$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/2O7OJSeIp81CBOX7mVe5YHS6EZs.roa File: 2O7OJSeIp81CBOX7mVe5YHS6EZs.roa (raw, json) Hash identifier: Alax0mG/RrI4kk9czFFWlJG9SQ8pWOSCW4Xp6D9ZuVU= Subject key identifier: D8:EE:CE:25:27:88:A7:CD:42:04:E5:FB:99:57:B9:60:74:BA:11:9B Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Certificate serial: 0737 Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/2O7OJSeIp81CBOX7mVe5YHS6EZs.roa Signing time: Fri 01 Sep 2023 09:34:17 +0000 ROA not before: Fri 01 Sep 2023 09:34:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131674 IP address blocks: 103.149.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB Validity Not Before: Sep 1 09:34:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D8EECE252788A7CD4204E5FB9957B96074BA119B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c8:63:b3:7c:30:31:29:41:61:f9:48:1c:d7: f6:2c:5d:51:a4:cc:65:4f:c6:a6:4c:36:48:6a:09: ce:88:d8:e0:a4:9d:94:b7:f7:16:a1:60:a0:ea:89: 45:6b:e8:e3:74:10:41:20:fe:21:19:54:eb:db:da: c8:6e:1a:84:6c:08:90:86:05:c2:94:dc:bd:cf:80: dd:c1:c7:af:2a:9f:84:74:6d:6c:e8:e2:19:58:5d: 66:a6:3a:39:1b:db:b4:cb:ef:96:40:ad:b4:0c:b5: 40:78:5f:af:25:f3:ff:12:5f:9c:5f:b1:a3:83:f7: 85:73:55:00:d4:70:d1:8b:70:5c:31:39:1b:77:6a: 0a:15:5a:49:52:8b:cc:30:1a:40:f8:28:55:86:55: ef:be:bb:5e:36:e4:b7:d3:55:da:dd:b2:0a:44:e3: 2a:e0:ec:5b:2d:b4:0a:b9:74:ca:c1:e3:99:8c:92: 74:ba:25:19:f3:88:19:3d:59:01:ea:db:ad:89:3b: f6:fc:fe:d1:db:56:44:53:34:c1:2b:b9:a8:14:b7: dc:9a:2d:7c:d4:9c:35:64:90:d8:67:5e:66:5f:be: 7c:fa:2d:75:e4:9d:8e:66:ad:b8:ee:e7:bb:b3:62: 00:4a:1f:9c:c4:af:e3:84:3e:b3:cb:40:0e:ca:6a: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EE:CE:25:27:88:A7:CD:42:04:E5:FB:99:57:B9:60:74:BA:11:9B X509v3 Authority Key Identifier: keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/2O7OJSeIp81CBOX7mVe5YHS6EZs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.149.64.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:e6:77:77:7e:2c:05:69:50:6d:2b:ef:89:29:8e:55:67:84: eb:c9:1a:e5:7e:aa:d7:8f:cf:37:a9:38:b2:30:43:80:b6:d0: ae:1a:72:bd:96:be:a6:72:74:41:7b:b1:8c:d4:62:6f:45:65: 69:bc:b0:71:58:38:f6:16:a0:69:bf:39:43:25:fa:89:16:89: f2:d0:ea:14:df:1a:91:7e:0f:9c:b0:40:f1:31:c3:99:50:c1: 80:0b:6c:b8:b0:40:97:19:7b:d6:0b:5b:fb:d1:f8:f3:d3:ba: 57:d9:0e:b6:a3:13:91:86:8b:e0:f7:33:c6:3c:35:f4:55:fb: 93:eb:16:be:88:f9:3b:e2:6d:55:95:a9:aa:8d:df:e4:2e:0b: 04:ee:35:a2:b3:c0:5e:8a:79:64:e3:c7:66:61:87:16:64:67: 32:cf:11:30:e6:63:f9:47:97:aa:56:50:22:9c:e0:59:af:a8: a3:63:4b:bc:3a:67:fd:0f:90:3a:1d:ff:f9:3c:f4:ae:e8:18: bb:63:4a:e9:44:9b:bd:3f:d8:f7:58:f3:86:e5:6e:02:69:78: c5:29:96:91:31:f0:2f:45:4e:b3:b0:53:5b:fe:f6:e0:29:d4: e2:2d:bd:1d:0d:a1:9f:c8:32:db:a7:03:88:bc:5e:6a:40:b4: 4a:80:01:12 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF RjJCM0MzQTlBMUI1M0MxNkMxQzcwRTU1MTFBRDU5MDMyODRGQjAeFw0yMzA5MDEw OTM0MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ4RUVDRTI1Mjc4OEE3 Q0Q0MjA0RTVGQjk5NTdCOTYwNzRCQTExOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpyGOzfDAxKUFh+Ugc1/YsXVGkzGVPxqZMNkhqCc6I2OCknZS3 9xahYKDqiUVr6ON0EEEg/iEZVOvb2shuGoRsCJCGBcKU3L3PgN3Bx68qn4R0bWzo 4hlYXWamOjkb27TL75ZArbQMtUB4X68l8/8SX5xfsaOD94VzVQDUcNGLcFwxORt3 agoVWklSi8wwGkD4KFWGVe++u1425LfTVdrdsgpE4yrg7FsttAq5dMrB45mMknS6 JRnziBk9WQHq262JO/b8/tHbVkRTNMEruagUt9yaLXzUnDVkkNhnXmZfvnz6LXXk nY5mrbju57uzYgBKH5zEr+OEPrPLQA7Kam71AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU2O7OJSeIp81CBOX7mVe5YHS6EZswHwYDVR0jBBgwFoAULe8rPDqaG1PBbBxw 5VEa1ZAyhPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTkZP Ui9MZThyUERxYUcxUEJiQnh3NVZFYTFaQXloUHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0xlOHJQRHFhRzFQQmJCeHc1VkVhMVpBeWhQcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL09QRU5GT1IvMk83T0pTZUlwODFDQk9Y N21WZTVZSFM2RVpzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWeVQDANBgkqhkiG9w0BAQsFAAOCAQEAS+Z3d34sBWlQbSvviSmOVWeE68ka5X6q 14/PN6k4sjBDgLbQrhpyvZa+pnJ0QXuxjNRib0VlabywcVg49hagab85QyX6iRaJ 8tDqFN8akX4PnLBA8THDmVDBgAtsuLBAlxl71gtb+9H489O6V9kOtqMTkYaL4Pcz xjw19FX7k+sWvoj5O+JtVZWpqo3f5C4LBO41orPAXop5ZOPHZmGHFmRnMs8RMOZj +UeXqlZQIpzgWa+oo2NLvDpn/Q+QOh3/+Tz0rugYu2NK6USbvT/Y91jzhuVuAml4 xSmWkTHwL0VOs7BTW/724CnU4i29HQ2hn8gy26cDiLxeakC0SoABEg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:50 2024 by rpki-client on console-ams.rpki-client.org