$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/vhRpulrTUW6inaXt7I44C29_ln8.roa File: vhRpulrTUW6inaXt7I44C29_ln8.roa (raw, json) Hash identifier: ZE+V99wVZtSQ7d4KdTJUmCpGl4+KVkeHaDOoCLk7hP4= Subject key identifier: BE:14:69:BA:5A:D3:51:6E:A2:9D:A5:ED:EC:8E:38:0B:6F:7F:96:7F Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0E5B Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/vhRpulrTUW6inaXt7I44C29_ln8.roa Signing time: Mon 26 Aug 2024 05:20:55 +0000 ROA not before: Mon 26 Aug 2024 05:20:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 208932 IP address blocks: 103.135.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3675 (0xe5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Aug 26 05:20:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BE1469BA5AD3516EA29DA5EDEC8E380B6F7F967F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:39:9a:27:67:f7:fe:a5:8e:57:25:3a:06: 9c:b6:5f:e9:9b:96:15:e8:0e:44:03:11:54:73:67: 00:63:da:42:d7:99:92:dd:bd:df:da:3a:88:40:d3: d4:28:a9:9b:f8:a1:8a:60:c2:55:1d:35:ff:28:ee: d1:03:b1:47:22:2f:bf:b3:2d:b5:75:2e:49:65:58: 3b:6d:98:18:17:c2:fa:f6:61:40:23:d9:ad:d2:89: 2a:49:5d:94:54:26:25:50:c3:e6:8a:b5:7c:32:71: 73:55:6d:a3:19:0c:de:29:39:07:bc:be:68:06:91: 9a:02:bf:a5:5c:77:23:bb:fd:a6:72:67:d6:54:4c: 9e:5e:9f:3b:17:1d:74:ae:e8:d2:f0:ec:05:a8:19: ca:a6:92:4d:7c:42:93:fe:2b:e3:22:03:5c:37:d1: 29:31:d3:2c:c2:63:1e:22:ad:ef:5a:f6:08:16:54: 0c:10:a7:cb:3f:b5:87:67:9c:81:ef:c8:1c:23:16: c0:e8:ac:7f:15:be:73:4c:d2:1c:9e:14:29:e4:68: e1:05:dd:74:b4:5f:7c:d7:02:35:53:c4:97:7f:2e: 10:61:93:f9:54:9b:06:eb:fb:3f:0b:90:1e:4f:fe: b0:32:c3:93:d7:46:f4:f4:56:3f:b6:8b:0f:ec:ab: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:69:BA:5A:D3:51:6E:A2:9D:A5:ED:EC:8E:38:0B:6F:7F:96:7F X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/vhRpulrTUW6inaXt7I44C29_ln8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.20.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:00:cf:6e:6d:36:d6:83:69:4e:32:16:02:a4:bd:4c:61:e1: 93:8e:5a:84:87:6a:b5:66:77:71:80:cf:0a:0b:62:12:d0:4f: 57:b9:46:ee:dc:1d:20:6d:a7:45:f4:b9:14:54:fd:11:16:f1: 84:41:aa:9a:a5:ec:4c:28:d1:19:02:6d:9c:b1:38:55:87:fb: d1:d0:87:84:91:24:ae:f6:1a:45:6c:ba:93:9c:8c:84:a6:2b: 01:b1:1c:da:ec:d2:02:30:af:d9:0a:1e:6a:ab:86:bd:5e:5c: 93:13:0a:6d:57:07:a4:19:bb:0b:2c:40:95:3a:de:f6:50:4a: 1b:59:73:b7:9d:a6:44:0a:2b:8c:72:40:11:00:43:9b:75:49: 8a:f6:9e:ff:65:1e:d0:e5:51:87:69:7a:a7:ec:44:fb:6e:61: 77:51:84:4a:e1:ff:83:6c:c1:55:fa:db:7b:ed:33:c3:44:45: b9:b1:59:1f:d7:e3:ea:26:fd:fc:e6:02:20:12:be:b9:b5:42: 9f:29:8e:36:18:4e:50:33:27:6c:89:09:48:7a:ac:3c:42:a1: 39:0e:4f:39:c5:04:88:c8:15:41:9a:1a:1a:90:26:8c:34:7a: 1a:70:81:a0:eb:cf:2c:5a:21:a8:bf:4a:61:16:24:a9:a7:03: 41:c5:13:12 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDlswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNDA4MjYw NTIwNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJFMTQ2OUJBNUFEMzUx NkVBMjlEQTVFREVDOEUzODBCNkY3Rjk2N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4qTmaJ2f3/qWOVyU6Bpy2X+mblhXoDkQDEVRzZwBj2kLXmZLd vd/aOohA09QoqZv4oYpgwlUdNf8o7tEDsUciL7+zLbV1LkllWDttmBgXwvr2YUAj 2a3SiSpJXZRUJiVQw+aKtXwycXNVbaMZDN4pOQe8vmgGkZoCv6VcdyO7/aZyZ9ZU TJ5enzsXHXSu6NLw7AWoGcqmkk18QpP+K+MiA1w30Skx0yzCYx4ire9a9ggWVAwQ p8s/tYdnnIHvyBwjFsDorH8VvnNM0hyeFCnkaOEF3XS0X3zXAjVTxJd/LhBhk/lU mwbr+z8LkB5P/rAyw5PXRvT0Vj+2iw/sq049AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUvhRpulrTUW6inaXt7I44C29/ln8wHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vdmhScHVsclRV VzZpbmFYdDdJNDRDMjlfbG44LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGeHFDANBgkqhkiG9w0BAQsFAAOCAQEALwDPbm021oNpTjIWAqS9TGHh k45ahIdqtWZ3cYDPCgtiEtBPV7lG7twdIG2nRfS5FFT9ERbxhEGqmqXsTCjRGQJt nLE4VYf70dCHhJEkrvYaRWy6k5yMhKYrAbEc2uzSAjCv2QoeaquGvV5ckxMKbVcH pBm7CyxAlTre9lBKG1lzt52mRAorjHJAEQBDm3VJivae/2Ue0OVRh2l6p+xE+25h d1GESuH/g2zBVfrbe+0zw0RFubFZH9fj6ib9/OYCIBK+ubVCnymONhhOUDMnbIkJ SHqsPEKhOQ5POcUEiMgVQZoaGpAmjDR6GnCBoOvPLFohqL9KYRYkqacDQcUTEg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org