$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/NqfYPXjmV-p1uEO4CRDqrDh8WHg.roa File: NqfYPXjmV-p1uEO4CRDqrDh8WHg.roa (raw, json) Hash identifier: KiqQEAdfuEOZYZjf3FAuD94UqZl5vfISgiN6za9SV/c= Subject key identifier: 36:A7:D8:3D:78:E6:57:EA:75:B8:43:B8:09:10:EA:AC:38:7C:58:78 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 06DA Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/NqfYPXjmV-p1uEO4CRDqrDh8WHg.roa Signing time: Mon 26 Aug 2024 05:18:32 +0000 ROA not before: Mon 26 Aug 2024 05:18:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 103.153.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 26 05:18:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=36A7D83D78E657EA75B843B80910EAAC387C5878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:06:29:0f:78:cd:bf:b4:78:c7:54:ca:b3: 4b:7e:3e:f5:e1:86:82:2d:be:f6:ae:21:c7:4c:44: 96:d2:4d:76:e6:e4:9a:5b:66:93:d8:be:40:ff:9e: 10:a2:e9:28:3b:0c:66:0b:2f:d0:04:74:d5:40:c8: 59:28:0d:02:13:34:a3:a0:2e:d9:ec:5a:93:c3:00: a5:03:d5:0f:5c:57:d7:31:a4:53:0e:6e:be:67:21: 1f:83:7a:9c:28:09:c1:84:cb:3d:dc:40:24:2b:1e: 51:d7:ca:4c:30:e7:30:96:d0:ac:bb:2e:14:72:66: 65:e4:96:46:6e:43:82:4d:56:6c:41:42:6c:49:b2: 90:61:3c:c1:4b:a4:bf:3b:ee:ea:ae:65:cb:f5:ac: 7f:10:f9:f2:d5:61:44:82:83:03:77:49:5b:5e:7e: 3a:6c:35:31:cb:10:56:d3:a3:e5:55:4f:19:44:b2: c3:c3:e9:7d:a6:59:87:7e:42:e5:76:cb:43:ee:17: 01:98:70:ea:88:04:2c:13:b6:e2:b2:42:ca:b9:54: 38:c5:ef:5b:d0:d3:4c:86:ab:8c:a8:a3:b2:7e:eb: c9:45:97:cd:76:57:d2:d3:39:37:1b:aa:06:5d:f0: 70:fc:72:62:35:2f:ff:6c:f8:13:fe:52:0c:6c:2d: db:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A7:D8:3D:78:E6:57:EA:75:B8:43:B8:09:10:EA:AC:38:7C:58:78 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/NqfYPXjmV-p1uEO4CRDqrDh8WHg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.177.0/24 Signature Algorithm: sha256WithRSAEncryption 39:a3:38:c4:01:cc:8c:62:07:90:1c:6e:9a:35:a7:d9:8f:b7: 1d:36:48:d4:a9:d3:87:21:db:f1:b1:f3:3f:c4:70:15:58:2a: 41:10:65:38:d3:45:67:cc:c2:c1:50:9a:ee:2c:0d:30:e5:d4: 8b:b8:7c:71:37:cc:2d:65:7e:7e:c9:48:5c:61:c6:67:b3:20: 87:03:1b:a6:43:e3:aa:6e:1c:ee:36:ad:6a:0d:2b:68:51:a5: 7b:27:c2:ef:f2:47:79:c5:06:f5:5d:fd:94:86:8e:65:a0:e8: 16:51:b7:32:03:b3:6e:af:1f:2d:54:a9:65:b7:47:c4:15:cc: 22:22:a4:40:21:19:bb:fd:39:2d:21:14:22:7b:a7:da:72:d2: ca:6d:6d:51:46:5f:5e:72:92:0d:56:47:cd:fc:42:7c:e3:00: c3:e8:b6:45:59:2b:68:84:8d:41:22:d3:e0:0b:fe:9e:87:70: b7:0a:4a:64:d8:0b:5a:18:92:80:0d:e4:f7:aa:53:a1:45:db: ff:08:96:b9:21:3c:4c:3e:49:37:53:fe:b6:37:20:11:5b:9e: f4:88:d6:09:6e:06:7b:75:e9:23:6e:59:90:01:2a:7d:39:10: 35:fd:b5:b8:c8:16:60:06:2a:59:0a:29:5e:47:f9:3c:61:d1: 13:1e:bd:e0 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNDA4MjYw NTE4MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2QTdEODNENzhFNjU3 RUE3NUI4NDNCODA5MTBFQUFDMzg3QzU4NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChdgYpD3jNv7R4x1TKs0t+PvXhhoItvvauIcdMRJbSTXbm5Jpb ZpPYvkD/nhCi6Sg7DGYLL9AEdNVAyFkoDQITNKOgLtnsWpPDAKUD1Q9cV9cxpFMO br5nIR+DepwoCcGEyz3cQCQrHlHXykww5zCW0Ky7LhRyZmXklkZuQ4JNVmxBQmxJ spBhPMFLpL877uquZcv1rH8Q+fLVYUSCgwN3SVtefjpsNTHLEFbTo+VVTxlEssPD 6X2mWYd+QuV2y0PuFwGYcOqIBCwTtuKyQsq5VDjF71vQ00yGq4yoo7J+68lFl812 V9LTOTcbqgZd8HD8cmI1L/9s+BP+UgxsLdvpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNqfYPXjmV+p1uEO4CRDqrDh8WHgwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL05xZllQWGptVi1wMXVFTzRD UkRxckRoOFdIZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn mbEwDQYJKoZIhvcNAQELBQADggEBADmjOMQBzIxiB5Acbpo1p9mPtx02SNSp04ch 2/Gx8z/EcBVYKkEQZTjTRWfMwsFQmu4sDTDl1Iu4fHE3zC1lfn7JSFxhxmezIIcD G6ZD46puHO42rWoNK2hRpXsnwu/yR3nFBvVd/ZSGjmWg6BZRtzIDs26vHy1UqWW3 R8QVzCIipEAhGbv9OS0hFCJ7p9py0sptbVFGX15ykg1WR838QnzjAMPotkVZK2iE jUEi0+AL/p6HcLcKSmTYC1oYkoAN5PeqU6FF2/8IlrkhPEw+STdT/rY3IBFbnvSI 1gluBnt16SNuWZABKn05EDX9tbjIFmAGKlkKKV5H+Txh0RMeveA= -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:27 2024 by rpki-client on console-fra.rpki-client.org