$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/aauAhmj-dQcdLnEBrQQ6jH85A6o.roa File: aauAhmj-dQcdLnEBrQQ6jH85A6o.roa (raw, json) Hash identifier: BJsRW9u9fAThjmTlkafpfuPXeCIXWbPWM/nl3yf4RtI= Subject key identifier: 69:AB:80:86:68:FE:75:07:1D:2E:71:01:AD:04:3A:8C:7F:39:03:AA Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D94 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aauAhmj-dQcdLnEBrQQ6jH85A6o.roa Signing time: Mon 15 Jan 2024 21:29:30 +0000 ROA not before: Mon 15 Jan 2024 21:29:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131591 IP address blocks: 103.231.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3476 (0xd94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:29:30 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=69AB808668FE75071D2E7101AD043A8C7F3903AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:74:53:10:a8:04:c0:bf:a4:75:e7:d1:a9: 5f:d5:c8:54:51:0d:54:2d:bd:8a:04:ac:85:e4:14: dc:92:a5:d9:e5:a7:aa:4a:50:3e:98:83:7a:66:d6: de:69:14:d6:20:73:a3:cd:77:e7:41:71:83:ba:39: 0f:cf:3e:75:ae:f3:2c:c5:65:f8:71:fd:45:55:c3: 04:c0:44:bc:39:10:1b:df:38:b8:af:00:ca:1e:ee: c7:9d:2f:e6:3f:4b:97:ab:2a:42:dd:08:91:fc:3a: df:57:a4:f6:7a:6d:55:50:9d:12:c3:ac:11:eb:e9: d0:be:55:61:5f:e9:1e:52:b8:1f:13:28:8a:be:39: cc:c7:a0:b1:81:72:bd:87:16:a2:40:5c:cb:50:91: 68:72:ad:df:f4:33:63:25:0c:b4:6d:80:db:40:28: 72:ce:cd:3d:04:68:a4:07:22:5d:a8:6f:25:e2:9c: ff:d3:d0:2b:4b:81:2b:5a:7b:49:de:b2:00:1a:07: 15:e5:28:31:bf:58:73:26:e7:fc:ab:16:92:ee:71: 6f:63:96:c7:99:60:e6:f1:65:41:99:83:4f:2d:64: ad:8d:81:70:bb:6b:65:c2:3e:5a:17:4c:9f:a4:4e: c7:62:69:3b:66:ce:83:bf:e8:e6:ad:0c:7b:80:91: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AB:80:86:68:FE:75:07:1D:2E:71:01:AD:04:3A:8C:7F:39:03:AA X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aauAhmj-dQcdLnEBrQQ6jH85A6o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.231.48.0/24 Signature Algorithm: sha256WithRSAEncryption 34:0b:7d:53:3d:e1:5c:5a:f3:58:b3:b4:ed:e3:95:2e:f4:ba: 14:61:e2:3d:b0:50:04:45:49:61:05:3e:55:f7:04:17:c3:b0: 2a:96:40:a8:eb:00:92:13:41:26:21:bc:f8:4b:30:85:ef:5a: 55:b1:4c:95:95:69:d3:37:14:b4:70:24:c3:89:c4:61:b2:53: a4:db:a7:ff:d6:21:c4:e8:fc:c6:10:4a:2b:e1:e3:ba:a3:42: a6:5f:de:d8:26:b4:ea:b8:53:d0:7f:7a:bc:24:7a:66:b2:b9: 18:57:0c:29:cf:67:10:09:e6:99:e9:30:de:c8:f1:0f:a5:b8: 4b:d6:8c:97:4c:4f:3e:53:f9:64:59:7e:b2:cf:fc:6a:67:93: 07:86:cc:02:38:12:aa:2d:e5:ab:f4:10:c1:7e:89:21:63:b5: 8e:77:17:f2:14:f5:cb:26:6c:5e:7d:7d:e0:3f:b8:05:79:f4: 43:14:9b:05:86:40:49:62:3c:f9:48:92:fa:82:98:fc:bc:8e: 35:df:61:80:72:b3:ee:56:1a:ed:bd:48:52:19:6b:8a:96:55: 91:e1:a2:44:ab:17:5d:f9:ac:d2:cc:b1:64:1f:ea:6c:cd:5e: f4:01:3b:e9:97:d2:e4:73:c2:a8:ac:ef:0f:6a:ca:67:f4:4a: 71:f6:94:77 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI5MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY5QUI4MDg2NjhGRTc1 MDcxRDJFNzEwMUFEMDQzQThDN0YzOTAzQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkpXRTEKgEwL+kdefRqV/VyFRRDVQtvYoErIXkFNySpdnlp6pK UD6Yg3pm1t5pFNYgc6PNd+dBcYO6OQ/PPnWu8yzFZfhx/UVVwwTARLw5EBvfOLiv AMoe7sedL+Y/S5erKkLdCJH8Ot9XpPZ6bVVQnRLDrBHr6dC+VWFf6R5SuB8TKIq+ OczHoLGBcr2HFqJAXMtQkWhyrd/0M2MlDLRtgNtAKHLOzT0EaKQHIl2obyXinP/T 0CtLgStae0nesgAaBxXlKDG/WHMm5/yrFpLucW9jlseZYObxZUGZg08tZK2NgXC7 a2XCPloXTJ+kTsdiaTtmzoO/6OatDHuAkdQBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUaauAhmj+dQcdLnEBrQQ6jH85A6owHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2FhdUFobWotZFFjZExuRUJyUVE2akg4 NUE2by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn5zAwDQYJ KoZIhvcNAQELBQADggEBADQLfVM94Vxa81iztO3jlS70uhRh4j2wUARFSWEFPlX3 BBfDsCqWQKjrAJITQSYhvPhLMIXvWlWxTJWVadM3FLRwJMOJxGGyU6Tbp//WIcTo /MYQSivh47qjQqZf3tgmtOq4U9B/erwkemayuRhXDCnPZxAJ5pnpMN7I8Q+luEvW jJdMTz5T+WRZfrLP/GpnkweGzAI4Eqot5av0EMF+iSFjtY53F/IU9csmbF59feA/ uAV59EMUmwWGQEliPPlIkvqCmPy8jjXfYYBys+5WGu29SFIZa4qWVZHhokSrF135 rNLMsWQf6mzNXvQBO+mX0uRzwqis7w9qymf0SnH2lHc= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org