$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OY0XfEXixZoRhVdoxqs3FW9xmXs.roa File: OY0XfEXixZoRhVdoxqs3FW9xmXs.roa (raw, json) Hash identifier: 9wAWXl2qoUupCiuE54zxKOLch/WkD81MH5VbCAwjmVU= Subject key identifier: 39:8D:17:7C:45:E2:C5:9A:11:85:57:68:C6:AB:37:15:6F:71:99:7B Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 06C7 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OY0XfEXixZoRhVdoxqs3FW9xmXs.roa Signing time: Mon 26 Aug 2024 05:18:27 +0000 ROA not before: Mon 26 Aug 2024 05:18:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131657 IP address blocks: 103.153.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 26 05:18:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=398D177C45E2C59A11855768C6AB37156F71997B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:79:65:18:55:5a:46:5d:a8:21:71:98:9a: f8:96:5d:c9:be:18:ec:42:23:f2:15:4c:4b:2c:68: 3b:4a:dc:78:c7:b7:eb:a4:ab:7c:f3:d9:37:6c:6e: df:64:a9:a6:47:3d:a7:cd:c4:02:d7:f5:74:5e:0c: d4:77:c2:28:13:45:c6:ed:d1:26:be:eb:21:18:28: 11:78:1b:20:a7:2d:49:5d:9a:24:81:71:69:83:13: df:c4:08:e5:fc:b1:03:44:99:d1:a7:6e:9b:ef:ab: 08:41:ee:8d:e0:98:80:bb:a9:aa:41:ac:b2:20:99: 2b:00:6d:39:d4:55:4f:df:d0:dc:05:a3:12:f3:df: e1:9a:f3:8d:89:7d:8b:df:11:72:ee:cb:2f:59:27: 2c:a4:bb:1e:d0:c5:8d:4d:4e:af:3e:19:52:cb:fe: 9b:87:b1:b5:30:56:de:d8:08:9c:5d:1f:0c:42:0d: 49:b4:41:a2:eb:64:b5:0e:c1:30:6a:8a:b2:50:02: e7:60:14:7d:6c:fc:5a:b4:30:8b:ab:55:20:de:63: 9c:7d:ef:5e:4f:5f:d4:1c:15:ba:29:f1:1f:44:0a: 82:86:a9:5a:98:42:ce:e5:f2:29:7a:1a:5e:3c:bb: cc:b0:b4:6b:f2:a4:a2:f6:e5:09:47:09:16:82:77: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8D:17:7C:45:E2:C5:9A:11:85:57:68:C6:AB:37:15:6F:71:99:7B X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/OY0XfEXixZoRhVdoxqs3FW9xmXs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.176.0/24 Signature Algorithm: sha256WithRSAEncryption 60:1f:c6:ee:cb:35:15:f8:8d:6a:27:52:22:1a:57:de:63:c4: 19:a2:d2:3c:df:35:dd:e6:c9:a1:a6:21:10:b8:bb:94:74:6b: e6:c1:67:5b:71:79:22:0e:fb:b9:70:09:78:76:6f:f2:b0:2a: 52:35:ce:e0:17:ff:97:e2:7f:0b:02:ba:d7:a1:fc:f7:9e:5d: 6b:be:da:d6:fd:60:9c:d7:4e:bb:8a:3d:01:c1:fd:d0:bb:f9: df:4d:b0:7d:ec:dc:fb:3f:7b:2e:61:41:0d:d6:2f:64:2c:1b: c7:b7:ca:85:54:8e:40:2d:9e:7b:75:cc:76:5b:86:12:7b:4e: fd:87:21:cf:61:43:cc:20:e1:cc:9d:a1:79:3b:13:d3:a6:eb: c3:9c:0a:44:85:8d:4e:40:d4:93:ac:17:8b:75:bc:74:a0:dc: 1e:63:f6:ff:ed:8c:d7:3f:21:90:8a:50:5e:74:4c:0b:c4:ec: 4a:e3:88:36:4d:d5:85:97:68:d8:6f:38:74:79:2e:5c:69:b6: 64:44:45:f6:a4:be:99:07:2f:f5:28:f7:fb:d4:7d:0e:f7:28: eb:11:f6:2f:43:42:85:b9:79:7c:4c:10:e1:5d:3f:a7:82:29: 70:44:83:15:59:48:65:1a:fe:2d:63:d0:f3:f6:b7:d6:5c:a2: c1:d8:be:10 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBscwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNDA4MjYw NTE4MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5OEQxNzdDNDVFMkM1 OUExMTg1NTc2OEM2QUIzNzE1NkY3MTk5N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDL4XllGFVaRl2oIXGYmviWXcm+GOxCI/IVTEssaDtK3HjHt+uk q3zz2Tdsbt9kqaZHPafNxALX9XReDNR3wigTRcbt0Sa+6yEYKBF4GyCnLUldmiSB cWmDE9/ECOX8sQNEmdGnbpvvqwhB7o3gmIC7qapBrLIgmSsAbTnUVU/f0NwFoxLz 3+Ga842JfYvfEXLuyy9ZJyykux7QxY1NTq8+GVLL/puHsbUwVt7YCJxdHwxCDUm0 QaLrZLUOwTBqirJQAudgFH1s/Fq0MIurVSDeY5x9715PX9QcFbop8R9ECoKGqVqY Qs7l8il6Gl48u8ywtGvypKL25QlHCRaCdy9xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOY0XfEXixZoRhVdoxqs3FW9xmXswHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL09ZMFhmRVhpeFpvUmhWZG94 cXMzRlc5eG1Ycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn mbAwDQYJKoZIhvcNAQELBQADggEBAGAfxu7LNRX4jWonUiIaV95jxBmi0jzfNd3m yaGmIRC4u5R0a+bBZ1txeSIO+7lwCXh2b/KwKlI1zuAX/5fifwsCuteh/PeeXWu+ 2tb9YJzXTruKPQHB/dC7+d9NsH3s3Ps/ey5hQQ3WL2QsG8e3yoVUjkAtnnt1zHZb hhJ7Tv2HIc9hQ8wg4cydoXk7E9Om68OcCkSFjU5A1JOsF4t1vHSg3B5j9v/tjNc/ IZCKUF50TAvE7ErjiDZN1YWXaNhvOHR5LlxptmRERfakvpkHL/Uo9/vUfQ73KOsR 9i9DQoW5eXxMEOFdP6eCKXBEgxVZSGUa/i1j0PP2t9ZcosHYvhA= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org