$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/5a8KEbvxxvYXRTywrNZjJuZC9xM.roa File: 5a8KEbvxxvYXRTywrNZjJuZC9xM.roa (raw, json) Hash identifier: T17KtAUj/YzXBydrJipZjJ62tp5LlvJFkKr+blRf6IM= Subject key identifier: E5:AF:0A:11:BB:F1:C6:F6:17:45:3C:B0:AC:D6:63:26:E6:42:F7:13 Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Certificate serial: 0313 Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/5a8KEbvxxvYXRTywrNZjJuZC9xM.roa Signing time: Mon 26 Aug 2024 05:20:45 +0000 ROA not before: Mon 26 Aug 2024 05:20:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18428 IP address blocks: 103.172.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Validity Not Before: Aug 26 05:20:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E5AF0A11BBF1C6F617453CB0ACD66326E642F713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:77:89:2c:89:ca:6f:c6:a6:46:2d:22:2e: b6:f6:07:47:a3:e5:58:8a:5e:eb:99:69:c6:fb:a7: 8e:cd:ff:80:f8:4b:7c:14:85:6a:b1:a3:9f:ad:94: 1e:4a:7f:aa:83:db:f8:88:a0:de:05:ba:ae:74:d0: 5e:ef:dd:f2:c1:59:27:e4:4e:cd:eb:66:7e:6e:57: f2:e0:9d:8d:7b:ad:a5:d7:1d:52:5c:7f:5b:d1:ab: 57:36:f7:11:bf:82:79:28:83:b6:a4:09:da:0c:17: 19:7e:13:0e:a8:c0:b6:67:bc:d8:c5:e8:51:34:47: 75:b7:c5:23:4f:e3:7b:4a:89:cf:c7:dc:2e:84:90: d9:04:6c:5b:23:33:a3:be:b6:0c:bf:3d:b1:7d:c3: 4f:12:0e:fb:cf:d9:b1:3d:7b:3f:47:4d:21:b7:64: db:d8:ad:3d:8d:b6:c3:b1:28:84:81:f1:df:5e:00: 41:54:62:2f:65:4e:5f:07:82:82:05:f4:fd:70:46: b5:db:da:68:23:70:a0:c3:79:cc:60:22:d4:c1:aa: 44:12:13:55:b2:fc:77:13:4f:29:85:29:ea:22:94: 85:97:34:ae:82:0e:ae:f5:57:75:99:1a:71:07:5e: d7:75:6f:12:25:26:4c:7e:da:39:86:f3:a3:c7:2b: 09:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AF:0A:11:BB:F1:C6:F6:17:45:3C:B0:AC:D6:63:26:E6:42:F7:13 X509v3 Authority Key Identifier: keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/5a8KEbvxxvYXRTywrNZjJuZC9xM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.172.126.0/23 Signature Algorithm: sha256WithRSAEncryption 19:27:5e:a7:bf:f1:64:74:74:89:fe:72:09:8c:8b:3b:c5:f7: 0b:1e:26:14:9b:e3:06:2b:29:e1:4b:f8:e8:48:fd:3d:73:e5: 35:a2:5f:c8:5f:43:88:00:bc:a1:0e:fc:21:8f:9a:35:2a:7a: a3:3d:df:21:14:a1:d4:22:e1:4e:0d:79:79:53:0a:36:e4:15: 97:4b:60:b8:fc:e4:79:d1:dd:db:da:2a:14:ef:ef:7c:8b:c1: ba:ce:6d:18:e6:14:b3:6e:aa:b0:3d:45:be:08:69:69:0d:b5: b0:67:ec:b6:79:3e:32:ff:9c:44:3d:1e:31:3c:ce:e7:94:b0: c6:8c:0a:5e:b1:1d:fb:a5:2e:5f:6d:b5:8f:8d:c0:3d:dc:ef: 4d:0f:ea:a5:53:da:fc:94:ea:01:24:b0:1b:a8:4a:56:69:9a: a0:c4:77:ac:b7:c8:ec:b6:14:c6:85:96:7e:ae:5b:94:cb:f2: 3e:1c:a8:f9:3d:fe:d7:99:1c:b9:09:c7:34:e8:88:11:d4:9a: e3:44:42:a2:17:69:d1:5f:ac:05:78:ab:23:24:81:0c:05:f3: dc:d3:7f:06:29:ca:60:e6:58:e4:4d:16:c6:6e:55:85:86:3d: 8e:1e:1f:a0:3f:60:47:10:5c:61:b7:85:86:c6:87:21:31:42: c7:d5:54:7d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB MDlDRTQyODA5RjREQTlEN0IxQzQ0NzNEREYyRjQzNkE1OTlDNDAeFw0yNDA4MjYw NTIwNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU1QUYwQTExQkJGMUM2 RjYxNzQ1M0NCMEFDRDY2MzI2RTY0MkY3MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt23eJLInKb8amRi0iLrb2B0ej5ViKXuuZacb7p47N/4D4S3wU hWqxo5+tlB5Kf6qD2/iIoN4Fuq500F7v3fLBWSfkTs3rZn5uV/LgnY17raXXHVJc f1vRq1c29xG/gnkog7akCdoMFxl+Ew6owLZnvNjF6FE0R3W3xSNP43tKic/H3C6E kNkEbFsjM6O+tgy/PbF9w08SDvvP2bE9ez9HTSG3ZNvYrT2NtsOxKISB8d9eAEFU Yi9lTl8HgoIF9P1wRrXb2mgjcKDDecxgItTBqkQSE1Wy/HcTTymFKeoilIWXNK6C Dq71V3WZGnEHXtd1bxIlJkx+2jmG86PHKwlbAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU5a8KEbvxxvYXRTywrNZjJuZC9xMwHwYDVR0jBBgwFoAU0qCc5CgJ9NqdexxE c93y9DalmcQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVSQ1lD QVQvMHFDYzVDZ0o5TnFkZXh4RWM5M3k5RGFsbWNRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8wcUNjNUNnSjlOcWRleHhFYzkzeTlEYWxtY1EuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRVJDWUNBVC81YThLRWJ2eHh2WVhS VHl3ck5aakp1WkM5eE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ6x+MA0GCSqGSIb3DQEBCwUAA4IBAQAZJ16nv/FkdHSJ/nIJjIs7xfcLHiYU m+MGKynhS/joSP09c+U1ol/IX0OIALyhDvwhj5o1KnqjPd8hFKHUIuFODXl5Uwo2 5BWXS2C4/OR50d3b2ioU7+98i8G6zm0Y5hSzbqqwPUW+CGlpDbWwZ+y2eT4y/5xE PR4xPM7nlLDGjApesR37pS5fbbWPjcA93O9ND+qlU9r8lOoBJLAbqEpWaZqgxHes t8jsthTGhZZ+rluUy/I+HKj5Pf7XmRy5Ccc06IgR1JrjREKiF2nRX6wFeKsjJIEM BfPc038GKcpg5ljkTRbGblWFhj2OHh+gP2BHEFxht4WGxochMULH1VR9 -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:09 2024 by rpki-client on console-ams.rpki-client.org