$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/esxBa8bCgpQ8jgRbjJvxcC2ZDhQ.roa File: esxBa8bCgpQ8jgRbjJvxcC2ZDhQ.roa (raw, json) Hash identifier: ZYqun5vu8DJWcG+ei5axuNZID9eNd3nr/awpBI7IPPI= Subject key identifier: 7A:CC:41:6B:C6:C2:82:94:3C:8E:04:5B:8C:9B:F1:70:2D:99:0E:14 Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234 Certificate serial: 105A Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/esxBa8bCgpQ8jgRbjJvxcC2ZDhQ.roa Signing time: Thu 19 Oct 2023 06:01:08 +0000 ROA not before: Thu 19 Oct 2023 06:01:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18464 IP address blocks: 103.127.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4186 (0x105a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234 Validity Not Before: Oct 19 06:01:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7ACC416BC6C282943C8E045B8C9BF1702D990E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:96:a8:94:b7:95:1b:b4:34:1e:96:df:23: 05:71:c5:33:e2:b1:d4:2b:21:6d:b9:1a:80:10:ce: 6f:47:48:c1:76:8d:b0:1f:5d:2b:5c:89:ae:6e:5e: 8f:86:49:47:4e:a9:18:56:8d:b5:a9:f7:4b:b3:06: 70:10:b8:8e:de:6d:5e:72:94:84:d3:65:13:30:13: 58:e1:0e:99:1e:a1:a2:e3:c7:00:0c:0e:a5:62:06: ca:ca:fd:26:0d:44:35:88:df:21:aa:dc:2d:04:4a: 49:92:85:63:d4:75:9e:24:ac:26:c7:b8:d6:39:bf: 26:cc:be:dc:81:2b:ee:00:0e:65:18:97:0c:84:1b: 23:88:2a:71:98:84:76:ab:e1:c7:7e:8d:f4:1c:ae: 5a:2d:db:16:8c:39:d6:0b:4f:54:f1:fc:7e:7a:7f: b8:74:59:f6:24:68:50:b0:95:cd:9e:a7:db:a2:a5: b0:ac:07:8b:23:be:65:73:2e:b7:e2:d6:f5:ef:58: 1a:fd:fd:89:b6:0f:d1:b3:a4:68:1d:4e:e4:8f:c2: 54:88:c2:06:61:46:1e:91:e2:fc:6b:bc:02:16:9e: fb:f6:62:a5:af:49:74:c7:5b:c3:f7:f9:81:e2:bf: 17:69:9f:3a:cd:72:54:ff:aa:f0:36:ab:69:2d:30: a2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:41:6B:C6:C2:82:94:3C:8E:04:5B:8C:9B:F1:70:2D:99:0E:14 X509v3 Authority Key Identifier: keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/esxBa8bCgpQ8jgRbjJvxcC2ZDhQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.242.0/23 Signature Algorithm: sha256WithRSAEncryption 16:af:71:00:19:fa:40:36:20:ff:45:54:60:93:df:cf:30:8f: 9f:af:4f:ee:dc:0d:0d:da:8e:fa:0c:00:20:83:52:99:a1:60: 0c:bd:a6:56:86:c3:03:c9:89:91:17:ba:81:df:53:cb:04:39: 18:3a:de:bb:5d:30:fe:ef:3d:c6:95:2b:3b:25:96:41:f8:4a: 46:2c:d9:5b:01:29:51:db:6b:17:e6:1e:2c:da:1e:3c:71:96: 53:e4:a5:2e:3e:03:83:6b:1f:92:51:cc:ea:64:c9:f3:df:4b: 0b:44:41:08:43:70:c5:e3:8d:93:36:2f:6f:4f:bf:ea:76:7b: 58:9c:a1:2f:c6:49:3c:81:94:aa:ee:a4:22:91:b4:b9:6d:be: 66:a0:38:2f:b2:ed:35:12:56:54:cc:e4:49:c1:72:22:12:ca: a9:b7:0d:6e:44:74:9f:39:bb:5e:32:1b:c6:53:89:96:02:cc: 2e:ae:64:15:58:30:a5:9e:f5:51:5c:69:3e:e0:64:b9:de:f4: 2a:0b:87:25:46:b6:e5:df:75:91:f1:7f:b7:3e:db:40:de:4f: 87:7f:c6:1b:0c:eb:14:30:aa:5a:f9:c5:6e:d1:87:b6:2d:d8: cd:fc:4a:a1:d0:c0:cb:82:16:72:0a:a4:08:25:fa:e7:ab:ec: 62:de:cb:47 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3 MjFDNUREMzQ1OURGRjg1MzQ4RjFCMzlEREE5REQ1MDU4NjIzNDAeFw0yMzEwMTkw NjAxMDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdBQ0M0MTZCQzZDMjgy OTQzQzhFMDQ1QjhDOUJGMTcwMkQ5OTBFMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRVpaolLeVG7Q0HpbfIwVxxTPisdQrIW25GoAQzm9HSMF2jbAf XStcia5uXo+GSUdOqRhWjbWp90uzBnAQuI7ebV5ylITTZRMwE1jhDpkeoaLjxwAM DqViBsrK/SYNRDWI3yGq3C0ESkmShWPUdZ4krCbHuNY5vybMvtyBK+4ADmUYlwyE GyOIKnGYhHar4cd+jfQcrlot2xaMOdYLT1Tx/H56f7h0WfYkaFCwlc2ep9uipbCs B4sjvmVzLrfi1vXvWBr9/Ym2D9GzpGgdTuSPwlSIwgZhRh6R4vxrvAIWnvv2YqWv SXTHW8P3+YHivxdpnzrNclT/qvA2q2ktMKL5AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUesxBa8bCgpQ8jgRbjJvxcC2ZDhQwHwYDVR0jBBgwFoAUTnIcXdNFnf+FNI8b Od2p3VBYYjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkcvVG5JY1hkTkZuZi1GTkk4Yk9kMnAzVkJZWWpRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9UbkljWGRORm5mLUZOSThiT2QycDNWQllZalEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HSklORy9lc3hCYThiQ2dwUThq Z1Jiakp2eGNDMlpEaFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3/yMA0GCSqGSIb3DQEBCwUAA4IBAQAWr3EAGfpANiD/RVRgk9/PMI+fr0/u 3A0N2o76DAAgg1KZoWAMvaZWhsMDyYmRF7qB31PLBDkYOt67XTD+7z3GlSs7JZZB +EpGLNlbASlR22sX5h4s2h48cZZT5KUuPgODax+SUczqZMnz30sLREEIQ3DF442T Ni9vT7/qdntYnKEvxkk8gZSq7qQikbS5bb5moDgvsu01ElZUzORJwXIiEsqptw1u RHSfObteMhvGU4mWAswurmQVWDClnvVRXGk+4GS53vQqC4clRrbl33WR8X+3PttA 3k+Hf8YbDOsUMKpa+cVu0Ye2LdjN/Eqh0MDLghZyCqQIJfrnq+xi3stH -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:47 2024 by rpki-client on console-ams.rpki-client.org