$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/-tjLOJ_JzcudCYm4i6iBdrTi-aM.roa File: -tjLOJ_JzcudCYm4i6iBdrTi-aM.roa (raw, json) Hash identifier: yK4BALN1VcTXwNYPVOeJvFc21jtzEFL7W4MU1J1kPBU= Subject key identifier: FA:D8:CB:38:9F:C9:CD:CB:9D:09:89:B8:8B:A8:81:76:B4:E2:F9:A3 Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 5911 Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/-tjLOJ_JzcudCYm4i6iBdrTi-aM.roa Signing time: Mon 26 Aug 2024 05:23:26 +0000 ROA not before: Mon 26 Aug 2024 05:23:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38851 IP address blocks: 103.46.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22801 (0x5911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Aug 26 05:23:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FAD8CB389FC9CDCB9D0989B88BA88176B4E2F9A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:d8:6a:6e:0a:ab:06:a8:51:d0:ab:d6:d5: 46:39:d8:7e:6e:80:14:44:14:fc:0d:a6:2f:4a:7c: 4a:ac:00:b6:77:80:e5:fc:ec:14:7f:57:bf:6e:4d: 8b:58:66:4f:ba:83:a2:e5:28:17:09:65:74:34:40: 35:65:5c:93:7c:c4:95:ab:c7:e8:39:22:4a:98:37: f0:e3:9a:f1:84:f3:82:80:6a:5e:a2:52:fc:c2:86: 6f:26:ed:ac:94:27:05:af:49:34:44:cd:45:bb:26: 95:cb:d2:b6:52:1c:11:e9:5c:ae:50:d7:81:83:e1: ac:85:d4:a8:9e:06:41:ce:dd:6a:96:9e:07:57:e8: fb:ad:30:bf:c4:f3:0f:e0:2e:f6:be:e0:4e:76:d6: 2d:11:34:f1:55:6d:3d:e2:5c:46:7b:ae:4b:f2:b3: 86:30:1c:33:4f:54:1a:94:3a:d7:9d:66:f1:c4:29: 53:06:00:2a:dc:b1:af:23:de:fb:71:32:45:2f:ef: a8:d9:2a:dc:01:e9:22:50:3e:e6:92:8c:32:92:e6: 24:78:d9:9b:d6:32:95:e9:cf:33:14:26:a2:d7:21: be:16:de:1b:cc:2d:6b:07:56:cf:92:61:20:66:c3: 01:40:2b:72:94:c7:30:f5:e9:5a:ca:4d:ad:9d:fc: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D8:CB:38:9F:C9:CD:CB:9D:09:89:B8:8B:A8:81:76:B4:E2:F9:A3 X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/-tjLOJ_JzcudCYm4i6iBdrTi-aM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.46.188.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:2c:a3:29:c4:c8:93:e5:b9:96:23:c1:8e:a2:c7:ff:6f:4b: 2a:ee:62:e1:c5:a9:b2:46:31:64:f9:5c:5b:8d:ac:0a:3d:48: 10:29:e9:f1:76:98:45:d8:8f:2b:0d:0c:ed:e9:33:ce:8e:f3: 36:b9:93:ef:eb:cb:81:37:ba:b2:ed:22:00:d9:6c:2f:1e:5b: e1:33:f1:fd:47:b4:fb:5d:71:8a:57:56:a4:f6:2f:c0:e5:b7: e6:5c:9f:28:22:c8:03:94:57:7b:03:ce:70:9e:d7:65:d3:7a: bb:97:3f:fa:c7:6c:b9:f9:65:1d:4f:f7:33:de:b8:0f:c5:6d: 90:9e:a7:c7:3b:5c:49:c2:6d:06:dc:87:88:91:23:38:bd:91: 6f:ba:a2:2c:d1:f2:48:ee:5d:09:f6:ad:9b:94:fb:06:04:c9: fd:69:48:f9:f6:e7:b0:ad:c5:5d:f9:5d:88:6b:8e:87:55:b0: 40:f8:af:31:eb:97:c0:55:09:cf:cb:df:f2:9f:ee:7b:9b:99: 84:a8:7f:06:89:34:02:51:32:0f:4a:8d:a9:d3:d5:6a:5b:90: 8b:48:a4:97:f9:94:a1:30:d5:86:47:b4:69:aa:b3:d8:f0:1d: 96:76:33:bc:ed:6a:e8:07:86:eb:0d:c1:3d:e3:9a:44:5f:de: f2:0b:3e:1a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICWREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNDA4MjYw NTIzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBRDhDQjM4OUZDOUNE Q0I5RDA5ODlCODhCQTg4MTc2QjRFMkY5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1Q9hqbgqrBqhR0KvW1UY52H5ugBREFPwNpi9KfEqsALZ3gOX8 7BR/V79uTYtYZk+6g6LlKBcJZXQ0QDVlXJN8xJWrx+g5IkqYN/DjmvGE84KAal6i UvzChm8m7ayUJwWvSTREzUW7JpXL0rZSHBHpXK5Q14GD4ayF1KieBkHO3WqWngdX 6PutML/E8w/gLva+4E521i0RNPFVbT3iXEZ7rkvys4YwHDNPVBqUOtedZvHEKVMG ACrcsa8j3vtxMkUv76jZKtwB6SJQPuaSjDKS5iR42ZvWMpXpzzMUJqLXIb4W3hvM LWsHVs+SYSBmwwFAK3KUxzD16VrKTa2d/Oo1AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU+tjLOJ/JzcudCYm4i6iBdrTi+aMwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvLXRqTE9KX0p6Y3VkQ1lt NGk2aUJkclRpLWFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmcuvDANBgkqhkiG9w0BAQsFAAOCAQEAfyyjKcTIk+W5liPBjqLH/29LKu5i4cWp skYxZPlcW42sCj1IECnp8XaYRdiPKw0M7ekzzo7zNrmT7+vLgTe6su0iANlsLx5b 4TPx/Ue0+11xildWpPYvwOW35lyfKCLIA5RXewPOcJ7XZdN6u5c/+sdsufllHU/3 M964D8VtkJ6nxztcScJtBtyHiJEjOL2Rb7qiLNHySO5dCfatm5T7BgTJ/WlI+fbn sK3FXfldiGuOh1WwQPivMeuXwFUJz8vf8p/ue5uZhKh/Bok0AlEyD0qNqdPValuQ i0ikl/mUoTDVhke0aaqz2PAdlnYzvO1q6AeG6w3BPeOaRF/e8gs+Gg== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:11 2024 by rpki-client on console-ams.rpki-client.org