$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/yDqGO3Akt3OwGV7TTmyiQPn-0zQ.roa File: yDqGO3Akt3OwGV7TTmyiQPn-0zQ.roa (raw, json) Hash identifier: ocHkZHGBf5iRinKLjlwONX2Zr5LD7m4MDDZ+L3G9Eg4= Subject key identifier: C8:3A:86:3B:70:24:B7:73:B0:19:5E:D3:4E:6C:A2:40:F9:FE:D3:34 Certificate issuer: /CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Certificate serial: 0C0F Authority key identifier: 32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/yDqGO3Akt3OwGV7TTmyiQPn-0zQ.roa Signing time: Mon 26 Aug 2024 05:18:36 +0000 ROA not before: Mon 26 Aug 2024 05:18:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 103.197.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324A7E6EBF678F98B87228EC8466C3690A43DDB6 Validity Not Before: Aug 26 05:18:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C83A863B7024B773B0195ED34E6CA240F9FED334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:21:5a:4d:81:13:eb:2a:7b:97:d6:96:a8: 37:f2:e2:dc:16:d0:a4:75:f3:af:63:21:33:b1:d8: 49:7d:2b:d2:14:9c:dc:0c:53:49:20:df:42:71:76: c8:ad:50:31:37:9b:b6:ef:ea:fd:7d:9b:2c:d7:2d: 3d:77:06:24:f1:75:1e:e4:1e:8a:e1:0e:43:34:22: f3:b4:4a:1d:1e:1f:0d:0b:75:e1:b9:31:74:2d:f5: ea:48:70:f1:36:cd:1b:16:2b:3a:c1:33:34:0a:36: 43:11:06:79:9d:33:b0:8a:0d:51:c2:57:48:c7:bb: 08:59:f9:9f:3f:97:6b:01:ce:99:5a:cd:e3:7a:0b: c1:5e:11:d5:93:53:6b:41:21:80:b5:d8:e1:80:9c: a8:97:5d:ed:85:23:04:77:38:86:93:fe:98:45:6b: a7:2b:54:fd:cc:ba:50:3c:28:a7:85:0e:64:10:b4: 71:9d:50:2a:7a:06:66:1e:da:21:05:ff:50:d3:4e: fe:a5:4e:1c:b4:57:49:2a:e9:95:71:2b:28:a8:37: c4:97:da:cb:d6:f9:07:b7:92:f2:e8:0d:f9:3e:32: dc:ed:24:d1:06:a6:56:ab:e3:24:4c:6a:83:9b:d5: d5:d4:4a:c1:4c:54:ce:7b:37:38:b8:23:1c:fc:39: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:86:3B:70:24:B7:73:B0:19:5E:D3:4E:6C:A2:40:F9:FE:D3:34 X509v3 Authority Key Identifier: keyid:32:4A:7E:6E:BF:67:8F:98:B8:72:28:EC:84:66:C3:69:0A:43:DD:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/Mkp-br9nj5i4cijshGbDaQpD3bY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Mkp-br9nj5i4cijshGbDaQpD3bY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGJAY/yDqGO3Akt3OwGV7TTmyiQPn-0zQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.197.174.0/23 Signature Algorithm: sha256WithRSAEncryption 82:73:a6:15:8f:82:1e:d8:0a:8c:23:dd:59:35:53:02:52:74: 32:14:6a:e7:71:4e:0f:6a:e7:33:b0:f8:10:9b:fe:df:ac:68: 7e:0a:7d:99:a8:d9:ee:11:21:df:a3:87:22:58:a8:4a:04:e9: 87:05:c1:42:f7:ce:dd:e2:4a:bd:34:a8:44:55:a2:17:da:a8: 2b:c7:ad:9b:65:84:25:26:74:11:4d:49:78:30:68:3c:82:fb: 9e:45:f5:5a:82:37:41:8e:15:78:51:1c:93:e7:a1:e2:23:f9: 6e:34:e1:7d:80:ca:ba:f2:5c:f4:8b:28:21:49:09:09:53:5c: a2:6c:d5:91:2e:6b:d2:75:44:a1:4a:f5:45:07:b2:6b:0e:05: d6:95:15:c5:c3:23:eb:e0:02:dd:6b:39:fb:bb:24:18:98:b0: 2a:ad:8c:55:c2:3f:1f:ec:87:f0:c2:0a:bf:50:b2:cb:4b:ae: bb:33:5a:ab:b2:12:05:ec:cd:a9:02:59:15:28:5d:bd:bf:b5: 7f:30:36:05:65:5a:b5:5d:6e:0a:09:c7:c8:94:51:fd:53:af: 99:04:4f:dd:57:07:7b:9b:9d:e3:51:57:bc:06:82:94:f5:85: 57:60:be:82:ac:e9:b9:1f:8f:7f:9e:35:70:52:c9:e2:aa:db: ee:05:d9:ab -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzI0 QTdFNkVCRjY3OEY5OEI4NzIyOEVDODQ2NkMzNjkwQTQzRERCNjAeFw0yNDA4MjYw NTE4MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4M0E4NjNCNzAyNEI3 NzNCMDE5NUVEMzRFNkNBMjQwRjlGRUQzMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDILCFaTYET6yp7l9aWqDfy4twW0KR1869jITOx2El9K9IUnNwM U0kg30JxdsitUDE3m7bv6v19myzXLT13BiTxdR7kHorhDkM0IvO0Sh0eHw0LdeG5 MXQt9epIcPE2zRsWKzrBMzQKNkMRBnmdM7CKDVHCV0jHuwhZ+Z8/l2sBzplazeN6 C8FeEdWTU2tBIYC12OGAnKiXXe2FIwR3OIaT/phFa6crVP3MulA8KKeFDmQQtHGd UCp6BmYe2iEF/1DTTv6lThy0V0kq6ZVxKyioN8SX2svW+Qe3kvLoDfk+MtztJNEG plar4yRMaoOb1dXUSsFMVM57Nzi4Ixz8OeLXAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUyDqGO3Akt3OwGV7TTmyiQPn+0zQwHwYDVR0jBBgwFoAUMkp+br9nj5i4cijs hGbDaQpD3bYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0pB WS9Na3AtYnI5bmo1aTRjaWpzaEdiRGFRcEQzYlkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL01rcC1icjluajVpNGNpanNoR2JEYVFwRDNiWS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hPTkdKQVkveURxR08zQWt0M093R1Y3 VFRteWlRUG4tMHpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWfFrjANBgkqhkiG9w0BAQsFAAOCAQEAgnOmFY+CHtgKjCPdWTVTAlJ0MhRq53FO D2rnM7D4EJv+36xofgp9majZ7hEh36OHIlioSgTphwXBQvfO3eJKvTSoRFWiF9qo K8etm2WEJSZ0EU1JeDBoPIL7nkX1WoI3QY4VeFEck+eh4iP5bjThfYDKuvJc9Iso IUkJCVNcomzVkS5r0nVEoUr1RQeyaw4F1pUVxcMj6+AC3Ws5+7skGJiwKq2MVcI/ H+yH8MIKv1Cyy0uuuzNaq7ISBezNqQJZFShdvb+1fzA2BWVatV1uCgnHyJRR/VOv mQRP3VcHe5ud41FXvAaClPWFV2C+gqzpuR+Pf541cFLJ4qrb7gXZqw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org