$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8kaxA6RCa991sqmjcpw_xpijl_c.roa File: 8kaxA6RCa991sqmjcpw_xpijl_c.roa (raw, json) Hash identifier: QzkGsUKOv7lS1RCzuXNTpWVdK9ciDEJVysgYo09qc1s= Subject key identifier: F2:46:B1:03:A4:42:6B:DF:75:B2:A9:A3:72:9C:3F:C6:98:A3:97:F7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1095 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8kaxA6RCa991sqmjcpw_xpijl_c.roa Signing time: Mon 26 Aug 2024 05:16:35 +0000 ROA not before: Mon 26 Aug 2024 05:16:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1131591 IP address blocks: 103.231.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4245 (0x1095) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F246B103A4426BDF75B2A9A3729C3FC698A397F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:da:2f:01:84:08:50:d5:92:66:5d:a0:52: 8b:4f:3b:71:e4:28:96:3d:ea:43:9d:12:93:a4:23: e1:c2:22:1f:78:ca:45:9e:83:44:c1:83:db:46:ee: 7d:10:8c:1d:29:07:67:f2:79:b1:8b:b4:3b:bf:7a: ed:cf:fb:fb:22:6c:29:20:e4:c1:05:2a:28:3a:d2: ed:cc:49:cf:06:a2:29:2c:df:57:0d:d0:21:6b:e6: e2:4a:8e:61:35:3b:17:2c:95:ac:a2:3a:3a:f1:88: 03:a9:3b:f8:9a:e1:7b:6b:77:6d:d6:2b:a3:21:1a: ed:76:c4:91:cd:d4:df:cb:04:6d:21:42:3e:35:f1: 92:ef:c1:83:88:97:4b:87:ce:c0:ae:74:56:8e:42: 59:04:39:04:75:67:64:2f:a5:aa:c3:71:35:1b:df: cd:8f:31:e3:57:32:4d:0a:04:e2:a6:0d:f8:bd:13: 55:10:0d:0c:d0:8f:35:b1:45:80:4c:90:08:a0:ee: c6:c7:ab:87:3d:cc:d6:66:3b:58:b2:94:41:1c:4f: 5a:47:65:a6:6c:19:36:ae:c0:1c:60:9d:a3:01:7c: af:c3:36:70:e5:c4:cb:b9:75:80:d3:7e:c4:3e:1f: c3:3e:c7:93:ac:1c:9a:8d:49:f7:40:3c:ea:4f:89: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:46:B1:03:A4:42:6B:DF:75:B2:A9:A3:72:9C:3F:C6:98:A3:97:F7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8kaxA6RCa991sqmjcpw_xpijl_c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.231.51.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a4:2e:b4:15:da:0e:7c:60:a0:aa:a4:0f:9e:2c:c2:de:9f: 77:38:da:83:00:ee:12:7b:f4:2b:68:3e:9a:de:5a:eb:53:5b: 8e:e5:29:57:98:29:7b:a2:7f:4b:93:cb:d4:94:96:3e:7a:f0: 08:03:e0:f0:80:51:f4:91:d7:26:8e:cd:0d:ea:78:5f:77:22: ad:fa:50:e6:98:83:65:ab:ce:c6:cc:d6:af:ad:c0:db:ca:f1: da:5f:8d:7b:df:bb:7f:62:df:b6:2e:57:b3:d7:d2:17:e3:e9: 1a:4f:ae:0c:eb:68:e0:1a:08:d5:c1:e8:6c:b4:51:33:83:5b: b0:99:a5:de:7e:26:9d:f4:9d:97:64:ec:2c:98:f4:fe:ce:a6: 82:25:ac:7b:6d:29:46:ad:b6:f8:8b:de:fa:28:bb:39:36:1d: a8:d8:09:05:b3:69:91:62:02:90:16:02:a2:2c:7a:9b:96:36: 05:b5:50:3e:a0:a9:fe:37:00:8e:18:16:f4:d7:18:f3:44:14: fd:3f:70:cf:33:b9:de:80:a5:d7:75:38:60:aa:e7:dd:e5:68: 08:2c:62:80:11:aa:2a:f9:7d:9f:87:50:e0:7e:ed:4d:48:94: ab:d4:ab:5c:4c:b8:71:3e:f5:68:76:c6:73:04:3e:d6:e0:df: 04:06:87:0c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyNDZCMTAzQTQ0MjZC REY3NUIyQTlBMzcyOUMzRkM2OThBMzk3RjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChu9ovAYQIUNWSZl2gUotPO3HkKJY96kOdEpOkI+HCIh94ykWe g0TBg9tG7n0QjB0pB2fyebGLtDu/eu3P+/sibCkg5MEFKig60u3MSc8Goiks31cN 0CFr5uJKjmE1OxcslayiOjrxiAOpO/ia4Xtrd23WK6MhGu12xJHN1N/LBG0hQj41 8ZLvwYOIl0uHzsCudFaOQlkEOQR1Z2QvparDcTUb382PMeNXMk0KBOKmDfi9E1UQ DQzQjzWxRYBMkAig7sbHq4c9zNZmO1iylEEcT1pHZaZsGTauwBxgnaMBfK/DNnDl xMu5dYDTfsQ+H8M+x5OsHJqNSfdAPOpPiUgDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU8kaxA6RCa991sqmjcpw/xpijl/cwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzhrYXhBNlJDYTk5MXNxbWpjcHdfeHBp amxfYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn5zMwDQYJ KoZIhvcNAQELBQADggEBADSkLrQV2g58YKCqpA+eLMLen3c42oMA7hJ79CtoPpre WutTW47lKVeYKXuif0uTy9SUlj568AgD4PCAUfSR1yaOzQ3qeF93Iq36UOaYg2Wr zsbM1q+twNvK8dpfjXvfu39i37YuV7PX0hfj6RpPrgzraOAaCNXB6Gy0UTODW7CZ pd5+Jp30nZdk7CyY9P7OpoIlrHttKUattviL3voouzk2HajYCQWzaZFiApAWAqIs epuWNgW1UD6gqf43AI4YFvTXGPNEFP0/cM8zud6Apdd1OGCq593laAgsYoARqir5 fZ+HUOB+7U1IlKvUq1xMuHE+9Wh2xnMEPtbg3wQGhww= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org