$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/St-H5LkcX_BGDNr3AFRCA1M8s7s.roa File: St-H5LkcX_BGDNr3AFRCA1M8s7s.roa (raw, json) Hash identifier: KVRR5lsTvnmp6OkBc0ZHyRGfBSSKuL+MHJHzXf4LoG0= Subject key identifier: 4A:DF:87:E4:B9:1C:5F:F0:46:0C:DA:F7:00:54:42:03:53:3C:B3:BB Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0E57 Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/St-H5LkcX_BGDNr3AFRCA1M8s7s.roa Signing time: Mon 26 Aug 2024 05:20:54 +0000 ROA not before: Mon 26 Aug 2024 05:20:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131633 IP address blocks: 103.135.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3671 (0xe57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Aug 26 05:20:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4ADF87E4B91C5FF0460CDAF700544203533CB3BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6a:c1:3e:f6:09:77:7a:95:ba:97:5f:02:05: 23:80:6c:54:1a:91:62:cd:00:94:56:45:ac:e1:46: 16:f2:84:c8:1d:70:56:ff:21:9b:37:67:93:35:df: f0:95:16:d1:b9:26:bf:e0:6e:78:c5:9e:02:ed:07: 36:af:5a:5a:a2:15:cc:9a:25:f7:f6:3f:b9:f0:a7: bf:c9:8f:ee:60:d5:2c:8c:96:ad:64:59:81:6e:30: 24:f2:c4:79:1e:d7:91:57:e9:18:90:4c:61:7b:00: 73:5a:2e:33:3e:31:39:26:08:68:85:2e:a5:4f:61: c3:8c:e7:6a:12:49:42:45:a5:8b:d0:fb:d4:fa:e6: a1:fb:be:54:c8:8f:38:13:09:f1:9f:fd:7b:e4:0e: 12:7d:ce:b1:ca:bf:d3:3f:41:ba:ec:a9:ea:79:99: 76:69:ae:de:99:83:f7:be:a0:40:11:3e:f1:cf:a5: a9:a7:88:73:4c:6a:a6:5c:bd:8c:9a:50:45:d9:d5: 4d:ff:5a:b1:d9:96:0e:89:fa:fc:e1:14:63:56:d3: 80:84:a4:0c:a5:d0:7f:53:f6:76:47:78:16:4d:95: 45:c0:94:89:f7:93:2a:6a:a5:04:b3:0e:76:d1:78: 07:84:90:e8:03:0d:6e:81:f0:79:a6:50:e8:e5:8f: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DF:87:E4:B9:1C:5F:F0:46:0C:DA:F7:00:54:42:03:53:3C:B3:BB X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/St-H5LkcX_BGDNr3AFRCA1M8s7s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.20.0/22 Signature Algorithm: sha256WithRSAEncryption 25:ea:0c:b3:e8:b7:95:55:de:6a:33:0d:08:f0:63:11:88:83: dc:43:9e:ab:10:59:dc:48:ae:f3:4e:f2:f2:2d:42:41:c5:5e: 80:51:75:66:13:a7:df:af:d4:69:79:9f:63:3b:36:18:a0:ab: 6c:2e:39:02:d2:b7:53:f0:b4:66:39:9f:a6:22:41:31:ff:ac: 8a:a9:e3:02:ac:27:87:b6:53:41:a2:42:1e:e7:c4:35:6a:11: 79:8e:17:f0:49:6f:10:e9:1a:0b:70:30:04:08:d2:28:2e:bd: 81:6e:41:50:e8:be:13:79:3d:06:93:81:71:e9:88:d0:cc:e7: b1:df:c6:4a:9a:8a:f8:90:58:8a:98:15:26:d3:82:17:77:d0: ea:74:bf:01:e6:5d:b5:a9:7e:ce:4b:6b:24:03:19:e2:58:fa: 71:75:0c:57:a1:16:29:ee:b5:4d:91:10:9b:f4:3a:57:a4:9a: 7a:86:b0:a8:c3:a4:aa:0f:12:56:82:0c:9d:94:70:eb:71:53: e5:d0:a7:96:8c:3e:bf:b9:b0:26:16:4c:59:23:7d:e3:18:ca: 0b:cd:f1:32:07:e7:77:1d:35:6f:ad:ed:ab:5d:f6:8c:2c:0a: 78:bf:f3:e1:b7:7d:ad:3f:d0:04:2e:58:c7:e3:14:3f:e2:84: 6f:72:82:16 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNDA4MjYw NTIwNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBREY4N0U0QjkxQzVG RjA0NjBDREFGNzAwNTQ0MjAzNTMzQ0IzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDuasE+9gl3epW6l18CBSOAbFQakWLNAJRWRazhRhbyhMgdcFb/ IZs3Z5M13/CVFtG5Jr/gbnjFngLtBzavWlqiFcyaJff2P7nwp7/Jj+5g1SyMlq1k WYFuMCTyxHke15FX6RiQTGF7AHNaLjM+MTkmCGiFLqVPYcOM52oSSUJFpYvQ+9T6 5qH7vlTIjzgTCfGf/XvkDhJ9zrHKv9M/Qbrsqep5mXZprt6Zg/e+oEARPvHPpamn iHNMaqZcvYyaUEXZ1U3/WrHZlg6J+vzhFGNW04CEpAyl0H9T9nZHeBZNlUXAlIn3 kypqpQSzDnbReAeEkOgDDW6B8HmmUOjlj//vAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUSt+H5LkcX/BGDNr3AFRCA1M8s7swHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vU3QtSDVMa2NY X0JHRE5yM0FGUkNBMU04czdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmeHFDANBgkqhkiG9w0BAQsFAAOCAQEAJeoMs+i3lVXeajMNCPBjEYiD 3EOeqxBZ3Eiu807y8i1CQcVegFF1ZhOn36/UaXmfYzs2GKCrbC45AtK3U/C0Zjmf piJBMf+siqnjAqwnh7ZTQaJCHufENWoReY4X8ElvEOkaC3AwBAjSKC69gW5BUOi+ E3k9BpOBcemI0Mznsd/GSpqK+JBYipgVJtOCF3fQ6nS/AeZdtal+zktrJAMZ4lj6 cXUMV6EWKe61TZEQm/Q6V6SaeoawqMOkqg8SVoIMnZRw63FT5dCnlow+v7mwJhZM WSN94xjKC83xMgfndx01b63tq132jCwKeL/z4bd9rT/QBC5Yx+MUP+KEb3KCFg== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:09 2024 by rpki-client on console-ams.rpki-client.org