$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/msXGHqT6wlRud7oYcA8BDoq_T3U.roa File: msXGHqT6wlRud7oYcA8BDoq_T3U.roa (raw, json) Hash identifier: gRqwRXwGnTw/9FUD8938GsgCjwi75bHspZRawI1Bo/U= Subject key identifier: 9A:C5:C6:1E:A4:FA:C2:54:6E:77:BA:18:70:0F:01:0E:8A:BF:4F:75 Certificate issuer: /CN=34F47974E551C20236C3D89395F57F3BA02B57B7 Certificate serial: 0BCA Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/msXGHqT6wlRud7oYcA8BDoq_T3U.roa Signing time: Mon 26 Aug 2024 05:21:17 +0000 ROA not before: Mon 26 Aug 2024 05:21:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 214766 IP address blocks: 103.129.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7 Validity Not Before: Aug 26 05:21:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9AC5C61EA4FAC2546E77BA18700F010E8ABF4F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:66:09:0a:f7:5b:c3:b7:91:3a:71:98:48: a4:87:82:d9:60:41:fd:0c:c4:44:b8:63:90:eb:fa: 6a:5e:ff:8b:9c:3b:93:04:c3:b4:10:4f:ea:b7:05: 5a:78:e1:dc:50:6a:5a:b2:d6:63:9f:2a:fa:5c:2f: c7:65:ab:2f:10:5e:ca:f2:d5:cf:ee:b7:d1:96:23: 5a:38:1c:72:b7:22:6a:64:10:62:95:c1:af:96:ca: e6:32:41:07:73:0c:bc:0e:76:8b:8f:47:f4:1f:95: 7a:fa:32:99:b3:d0:37:d1:f7:ab:ba:27:69:cc:6e: 2b:de:b7:be:6e:ab:f9:a6:99:18:43:22:82:b2:d0: d6:c9:8c:25:9b:99:b3:55:99:36:9a:3f:20:f3:3e: c1:8d:5c:fd:6a:75:09:61:72:3c:5a:70:a0:60:c2: d5:c8:b9:4e:c1:1f:90:5e:85:d5:2e:19:92:02:b8: 9e:3a:0e:27:30:b7:2e:8d:73:af:99:b9:ce:8b:21: 05:e3:56:4d:0d:9c:4b:ad:ec:fc:68:4f:69:86:ac: 58:91:23:91:1e:a5:be:24:3f:8e:f7:5b:62:a7:52: b2:b7:22:36:5a:c0:d4:0e:64:fc:5e:12:a6:fd:1b: 37:bd:43:84:5b:a4:10:46:9e:2f:b8:ee:2c:c5:3e: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C5:C6:1E:A4:FA:C2:54:6E:77:BA:18:70:0F:01:0E:8A:BF:4F:75 X509v3 Authority Key Identifier: keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/msXGHqT6wlRud7oYcA8BDoq_T3U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.160.0/22 Signature Algorithm: sha256WithRSAEncryption 25:d8:be:44:09:a0:43:c5:7a:9d:9b:6c:d7:7d:a7:b5:ce:e3: 17:36:72:0c:f6:59:d0:11:67:f5:10:cc:41:c1:d3:e9:22:67: 03:06:60:c9:70:63:8f:ee:6c:3c:48:b9:74:ab:05:15:7f:5a: 56:71:4d:66:b3:0d:b1:55:f4:8a:59:50:c5:a7:da:7d:22:40: 7f:92:6c:dc:06:44:d2:64:19:63:94:b7:0e:bb:26:c9:09:37: 15:d9:46:10:18:c3:dd:31:d2:42:a0:1c:28:b9:43:b3:cc:18: b3:b2:90:d9:25:e9:0e:40:a6:1b:50:a8:9f:3a:46:89:77:98: 9a:0c:65:05:a8:93:88:6e:d1:31:77:7d:04:07:29:e1:9d:72: ed:20:27:6e:55:19:4f:c9:0d:63:9b:97:60:5d:aa:fa:bf:cc: ab:63:d0:67:29:74:13:c5:a1:36:eb:42:da:cc:ce:a5:03:a1: 9a:02:a3:9a:31:67:2a:4e:dc:b1:53:d7:9d:b7:a1:fd:17:ba: fc:b0:71:ae:bd:1d:3f:46:f7:c8:3a:44:e5:17:78:52:2c:7b: b7:8e:81:d7:0a:20:c7:22:cb:32:34:86:bc:7b:bb:ed:0a:56: 10:b8:59:89:ef:2c:d0:f2:c8:4b:e1:a2:27:f4:2e:9d:bc:af: ff:85:e6:77 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICC8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRG NDc5NzRFNTUxQzIwMjM2QzNEODkzOTVGNTdGM0JBMDJCNTdCNzAeFw0yNDA4MjYw NTIxMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBQzVDNjFFQTRGQUMy NTQ2RTc3QkExODcwMEYwMTBFOEFCRjRGNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCopmYJCvdbw7eROnGYSKSHgtlgQf0MxES4Y5Dr+mpe/4ucO5ME w7QQT+q3BVp44dxQalqy1mOfKvpcL8dlqy8QXsry1c/ut9GWI1o4HHK3ImpkEGKV wa+WyuYyQQdzDLwOdouPR/QflXr6Mpmz0DfR96u6J2nMbivet75uq/mmmRhDIoKy 0NbJjCWbmbNVmTaaPyDzPsGNXP1qdQlhcjxacKBgwtXIuU7BH5BehdUuGZICuJ46 Dicwty6Nc6+Zuc6LIQXjVk0NnEut7PxoT2mGrFiRI5Eepb4kP473W2KnUrK3IjZa wNQOZPxeEqb9Gze9Q4RbpBBGni+47izFPs8FAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUmsXGHqT6wlRud7oYcA8BDoq/T3UwHwYDVR0jBBgwFoAUNPR5dOVRwgI2w9iT lfV/O6ArV7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9SSUNM T1VEL05QUjVkT1ZSd2dJMnc5aVRsZlZfTzZBclY3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTlBSNWRPVlJ3Z0kydzlpVGxmVl9PNkFyVjdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9SSUNMT1VEL21zWEdIcVQ2d2xS dWQ3b1ljQThCRG9xX1QzVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJngaAwDQYJKoZIhvcNAQELBQADggEBACXYvkQJoEPFep2bbNd9p7XO4xc2 cgz2WdARZ/UQzEHB0+kiZwMGYMlwY4/ubDxIuXSrBRV/WlZxTWazDbFV9IpZUMWn 2n0iQH+SbNwGRNJkGWOUtw67JskJNxXZRhAYw90x0kKgHCi5Q7PMGLOykNkl6Q5A phtQqJ86Rol3mJoMZQWok4hu0TF3fQQHKeGdcu0gJ25VGU/JDWObl2Bdqvq/zKtj 0GcpdBPFoTbrQtrMzqUDoZoCo5oxZypO3LFT1523of0Xuvywca69HT9G98g6ROUX eFIse7eOgdcKIMciyzI0hrx7u+0KVhC4WYnvLNDyyEvhoif0Lp28r/+F5nc= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:40 2024 by rpki-client on console-fra.rpki-client.org