$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/NGLAZ5o7u4Ou1kWIM6ZNjBjnl_M.roa File: NGLAZ5o7u4Ou1kWIM6ZNjBjnl_M.roa (raw, json) Hash identifier: y5z8QH4QhPCXLdCbSEdG5sgzVosOpW/b2ZdCVEuJ0ro= Subject key identifier: 34:62:C0:67:9A:3B:BB:83:AE:D6:45:88:33:A6:4D:8C:18:E7:97:F3 Certificate issuer: /CN=98A5C390143149481DE79BC17BB62DBA2271F61F Certificate serial: 0388 Authority key identifier: 98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/NGLAZ5o7u4Ou1kWIM6ZNjBjnl_M.roa Signing time: Mon 26 Aug 2024 05:21:19 +0000 ROA not before: Mon 26 Aug 2024 05:21:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131618 IP address blocks: 103.159.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98A5C390143149481DE79BC17BB62DBA2271F61F Validity Not Before: Aug 26 05:21:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3462C0679A3BBB83AED6458833A64D8C18E797F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0e:84:8b:c5:86:a4:25:77:b6:b4:bf:34:bb: ee:48:5c:86:8f:5f:35:5c:31:68:94:92:bd:6a:2b: f3:0e:a2:e7:9d:d3:61:49:39:79:fa:38:b6:a8:b1: 74:44:38:c8:bd:db:89:fc:6d:01:aa:58:82:df:7c: a8:6d:05:42:98:e1:77:09:05:dc:c0:5b:22:c2:18: 06:45:4b:40:f0:d0:9c:97:27:27:f4:b9:e4:27:e3: fb:9f:bc:54:4e:5e:a5:66:31:f9:3d:a9:c2:af:a8: 0f:29:fd:3f:26:63:5e:5d:88:a8:eb:e9:bf:4f:32: 44:c4:a2:f4:65:d6:38:88:5f:15:d9:ce:9d:5e:cb: 7e:bd:2b:8d:80:ea:77:c8:cb:66:9b:92:60:06:59: 7c:1a:c8:0a:5e:d1:51:27:eb:dc:6d:bc:b4:c5:72: ab:9d:28:47:a0:c1:f8:54:7f:90:d9:02:4a:59:d9: 88:5f:ff:6f:78:94:60:87:2c:80:21:05:61:36:db: 9e:92:d0:63:74:97:d9:ef:67:1d:d1:32:3c:53:92: a4:1d:26:3e:66:cc:84:0f:d7:a2:e5:85:96:54:51: e5:40:e1:3e:02:c8:a5:93:c0:7a:29:04:06:40:d1: fc:dc:96:3d:04:b5:f8:3f:0d:3f:62:e7:44:60:84: 39:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:62:C0:67:9A:3B:BB:83:AE:D6:45:88:33:A6:4D:8C:18:E7:97:F3 X509v3 Authority Key Identifier: keyid:98:A5:C3:90:14:31:49:48:1D:E7:9B:C1:7B:B6:2D:BA:22:71:F6:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/mKXDkBQxSUgd55vBe7YtuiJx9h8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mKXDkBQxSUgd55vBe7YtuiJx9h8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYSENSE/NGLAZ5o7u4Ou1kWIM6ZNjBjnl_M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.159.120.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:bf:f4:72:71:f2:ca:3f:b4:3a:58:21:ac:61:a6:da:8f:dc: f2:2e:4e:84:c0:fd:25:81:51:14:70:e0:99:b0:f9:ba:3d:74: ee:10:ac:3f:5a:9e:9e:70:64:65:37:96:fc:d0:8c:03:c1:a1: aa:3a:d3:0e:ca:ff:fe:4f:af:c2:36:c6:4f:87:7d:88:96:f0: 66:e7:96:a1:c8:09:49:35:32:6e:60:25:f3:aa:1d:d7:84:39: c6:1a:71:54:b4:84:a7:fc:09:c8:a1:b3:1e:87:2b:d4:b4:e4: cc:49:6b:a8:fd:6d:39:2c:8d:57:4d:12:59:6f:a2:1f:41:4a: 76:3d:92:d0:20:d4:26:07:78:47:8d:d5:8a:4f:85:9b:d2:20: 80:50:de:e3:32:db:b7:eb:4a:97:7a:6b:55:8a:ab:32:51:0b: 47:06:d1:28:05:00:53:9d:2c:61:2f:da:28:b2:d7:c9:05:33: 81:fd:18:5a:3f:e3:c4:a3:1b:31:1f:8d:b9:ca:0f:03:43:26: 12:38:50:a6:39:0a:2c:ff:3d:f4:55:b0:d1:a4:a8:79:33:10: 07:2e:e1:6a:e7:12:c1:ac:6a:44:84:4c:05:9d:ee:9c:64:50: 81:15:aa:2a:04:39:51:72:a4:1e:58:3c:46:79:c2:5d:cc:31: da:19:90:ef -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOThB NUMzOTAxNDMxNDk0ODFERTc5QkMxN0JCNjJEQkEyMjcxRjYxRjAeFw0yNDA4MjYw NTIxMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM0NjJDMDY3OUEzQkJC ODNBRUQ2NDU4ODMzQTY0RDhDMThFNzk3RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2DoSLxYakJXe2tL80u+5IXIaPXzVcMWiUkr1qK/MOoued02FJ OXn6OLaosXREOMi924n8bQGqWILffKhtBUKY4XcJBdzAWyLCGAZFS0Dw0JyXJyf0 ueQn4/ufvFROXqVmMfk9qcKvqA8p/T8mY15diKjr6b9PMkTEovRl1jiIXxXZzp1e y369K42A6nfIy2abkmAGWXwayApe0VEn69xtvLTFcqudKEegwfhUf5DZAkpZ2Yhf /294lGCHLIAhBWE2256S0GN0l9nvZx3RMjxTkqQdJj5mzIQP16LlhZZUUeVA4T4C yKWTwHopBAZA0fzclj0Etfg/DT9i50RghDmHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUNGLAZ5o7u4Ou1kWIM6ZNjBjnl/MwHwYDVR0jBBgwFoAUmKXDkBQxSUgd55vB e7YtuiJx9h8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTVlTRU5T RS9tS1hEa0JReFNVZ2Q1NXZCZTdZdHVpSng5aDguY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL21LWERrQlF4U1VnZDU1dkJlN1l0dWlKeDloOC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL01ZU0VOU0UvTkdMQVo1bzd1NE91MWtX SU02Wk5qQmpubF9NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWefeDANBgkqhkiG9w0BAQsFAAOCAQEAn7/0cnHyyj+0OlghrGGm2o/c8i5OhMD9 JYFRFHDgmbD5uj107hCsP1qennBkZTeW/NCMA8GhqjrTDsr//k+vwjbGT4d9iJbw ZueWocgJSTUybmAl86od14Q5xhpxVLSEp/wJyKGzHocr1LTkzElrqP1tOSyNV00S WW+iH0FKdj2S0CDUJgd4R43Vik+Fm9IggFDe4zLbt+tKl3prVYqrMlELRwbRKAUA U50sYS/aKLLXyQUzgf0YWj/jxKMbMR+NucoPA0MmEjhQpjkKLP899FWw0aSoeTMQ By7haucSwaxqRIRMBZ3unGRQgRWqKgQ5UXKkHlg8RnnCXcwx2hmQ7w== -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:28 2024 by rpki-client on console-fra.rpki-client.org