$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/dtWqXJheZcnRqAmrqfJaWEMezps.roa File: dtWqXJheZcnRqAmrqfJaWEMezps.roa (raw, json) Hash identifier: VVSvt+Na5L5NseZMnq2Udi3zm5JrPzysTi1qwTz3TqM= Subject key identifier: 76:D5:AA:5C:98:5E:65:C9:D1:A8:09:AB:A9:F2:5A:58:43:1E:CE:9B Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 06C6 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/dtWqXJheZcnRqAmrqfJaWEMezps.roa Signing time: Mon 26 Aug 2024 05:18:26 +0000 ROA not before: Mon 26 Aug 2024 05:18:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131657 IP address blocks: 103.122.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 26 05:18:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=76D5AA5C985E65C9D1A809ABA9F25A58431ECE9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:6e:ff:c7:06:d7:6c:9f:58:36:5a:1d:2b: 3f:be:b0:2c:7a:e0:73:1d:7a:34:d8:f4:a1:9b:6d: b6:8e:8c:bb:3c:78:01:90:b7:c2:f9:b1:f2:27:1a: e4:61:ff:fe:5c:90:49:02:67:c0:0e:b6:03:00:b8: a0:26:9f:41:60:d6:61:75:f0:f0:32:39:cf:a7:fc: 00:15:00:e4:8e:2d:67:22:92:0e:66:a9:47:0f:d5: 6d:8d:01:de:0a:44:4d:92:4c:a0:d7:69:b0:da:cf: 7d:bd:92:65:81:b5:db:59:33:8e:1e:dc:9c:41:fb: a5:42:fd:d5:48:90:51:68:a9:15:2c:65:54:e8:3a: 9c:c4:43:60:a6:ae:7c:b5:c1:c5:3c:3f:cc:ef:e2: 02:6d:14:c5:cd:e2:ff:6c:11:32:17:e5:bb:92:1a: 44:54:5c:1c:ec:b3:d6:39:f5:d0:70:71:dc:fa:c1: d6:f8:c8:60:3b:6a:f1:fd:7f:07:5c:b7:20:99:f7: d9:67:cf:07:86:05:61:d1:16:22:66:85:12:fc:2c: 8b:93:c3:e6:73:65:2e:f0:08:6d:4b:0b:62:91:f3: 9b:57:96:4d:28:aa:25:b4:7c:ec:f3:a8:4f:54:50: ee:55:d7:37:d5:e3:90:52:f5:72:8c:45:c5:51:0c: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D5:AA:5C:98:5E:65:C9:D1:A8:09:AB:A9:F2:5A:58:43:1E:CE:9B X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/dtWqXJheZcnRqAmrqfJaWEMezps.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.191.0/24 Signature Algorithm: sha256WithRSAEncryption b0:4a:6c:f2:78:17:00:e1:62:ba:b0:d4:c6:a0:82:75:01:39: d1:6e:a1:3d:59:71:d5:3d:00:8a:55:36:97:5b:a5:a6:ef:26: 59:0b:88:a9:ec:57:52:17:7d:ff:15:36:f5:f8:d9:c6:1d:3c: 40:06:56:df:60:64:94:cc:0d:e4:1e:f2:63:ec:c5:f3:8b:d4: 53:4f:b7:04:df:5c:9b:20:44:aa:cc:20:14:8b:07:71:82:8c: 6a:f9:39:40:17:4a:58:cf:ca:43:94:6d:03:cd:fe:9e:5c:33: d8:ea:af:65:fd:18:ca:0b:ce:0e:3b:9f:f8:93:1e:66:10:0c: ac:d5:1c:f4:37:5d:64:d2:59:c4:aa:1a:2b:8b:8a:1b:33:42: f9:4c:35:97:9c:e3:ea:68:ce:ae:32:c9:e2:92:0e:14:03:1b: ef:ed:83:e6:6e:7c:71:dd:9e:fd:d7:90:3b:07:0d:ac:ad:23: 54:ce:4d:60:15:d7:1b:a3:8b:7e:ad:8b:79:da:7c:57:b5:1a: 95:88:e5:7e:aa:dc:c6:eb:94:14:48:a5:be:40:3b:cd:0d:e5: 8f:27:0b:12:1f:cd:cc:7d:b9:65:1d:d7:1a:93:f7:36:3f:68: cb:f7:dc:47:25:d5:dd:5c:aa:7f:ee:f6:e7:f9:48:28:05:d6: 0b:38:c5:ee -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNDA4MjYw NTE4MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2RDVBQTVDOTg1RTY1 QzlEMUE4MDlBQkE5RjI1QTU4NDMxRUNFOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGKm7/xwbXbJ9YNlodKz++sCx64HMdejTY9KGbbbaOjLs8eAGQ t8L5sfInGuRh//5ckEkCZ8AOtgMAuKAmn0Fg1mF18PAyOc+n/AAVAOSOLWcikg5m qUcP1W2NAd4KRE2STKDXabDaz329kmWBtdtZM44e3JxB+6VC/dVIkFFoqRUsZVTo OpzEQ2Cmrny1wcU8P8zv4gJtFMXN4v9sETIX5buSGkRUXBzss9Y59dBwcdz6wdb4 yGA7avH9fwdctyCZ99lnzweGBWHRFiJmhRL8LIuTw+ZzZS7wCG1LC2KR85tXlk0o qiW0fOzzqE9UUO5V1zfV45BS9XKMRcVRDEgBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdtWqXJheZcnRqAmrqfJaWEMezpswHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL2R0V3FYSmhlWmNuUnFBbXJx ZkphV0VNZXpwcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn er8wDQYJKoZIhvcNAQELBQADggEBALBKbPJ4FwDhYrqw1MaggnUBOdFuoT1ZcdU9 AIpVNpdbpabvJlkLiKnsV1IXff8VNvX42cYdPEAGVt9gZJTMDeQe8mPsxfOL1FNP twTfXJsgRKrMIBSLB3GCjGr5OUAXSljPykOUbQPN/p5cM9jqr2X9GMoLzg47n/iT HmYQDKzVHPQ3XWTSWcSqGiuLihszQvlMNZec4+pozq4yyeKSDhQDG+/tg+ZufHHd nv3XkDsHDaytI1TOTWAV1xuji36ti3nafFe1GpWI5X6q3MbrlBRIpb5AO80N5Y8n CxIfzcx9uWUd1xqT9zY/aMv33Ecl1d1cqn/u9uf5SCgF1gs4xe4= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org