$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEEMON/fMUSjx5KBIZpnCG6vj0bwd168a0.roa File: fMUSjx5KBIZpnCG6vj0bwd168a0.roa (raw, json) Hash identifier: McdGfb/9/RjlufWh3vpxlQgMKwyXlhtzcP7KFPIECog= Subject key identifier: 7C:C5:12:8F:1E:4A:04:86:69:9C:21:BA:BE:3D:1B:C1:DD:7A:F1:AD Certificate issuer: /CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Certificate serial: 0195 Authority key identifier: 04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/fMUSjx5KBIZpnCG6vj0bwd168a0.roa Signing time: Mon 26 Aug 2024 05:20:11 +0000 ROA not before: Mon 26 Aug 2024 05:20:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9915 IP address blocks: 103.67.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0486F1D511D2C22EC95994B123B3A24962C1E327 Validity Not Before: Aug 26 05:20:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7CC5128F1E4A0486699C21BABE3D1BC1DD7AF1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:41:36:7c:1f:dd:d4:0e:d0:f2:04:53:9a:57: ea:3a:db:81:ae:62:bd:be:0c:72:26:16:a5:72:8a: b6:00:2b:01:37:eb:a8:47:71:8f:b7:4f:37:5e:fb: 45:e4:af:bb:81:14:c8:87:8b:66:39:fe:1a:3e:6c: eb:2c:0f:39:74:c4:5a:37:33:54:57:57:21:11:00: e2:d3:d0:48:23:57:bd:7e:ab:17:b3:c9:8e:08:23: a9:b8:74:de:85:20:e4:eb:a5:f8:49:54:2d:44:60: 02:5f:8d:9b:31:cb:3b:63:02:72:36:4a:aa:fb:69: 73:b3:ce:27:25:e1:4b:15:61:49:6c:29:03:f5:9c: 11:76:2b:9b:cc:72:ff:0c:26:e4:d8:f0:b1:b7:84: 05:86:e6:28:47:4f:1d:5a:20:97:45:04:7d:d2:9f: 99:49:ea:00:ba:9e:4e:87:c0:28:d9:2c:44:98:f1: ee:8a:a5:5d:9f:4c:f9:b3:c6:76:ad:fd:f1:07:f7: 08:8a:95:43:8a:97:54:61:97:93:5a:06:5b:0f:5e: 55:58:eb:c6:4b:e3:7a:e4:c9:81:f9:a9:7f:e4:1e: 9f:9d:a1:b1:04:2f:92:2c:3c:b3:21:5b:49:22:0d: 60:34:39:a3:b2:27:9e:e2:6f:0d:cd:13:15:d3:d5: d9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C5:12:8F:1E:4A:04:86:69:9C:21:BA:BE:3D:1B:C1:DD:7A:F1:AD X509v3 Authority Key Identifier: keyid:04:86:F1:D5:11:D2:C2:2E:C9:59:94:B1:23:B3:A2:49:62:C1:E3:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/BIbx1RHSwi7JWZSxI7OiSWLB4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BIbx1RHSwi7JWZSxI7OiSWLB4yc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEEMON/fMUSjx5KBIZpnCG6vj0bwd168a0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.160.0/23 Signature Algorithm: sha256WithRSAEncryption 44:1d:14:49:99:c0:c7:08:76:09:f4:f7:81:cb:34:46:20:6b: e0:99:69:46:85:97:84:4b:bd:8a:84:4a:4d:64:aa:99:59:48: 78:16:a4:be:84:bf:02:e3:1c:06:46:24:2c:b4:74:8e:fa:ee: a0:c7:98:72:5d:7a:50:44:75:9c:e9:69:13:d8:3a:39:f1:8f: 37:08:9e:ac:2e:52:07:43:ed:54:4d:3f:99:42:1e:8f:4e:15: 77:53:84:d5:7b:a6:22:ff:3d:48:d8:5b:0f:54:d0:39:41:d3: 6a:dc:b3:de:43:d0:4d:29:e2:75:7d:fc:f6:a8:50:2f:a7:fb: f3:68:14:70:6e:32:dd:be:1e:a3:e9:f3:6f:dc:7d:cf:9a:24: 2e:9d:99:de:d8:2c:ab:96:68:65:1a:54:ed:15:62:68:d3:54: 75:43:4b:cd:ba:09:1c:36:9e:b3:7f:94:4a:e3:71:92:f4:85: 9f:61:9d:f3:c1:9a:69:47:97:43:3c:d8:05:3c:6a:6b:96:9f: 4f:63:9e:b3:de:be:b9:2c:ad:64:99:02:8d:cf:c0:1b:1f:6a: 4a:d9:dd:5c:ae:e8:24:94:ac:e2:27:cb:4c:5e:24:17:ca:27: e2:7c:4a:65:14:2f:90:a9:36:00:37:fe:0c:90:1c:b1:d3:13: c6:f9:e7:0d -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDQ4 NkYxRDUxMUQyQzIyRUM5NTk5NEIxMjNCM0EyNDk2MkMxRTMyNzAeFw0yNDA4MjYw NTIwMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdDQzUxMjhGMUU0QTA0 ODY2OTlDMjFCQUJFM0QxQkMxREQ3QUYxQUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoQTZ8H93UDtDyBFOaV+o624GuYr2+DHImFqVyirYAKwE366hH cY+3Tzde+0Xkr7uBFMiHi2Y5/ho+bOssDzl0xFo3M1RXVyERAOLT0EgjV71+qxez yY4II6m4dN6FIOTrpfhJVC1EYAJfjZsxyztjAnI2Sqr7aXOzzicl4UsVYUlsKQP1 nBF2K5vMcv8MJuTY8LG3hAWG5ihHTx1aIJdFBH3Sn5lJ6gC6nk6HwCjZLESY8e6K pV2fTPmzxnat/fEH9wiKlUOKl1Rhl5NaBlsPXlVY68ZL43rkyYH5qX/kHp+dobEE L5IsPLMhW0kiDWA0OaOyJ57ibw3NExXT1dn5AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUfMUSjx5KBIZpnCG6vj0bwd168a0wHwYDVR0jBBgwFoAUBIbx1RHSwi7JWZSx I7OiSWLB4ycwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9O L0JJYngxUkhTd2k3SldaU3hJN09pU1dMQjR5Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQklieDFSSFN3aTdKV1pTeEk3T2lTV0xCNHljLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEVFTU9OL2ZNVVNqeDVLQklacG5DRzZ2 ajBid2QxNjhhMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn Q6AwDQYJKoZIhvcNAQELBQADggEBAEQdFEmZwMcIdgn094HLNEYga+CZaUaFl4RL vYqESk1kqplZSHgWpL6EvwLjHAZGJCy0dI767qDHmHJdelBEdZzpaRPYOjnxjzcI nqwuUgdD7VRNP5lCHo9OFXdThNV7piL/PUjYWw9U0DlB02rcs95D0E0p4nV9/Pao UC+n+/NoFHBuMt2+HqPp82/cfc+aJC6dmd7YLKuWaGUaVO0VYmjTVHVDS826CRw2 nrN/lErjcZL0hZ9hnfPBmmlHl0M82AU8amuWn09jnrPevrksrWSZAo3PwBsfakrZ 3Vyu6CSUrOIny0xeJBfKJ+J8SmUUL5CpNgA3/gyQHLHTE8b55w0= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org