$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/jM1VCOPoAE3o_fzqaXecfsz9lfU.roa File: jM1VCOPoAE3o_fzqaXecfsz9lfU.roa (raw, json) Hash identifier: A5eqZsWTOH8tUq+ELdCq/FBfQBoGpFepMz6HQX4jUXM= Subject key identifier: 8C:CD:55:08:E3:E8:00:4D:E8:FD:FC:EA:69:77:9C:7E:CC:FD:95:F5 Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 0675 Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/jM1VCOPoAE3o_fzqaXecfsz9lfU.roa Signing time: Mon 26 Aug 2024 05:18:40 +0000 ROA not before: Mon 26 Aug 2024 05:18:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9678 IP address blocks: 103.98.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Aug 26 05:18:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8CCD5508E3E8004DE8FDFCEA69779C7ECCFD95F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:e8:f2:14:e2:20:72:d8:0e:2b:2b:54:d9: 34:18:26:48:05:d3:38:7c:c9:62:30:52:f9:8d:f4: c1:e1:d0:67:62:c4:cd:d8:9e:34:46:5a:f3:04:5e: 72:6e:ba:af:3d:4f:45:b3:a1:d0:7c:37:75:5f:e1: 48:68:6b:34:e4:62:6e:44:a6:33:9a:6a:b0:c8:be: 57:99:eb:07:86:5d:67:bc:f9:99:0e:b2:65:c8:c0: 93:29:e7:38:07:e8:b9:62:32:de:cb:9b:f2:fb:ab: 0d:52:46:c3:37:3f:21:03:63:6f:ee:ae:53:f1:f0: a6:ac:88:71:e8:2a:32:d3:30:1b:78:a3:09:3c:2a: 82:d2:14:13:35:28:10:a3:58:ac:93:1f:c0:5c:54: d7:2b:4e:65:f6:ee:10:d2:8a:13:fc:e7:f0:86:ae: 51:2b:15:99:1d:5b:ba:0f:dd:42:6b:bc:c1:e8:e2: 65:d9:3f:ea:c9:1b:69:7d:1e:01:59:5b:1b:ed:f8: b2:a5:b5:b3:8d:61:53:d6:9c:bd:ee:23:f0:df:01: d3:1f:ad:f9:9e:ec:1d:67:91:9f:d8:aa:72:2f:1e: f1:21:0d:09:ce:69:e3:ca:ce:c7:94:e2:85:67:20: fb:4e:bc:b1:4e:b1:a3:f2:ec:d5:cd:cd:77:b9:42: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CD:55:08:E3:E8:00:4D:E8:FD:FC:EA:69:77:9C:7E:CC:FD:95:F5 X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/jM1VCOPoAE3o_fzqaXecfsz9lfU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.98.74.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:8f:62:24:95:b8:2b:51:fd:04:d7:0e:85:f5:d4:08:c4:57: 9b:03:0c:cf:9f:c0:f2:b9:14:6a:80:54:e8:ba:4d:2d:c0:22: 77:8a:1f:4f:28:2a:ef:c9:89:13:dd:3c:77:d0:e3:77:c3:cb: 34:9f:f4:96:16:92:f1:25:8b:12:40:74:df:c1:e8:4b:5c:20: cb:5d:e9:9b:76:36:7b:75:ce:bb:0d:3f:8c:cc:a8:4c:42:32: d7:cc:34:39:80:a8:3c:63:53:86:97:6c:be:f8:22:51:72:d3: b4:c8:2c:6b:6b:73:a6:e0:7b:45:3c:b7:ba:67:47:a8:9a:3e: 94:59:e0:72:9d:1a:02:b6:22:ea:4e:72:4e:e6:dc:a2:53:31: 31:42:d7:84:5b:73:1c:74:04:03:f6:db:3a:62:b9:93:09:ee: 1a:b3:33:05:d1:e0:4d:7a:83:7c:a0:32:2b:2b:6a:85:df:a5: ba:5e:21:c3:9a:79:0d:df:34:ea:c4:3f:08:8c:d1:b0:05:be: b7:f2:ea:a9:1e:5a:a9:73:69:7c:a1:58:49:8e:bf:24:42:ef: e4:77:1c:77:b9:e1:ff:ea:ef:43:fc:95:db:65:08:d0:17:ca: 3c:92:2e:ce:1b:29:79:72:0b:82:bf:01:c8:02:70:32:25:e2: 63:82:8d:22 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNDA4MjYw NTE4MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDQ0Q1NTA4RTNFODAw NERFOEZERkNFQTY5Nzc5QzdFQ0NGRDk1RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAsujyFOIgctgOKytU2TQYJkgF0zh8yWIwUvmN9MHh0GdixM3Y njRGWvMEXnJuuq89T0WzodB8N3Vf4UhoazTkYm5EpjOaarDIvleZ6weGXWe8+ZkO smXIwJMp5zgH6LliMt7Lm/L7qw1SRsM3PyEDY2/urlPx8KasiHHoKjLTMBt4owk8 KoLSFBM1KBCjWKyTH8BcVNcrTmX27hDSihP85/CGrlErFZkdW7oP3UJrvMHo4mXZ P+rJG2l9HgFZWxvt+LKltbONYVPWnL3uI/DfAdMfrfme7B1nkZ/YqnIvHvEhDQnO aePKzseU4oVnIPtOvLFOsaPy7NXNzXe5QsfNAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUjM1VCOPoAE3o/fzqaXecfsz9lfUwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL2pNMVZDT1BvQUUzb19menFh WGVjZnN6OWxmVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn YkowDQYJKoZIhvcNAQELBQADggEBAA+PYiSVuCtR/QTXDoX11AjEV5sDDM+fwPK5 FGqAVOi6TS3AIneKH08oKu/JiRPdPHfQ43fDyzSf9JYWkvElixJAdN/B6EtcIMtd 6Zt2Nnt1zrsNP4zMqExCMtfMNDmAqDxjU4aXbL74IlFy07TILGtrc6bge0U8t7pn R6iaPpRZ4HKdGgK2IupOck7m3KJTMTFC14Rbcxx0BAP22zpiuZMJ7hqzMwXR4E16 g3ygMisraoXfpbpeIcOaeQ3fNOrEPwiM0bAFvrfy6qkeWqlzaXyhWEmOvyRC7+R3 HHe54f/q70P8ldtlCNAXyjySLs4bKXlyC4K/AcgCcDIl4mOCjSI= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org