$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JFT/2_ALxRzUhiFwsNtlylb8Y2mumTQ.roa File: 2_ALxRzUhiFwsNtlylb8Y2mumTQ.roa (raw, json) Hash identifier: VaHX/rm570xTBFVJkPHv2PgCswZO9qRT2Lr9jIvQTww= Subject key identifier: DB:F0:0B:C5:1C:D4:86:21:70:B0:DB:65:CA:56:FC:63:69:AE:99:34 Certificate issuer: /CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Certificate serial: 0104 Authority key identifier: 62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/2_ALxRzUhiFwsNtlylb8Y2mumTQ.roa Signing time: Mon 26 Aug 2024 05:19:19 +0000 ROA not before: Mon 26 Aug 2024 05:19:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38136 IP address blocks: 103.236.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627D675FF5E2C8BA90F4B655B108B6925DAF1595 Validity Not Before: Aug 26 05:19:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DBF00BC51CD4862170B0DB65CA56FC6369AE9934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:a3:f7:d5:e6:0e:7c:88:f0:7d:a9:e7:60: 0e:4c:84:b9:87:93:8c:53:f2:72:d3:66:a1:6c:cc: 80:7a:c9:b1:4a:0e:d9:a6:1d:64:a7:c6:ab:9e:3c: f8:9a:7a:7a:8d:3b:6d:25:9a:11:f2:f8:f9:7c:ea: 68:b7:a4:28:1d:62:5c:70:e2:47:68:c6:e5:5f:e9: ca:ff:9d:e4:c4:cd:97:c5:57:ce:b9:14:24:48:8d: 30:71:1c:4d:85:10:c4:cc:95:07:75:ff:c9:4e:06: ff:e9:f6:17:3b:fc:70:1d:2c:d4:9c:4b:8a:a7:e7: a3:ba:d4:0c:6e:04:53:11:5c:c9:20:96:67:56:8f: 4c:ad:b5:ed:46:60:0a:17:e1:ac:05:63:b5:64:f6: b5:07:d6:b9:46:47:b4:ee:ea:ab:f8:11:b1:bd:44: b1:d4:8f:d8:9a:f4:00:43:57:67:44:56:91:7a:66: 5a:de:5e:56:07:c0:77:c6:bb:ba:1e:bf:a6:f8:fe: 3e:4a:04:d9:49:78:a1:71:d3:2c:6e:5f:6d:1e:36: bb:b5:4d:48:c8:d2:0d:9b:92:3e:f2:1d:7e:ba:d0: 7b:d5:ec:39:15:13:d5:2f:26:5c:03:11:aa:39:a0: be:a3:44:0c:49:5b:db:d6:97:fb:3b:17:27:7f:e6: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:0B:C5:1C:D4:86:21:70:B0:DB:65:CA:56:FC:63:69:AE:99:34 X509v3 Authority Key Identifier: keyid:62:7D:67:5F:F5:E2:C8:BA:90:F4:B6:55:B1:08:B6:92:5D:AF:15:95 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Yn1nX_XiyLqQ9LZVsQi2kl2vFZU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JFT/2_ALxRzUhiFwsNtlylb8Y2mumTQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.236.226.0/23 Signature Algorithm: sha256WithRSAEncryption 25:19:62:66:d1:d8:0a:ee:a8:42:a8:bd:72:4a:b5:21:5c:9c: 9f:ec:69:9e:d3:27:ca:05:34:1c:48:e4:7d:a0:ca:49:78:3d: 12:a8:ad:4d:3f:89:f7:a7:d9:71:d5:4f:e9:b1:99:ad:f7:9d: 8f:66:75:66:66:22:aa:a3:19:1c:d0:d8:ed:8f:77:99:ca:7c: c2:55:3f:e2:78:09:94:75:6a:ec:21:b6:9e:bf:67:80:fe:d3: ce:d0:58:bf:cc:18:31:18:55:2e:c3:13:97:eb:02:a4:9e:e7: a1:ff:e7:a1:0a:7f:86:4b:70:63:5b:d7:d0:12:f9:a8:6e:0d: 89:bd:6a:c2:6e:22:3e:bc:35:89:b8:7c:34:ac:fa:da:0b:30: 99:13:c4:0b:ca:1b:a1:84:64:f2:e4:f1:c0:95:cf:ce:e5:b1: d4:64:88:8e:a4:2b:42:5a:bf:5a:ad:68:71:ce:b7:4c:d1:44: c8:c8:57:ff:14:55:98:79:09:02:e4:fd:ca:cb:44:ae:76:50: 4e:40:06:a6:80:78:d0:dd:e6:b0:51:b2:46:31:f9:41:bf:f3: 43:4e:d2:13:36:8e:09:83:16:66:26:9f:c9:f0:23:a6:29:79: 0a:12:cf:42:9d:a7:99:a3:db:61:d2:b9:b7:dc:65:a8:d3:fe: 70:a1:03:0e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjI3 RDY3NUZGNUUyQzhCQTkwRjRCNjU1QjEwOEI2OTI1REFGMTU5NTAeFw0yNDA4MjYw NTE5MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERCRjAwQkM1MUNENDg2 MjE3MEIwREI2NUNBNTZGQzYzNjlBRTk5MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1q6P31eYOfIjwfannYA5MhLmHk4xT8nLTZqFszIB6ybFKDtmm HWSnxquePPiaenqNO20lmhHy+Pl86mi3pCgdYlxw4kdoxuVf6cr/neTEzZfFV865 FCRIjTBxHE2FEMTMlQd1/8lOBv/p9hc7/HAdLNScS4qn56O61AxuBFMRXMkglmdW j0ytte1GYAoX4awFY7Vk9rUH1rlGR7Tu6qv4EbG9RLHUj9ia9ABDV2dEVpF6Zlre XlYHwHfGu7oev6b4/j5KBNlJeKFx0yxuX20eNru1TUjI0g2bkj7yHX660HvV7DkV E9UvJlwDEao5oL6jRAxJW9vWl/s7Fyd/5i2vAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU2/ALxRzUhiFwsNtlylb8Y2mumTQwHwYDVR0jBBgwFoAUYn1nX/XiyLqQ9LZV sQi2kl2vFZUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkZUL1lu MW5YX1hpeUxxUTlMWlZzUWkya2wydkZaVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev WW4xblhfWGl5THFROUxaVnNRaTJrbDJ2RlpVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkZULzJfQUx4UnpVaGlGd3NOdGx5bGI4WTJt dW1UUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7OIwDQYJ KoZIhvcNAQELBQADggEBACUZYmbR2AruqEKovXJKtSFcnJ/saZ7TJ8oFNBxI5H2g ykl4PRKorU0/ifen2XHVT+mxma33nY9mdWZmIqqjGRzQ2O2Pd5nKfMJVP+J4CZR1 auwhtp6/Z4D+087QWL/MGDEYVS7DE5frAqSe56H/56EKf4ZLcGNb19AS+ahuDYm9 asJuIj68NYm4fDSs+toLMJkTxAvKG6GEZPLk8cCVz87lsdRkiI6kK0Jav1qtaHHO t0zRRMjIV/8UVZh5CQLk/crLRK52UE5ABqaAeNDd5rBRskYx+UG/80NO0hM2jgmD FmYmn8nwI6YpeQoSz0Kdp5mj22HSubfcZajT/nChAw4= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org