$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NSS/34tvChXxZ2p_X_HU7ibKVtATDkw.roa File: 34tvChXxZ2p_X_HU7ibKVtATDkw.roa (raw, json) Hash identifier: A5SFGaZdYSDXUPOxYUnfs3NaDbWI2BRPL2KZTGWeuuI= Subject key identifier: DF:8B:6F:0A:15:F1:67:6A:7F:5F:F1:D4:EE:26:CA:56:D0:13:0E:4C Certificate issuer: /CN=7957076E29BFC1648EFF71A398BAAC4A9E886820 Certificate serial: 0C0E Authority key identifier: 79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/34tvChXxZ2p_X_HU7ibKVtATDkw.roa Signing time: Mon 26 Aug 2024 05:23:16 +0000 ROA not before: Mon 26 Aug 2024 05:23:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131626 IP address blocks: 103.118.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3086 (0xc0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7957076E29BFC1648EFF71A398BAAC4A9E886820 Validity Not Before: Aug 26 05:23:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DF8B6F0A15F1676A7F5FF1D4EE26CA56D0130E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:1e:68:b9:6d:b1:f9:d7:55:a2:1a:2c:4b: ca:eb:41:4f:e6:b3:46:61:20:ae:83:15:68:41:3d: 17:3c:a9:92:25:0b:2a:e0:ea:63:cd:94:49:78:81: 72:d1:00:75:ac:3a:7f:14:4d:c9:b1:8c:2a:97:ce: 7e:f7:70:d2:f9:6b:6d:45:fb:31:d2:5e:92:cc:4f: d9:2c:bf:44:85:f8:ad:a9:33:97:89:71:76:51:b4: 0d:37:ee:8d:c8:14:7b:c3:e4:06:43:6a:45:a4:f7: ab:9f:69:b1:eb:6c:74:b7:2e:3e:d5:7e:43:34:c9: b7:4e:2d:d4:14:cb:35:a8:2b:a1:6b:78:14:82:38: bc:70:10:f9:05:ae:bc:6a:aa:fb:d9:16:c0:71:4d: 55:c8:85:10:66:50:6e:52:f9:48:0b:c7:e4:e2:d6: c5:5d:f8:33:79:2e:4a:55:6f:99:b4:9c:57:58:7c: b2:ac:9b:32:17:b2:d6:d3:5c:0c:bf:5c:d3:28:e4: 06:ae:bb:af:b2:75:89:aa:63:88:46:03:41:a3:fe: ea:41:5e:7d:02:53:db:22:86:14:6b:b4:88:21:ca: 09:3f:85:c9:e8:8b:bb:55:27:46:f0:d2:86:ba:4b: 9f:7e:e7:9b:cf:36:36:1f:68:20:34:77:ef:ce:22: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8B:6F:0A:15:F1:67:6A:7F:5F:F1:D4:EE:26:CA:56:D0:13:0E:4C X509v3 Authority Key Identifier: keyid:79:57:07:6E:29:BF:C1:64:8E:FF:71:A3:98:BA:AC:4A:9E:88:68:20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/eVcHbim_wWSO_3GjmLqsSp6IaCA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVcHbim_wWSO_3GjmLqsSp6IaCA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NSS/34tvChXxZ2p_X_HU7ibKVtATDkw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.118.24.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:77:50:72:46:6e:02:7f:89:6b:dc:5b:6f:c4:f5:23:3e:d1: 44:2f:8b:d0:d0:5d:30:d2:b4:61:76:ae:78:55:61:d5:6e:ad: d1:6b:58:70:94:66:2a:29:f3:70:be:6a:26:ce:9d:d2:2e:e3: d3:55:22:1a:2f:75:15:96:ac:cc:47:fe:23:02:00:87:dd:c4: 70:b9:15:4a:ef:d6:f6:d1:96:70:68:7c:31:45:e6:f7:f4:e2: db:dd:c9:c5:f8:bd:3e:66:4d:c6:8c:af:6f:6c:cc:31:cb:24: 2e:87:cf:85:43:31:5c:8f:d2:17:af:58:de:05:50:db:61:31: 28:64:16:4b:d8:22:75:bb:16:3e:89:35:a4:dd:f9:20:71:53: c8:c5:11:a0:3c:aa:fc:c6:ab:47:15:b9:1a:02:c1:ac:8e:46: 42:f0:cb:da:70:f2:99:6d:2f:4e:ae:81:bc:16:27:7a:72:07: 5d:e4:48:5d:35:11:59:1a:53:48:db:5b:ec:cb:71:ea:36:1c: f8:c7:d5:95:77:ba:ba:82:65:92:55:9d:c0:27:dd:ea:41:ea: 6c:c4:bd:42:19:80:14:dc:e3:04:5b:84:b3:39:16:04:c2:ff: 89:d0:32:76:61:0f:27:ad:ac:7a:5f:c4:9f:62:4e:b2:25:48: f2:44:ec:e4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzk1 NzA3NkUyOUJGQzE2NDhFRkY3MUEzOThCQUFDNEE5RTg4NjgyMDAeFw0yNDA4MjYw NTIzMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGOEI2RjBBMTVGMTY3 NkE3RjVGRjFENEVFMjZDQTU2RDAxMzBFNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC98B5ouW2x+ddVohosS8rrQU/ms0ZhIK6DFWhBPRc8qZIlCyrg 6mPNlEl4gXLRAHWsOn8UTcmxjCqXzn73cNL5a21F+zHSXpLMT9ksv0SF+K2pM5eJ cXZRtA037o3IFHvD5AZDakWk96ufabHrbHS3Lj7VfkM0ybdOLdQUyzWoK6FreBSC OLxwEPkFrrxqqvvZFsBxTVXIhRBmUG5S+UgLx+Ti1sVd+DN5LkpVb5m0nFdYfLKs mzIXstbTXAy/XNMo5Aauu6+ydYmqY4hGA0Gj/upBXn0CU9sihhRrtIghygk/hcno i7tVJ0bw0oa6S59+55vPNjYfaCA0d+/OIn3lAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU34tvChXxZ2p/X/HU7ibKVtATDkwwHwYDVR0jBBgwFoAUeVcHbim/wWSO/3Gj mLqsSp6IaCAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlNTL2VW Y0hiaW1fd1dTT18zR2ptTHFzU3A2SWFDQS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZVZjSGJpbV93V1NPXzNHam1McXNTcDZJYUNBLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvTlNTLzM0dHZDaFh4WjJwX1hfSFU3aWJLVnRB VERrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJndhgwDQYJ KoZIhvcNAQELBQADggEBAF13UHJGbgJ/iWvcW2/E9SM+0UQvi9DQXTDStGF2rnhV YdVurdFrWHCUZiop83C+aibOndIu49NVIhovdRWWrMxH/iMCAIfdxHC5FUrv1vbR lnBofDFF5vf04tvdycX4vT5mTcaMr29szDHLJC6Hz4VDMVyP0hevWN4FUNthMShk FkvYInW7Fj6JNaTd+SBxU8jFEaA8qvzGq0cVuRoCwayORkLwy9pw8pltL06ugbwW J3pyB13kSF01EVkaU0jbW+zLceo2HPjH1ZV3urqCZZJVncAn3epB6mzEvUIZgBTc 4wRbhLM5FgTC/4nQMnZhDyetrHpfxJ9iTrIlSPJE7OQ= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org