1JCdFh5R3ZaMFpORkdnQmRKczRhUEczdWMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FUkFZSU5GTy80U21YYlBhS1A0ekVn VVJab21DVUZKTHlGMm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6C0MA0GCSqGSIb3DQEBCwUAA4IBAQCfoJfrdzB+9wqMuNffSDbggezyEe6i +TT+WBDFD/6lwunca19FKDSzWpJQg3SnPswu6OLQCTQexdZGwHERsaZIX9d+g6dF dQzJ6TKXd4tYKy1hzIrBCleCwj89+x1B4bjHrTr/SjZHG2QKhJaTAvpgN+mglHaA 29X4z7JKiX5+BlWRVrUtNIKVdolejwVra6JHq2yO3MhW5yc78GOHx36SM6u3TzUl /kPVGggC4HhsNtCHYQaAPzuhQ1DsTK/BifSYzcMKpVbRZ06rsd0Pqw6rOBo4phn/ nreZP8A8djBFHF6ihlaX4rSn5TFrOD7tlJKgEdQ6Y6TYguIjtA2Dbp+a -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org