$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/zyOBMGgounjus3BTjdXusM7MCu8.roa File: zyOBMGgounjus3BTjdXusM7MCu8.roa (raw, json) Hash identifier: OmgzXYZlsG2qUjWnCLr6KySKFYdPTd5ujNB5DzgIewU= Subject key identifier: CF:23:81:30:68:28:BA:78:EE:B3:70:53:8D:D5:EE:B0:CE:CC:0A:EF Certificate issuer: /CN=602CBCE32DD76D0BB39F5A706324248869119435 Certificate serial: 0B2E Authority key identifier: 60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/zyOBMGgounjus3BTjdXusM7MCu8.roa Signing time: Fri 01 Sep 2023 09:19:19 +0000 ROA not before: Fri 01 Sep 2023 09:19:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131587 IP address blocks: 103.228.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602CBCE32DD76D0BB39F5A706324248869119435 Validity Not Before: Sep 1 09:19:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CF2381306828BA78EEB370538DD5EEB0CECC0AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:e2:b2:dc:b7:60:2f:44:1a:e0:29:6a:5b: 57:fc:89:84:f6:9b:78:97:9d:4d:83:82:a9:59:d3: 18:84:c7:5c:a4:0f:6c:35:50:91:58:f7:7b:66:ac: 51:c6:44:86:d3:6e:71:7b:bb:e2:c5:8b:94:a5:61: 97:b1:71:7c:cb:59:bd:b6:c8:5c:2b:eb:e0:58:b1: b8:eb:c5:e5:dd:28:78:51:b8:d8:c1:5a:9d:e3:d1: 98:50:a0:81:56:75:1f:5d:67:a2:25:c4:58:92:7c: 44:29:03:35:a6:2b:18:fe:59:8a:46:6a:b3:b6:e6: 60:af:1a:c5:b6:0c:f8:33:df:48:8b:d7:2b:2f:a7: ab:db:1e:52:72:7a:79:94:07:e4:91:fb:d9:9b:f4: a9:3d:33:aa:33:6f:f7:e8:15:b6:93:56:49:c5:9c: 57:c9:66:2c:c9:46:78:6f:7d:72:d6:d0:46:06:25: 38:ca:d7:56:4b:ec:40:11:a4:f7:46:31:b6:bf:f9: 10:fa:47:4d:73:c1:35:50:de:68:5f:62:87:b3:61: a2:31:ca:21:0e:9c:de:91:a2:d9:d9:df:97:8f:fa: f0:26:4b:d7:4f:01:31:52:1f:85:92:47:f2:38:26: 5f:b3:f6:8c:0e:1c:ed:68:ba:16:7b:7c:10:4e:5c: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:23:81:30:68:28:BA:78:EE:B3:70:53:8D:D5:EE:B0:CE:CC:0A:EF X509v3 Authority Key Identifier: keyid:60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/zyOBMGgounjus3BTjdXusM7MCu8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.228.216.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:63:ff:41:9e:6d:f5:fb:a1:44:2b:b9:4d:f8:13:5d:3d:75: c8:3e:b5:f3:b6:0c:e3:9f:93:94:d5:15:ab:4f:c7:b8:90:33: 27:c1:9c:4b:72:e9:d7:de:15:9c:39:b0:82:d1:5d:11:bd:fb: f9:20:cf:27:e6:c1:d6:1e:7e:15:19:9e:0e:cc:32:c3:aa:39: 8e:4b:ca:d3:0c:6d:1e:97:3a:63:8c:6f:16:42:ec:db:9b:ff: 96:c2:1a:99:cf:55:15:f6:89:78:d2:db:92:7e:bc:35:5b:e9: 8d:e0:f2:c1:05:06:62:4c:0c:bd:72:b2:ea:dc:44:ec:a0:49: 60:16:8a:0b:43:71:6f:0c:b2:48:aa:45:e7:17:eb:d4:d6:ef: 1a:95:53:e0:02:87:70:4e:67:4d:b4:f2:75:34:20:95:f3:f8: 4d:64:66:da:15:c2:75:1b:43:12:fc:3b:07:c2:eb:f9:24:37: bf:5a:1c:6a:25:9e:43:ec:7e:b8:bd:bf:ba:f2:b7:9b:c8:6f: 87:f4:62:3a:87:fe:73:14:d7:ec:4a:a1:35:b2:89:f5:fe:d1: f1:3c:df:0a:93:e6:11:e1:77:c8:d0:22:4b:94:5b:52:19:43: 0c:c4:8c:e7:fa:27:bc:c6:01:ba:44:78:7e:77:82:bb:1f:da: 8d:f6:79:eb -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAy Q0JDRTMyREQ3NkQwQkIzOUY1QTcwNjMyNDI0ODg2OTExOTQzNTAeFw0yMzA5MDEw OTE5MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENGMjM4MTMwNjgyOEJB NzhFRUIzNzA1MzhERDVFRUIwQ0VDQzBBRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNh+Ky3LdgL0Qa4ClqW1f8iYT2m3iXnU2DgqlZ0xiEx1ykD2w1 UJFY93tmrFHGRIbTbnF7u+LFi5SlYZexcXzLWb22yFwr6+BYsbjrxeXdKHhRuNjB Wp3j0ZhQoIFWdR9dZ6IlxFiSfEQpAzWmKxj+WYpGarO25mCvGsW2DPgz30iL1ysv p6vbHlJyenmUB+SR+9mb9Kk9M6ozb/foFbaTVknFnFfJZizJRnhvfXLW0EYGJTjK 11ZL7EARpPdGMba/+RD6R01zwTVQ3mhfYoezYaIxyiEOnN6RotnZ35eP+vAmS9dP ATFSH4WSR/I4Jl+z9owOHO1ouhZ7fBBOXPorAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzyOBMGgounjus3BTjdXusM7MCu8wHwYDVR0jBBgwFoAUYCy84y3XbQuzn1pw YyQkiGkRlDUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVHQUlD QkMvWUN5ODR5M1hiUXV6bjFwd1l5UWtpR2tSbERVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ZQ3k4NHkzWGJRdXpuMXB3WXlRa2lHa1JsRFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRUdBSUNCQy96eU9CTUdnb3VuanVz M0JUamRYdXNNN01DdTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ+TYMA0GCSqGSIb3DQEBCwUAA4IBAQAbY/9Bnm31+6FEK7lN+BNdPXXIPrXz tgzjn5OU1RWrT8e4kDMnwZxLcunX3hWcObCC0V0Rvfv5IM8n5sHWHn4VGZ4OzDLD qjmOS8rTDG0elzpjjG8WQuzbm/+WwhqZz1UV9ol40tuSfrw1W+mN4PLBBQZiTAy9 crLq3ETsoElgFooLQ3FvDLJIqkXnF+vU1u8alVPgAodwTmdNtPJ1NCCV8/hNZGba FcJ1G0MS/DsHwuv5JDe/WhxqJZ5D7H64vb+68rebyG+H9GI6h/5zFNfsSqE1son1 /tHxPN8Kk+YR4XfI0CJLlFtSGUMMxIzn+ie8xgG6RHh+d4K7H9qN9nnr -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:41 2024 by rpki-client on console-fra.rpki-client.org