$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/BksD1EmrlWKtvQBfUX2TrbpMskE.roa File: BksD1EmrlWKtvQBfUX2TrbpMskE.roa (raw, json) Hash identifier: DmSKoR8SfQZdYsFiKdxkA14KF2+bFU8HD7g9Bl/rsWM= Subject key identifier: 06:4B:03:D4:49:AB:95:62:AD:BD:00:5F:51:7D:93:AD:BA:4C:B2:41 Certificate issuer: /CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5 Certificate serial: 0225 Authority key identifier: 76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/BksD1EmrlWKtvQBfUX2TrbpMskE.roa Signing time: Mon 26 Aug 2024 05:20:35 +0000 ROA not before: Mon 26 Aug 2024 05:20:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7483 IP address blocks: 103.189.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5 Validity Not Before: Aug 26 05:20:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=064B03D449AB9562ADBD005F517D93ADBA4CB241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:48:c0:15:00:f9:46:46:05:e1:5a:e7:75:1c: 5b:df:81:1c:30:5e:18:34:23:3f:8c:dd:80:fc:43: 2f:75:e6:7b:80:79:dc:10:69:d8:8d:09:95:78:f9: 6e:d6:c7:0d:5b:33:c2:70:a3:ad:ac:ad:9e:d3:d6: f6:93:47:ca:7d:cd:dd:0e:49:dd:40:ae:77:1b:7d: 9a:95:b1:f5:bd:03:63:a3:4f:97:ea:c0:60:c2:83: 54:af:1c:91:39:1c:b3:4d:76:e2:81:29:56:b5:4b: 91:6b:68:3e:c7:e1:36:80:7b:fd:66:de:39:e1:bf: c7:ac:c1:d0:18:48:ae:30:56:21:c0:24:20:6d:28: 0d:f0:1d:a3:d5:10:78:23:96:5a:d3:be:51:e5:70: f4:77:13:bf:70:32:f5:44:0a:1d:a0:13:18:de:fc: b0:c5:e3:2e:2d:ba:f8:22:1c:93:0a:4d:9c:31:93: bb:4d:7a:b1:6a:ae:90:74:e6:b9:3b:cd:48:c5:0a: d8:04:b6:41:5b:e6:c8:02:bf:ae:11:bd:ad:e5:57: d7:94:c6:13:7c:71:ea:04:ee:cf:31:5f:a0:7a:27: 80:ec:96:67:19:87:05:bf:3b:06:95:31:4c:92:8c: b5:ad:94:a7:03:8a:f1:62:f4:6d:8f:15:2e:4c:91: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4B:03:D4:49:AB:95:62:AD:BD:00:5F:51:7D:93:AD:BA:4C:B2:41 X509v3 Authority Key Identifier: keyid:76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/BksD1EmrlWKtvQBfUX2TrbpMskE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.189.108.0/23 Signature Algorithm: sha256WithRSAEncryption aa:07:28:2c:52:8a:5f:3b:bf:ef:10:15:61:c4:99:ce:01:b6: 7c:ef:55:09:6e:4d:2c:44:14:7b:b3:3c:e9:95:c7:aa:fd:3c: 80:0c:4b:02:cb:84:77:79:45:03:75:2a:01:26:21:47:d3:93: 4c:f8:55:60:35:ce:72:5c:8a:d8:fe:35:76:39:39:d4:98:06: 82:d9:30:21:e4:c5:78:69:8e:bf:17:86:79:82:d0:2e:a9:fd: a5:9d:79:18:7e:68:57:d4:ff:25:12:ee:a2:60:46:25:3b:71: e3:70:fa:90:8e:8b:53:94:e6:5b:68:24:48:1b:6b:03:a0:b0: 2d:7f:d1:82:02:c6:b8:28:e3:39:55:e6:7b:47:4d:26:14:a6: 98:bd:a7:0f:96:f9:80:f2:e0:7c:11:0a:c7:b3:ea:ca:56:50: f5:c2:38:39:5e:b2:bc:fe:3e:27:0f:fd:bd:93:80:8d:ce:30: 88:d1:03:84:76:ff:05:38:61:d3:e0:b3:00:0e:e5:58:4f:a3: c6:41:08:23:f0:22:18:b3:a2:a3:e2:27:c7:72:17:24:1b:6c: ab:0b:45:2e:06:44:4f:8e:f9:28:63:00:57:84:68:2a:ef:48: d5:a2:21:67:d6:25:56:84:72:2f:e9:e4:f6:f2:9d:6a:7e:c5: 6d:c4:0c:16 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2 MzdFRUJFRkVGNzBDNTM4Q0VBRERDRjk4NDhGQUE3OUM3MzZBNTAeFw0yNDA4MjYw NTIwMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA2NEIwM0Q0NDlBQjk1 NjJBREJEMDA1RjUxN0Q5M0FEQkE0Q0IyNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD5SMAVAPlGRgXhWud1HFvfgRwwXhg0Iz+M3YD8Qy915nuAedwQ adiNCZV4+W7Wxw1bM8Jwo62srZ7T1vaTR8p9zd0OSd1ArncbfZqVsfW9A2OjT5fq wGDCg1SvHJE5HLNNduKBKVa1S5FraD7H4TaAe/1m3jnhv8eswdAYSK4wViHAJCBt KA3wHaPVEHgjllrTvlHlcPR3E79wMvVECh2gExje/LDF4y4tuvgiHJMKTZwxk7tN erFqrpB05rk7zUjFCtgEtkFb5sgCv64Rva3lV9eUxhN8ceoE7s8xX6B6J4DslmcZ hwW/OwaVMUySjLWtlKcDivFi9G2PFS5MkRsHAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUBksD1EmrlWKtvQBfUX2TrbpMskEwHwYDVR0jBBgwFoAUdmN+6+/vcMU4zq3c +YSPqnnHNqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVO R1RXL2RtTi02LV92Y01VNHpxM2MtWVNQcW5uSE5xVS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvZG1OLTYtX3ZjTVU0enEzYy1ZU1Bxbm5ITnFVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVOR1RXL0Jrc0QxRW1ybFdL dHZRQmZVWDJUcmJwTXNrRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnvWwwDQYJKoZIhvcNAQELBQADggEBAKoHKCxSil87v+8QFWHEmc4Btnzv VQluTSxEFHuzPOmVx6r9PIAMSwLLhHd5RQN1KgEmIUfTk0z4VWA1znJcitj+NXY5 OdSYBoLZMCHkxXhpjr8XhnmC0C6p/aWdeRh+aFfU/yUS7qJgRiU7ceNw+pCOi1OU 5ltoJEgbawOgsC1/0YICxrgo4zlV5ntHTSYUppi9pw+W+YDy4HwRCsez6spWUPXC ODlesrz+PicP/b2TgI3OMIjRA4R2/wU4YdPgswAO5VhPo8ZBCCPwIhizoqPiJ8dy FyQbbKsLRS4GRE+O+ShjAFeEaCrvSNWiIWfWJVaEci/p5PbynWp+xW3EDBY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org