$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/1u7g8UEAUSEBS-7B-whDwF9nn2A.roa File: 1u7g8UEAUSEBS-7B-whDwF9nn2A.roa (raw, json) Hash identifier: gWlXa7qoFVC+4PYYPzxEQ4kMm20tEFBSurxiNa/yfyM= Subject key identifier: D6:EE:E0:F1:41:00:51:21:01:4B:EE:C1:FB:08:43:C0:5F:67:9F:60 Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Certificate serial: 0196 Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/1u7g8UEAUSEBS-7B-whDwF9nn2A.roa Signing time: Mon 26 Aug 2024 05:20:11 +0000 ROA not before: Mon 26 Aug 2024 05:20:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9915 IP address blocks: 103.67.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Validity Not Before: Aug 26 05:20:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6EEE0F141005121014BEEC1FB0843C05F679F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:9e:fa:72:c3:87:96:e8:c0:95:35:3b:d5: aa:bd:12:f6:fa:27:27:d3:bc:1c:f8:9a:c0:5f:e3: 7b:1b:6e:03:80:95:b6:89:2f:a7:27:45:38:5b:81: 98:1c:4b:f7:65:ce:9f:2f:0b:c0:2e:14:87:f6:ca: 1e:74:36:a6:8c:82:8a:55:e9:55:87:0a:4c:0d:8c: ac:7b:9f:8c:b3:e1:1a:55:03:71:31:12:67:83:4b: d1:f1:90:82:3b:c8:e5:4f:03:9a:fa:ea:21:7d:ed: a5:9f:eb:50:3e:1e:81:48:b4:6c:d1:bb:f5:89:0a: 6b:be:45:4e:71:ef:fd:02:e6:9e:f3:fe:a3:04:bc: 08:10:d3:27:cd:0e:93:4c:04:fa:c4:d0:de:69:8c: 3d:06:f8:7b:36:d7:4d:54:c1:d6:1d:67:5b:c3:a0: db:46:e7:fa:c7:57:b8:c9:54:e6:1b:b0:6c:18:86: d7:7b:48:bf:58:85:72:3b:fa:f6:19:56:81:06:75: 4c:09:84:13:0e:34:b6:2b:75:3e:8e:fc:ec:46:4a: 45:60:a6:80:e0:b0:9f:8f:38:69:5d:e0:01:d4:25: 6a:f8:a9:fb:13:23:4d:51:fc:e2:90:12:b9:84:f3: 9b:8b:6a:75:a7:02:d7:e3:59:94:8b:1e:43:11:45: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EE:E0:F1:41:00:51:21:01:4B:EE:C1:FB:08:43:C0:5F:67:9F:60 X509v3 Authority Key Identifier: keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/1u7g8UEAUSEBS-7B-whDwF9nn2A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.160.0/24 Signature Algorithm: sha256WithRSAEncryption 34:88:96:58:3c:6a:3f:05:c3:0b:06:9b:c4:c7:1c:3d:d7:0e: 41:6a:d2:65:70:2d:79:1f:20:8f:3c:c7:9e:61:c5:ee:15:d3: a8:20:26:e3:44:42:54:da:ae:42:02:93:aa:c9:a6:a0:7d:e2: 8d:f0:5c:94:de:01:e8:5a:1f:54:8e:24:69:db:8a:4a:13:55: c3:22:5c:65:49:93:1c:34:80:dd:f1:48:71:72:6e:00:ac:84: 6d:d4:4c:51:83:3d:1d:69:64:97:41:2a:67:cd:1d:b4:8f:57: e2:b6:89:ea:98:96:af:c6:ee:44:0d:cf:07:e0:11:2a:4b:77: e6:e4:31:8c:2c:ca:5f:b5:ed:91:2d:45:29:0d:d1:ed:c9:36: 50:64:d6:bc:95:9b:b9:67:70:4f:48:11:a9:cd:fa:90:8e:0b: 1a:0e:16:9f:31:c7:a0:88:80:c1:9f:16:00:da:6a:b7:63:3c: 48:3f:f8:37:58:7b:58:4d:f7:06:e2:25:be:91:ea:1a:be:f0: 64:16:27:d0:4c:13:8e:c9:a3:af:71:03:41:92:c6:9c:29:37: ca:cc:9d:c7:c7:60:0d:f9:f6:fb:ec:d6:f4:5e:8a:53:2f:4d: eb:bb:76:e9:23:ef:d9:75:e1:c5:c0:ef:71:1e:52:90:59:61: 39:57:7c:13 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ4 NkYxRDUxMUQyQzIyRUM5NTk5NEIxMjNCM0EyNDk2MkMxRTMyNzAeFw0yNDA4MjYw NTIwMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2RUVFMEYxNDEwMDUx MjEwMTRCRUVDMUZCMDg0M0MwNUY2NzlGNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkBJ76csOHlujAlTU71aq9Evb6JyfTvBz4msBf43sbbgOAlbaJ L6cnRThbgZgcS/dlzp8vC8AuFIf2yh50NqaMgopV6VWHCkwNjKx7n4yz4RpVA3Ex EmeDS9HxkII7yOVPA5r66iF97aWf61A+HoFItGzRu/WJCmu+RU5x7/0C5p7z/qME vAgQ0yfNDpNMBPrE0N5pjD0G+Hs2101UwdYdZ1vDoNtG5/rHV7jJVOYbsGwYhtd7 SL9YhXI7+vYZVoEGdUwJhBMONLYrdT6O/OxGSkVgpoDgsJ+POGld4AHUJWr4qfsT I01R/OKQErmE85uLanWnAtfjWZSLHkMRRQThAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU1u7g8UEAUSEBS+7B+whDwF9nn2AwHwYDVR0jBBgwFoAUBIbx1RHSwi7JWZSx I7OiSWLB4ycwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9O L0JJYngxUkhTd2k3SldaU3hJN09pU1dMQjR5Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQklieDFSSFN3aTdKV1pTeEk3T2lTV0xCNHljLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9OLzF1N2c4VUVBVVNFQlMtN0It d2hEd0Y5bm4yQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn Q6AwDQYJKoZIhvcNAQELBQADggEBADSIllg8aj8FwwsGm8THHD3XDkFq0mVwLXkf II88x55hxe4V06ggJuNEQlTarkICk6rJpqB94o3wXJTeAehaH1SOJGnbikoTVcMi XGVJkxw0gN3xSHFybgCshG3UTFGDPR1pZJdBKmfNHbSPV+K2ieqYlq/G7kQNzwfg ESpLd+bkMYwsyl+17ZEtRSkN0e3JNlBk1ryVm7lncE9IEanN+pCOCxoOFp8xx6CI gMGfFgDaardjPEg/+DdYe1hN9wbiJb6R6hq+8GQWJ9BME47Jo69xA0GSxpwpN8rM ncfHYA359vvs1vReilMvTeu7dukj79l14cXA73EeUpBZYTlXfBM= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:30 2024 by rpki-client on console-fra.rpki-client.org