$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa File: vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa (raw, json) Hash identifier: pvHj/Lj5ZFca/VFiXVFMqw2MWgl2q0SpLAq47lHE+gI= Subject key identifier: BE:DD:AF:12:2B:05:FB:83:8C:35:CA:D9:E9:3B:14:D4:11:4E:23:1D Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 05A7 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa Signing time: Thu 12 Oct 2023 08:25:33 +0000 ROA not before: Thu 12 Oct 2023 08:25:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 134823 IP address blocks: 103.122.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 21:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1447 (0x5a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Oct 12 08:25:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BEDDAF122B05FB838C35CAD9E93B14D4114E231D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:ea:36:cd:5f:81:80:69:37:51:9c:2b:41: 15:9b:ac:65:12:e8:73:4a:5a:83:c0:da:1b:50:58: b8:2d:91:c5:e4:86:87:bd:16:73:26:ce:31:38:c5: d8:07:17:c9:e5:f9:d4:95:42:83:43:86:f4:16:c8: 7f:3b:00:24:ad:5b:2e:e8:b8:66:5d:ce:eb:6b:b3: 71:dd:99:72:21:c4:7d:65:ec:63:0f:06:12:3a:79: d7:5a:7b:2d:98:db:5f:b4:1b:79:20:5b:41:a6:8c: 41:b0:bf:30:dd:be:b9:1c:b1:90:78:bd:b6:32:b4: 20:fb:85:f9:2c:d1:df:af:c3:c6:d1:46:a0:e7:a2: d1:f4:01:0a:16:c5:e1:60:13:b6:4f:72:d0:4a:2d: 3e:ba:29:ea:f1:f1:73:d7:40:53:e2:95:82:4a:e3: a9:17:2a:9e:85:19:3e:a2:15:bd:dc:dd:8f:16:5c: 34:fa:9f:d9:9d:8c:07:2e:54:b2:c6:bc:4a:e0:fa: f8:54:4d:0c:2f:00:b7:4a:3c:6e:56:15:91:ce:9d: 6e:19:ca:bf:d0:83:03:26:bc:9a:83:3a:2c:a9:27: 08:4b:b2:fb:11:06:9a:7b:92:4a:7e:35:6b:56:77: 07:f2:35:1f:25:4f:e8:b8:3b:f9:df:a9:fd:78:45: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DD:AF:12:2B:05:FB:83:8C:35:CA:D9:E9:3B:14:D4:11:4E:23:1D X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/vt2vEisF-4OMNcrZ6TsU1BFOIx0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.188.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:f9:9b:67:7b:4e:8d:65:2b:36:35:59:ad:3a:47:21:96:63: 6a:be:0c:63:2d:47:2f:65:93:6a:42:24:11:3c:4f:da:3e:68: f3:a4:fd:e0:41:4d:6b:53:8b:16:ef:6c:a2:3a:80:91:f5:52: 98:37:99:c7:cc:82:10:1f:c5:83:93:3f:d6:3d:ea:b6:db:bc: 4e:eb:c3:8d:f6:60:ec:6b:1b:09:5b:e6:73:e9:ca:c2:37:e8: 9a:c1:4c:33:20:d1:cc:44:62:bb:28:c2:81:94:bd:61:6a:25: 86:c7:3a:d3:6d:fb:6b:50:8f:91:57:8b:97:a0:fd:3f:29:0a: 97:46:ef:4b:13:3f:d7:a7:9c:52:94:d5:be:b9:71:44:95:c4: 0f:ae:f2:fd:d5:a7:a4:14:3a:18:74:4e:27:b1:ef:d7:24:e3: 26:7e:7b:c1:54:45:16:3f:f2:57:ae:20:4a:68:94:4c:b5:01: 75:eb:33:9d:bd:da:b1:79:9d:2a:92:57:be:ef:cf:d5:20:87: ab:b4:66:71:c7:a3:a0:7f:02:41:b7:a6:c0:63:81:b7:09:00: 34:d3:11:c0:ac:c9:7e:e3:61:b6:70:79:cb:ab:46:60:ae:bb: ca:44:7e:6d:64:db:ce:7b:de:78:76:64:7d:46:b8:97:e0:55: 27:35:81:b8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBacwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzEwMTIw ODI1MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJFRERBRjEyMkIwNUZC ODM4QzM1Q0FEOUU5M0IxNEQ0MTE0RTIzMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXneo2zV+BgGk3UZwrQRWbrGUS6HNKWoPA2htQWLgtkcXkhoe9 FnMmzjE4xdgHF8nl+dSVQoNDhvQWyH87ACStWy7ouGZdzutrs3HdmXIhxH1l7GMP BhI6eddaey2Y21+0G3kgW0GmjEGwvzDdvrkcsZB4vbYytCD7hfks0d+vw8bRRqDn otH0AQoWxeFgE7ZPctBKLT66Kerx8XPXQFPilYJK46kXKp6FGT6iFb3c3Y8WXDT6 n9mdjAcuVLLGvErg+vhUTQwvALdKPG5WFZHOnW4Zyr/QgwMmvJqDOiypJwhLsvsR Bpp7kkp+NWtWdwfyNR8lT+i4O/nfqf14RaZLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUvt2vEisF+4OMNcrZ6TsU1BFOIx0wHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL3Z0MnZFaXNGLTRPTU5jclo2 VHNVMUJGT0l4MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn erwwDQYJKoZIhvcNAQELBQADggEBAIr5m2d7To1lKzY1Wa06RyGWY2q+DGMtRy9l k2pCJBE8T9o+aPOk/eBBTWtTixbvbKI6gJH1Upg3mcfMghAfxYOTP9Y96rbbvE7r w432YOxrGwlb5nPpysI36JrBTDMg0cxEYrsowoGUvWFqJYbHOtNt+2tQj5FXi5eg /T8pCpdG70sTP9ennFKU1b65cUSVxA+u8v3Vp6QUOhh0Tiex79ck4yZ+e8FURRY/ 8leuIEpolEy1AXXrM5292rF5nSqSV77vz9Ugh6u0ZnHHo6B/AkG3psBjgbcJADTT EcCsyX7jYbZwecurRmCuu8pEfm1k28573nh2ZH1GuJfgVSc1gbg= -----END CERTIFICATE-----Generated at Tue May 7 14:32:35 2024 by rpki-client on console-fra.rpki-client.org