$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vahKbEeCin_51qS2274e3sF7-XA.roa File: vahKbEeCin_51qS2274e3sF7-XA.roa (raw, json) Hash identifier: ZEAmt19vQwnYhzdBp2iFVF4S/GBJi/V/076UCIfWMUY= Subject key identifier: BD:A8:4A:6C:47:82:8A:7F:F9:D6:A4:B6:DB:BE:1E:DE:C1:7B:F9:70 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1026 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vahKbEeCin_51qS2274e3sF7-XA.roa Signing time: Mon 26 Aug 2024 05:16:07 +0000 ROA not before: Mon 26 Aug 2024 05:16:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131591 IP address blocks: 103.231.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4134 (0x1026) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BDA84A6C47828A7FF9D6A4B6DBBE1EDEC17BF970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:71:eb:46:8d:d3:cf:90:36:14:f8:96:e0: c5:45:57:63:98:69:b7:ec:a9:9b:23:ed:5c:c0:ba: 4b:d7:a1:99:2d:d8:a6:0c:a0:9b:7c:56:08:7d:5e: 28:bb:b2:41:ae:00:f5:ab:5c:3b:a7:ab:49:7f:fb: 86:36:4e:6f:d4:40:1b:70:95:85:e1:d7:ae:2f:4a: 53:af:fd:05:34:ea:38:0b:8f:0c:62:e8:ab:33:2f: c6:d3:20:42:0f:04:f9:ab:d2:c7:bc:0a:15:50:4d: 10:a1:46:eb:24:9e:f8:cc:f1:ab:e0:c9:fb:98:81: 6b:8a:7b:30:33:87:b7:f8:55:72:83:de:e2:ff:46: 65:9a:78:dd:be:be:07:fe:4e:33:94:f5:b6:24:59: d7:ac:fb:81:0c:1c:1d:a9:67:f9:3b:80:97:b8:a6: 42:84:16:ae:5d:34:9c:7d:3e:96:f3:f5:5d:7b:22: e7:40:17:41:d4:6d:a9:04:00:4c:4e:12:4f:8c:8d: db:ad:c2:5a:7a:87:24:90:d1:96:7e:29:74:64:a1: b1:07:8f:0e:fd:2b:41:0f:72:d1:93:55:d7:72:61: ce:63:72:82:75:7f:54:44:13:14:21:2d:11:ec:c3: 1f:1f:93:af:e1:09:a2:ac:08:5d:18:3d:23:ae:0a: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A8:4A:6C:47:82:8A:7F:F9:D6:A4:B6:DB:BE:1E:DE:C1:7B:F9:70 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vahKbEeCin_51qS2274e3sF7-XA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.231.49.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5f:3b:be:10:1c:f6:79:28:a7:08:28:0e:ea:a9:0c:22:1e: 2d:80:70:38:23:5b:5b:29:91:bd:5f:9b:28:d2:1f:6a:13:40: 80:43:2f:29:ff:da:37:58:cc:d3:9f:0f:66:03:d1:ef:3b:f4: 6f:54:f1:ed:20:0c:5f:2a:5f:06:4f:d5:c1:d6:f3:db:9e:fb: 1e:ca:94:b9:92:ec:1b:1b:ec:f6:f0:be:e0:cd:87:2a:e9:e2: 0b:0b:79:da:b5:27:2c:c9:86:f8:a8:c6:da:91:71:c3:f0:e1: a7:1a:7c:a5:e9:af:12:ed:6b:9c:e0:e1:9a:59:38:77:14:5c: 2c:1d:0e:11:f8:5a:3d:60:1f:a8:e2:ee:f9:00:e7:64:e7:7e: f4:6f:c9:13:26:41:4a:c8:d7:25:17:88:2e:8a:d3:57:07:75: eb:0c:8e:93:c0:5e:2f:38:c7:81:12:c3:67:02:26:83:3b:a8: ab:23:bd:4e:c3:c3:b8:fe:bf:71:20:3e:1c:27:9f:9e:46:63: b4:8a:ec:0c:3e:5d:11:90:8a:76:1e:25:32:bf:f4:db:79:a9: a5:65:77:d9:26:74:de:4c:9d:22:de:f3:f6:8b:9f:51:a8:b2: 84:b6:79:8a:44:98:c1:1c:75:b0:a9:d3:b7:76:7f:41:5c:ce: 7d:02:c9:ea -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICECYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJEQTg0QTZDNDc4MjhB N0ZGOUQ2QTRCNkRCQkUxRURFQzE3QkY5NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx73HrRo3Tz5A2FPiW4MVFV2OYabfsqZsj7VzAukvXoZkt2KYM oJt8Vgh9Xii7skGuAPWrXDunq0l/+4Y2Tm/UQBtwlYXh164vSlOv/QU06jgLjwxi 6KszL8bTIEIPBPmr0se8ChVQTRChRusknvjM8avgyfuYgWuKezAzh7f4VXKD3uL/ RmWaeN2+vgf+TjOU9bYkWdes+4EMHB2pZ/k7gJe4pkKEFq5dNJx9Ppbz9V17IudA F0HUbakEAExOEk+Mjdutwlp6hySQ0ZZ+KXRkobEHjw79K0EPctGTVddyYc5jcoJ1 f1REExQhLRHswx8fk6/hCaKsCF0YPSOuCi85AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUvahKbEeCin/51qS2274e3sF7+XAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3ZhaEtiRWVDaW5fNTFxUzIyNzRlM3NG Ny1YQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn5zEwDQYJ KoZIhvcNAQELBQADggEBAJBfO74QHPZ5KKcIKA7qqQwiHi2AcDgjW1spkb1fmyjS H2oTQIBDLyn/2jdYzNOfD2YD0e879G9U8e0gDF8qXwZP1cHW89ue+x7KlLmS7Bsb 7PbwvuDNhyrp4gsLedq1JyzJhvioxtqRccPw4acafKXprxLta5zg4ZpZOHcUXCwd DhH4Wj1gH6ji7vkA52TnfvRvyRMmQUrI1yUXiC6K01cHdesMjpPAXi84x4ESw2cC JoM7qKsjvU7Dw7j+v3EgPhwnn55GY7SK7Aw+XRGQinYeJTK/9Nt5qaVld9kmdN5M nSLe8/aLn1GosoS2eYpEmMEcdbCp07d2f0Fczn0Cyeo= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org