$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/rXgzCnbKOUXwXrOBXSckIhjFuh4.roa File: rXgzCnbKOUXwXrOBXSckIhjFuh4.roa (raw, json) Hash identifier: NdOJI0vGnlwJJK0qGTGMZCK4Rb3R+alk+pk5izAFVD4= Subject key identifier: AD:78:33:0A:76:CA:39:45:F0:5E:B3:81:5D:27:24:22:18:C5:BA:1E Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234 Certificate serial: 1060 Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/rXgzCnbKOUXwXrOBXSckIhjFuh4.roa Signing time: Thu 19 Oct 2023 06:01:59 +0000 ROA not before: Thu 19 Oct 2023 06:01:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18464 IP address blocks: 103.127.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4192 (0x1060) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234 Validity Not Before: Oct 19 06:01:59 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AD78330A76CA3945F05EB3815D27242218C5BA1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ad:1c:90:b7:54:cd:8b:86:37:85:27:f3:b3: 77:95:26:1c:e4:3d:68:bc:c9:b6:ad:5d:54:76:c1: 1e:77:97:7d:14:9c:fc:00:e3:7d:4d:c5:9d:af:b3: 8d:83:4a:1e:b1:38:bf:39:ed:75:8d:ec:96:67:6d: 3e:6c:12:0a:89:00:ec:4e:b5:23:f0:2f:4d:bf:72: 37:8d:95:47:72:6b:e4:3f:5b:cf:ad:ef:29:ab:20: 8a:c3:87:da:6a:19:82:a5:87:4a:11:6a:4c:0b:60: a1:05:b7:72:b9:c3:bf:40:95:49:96:4e:8a:06:6e: 7a:22:e6:5d:af:a6:68:95:63:74:7f:7a:a0:4e:ce: 88:85:89:dc:92:cf:07:0d:df:e0:ae:20:4c:3d:36: 66:de:59:50:f1:49:ac:cf:dd:a9:ac:41:0c:65:94: 28:9c:a0:17:8d:7a:29:68:e2:99:f9:7f:6d:9d:66: 73:a2:04:7e:e9:9d:6d:c0:af:65:d3:91:fb:a3:59: 36:44:9c:15:1e:9e:2e:0a:b0:66:4c:b2:33:74:d5: 8e:3c:8f:fb:ec:83:16:c4:84:50:14:6f:1a:d7:57: 03:24:cc:68:e2:3b:0f:86:97:26:fb:bd:7d:b3:0f: aa:76:85:00:bc:ee:36:9a:25:04:e4:5a:90:ef:35: e4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:78:33:0A:76:CA:39:45:F0:5E:B3:81:5D:27:24:22:18:C5:BA:1E X509v3 Authority Key Identifier: keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/rXgzCnbKOUXwXrOBXSckIhjFuh4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.243.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:63:5b:b1:ec:c3:4f:57:8c:f3:bd:1e:9a:4c:e1:71:75:84: d4:79:b2:d6:0b:b6:44:0f:fb:97:d0:a1:3c:e9:af:8f:7f:e9: af:a9:ae:9a:78:73:5d:20:06:b9:d6:c7:98:60:57:5f:ab:24: da:4b:71:c5:a3:1b:ab:48:fe:3a:b0:dc:b6:83:ab:96:27:8a: 4b:f1:83:65:89:a7:45:bc:83:d3:63:13:52:4c:c5:0a:8b:c4: 4c:57:74:6a:c7:0a:be:1e:92:7b:d8:93:2e:c6:36:67:9d:c6: 61:35:e5:1b:bf:82:0e:cd:96:0f:31:c6:51:9f:41:1c:24:ab: 69:2d:7f:5f:3a:9b:f2:b2:e6:b1:db:12:4b:93:de:89:a6:dc: 6e:ad:ce:45:8e:0b:d9:38:6c:53:01:f8:c2:16:ae:01:66:81: 4b:ee:9b:96:25:b4:b1:59:a0:6e:21:2e:43:87:72:de:69:59: 98:00:b7:1f:81:7f:8c:25:7f:c3:32:a9:30:fb:05:27:e3:bd: 9b:9b:48:d3:e8:12:cd:35:7d:1d:01:6d:f8:bc:1d:73:82:7e: 74:65:be:42:24:2c:c7:61:ce:68:36:c1:6e:d9:b9:5e:b9:20: 1d:2a:68:28:d6:59:67:b0:4f:b5:eb:4e:1d:cb:2b:06:af:44: 53:95:2f:af -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3 MjFDNUREMzQ1OURGRjg1MzQ4RjFCMzlEREE5REQ1MDU4NjIzNDAeFw0yMzEwMTkw NjAxNTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFENzgzMzBBNzZDQTM5 NDVGMDVFQjM4MTVEMjcyNDIyMThDNUJBMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWrRyQt1TNi4Y3hSfzs3eVJhzkPWi8ybatXVR2wR53l30UnPwA 431NxZ2vs42DSh6xOL857XWN7JZnbT5sEgqJAOxOtSPwL02/cjeNlUdya+Q/W8+t 7ymrIIrDh9pqGYKlh0oRakwLYKEFt3K5w79AlUmWTooGbnoi5l2vpmiVY3R/eqBO zoiFidySzwcN3+CuIEw9NmbeWVDxSazP3amsQQxllCicoBeNeilo4pn5f22dZnOi BH7pnW3Ar2XTkfujWTZEnBUeni4KsGZMsjN01Y48j/vsgxbEhFAUbxrXVwMkzGji Ow+Glyb7vX2zD6p2hQC87jaaJQTkWpDvNeT9AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUrXgzCnbKOUXwXrOBXSckIhjFuh4wHwYDVR0jBBgwFoAUTnIcXdNFnf+FNI8b Od2p3VBYYjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkcvVG5JY1hkTkZuZi1GTkk4Yk9kMnAzVkJZWWpRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9UbkljWGRORm5mLUZOSThiT2QycDNWQllZalEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HSklORy9yWGd6Q25iS09VWHdY ck9CWFNja0loakZ1aDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3/zMA0GCSqGSIb3DQEBCwUAA4IBAQAfY1ux7MNPV4zzvR6aTOFxdYTUebLW C7ZED/uX0KE86a+Pf+mvqa6aeHNdIAa51seYYFdfqyTaS3HFoxurSP46sNy2g6uW J4pL8YNliadFvIPTYxNSTMUKi8RMV3Rqxwq+HpJ72JMuxjZnncZhNeUbv4IOzZYP McZRn0EcJKtpLX9fOpvysuax2xJLk96Jptxurc5FjgvZOGxTAfjCFq4BZoFL7puW JbSxWaBuIS5Dh3LeaVmYALcfgX+MJX/DMqkw+wUn472bm0jT6BLNNX0dAW34vB1z gn50Zb5CJCzHYc5oNsFu2bleuSAdKmgo1llnsE+1604dyysGr0RTlS+v -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:47 2024 by rpki-client on console-ams.rpki-client.org