$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/-Suaa4JEQmLbuocDkl5Q4E9KEn0.roa File: -Suaa4JEQmLbuocDkl5Q4E9KEn0.roa (raw, json) Hash identifier: ylnTfTAopdgVPte1KqurIBLFMy7W9IqnMYs5SKjcpL8= Subject key identifier: F9:2B:9A:6B:82:44:42:62:DB:BA:87:03:92:5E:50:E0:4F:4A:12:7D Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Certificate serial: 0C2B Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/-Suaa4JEQmLbuocDkl5Q4E9KEn0.roa Signing time: Mon 26 Aug 2024 05:21:03 +0000 ROA not before: Mon 26 Aug 2024 05:21:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18179 IP address blocks: 103.16.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Validity Not Before: Aug 26 05:21:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F92B9A6B82444262DBBA8703925E50E04F4A127D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:72:1c:be:9d:4c:02:bf:62:e5:f9:05:96: a9:2b:f8:ea:79:01:73:41:fe:57:01:1e:2b:b1:11: 7a:8c:41:5c:11:54:52:27:1c:97:03:20:a3:79:ce: 99:99:ba:73:b6:c8:89:19:7d:56:d5:a3:8c:03:88: 0a:bb:dd:3e:06:69:1e:45:50:73:d2:15:21:54:6e: 4a:b1:35:16:68:dd:95:7c:e9:1e:de:27:e2:f4:e8: 30:c6:97:1b:ff:25:26:cf:24:52:90:ec:9a:5a:78: f3:bd:65:91:54:ce:e9:4f:9b:d1:e0:1c:f0:aa:d9: 43:3b:cd:d8:2a:1b:6e:e6:49:6c:b8:13:42:52:64: d7:2c:a4:91:29:56:d1:c3:a7:d3:94:3a:98:88:e5: 2b:e6:4d:16:18:de:24:66:11:da:f3:8c:51:ea:79: 61:5e:24:88:73:58:ac:2d:d6:ec:d3:97:0b:c1:e9: 95:6d:d3:e1:b0:f5:c1:91:63:7b:c9:60:73:47:19: 88:97:60:77:7d:8a:27:64:65:4d:80:2c:9c:67:1e: 3b:cd:66:02:5d:b8:8f:6e:4f:04:84:4b:f2:16:44: fb:f1:4a:5f:de:41:68:d0:5e:35:33:40:b8:4c:c5: 81:e1:79:d2:c5:07:ce:33:f0:c9:64:5d:3c:25:a8: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2B:9A:6B:82:44:42:62:DB:BA:87:03:92:5E:50:E0:4F:4A:12:7D X509v3 Authority Key Identifier: keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/-Suaa4JEQmLbuocDkl5Q4E9KEn0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.16.244.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:b0:a5:60:2f:d7:6b:13:c9:60:4b:a6:ec:e4:59:c2:c4:bb: 5b:0c:c0:c7:cd:3f:fa:96:59:5f:09:40:2f:44:15:ce:50:84: bc:d2:01:aa:d0:fa:2c:02:27:fc:c0:2c:9d:64:b1:42:f7:05: f9:e6:be:ec:5c:2b:6f:15:56:e7:2a:a0:2a:d3:a9:27:74:3b: 5c:ff:88:22:a7:4d:7b:ed:63:99:69:66:ab:f7:3b:f9:c3:16: 3c:eb:a5:ab:cc:48:a6:39:d8:56:58:7b:7c:57:3a:22:56:6c: ce:23:90:ed:2a:27:5c:ae:cc:31:5a:ca:a0:dc:fd:ce:1a:11: 85:8b:85:2b:0b:ee:a1:f6:d4:79:87:28:05:8c:40:f4:21:29: 52:56:29:be:51:72:5a:c4:7a:34:2e:71:db:e9:0a:b4:c7:9c: 47:6a:7b:3d:9b:68:37:2f:56:42:e8:b8:12:07:dc:f1:59:c0: ed:9d:19:da:ca:3c:3b:93:42:e8:ef:c7:0f:a8:03:23:e5:48: 5a:07:cd:9a:de:c1:f4:c7:5f:89:ba:28:c8:23:18:b8:4c:9c: 22:96:fd:ea:18:13:0b:e8:6c:2c:fa:04:dd:da:09:21:be:11: 17:8c:2d:cd:6c:27:b5:cc:0e:81:a6:2e:f5:07:30:3c:86:a0: 64:86:0c:ad -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2 QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yNDA4MjYw NTIxMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5MkI5QTZCODI0NDQy NjJEQkJBODcwMzkyNUU1MEUwNEY0QTEyN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3SHIcvp1MAr9i5fkFlqkr+Op5AXNB/lcBHiuxEXqMQVwRVFIn HJcDIKN5zpmZunO2yIkZfVbVo4wDiAq73T4GaR5FUHPSFSFUbkqxNRZo3ZV86R7e J+L06DDGlxv/JSbPJFKQ7JpaePO9ZZFUzulPm9HgHPCq2UM7zdgqG27mSWy4E0JS ZNcspJEpVtHDp9OUOpiI5SvmTRYY3iRmEdrzjFHqeWFeJIhzWKwt1uzTlwvB6ZVt 0+Gw9cGRY3vJYHNHGYiXYHd9iidkZU2ALJxnHjvNZgJduI9uTwSES/IWRPvxSl/e QWjQXjUzQLhMxYHhedLFB84z8MlkXTwlqKlZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU+Suaa4JEQmLbuocDkl5Q4E9KEn0wHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy8tU3VhYTRKRVFtTGJ1 b2NEa2w1UTRFOUtFbjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZxD0MA0GCSqGSIb3DQEBCwUAA4IBAQA/sKVgL9drE8lgS6bs5FnCxLtbDMDH zT/6lllfCUAvRBXOUIS80gGq0PosAif8wCydZLFC9wX55r7sXCtvFVbnKqAq06kn dDtc/4gip0177WOZaWar9zv5wxY866WrzEimOdhWWHt8VzoiVmzOI5DtKidcrswx Wsqg3P3OGhGFi4UrC+6h9tR5hygFjED0ISlSVim+UXJaxHo0LnHb6Qq0x5xHans9 m2g3L1ZC6LgSB9zxWcDtnRnayjw7k0Lo78cPqAMj5UhaB82a3sH0x1+JuijIIxi4 TJwilv3qGBML6Gws+gTd2gkhvhEXjC3NbCe1zA6Bpi71BzA8hqBkhgyt -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org