$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BGnqfEjx6hBN0MKelC23m4luZVU.roa File: BGnqfEjx6hBN0MKelC23m4luZVU.roa (raw, json) Hash identifier: x6e3Ot3wUhA115YZgK9VloHIsdZjRNGcI15I5WkUlYk= Subject key identifier: 04:69:EA:7C:48:F1:EA:10:4D:D0:C2:9E:94:2D:B7:9B:89:6E:65:55 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 05BF Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BGnqfEjx6hBN0MKelC23m4luZVU.roa Signing time: Thu 12 Oct 2023 08:31:49 +0000 ROA not before: Thu 12 Oct 2023 08:31:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131657 IP address blocks: 103.122.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 21:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Oct 12 08:31:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0469EA7C48F1EA104DD0C29E942DB79B896E6555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:5b:08:62:64:f1:75:65:83:40:30:b0:fe: 00:a8:06:02:70:2d:21:62:51:a0:c6:cf:6f:06:87: 06:61:cd:65:e5:d5:08:ef:be:9e:a4:a7:44:f9:e3: a2:30:6b:ce:4f:86:cc:b0:2e:21:6f:04:32:c8:e9: 92:c5:08:75:30:05:c3:62:04:87:44:fe:cb:3e:dd: 0b:91:0f:f1:46:ef:89:e0:67:f2:0c:0a:43:8e:4d: 1a:a6:7f:c8:50:e6:59:ae:3c:28:41:8a:f2:7e:f6: c7:ed:43:e7:ec:58:2b:24:46:99:f3:fd:16:ef:c7: a5:01:a8:20:34:ab:b4:76:2e:c5:b9:06:b7:39:79: 13:2b:7b:ae:33:36:34:a8:c8:78:b2:85:69:0d:bd: 25:89:8b:87:31:92:94:02:05:52:3c:a2:cc:43:a9: 8f:b1:36:d4:74:aa:16:da:4f:97:ef:c1:97:93:2a: 2b:a5:7a:27:3a:a9:97:08:f0:24:d6:47:02:30:f5: 2b:76:21:80:d9:87:f0:9d:45:db:94:12:36:c6:11: 59:d7:92:8f:4b:f5:9e:9c:6d:4e:6d:b3:5c:18:8d: 2e:77:c9:66:f1:2a:15:b7:47:87:fe:1c:84:77:ee: d6:cd:fc:19:32:41:01:2c:bb:e6:9e:f3:d4:6f:6a: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:69:EA:7C:48:F1:EA:10:4D:D0:C2:9E:94:2D:B7:9B:89:6E:65:55 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/BGnqfEjx6hBN0MKelC23m4luZVU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/22 Signature Algorithm: sha256WithRSAEncryption b7:85:37:b2:44:8a:17:87:b5:75:d4:79:4e:6d:d4:8e:cb:82: 79:13:34:fd:57:09:d6:2e:9d:5c:e5:ac:24:4d:87:58:1a:2f: 15:fc:10:7b:52:f0:2c:27:39:f5:9b:8e:f8:e9:8b:0c:06:47: c4:08:61:6c:06:e5:b0:5f:91:7a:a0:7e:af:f2:e3:f9:5e:eb: 3b:6f:7e:f1:6c:07:92:1b:97:31:0f:57:6a:49:d7:b0:77:5d: bd:9d:ba:ad:15:3c:2c:0b:49:ad:49:6a:64:ac:01:f5:10:63: f4:68:ea:98:8f:14:ba:21:b9:3c:c2:ea:20:ba:40:b6:b5:be: c6:a8:ea:fc:2c:11:ff:9a:86:63:e4:58:0d:8c:32:d1:4e:08: fa:be:58:8a:06:83:d6:c7:8a:3b:42:c1:7d:a8:da:ca:e0:ce: 7c:43:61:78:94:f9:8d:f1:64:e6:cb:6c:54:c7:13:65:59:78: be:29:08:e5:26:d5:e5:f7:6c:a5:05:4a:66:ac:64:c1:2a:27: db:95:a0:e7:d6:e2:ad:35:e2:b6:71:4f:5e:51:fe:f5:9c:e0: 47:c6:9d:1d:c5:b1:82:8a:71:04:76:17:95:5f:b4:61:16:ca: db:68:56:d6:88:14:8d:84:63:a3:36:d8:69:22:68:dd:49:95: e3:8c:4e:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzEwMTIw ODMxNDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA0NjlFQTdDNDhGMUVB MTA0REQwQzI5RTk0MkRCNzlCODk2RTY1NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQF1sIYmTxdWWDQDCw/gCoBgJwLSFiUaDGz28GhwZhzWXl1Qjv vp6kp0T546Iwa85PhsywLiFvBDLI6ZLFCHUwBcNiBIdE/ss+3QuRD/FG74ngZ/IM CkOOTRqmf8hQ5lmuPChBivJ+9sftQ+fsWCskRpnz/Rbvx6UBqCA0q7R2LsW5Brc5 eRMre64zNjSoyHiyhWkNvSWJi4cxkpQCBVI8osxDqY+xNtR0qhbaT5fvwZeTKiul eic6qZcI8CTWRwIw9St2IYDZh/CdRduUEjbGEVnXko9L9Z6cbU5ts1wYjS53yWbx KhW3R4f+HIR37tbN/BkyQQEsu+ae89RvaqRRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBGnqfEjx6hBN0MKelC23m4luZVUwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL0JHbnFmRWp4NmhCTjBNS2Vs QzIzbTRsdVpWVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn erwwDQYJKoZIhvcNAQELBQADggEBALeFN7JEiheHtXXUeU5t1I7LgnkTNP1XCdYu nVzlrCRNh1gaLxX8EHtS8CwnOfWbjvjpiwwGR8QIYWwG5bBfkXqgfq/y4/le6ztv fvFsB5IblzEPV2pJ17B3Xb2duq0VPCwLSa1JamSsAfUQY/Ro6piPFLohuTzC6iC6 QLa1vsao6vwsEf+ahmPkWA2MMtFOCPq+WIoGg9bHijtCwX2o2srgznxDYXiU+Y3x ZObLbFTHE2VZeL4pCOUm1eX3bKUFSmasZMEqJ9uVoOfW4q014rZxT15R/vWc4EfG nR3FsYKKcQR2F5VftGEWyttoVtaIFI2EY6M22GkiaN1JleOMTpg= -----END CERTIFICATE-----Generated at Tue May 7 14:32:35 2024 by rpki-client on console-fra.rpki-client.org