$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/_BKkiOtrPcYDgXsPH1_5JQ226OM.roa File: _BKkiOtrPcYDgXsPH1_5JQ226OM.roa (raw, json) Hash identifier: fXvq4SDjz2g03t7EGUR93SJ7kLimxzXkkFNYexBXnzs= Subject key identifier: FC:12:A4:88:EB:6B:3D:C6:03:81:7B:0F:1F:5F:F9:25:0D:B6:E8:E3 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 0575 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/_BKkiOtrPcYDgXsPH1_5JQ226OM.roa Signing time: Fri 01 Sep 2023 08:59:50 +0000 ROA not before: Fri 01 Sep 2023 08:59:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 134823 IP address blocks: 103.153.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Sep 1 08:59:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FC12A488EB6B3DC603817B0F1F5FF9250DB6E8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:47:0c:07:28:73:1f:a3:80:7b:b5:f6:21: c2:84:4c:6a:c9:0e:1a:8d:d0:dc:21:2e:39:d2:47: aa:d1:f7:bd:f5:1b:f2:a2:c6:8c:6e:1a:d5:1c:c5: 2d:46:3e:3b:4c:91:cb:34:1a:38:06:74:f2:81:96: bc:65:d1:49:54:32:ed:37:e0:a8:de:63:53:bf:f8: c4:eb:d0:06:9f:44:a2:de:e9:06:ad:27:f9:34:56: e8:de:e7:38:3a:63:9e:2a:f7:05:d5:26:ef:01:b5: fe:a7:5e:7d:c2:53:cc:d6:19:ae:65:f8:a4:1c:ec: 44:18:e4:8f:a6:d8:0b:67:3a:bd:de:4b:75:e7:61: 27:ce:6a:e3:50:7f:91:35:54:d5:0c:75:ec:46:9d: fe:81:4f:49:82:d9:3f:14:ce:8d:81:37:26:7c:66: 34:fd:23:c0:20:96:5b:b1:c5:af:2e:64:20:b9:5a: fe:9a:2f:03:ee:07:06:dc:87:cc:18:c3:05:39:d1: 6a:c9:b1:6c:5f:3b:12:cd:b9:c9:e7:82:42:8f:e8: ca:cd:8b:95:ea:bd:52:3f:ee:d9:e4:a6:a9:07:e7: ee:a0:4d:99:91:a1:cd:84:23:47:2e:c8:60:75:0e: af:ce:6c:ed:7a:82:1f:cb:91:11:f3:2c:a6:d2:27: 1e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:12:A4:88:EB:6B:3D:C6:03:81:7B:0F:1F:5F:F9:25:0D:B6:E8:E3 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/_BKkiOtrPcYDgXsPH1_5JQ226OM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.153.177.0/24 Signature Algorithm: sha256WithRSAEncryption 95:a7:a2:67:9c:36:d6:7a:b3:28:67:8b:88:2f:30:f4:3d:4a: d5:14:65:37:f0:48:2a:c7:56:25:7c:19:bc:19:3a:05:df:99: 4f:8c:00:91:4f:e4:b0:a4:11:bf:69:80:83:3d:05:b3:f2:f7: 1d:84:75:2a:b5:f2:87:bd:c0:65:73:28:cf:d3:2b:b4:7a:51: e9:88:7c:15:cb:e2:fc:de:d1:2b:f4:e0:24:8a:31:67:bd:02: ac:21:db:3d:95:18:30:8d:3d:60:58:ec:e2:fd:ff:ba:32:0a: 2d:e8:20:17:42:56:32:74:81:05:df:88:67:ba:15:df:ae:8c: 55:cb:65:85:b8:26:8c:a9:50:72:65:11:d0:af:5d:93:ce:c2: 61:04:dd:1f:9c:22:13:a0:79:9d:01:ae:d3:b4:64:26:f8:fe: 3f:5a:0f:f4:ea:5a:73:34:f5:c7:61:51:60:10:b6:17:08:67: 7f:cb:0c:d1:62:0e:4f:2b:2e:8f:0f:2d:33:19:fa:ef:74:5a: cb:9e:a6:91:32:af:51:ab:ff:67:ca:17:2b:f1:17:e8:85:ce: d9:25:8c:9e:d1:40:f1:a1:a4:45:cf:41:b7:76:e2:dd:09:ad: 41:b7:51:bd:e5:7a:04:46:df:e4:cd:bb:57:d3:bf:61:80:87: 7a:46:24:87 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzA5MDEw ODU5NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDMTJBNDg4RUI2QjNE QzYwMzgxN0IwRjFGNUZGOTI1MERCNkU4RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDodUcMByhzH6OAe7X2IcKETGrJDhqN0NwhLjnSR6rR9731G/Ki xoxuGtUcxS1GPjtMkcs0GjgGdPKBlrxl0UlUMu034KjeY1O/+MTr0AafRKLe6Qat J/k0Vuje5zg6Y54q9wXVJu8Btf6nXn3CU8zWGa5l+KQc7EQY5I+m2AtnOr3eS3Xn YSfOauNQf5E1VNUMdexGnf6BT0mC2T8Uzo2BNyZ8ZjT9I8Aglluxxa8uZCC5Wv6a LwPuBwbch8wYwwU50WrJsWxfOxLNucnngkKP6MrNi5XqvVI/7tnkpqkH5+6gTZmR oc2EI0cuyGB1Dq/ObO16gh/LkRHzLKbSJx49AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU/BKkiOtrPcYDgXsPH1/5JQ226OMwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL19CS2tpT3RyUGNZRGdYc1BI MV81SlEyMjZPTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn mbEwDQYJKoZIhvcNAQELBQADggEBAJWnomecNtZ6syhni4gvMPQ9StUUZTfwSCrH ViV8GbwZOgXfmU+MAJFP5LCkEb9pgIM9BbPy9x2EdSq18oe9wGVzKM/TK7R6UemI fBXL4vze0Sv04CSKMWe9Aqwh2z2VGDCNPWBY7OL9/7oyCi3oIBdCVjJ0gQXfiGe6 Fd+ujFXLZYW4JoypUHJlEdCvXZPOwmEE3R+cIhOgeZ0BrtO0ZCb4/j9aD/TqWnM0 9cdhUWAQthcIZ3/LDNFiDk8rLo8PLTMZ+u90WsueppEyr1Gr/2fKFyvxF+iFztkl jJ7RQPGhpEXPQbd24t0JrUG3Ub3legRG3+TNu1fTv2GAh3pGJIc= -----END CERTIFICATE-----Generated at Tue May 7 11:42:35 2024 by rpki-client on console-fra.rpki-client.org