$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PNI/SfA2jR5MKMVYiBT_LePvSbMWKfY.roa File: SfA2jR5MKMVYiBT_LePvSbMWKfY.roa (raw, json) Hash identifier: tMQg/zFJWIBjE5Rq867fJyC48hZXQiIdZ9ZlYHQtnvk= Subject key identifier: 49:F0:36:8D:1E:4C:28:C5:58:88:14:FF:2D:E3:EF:49:B3:16:29:F6 Certificate issuer: /CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Certificate serial: 0860 Authority key identifier: 31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/SfA2jR5MKMVYiBT_LePvSbMWKfY.roa Signing time: Mon 26 Aug 2024 05:24:10 +0000 ROA not before: Mon 26 Aug 2024 05:24:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38042 IP address blocks: 103.148.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 15:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3118C334DA58D7C0021DCAACA881DFB9DC8365FF Validity Not Before: Aug 26 05:24:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=49F0368D1E4C28C5588814FF2DE3EF49B31629F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:04:4e:1d:32:7c:96:0a:59:18:5a:5a:83: 2f:f5:de:d8:62:cf:14:e8:0c:ef:31:0f:2d:03:f5: 87:c8:f8:df:47:18:6e:47:a0:58:71:61:76:66:c9: 56:50:8d:7a:ec:f4:29:68:91:cb:71:90:ac:2f:43: d4:57:53:10:81:e1:87:20:0c:14:36:43:5a:91:bb: 51:36:bb:07:2d:45:61:fb:f7:cb:99:b0:53:e8:7c: 99:b7:14:41:2a:99:87:b8:62:21:e0:a4:99:fa:80: 8b:7f:89:73:6c:b9:08:27:02:ad:ff:26:ce:71:b7: 2a:04:2d:9d:fc:02:b6:97:fb:ec:77:5d:92:53:80: bc:2d:31:c9:44:48:b8:8c:b0:9f:c3:d0:22:1c:d4: ae:04:e9:fb:7b:f4:0c:83:b9:33:1b:6a:ac:bf:38: b7:c7:05:17:00:2f:82:b1:1a:8f:ba:94:4c:4b:b0: d3:57:58:8d:55:14:ef:08:70:68:fb:66:cd:f7:40: 64:0f:7b:e0:73:80:ba:05:b9:0f:59:b7:93:c8:25: 4b:d8:97:57:e4:4e:86:8a:00:35:20:aa:cf:cc:f5: 2e:39:49:24:36:72:e8:ee:c0:13:25:bc:96:fa:53: 64:4e:82:a4:2d:7b:c9:3d:95:b5:f2:00:d4:d8:73: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F0:36:8D:1E:4C:28:C5:58:88:14:FF:2D:E3:EF:49:B3:16:29:F6 X509v3 Authority Key Identifier: keyid:31:18:C3:34:DA:58:D7:C0:02:1D:CA:AC:A8:81:DF:B9:DC:83:65:FF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/MRjDNNpY18ACHcqsqIHfudyDZf8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MRjDNNpY18ACHcqsqIHfudyDZf8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PNI/SfA2jR5MKMVYiBT_LePvSbMWKfY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.148.72.0/23 Signature Algorithm: sha256WithRSAEncryption 37:86:ce:c1:06:95:6a:fd:4a:9c:f4:2d:a6:33:69:77:a9:72: 30:04:94:11:09:cc:4a:c0:bd:c2:0e:9e:cd:9b:3d:1b:4d:65: 6b:ea:8b:77:61:08:d2:fd:b4:ec:2d:00:43:45:e3:2c:4f:a5: 9f:91:74:db:a8:c4:4a:ce:83:8c:1f:34:d3:16:9c:d4:f0:46: 81:84:06:a6:7a:7a:0d:25:1d:77:d0:f0:2d:80:60:46:fb:2a: 43:a0:15:35:83:98:fa:40:94:9a:13:ca:f9:cb:c1:15:cf:c8: 36:fa:2e:32:c9:20:85:c0:29:f2:bf:4b:a8:2a:c8:f2:38:b8: a8:09:ab:a0:7b:f2:a3:e1:cf:34:61:9e:e7:ea:8d:e3:88:a6: d2:81:67:b9:d2:0a:ba:9d:15:38:20:fc:9f:ca:a2:e7:68:8d: 5b:f9:b4:c7:ff:a4:3c:f7:d9:a7:33:22:34:15:23:df:d6:7c: 44:3d:37:4e:5a:f1:42:9b:f4:53:28:0b:de:ae:fb:54:8d:58: 2f:b5:27:89:44:6d:c6:99:1a:43:68:30:9f:0d:de:95:37:d0: bc:60:23:5b:29:6f:f5:7f:e8:ca:fd:fa:3e:d4:5f:42:d5:48: 11:7a:b3:d7:59:0f:90:e5:31:e3:9b:13:71:33:65:51:24:ec: 49:c4:0e:df -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEx OEMzMzREQTU4RDdDMDAyMURDQUFDQTg4MURGQjlEQzgzNjVGRjAeFw0yNDA4MjYw NTI0MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ5RjAzNjhEMUU0QzI4 QzU1ODg4MTRGRjJERTNFRjQ5QjMxNjI5RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5QQROHTJ8lgpZGFpagy/13thizxToDO8xDy0D9YfI+N9HGG5H oFhxYXZmyVZQjXrs9ClokctxkKwvQ9RXUxCB4YcgDBQ2Q1qRu1E2uwctRWH798uZ sFPofJm3FEEqmYe4YiHgpJn6gIt/iXNsuQgnAq3/Js5xtyoELZ38AraX++x3XZJT gLwtMclESLiMsJ/D0CIc1K4E6ft79AyDuTMbaqy/OLfHBRcAL4KxGo+6lExLsNNX WI1VFO8IcGj7Zs33QGQPe+BzgLoFuQ9Zt5PIJUvYl1fkToaKADUgqs/M9S45SSQ2 cujuwBMlvJb6U2ROgqQte8k9lbXyANTYcyn/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUSfA2jR5MKMVYiBT/LePvSbMWKfYwHwYDVR0jBBgwFoAUMRjDNNpY18ACHcqs qIHfudyDZf8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL01S akROTnBZMThBQ0hjcXNxSUhmdWR5RFpmOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TVJqRE5OcFkxOEFDSGNxc3FJSGZ1ZHlEWmY4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvUE5JL1NmQTJqUjVNS01WWWlCVF9MZVB2U2JN V0tmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlEgwDQYJ KoZIhvcNAQELBQADggEBADeGzsEGlWr9Spz0LaYzaXepcjAElBEJzErAvcIOns2b PRtNZWvqi3dhCNL9tOwtAENF4yxPpZ+RdNuoxErOg4wfNNMWnNTwRoGEBqZ6eg0l HXfQ8C2AYEb7KkOgFTWDmPpAlJoTyvnLwRXPyDb6LjLJIIXAKfK/S6gqyPI4uKgJ q6B78qPhzzRhnufqjeOIptKBZ7nSCrqdFTgg/J/KoudojVv5tMf/pDz32aczIjQV I9/WfEQ9N05a8UKb9FMoC96u+1SNWC+1J4lEbcaZGkNoMJ8N3pU30LxgI1spb/V/ 6Mr9+j7UX0LVSBF6s9dZD5DlMeObE3EzZVEk7EnEDt8= -----END CERTIFICATE-----Generated at Fri Sep 20 11:19:29 2024 by rpki-client on console-ams.rpki-client.org