$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa File: 2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa (raw, json) Hash identifier: oJY6kNlNyb9TGbyfdgm6/JZK5/v4sKJIKoMARNbq3XE= Subject key identifier: D8:F6:D1:DA:20:7C:D0:50:43:86:26:77:6F:DA:04:27:08:7A:54:0A Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 0574 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa Signing time: Fri 01 Sep 2023 08:59:49 +0000 ROA not before: Fri 01 Sep 2023 08:59:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131657 IP address blocks: 103.153.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Sep 1 08:59:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D8F6D1DA207CD050438626776FDA0427087A540A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:39:17:1d:7b:5e:ba:f9:69:45:de:02:fa:8d: 18:bb:b1:ef:0d:3d:dc:34:00:ae:e4:4f:31:ab:c3: 30:8f:87:84:e1:e2:76:9e:69:9b:05:7d:31:a5:42: 6c:b8:bb:50:da:51:81:85:49:60:7c:b0:2c:ad:0e: 3f:fd:b4:e1:ac:db:7a:08:03:5c:12:15:d9:5a:8c: 60:c6:50:23:48:57:76:67:74:57:3e:85:0b:4b:07: db:8d:63:30:01:75:7e:2a:fa:0c:a3:30:65:97:03: 2d:d2:85:35:2f:01:95:02:00:ad:77:bb:c7:f7:67: 67:99:60:7d:2e:f0:9a:ee:b8:32:da:25:64:22:8e: 2e:f1:48:fb:69:35:79:87:45:16:c4:85:da:27:1e: f8:53:e2:29:70:f8:1c:b5:59:89:95:3a:32:2e:bf: 67:9a:f4:fd:75:e2:de:31:16:45:aa:c6:5b:68:c9: dc:20:cf:e7:dd:ad:5e:6a:e5:3b:c6:66:8a:a5:2f: 38:72:e6:a8:8a:fe:e9:d5:04:8d:a3:db:e4:1b:b1: 2c:4d:33:88:4a:98:03:6e:e5:14:2f:4c:9b:30:db: b3:eb:b3:b6:6f:01:bd:8f:5d:6e:db:a4:8e:c5:0f: 13:bc:11:d9:d9:c9:40:19:97:fa:d3:01:a2:6b:ea: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F6:D1:DA:20:7C:D0:50:43:86:26:77:6F:DA:04:27:08:7A:54:0A X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/2PbR2iB80FBDhiZ3b9oEJwh6VAo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:61:1f:53:d5:44:a9:74:62:ab:05:78:d9:ec:98:06:0c:4f: 04:b6:6a:1b:29:19:35:ac:8b:48:89:5d:fa:65:d7:a0:b4:bf: ed:0e:fa:a7:a8:94:80:a2:50:4c:62:fe:56:15:7e:bb:35:44: eb:25:68:3b:b0:37:ec:ee:44:c5:8b:1a:71:7d:1a:f3:00:d3: cd:10:5b:b4:99:28:34:94:15:f0:39:6b:8a:50:e6:d0:79:66: c6:93:36:1d:09:6d:c5:f5:b4:7b:55:41:15:bf:50:4c:32:a2: ab:e0:0f:3f:8c:c9:9d:70:e3:16:b5:53:7a:03:8f:1b:34:15: b4:74:98:8d:ae:78:5d:69:c2:19:47:a1:58:0b:1a:75:eb:43: 8e:13:22:da:73:55:59:5c:31:19:98:09:1c:a3:a4:52:bb:58: 5f:a6:e5:d7:00:f7:b0:40:25:83:8c:60:b4:c6:70:5d:c9:8f: dc:9f:87:ad:59:e7:77:54:aa:8f:ff:d4:df:ae:5b:05:3d:e0: a6:a8:d1:e2:b2:cf:7f:cd:5a:a7:29:30:f5:cc:0b:4a:d9:1a: 48:2e:5f:b9:00:44:a3:c3:b7:c0:ce:df:3f:94:81:37:ab:34: 78:49:8e:43:8e:08:d9:28:7d:02:a6:ca:7a:f8:7f:4b:88:e3: f4:5d:13:f5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzA5MDEw ODU5NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ4RjZEMURBMjA3Q0Qw NTA0Mzg2MjY3NzZGREEwNDI3MDg3QTU0MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdORcde166+WlF3gL6jRi7se8NPdw0AK7kTzGrwzCPh4Th4nae aZsFfTGlQmy4u1DaUYGFSWB8sCytDj/9tOGs23oIA1wSFdlajGDGUCNIV3ZndFc+ hQtLB9uNYzABdX4q+gyjMGWXAy3ShTUvAZUCAK13u8f3Z2eZYH0u8JruuDLaJWQi ji7xSPtpNXmHRRbEhdonHvhT4ilw+By1WYmVOjIuv2ea9P114t4xFkWqxltoydwg z+fdrV5q5TvGZoqlLzhy5qiK/unVBI2j2+QbsSxNM4hKmANu5RQvTJsw27Prs7Zv Ab2PXW7bpI7FDxO8EdnZyUAZl/rTAaJr6kHDAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2PbR2iB80FBDhiZ3b9oEJwh6VAowHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLzJQYlIyaUI4MEZCRGhpWjNi OW9FSndoNlZBby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn mbAwDQYJKoZIhvcNAQELBQADggEBABxhH1PVRKl0YqsFeNnsmAYMTwS2ahspGTWs i0iJXfpl16C0v+0O+qeolICiUExi/lYVfrs1ROslaDuwN+zuRMWLGnF9GvMA080Q W7SZKDSUFfA5a4pQ5tB5ZsaTNh0JbcX1tHtVQRW/UEwyoqvgDz+MyZ1w4xa1U3oD jxs0FbR0mI2ueF1pwhlHoVgLGnXrQ44TItpzVVlcMRmYCRyjpFK7WF+m5dcA97BA JYOMYLTGcF3Jj9yfh61Z53dUqo//1N+uWwU94Kao0eKyz3/NWqcpMPXMC0rZGkgu X7kARKPDt8DO3z+UgTerNHhJjkOOCNkofQKmynr4f0uI4/RdE/U= -----END CERTIFICATE-----Generated at Tue May 7 00:09:10 2024 by rpki-client on console-ams.rpki-client.org