$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/1XskF7XZUxQttI9Pk_4drI2fjlA.roa File: 1XskF7XZUxQttI9Pk_4drI2fjlA.roa (raw, json) Hash identifier: rST9nuNBkf9VvzBo4McqWzUYdGc558qe+sNwN7E+hJM= Subject key identifier: D5:7B:24:17:B5:D9:53:14:2D:B4:8F:4F:93:FE:1D:AC:8D:9F:8E:50 Certificate issuer: /CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE Certificate serial: 119F Authority key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/1XskF7XZUxQttI9Pk_4drI2fjlA.roa Signing time: Fri 01 Sep 2023 08:50:23 +0000 ROA not before: Fri 01 Sep 2023 08:50:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131606 IP address blocks: 103.124.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4511 (0x119f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE Validity Not Before: Sep 1 08:50:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D57B2417B5D953142DB48F4F93FE1DAC8D9F8E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:7a:67:1b:22:38:3f:25:4a:83:48:8a:b7: 34:2c:55:bd:13:73:ee:20:12:b4:12:f2:66:9b:28: 7c:58:8a:ef:a7:e7:0c:8a:20:c2:e1:d4:d5:cc:52: 2a:a4:c6:40:44:81:d0:c1:8e:90:f9:0d:c9:d0:ad: 35:23:64:fe:4f:f7:fb:8f:c2:92:b7:b1:b1:ca:08: ac:46:a7:42:f1:32:ab:e5:e9:1d:5e:c4:c4:b6:8d: 00:9b:b4:93:16:fa:50:d9:a7:67:fb:a3:31:0d:30: fd:83:1d:76:ed:14:9f:fc:83:d9:d8:ed:d1:87:70: 06:c1:5c:dd:ed:ad:42:93:2e:a6:25:d6:7f:16:cb: d5:56:1f:43:60:f5:a6:74:5d:cc:3a:c2:87:c0:ab: c5:30:6d:71:e4:c1:e6:f0:94:bf:cd:a7:95:f4:2d: 91:ed:9d:ee:e5:8a:4b:66:d5:88:6d:02:1b:57:23: 3d:cd:84:55:7d:bc:53:5c:cb:46:6c:9b:a2:90:00: fe:b4:29:f8:e9:c6:ef:24:df:ca:6f:14:a0:68:f6: 95:f1:3c:41:6f:23:84:e6:aa:ea:28:92:6b:07:86: 79:c5:19:93:c1:65:f9:79:6f:15:50:28:12:be:48: dc:a5:72:85:da:5a:23:87:b4:e4:c1:cd:4b:02:49: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7B:24:17:B5:D9:53:14:2D:B4:8F:4F:93:FE:1D:AC:8D:9F:8E:50 X509v3 Authority Key Identifier: keyid:F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/1XskF7XZUxQttI9Pk_4drI2fjlA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.124.40.0/23 Signature Algorithm: sha256WithRSAEncryption 39:be:40:4f:65:ff:75:21:e8:54:fb:e7:78:9b:a4:80:10:f7: 2d:72:d0:56:68:be:09:6e:60:cc:43:fd:c0:30:d0:a5:b1:d7: 6b:d8:8c:be:0a:87:a5:60:1d:f7:00:9a:d0:ea:3d:06:bd:5c: 40:c5:ae:e3:20:14:14:b1:28:7c:1a:d8:17:be:3b:a2:03:e8: 35:04:5e:dc:08:7b:75:92:07:aa:20:fc:c0:38:19:d0:e2:02: 36:4c:9a:56:92:12:53:1c:27:f1:3b:28:e4:d0:96:82:f7:03: 7f:ef:4a:48:b9:8e:ef:4e:d8:e9:a6:55:c1:12:c9:40:5a:4e: 39:67:40:72:40:a9:8d:d2:7e:51:e2:6b:9e:77:49:39:92:f2: 50:62:0c:fb:e7:79:96:25:78:91:93:1f:59:17:30:8d:54:27: f4:f1:bc:d1:a4:ce:04:d4:61:56:d4:ab:34:ae:9b:b3:0a:3d: 55:d5:f9:34:c6:1f:be:9a:8a:c3:ca:a6:ec:43:c1:d9:49:67: b8:bb:e1:e5:64:7f:23:ae:04:15:62:ea:cd:9f:3d:a8:1c:69: 63:89:90:40:7e:70:87:40:dc:22:a1:66:69:0a:21:12:bb:5d: 19:b0:6c:6f:92:b0:e3:63:a1:a1:0e:be:51:02:e2:3c:6f:ac: fa:f2:76:51 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICEZ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMx NzQ4MTNERkIxRjlCNDU2MDQ3MkMyNjdGNzZDRDBDMTQxRTVERTAeFw0yMzA5MDEw ODUwMjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ1N0IyNDE3QjVEOTUz MTQyREI0OEY0RjkzRkUxREFDOEQ5RjhFNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT6HpnGyI4PyVKg0iKtzQsVb0Tc+4gErQS8mabKHxYiu+n5wyK IMLh1NXMUiqkxkBEgdDBjpD5DcnQrTUjZP5P9/uPwpK3sbHKCKxGp0LxMqvl6R1e xMS2jQCbtJMW+lDZp2f7ozENMP2DHXbtFJ/8g9nY7dGHcAbBXN3trUKTLqYl1n8W y9VWH0Ng9aZ0Xcw6wofAq8UwbXHkwebwlL/Np5X0LZHtne7liktm1YhtAhtXIz3N hFV9vFNcy0Zsm6KQAP60Kfjpxu8k38pvFKBo9pXxPEFvI4TmquookmsHhnnFGZPB Zfl5bxVQKBK+SNylcoXaWiOHtOTBzUsCSc19AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU1XskF7XZUxQttI9Pk/4drI2fjlAwHwYDVR0jBBgwFoAU8xdIE9+x+bRWBHLC Z/ds0MFB5d4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFNSUxZ UExVUy84eGRJRTkteC1iUldCSExDWl9kczBNRkI1ZDQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBLzh4ZElFOS14LWJSV0JITENaX2RzME1GQjVkNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTUlMWVBMVVMvMVhza0Y3WFpV eFF0dEk5UGtfNGRySTJmamxBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWd8KDANBgkqhkiG9w0BAQsFAAOCAQEAOb5AT2X/dSHoVPvneJukgBD3 LXLQVmi+CW5gzEP9wDDQpbHXa9iMvgqHpWAd9wCa0Oo9Br1cQMWu4yAUFLEofBrY F747ogPoNQRe3Ah7dZIHqiD8wDgZ0OICNkyaVpISUxwn8Tso5NCWgvcDf+9KSLmO 707Y6aZVwRLJQFpOOWdAckCpjdJ+UeJrnndJOZLyUGIM++d5liV4kZMfWRcwjVQn 9PG80aTOBNRhVtSrNK6bswo9VdX5NMYfvpqKw8qm7EPB2UlnuLvh5WR/I64EFWLq zZ89qBxpY4mQQH5wh0DcIqFmaQohErtdGbBsb5Kw42OhoQ6+UQLiPG+s+vJ2UQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:42 2024 by rpki-client on console-ams.rpki-client.org