$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/MiFZ8hx-yQqPrREzBrXjozn9wSg.roa File: MiFZ8hx-yQqPrREzBrXjozn9wSg.roa (raw, json) Hash identifier: 6iu2laWbnBJGsrCxECWn0MpjSyFbtZ8qDk/CFxvOb4k= Subject key identifier: 32:21:59:F2:1C:7E:C9:0A:8F:AD:11:33:06:B5:E3:A3:39:FD:C1:28 Certificate issuer: /CN=53AB025E558614A6AC89DCA0302DD23BD596A256 Certificate serial: F0 Authority key identifier: 53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/MiFZ8hx-yQqPrREzBrXjozn9wSg.roa Signing time: Wed 04 Sep 2024 09:16:40 +0000 ROA not before: Wed 04 Sep 2024 09:16:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.99.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53AB025E558614A6AC89DCA0302DD23BD596A256 Validity Not Before: Sep 4 09:16:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=322159F21C7EC90A8FAD113306B5E3A339FDC128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:a9:d5:90:cd:37:2c:a9:ad:07:5c:30:cb: 37:ad:ec:ff:4b:96:1f:db:a6:4f:cd:04:da:a6:ab: 9a:c5:e7:9f:b6:d3:b2:fe:ec:8a:0a:5e:15:6c:8f: a1:5d:1e:f9:33:dd:59:2a:f2:73:a9:8d:c6:47:5a: c1:a3:3a:97:8b:24:7a:63:2c:22:d0:40:e9:eb:77: 33:b6:e5:73:12:c1:93:2d:ff:00:93:81:c5:d6:5f: fb:11:3a:f4:e6:90:fe:3a:b5:53:13:b4:ca:2d:a4: 3b:20:1e:9a:88:44:58:1e:f3:14:82:66:68:d7:18: 5e:bb:3a:6d:87:07:a3:40:0c:86:3d:cc:23:7b:57: b9:1c:d0:93:9e:a2:33:f9:b5:ec:3a:c0:ca:1a:f9: 48:70:36:97:37:72:b6:11:48:76:b2:87:d0:43:e4: 80:28:30:67:e1:90:a0:6c:99:dd:47:ff:e0:6a:eb: 4c:8c:5a:92:4b:c6:17:ef:4c:6c:cd:3b:87:88:d6: 5f:0c:7e:d6:58:e5:53:eb:95:a1:f0:27:34:bb:a6: 29:74:fa:05:6b:87:c1:da:df:d8:ad:7b:c0:fb:41: 5b:1e:3d:00:be:4b:3a:cc:db:8f:93:72:09:35:e8: 50:32:eb:76:03:e5:e5:0d:f9:17:e2:d2:be:78:da: b2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:21:59:F2:1C:7E:C9:0A:8F:AD:11:33:06:B5:E3:A3:39:FD:C1:28 X509v3 Authority Key Identifier: keyid:53:AB:02:5E:55:86:14:A6:AC:89:DC:A0:30:2D:D2:3B:D5:96:A2:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/U6sCXlWGFKasidygMC3SO9WWolY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/U6sCXlWGFKasidygMC3SO9WWolY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEICHANG/MiFZ8hx-yQqPrREzBrXjozn9wSg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.99.140.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:0d:ef:0d:64:23:ba:1a:6f:7c:ea:dd:9e:15:ce:c2:10:dc: d2:bf:61:40:de:3a:3c:f2:66:62:af:43:90:db:28:1d:8a:bb: 7a:ea:37:4a:4a:c2:89:89:22:00:ae:90:b0:ba:4d:d8:d6:f7: cd:d3:86:8d:5a:18:6c:dd:59:3e:61:eb:1d:41:ef:ea:ef:e7: a0:61:62:de:a0:29:ff:76:97:a3:66:b0:90:8a:77:99:2b:d2: 24:09:10:ff:8a:47:6e:c5:99:e8:a4:4d:04:c7:98:ed:bf:d1: 4c:0b:2f:54:b0:a8:82:08:94:c5:05:06:3e:65:f7:a4:af:48: 68:53:18:b7:02:aa:0e:e0:97:f4:a7:75:20:90:d6:26:30:4b: b6:ba:95:56:e1:a7:ea:80:4a:b1:68:e2:22:aa:08:77:2b:d7: c3:a8:e9:39:25:6e:33:1c:58:92:45:00:f4:0f:3d:d5:de:f8: a1:3d:9c:f5:bb:48:23:ed:74:d4:b2:ab:98:6e:56:a3:74:b0: 07:9e:d4:c6:88:cf:6f:f3:7b:1c:62:70:9e:d5:81:6d:a9:e1: b4:ed:f7:6e:37:71:75:2d:ac:36:51:f2:16:96:99:66:fa:c4: 8a:fb:2e:86:8a:8e:6f:26:66:78:96:09:04:16:c8:c6:fc:53: bc:af:4f:e4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTNB QjAyNUU1NTg2MTRBNkFDODlEQ0EwMzAyREQyM0JENTk2QTI1NjAeFw0yNDA5MDQw OTE2NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyMjE1OUYyMUM3RUM5 MEE4RkFEMTEzMzA2QjVFM0EzMzlGREMxMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwK6nVkM03LKmtB1wwyzet7P9Llh/bpk/NBNqmq5rF55+207L+ 7IoKXhVsj6FdHvkz3Vkq8nOpjcZHWsGjOpeLJHpjLCLQQOnrdzO25XMSwZMt/wCT gcXWX/sROvTmkP46tVMTtMotpDsgHpqIRFge8xSCZmjXGF67Om2HB6NADIY9zCN7 V7kc0JOeojP5tew6wMoa+UhwNpc3crYRSHayh9BD5IAoMGfhkKBsmd1H/+Bq60yM WpJLxhfvTGzNO4eI1l8MftZY5VPrlaHwJzS7pil0+gVrh8Ha39ite8D7QVsePQC+ SzrM24+Tcgk16FAy63YD5eUN+Rfi0r542rK1AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUMiFZ8hx+yQqPrREzBrXjozn9wSgwHwYDVR0jBBgwFoAUU6sCXlWGFKasidyg MC3SO9WWolYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVJQ0hB TkcvVTZzQ1hsV0dGS2FzaWR5Z01DM1NPOVdXb2xZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9VNnNDWGxXR0ZLYXNpZHlnTUMzU085V1dvbFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUlDSEFORy9NaUZaOGh4LXlRcVBy UkV6QnJYam96bjl3U2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ2OMMA0GCSqGSIb3DQEBCwUAA4IBAQA7De8NZCO6Gm986t2eFc7CENzSv2FA 3jo88mZir0OQ2ygdirt66jdKSsKJiSIArpCwuk3Y1vfN04aNWhhs3Vk+YesdQe/q 7+egYWLeoCn/dpejZrCQineZK9IkCRD/ikduxZnopE0Ex5jtv9FMCy9UsKiCCJTF BQY+Zfekr0hoUxi3AqoO4Jf0p3UgkNYmMEu2upVW4afqgEqxaOIiqgh3K9fDqOk5 JW4zHFiSRQD0Dz3V3vihPZz1u0gj7XTUsquYblajdLAHntTGiM9v83scYnCe1YFt qeG07fduN3F1Law2UfIWlplm+sSK+y6Gio5vJmZ4lgkEFsjG/FO8r0/k -----END CERTIFICATE-----Generated at Fri Sep 20 09:06:43 2024 by rpki-client on console-ams.rpki-client.org