$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RENREN/2VlP-NfohdYu2M_95fI96CTFuYA.roa File: 2VlP-NfohdYu2M_95fI96CTFuYA.roa (raw, json) Hash identifier: tyB2opPB/LnRZwLjJEfynCfd7KxDzJ0rEKDZ4Xc5oGM= Subject key identifier: D9:59:4F:F8:D7:E8:85:D6:2E:D8:CF:FD:E5:F2:3D:E8:24:C5:B9:80 Certificate issuer: /CN=DB27F7B21D588E1F393973F41C56CA41F8099334 Certificate serial: F8 Authority key identifier: DB:27:F7:B2:1D:58:8E:1F:39:39:73:F4:1C:56:CA:41:F8:09:93:34 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2VlP-NfohdYu2M_95fI96CTFuYA.roa Signing time: Mon 26 Aug 2024 05:25:13 +0000 ROA not before: Mon 26 Aug 2024 05:25:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.69.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB27F7B21D588E1F393973F41C56CA41F8099334 Validity Not Before: Aug 26 05:25:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D9594FF8D7E885D62ED8CFFDE5F23DE824C5B980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:a8:d3:71:b6:45:d3:73:b0:77:ca:e5:be: 94:ad:d3:13:b7:58:88:c3:d0:28:09:72:38:21:ae: 58:33:3f:39:f7:a4:c0:a3:d0:b0:df:98:17:2b:7f: 85:a5:74:21:f5:55:64:e7:d2:bd:dc:52:70:1d:0b: e2:01:4d:42:a8:46:fd:be:c0:70:df:2f:c0:1f:5c: fd:5e:ec:3f:72:3c:74:8b:ec:24:b7:80:aa:2d:47: 7b:84:29:4e:e1:36:41:d7:10:b4:7a:b5:78:a5:cf: 78:ab:0d:34:e5:9a:ca:e2:76:7c:09:f1:8b:76:6b: 3c:3f:8d:e1:a6:38:7a:87:c4:7a:dd:74:f3:19:c9: bb:f7:5f:be:56:1c:df:71:49:1d:c1:3f:e5:6a:1d: d0:a7:e3:f3:a2:c8:db:3b:90:bb:d3:17:e3:92:21: 38:56:72:bc:64:81:85:b8:b0:7f:7d:85:d0:a4:49: 38:60:2b:de:88:19:ea:99:e6:3a:6b:f1:f1:94:b7: 1c:3f:8a:d0:47:48:7f:83:9f:0a:65:fb:21:e2:9b: 2c:42:70:95:4d:fd:5d:10:bb:32:d6:84:b9:e8:54: 02:77:b3:1b:75:c4:d0:a4:74:74:dd:4c:1f:78:e0: db:61:e1:bb:f4:a8:1e:6d:bb:49:08:21:67:90:63: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:59:4F:F8:D7:E8:85:D6:2E:D8:CF:FD:E5:F2:3D:E8:24:C5:B9:80 X509v3 Authority Key Identifier: keyid:DB:27:F7:B2:1D:58:8E:1F:39:39:73:F4:1C:56:CA:41:F8:09:93:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2yf3sh1Yjh85OXP0HFbKQfgJkzQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RENREN/2VlP-NfohdYu2M_95fI96CTFuYA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.69.48.0/23 Signature Algorithm: sha256WithRSAEncryption a4:56:4f:23:a0:4c:a5:4c:8b:8b:d7:01:c0:bd:c8:c1:c7:4c: 60:87:b5:ff:61:72:17:ae:ad:0c:21:bb:3f:b9:46:bc:e1:a8: 63:39:98:d9:74:7f:a3:ed:49:5f:bc:50:07:ce:2a:36:ae:bc: bf:f0:55:4c:f5:08:e7:18:04:09:f0:63:15:96:07:d4:48:f3: e0:1c:95:b6:de:d5:a7:fe:91:34:47:80:62:48:5c:97:18:0e: 00:e2:12:13:28:ca:c0:d1:fc:be:ae:9a:56:fb:a1:25:fe:35: 9c:91:5a:c3:28:5b:cd:09:1d:71:3e:5b:c9:b0:15:0a:f5:03: d5:a5:5b:92:86:6f:a5:c1:19:61:d3:9f:65:7d:2f:8b:66:cb: 9f:49:cd:71:b3:3d:45:3a:d8:61:10:bc:57:5e:f4:5a:a1:44: 50:c4:24:97:b9:d5:41:93:38:c7:3d:a1:2c:9b:37:7c:70:0a: f5:fa:3d:fd:95:ea:fa:fa:9b:39:c4:0b:14:62:71:72:ba:ed: 5e:f9:18:86:95:9d:c0:ab:2b:02:ec:e6:e0:e1:b7:30:69:b2: d1:b7:25:58:0e:2d:e1:8c:25:10:b0:e6:56:23:e4:64:c1:4a: c2:3b:71:0a:a6:ec:10:e6:f4:0c:8a:57:b1:82:54:74:45:20: 07:d1:b3:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREIy N0Y3QjIxRDU4OEUxRjM5Mzk3M0Y0MUM1NkNBNDFGODA5OTMzNDAeFw0yNDA4MjYw NTI1MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5NTk0RkY4RDdFODg1 RDYyRUQ4Q0ZGREU1RjIzREU4MjRDNUI5ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7I6jTcbZF03Owd8rlvpSt0xO3WIjD0CgJcjghrlgzPzn3pMCj 0LDfmBcrf4WldCH1VWTn0r3cUnAdC+IBTUKoRv2+wHDfL8AfXP1e7D9yPHSL7CS3 gKotR3uEKU7hNkHXELR6tXilz3irDTTlmsridnwJ8Yt2azw/jeGmOHqHxHrddPMZ ybv3X75WHN9xSR3BP+VqHdCn4/OiyNs7kLvTF+OSIThWcrxkgYW4sH99hdCkSThg K96IGeqZ5jpr8fGUtxw/itBHSH+Dnwpl+yHimyxCcJVN/V0QuzLWhLnoVAJ3sxt1 xNCkdHTdTB944Nth4bv0qB5tu0kIIWeQY+HbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU2VlP+NfohdYu2M/95fI96CTFuYAwHwYDVR0jBBgwFoAU2yf3sh1Yjh85OXP0 HFbKQfgJkzQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUkVOUkVO LzJ5ZjNzaDFZamg4NU9YUDBIRmJLUWZnSmt6US5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvMnlmM3NoMVlqaDg1T1hQMEhGYktRZmdKa3pRLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUkVOUkVOLzJWbFAtTmZvaGRZdTJNXzk1 Zkk5NkNURnVZQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn RTAwDQYJKoZIhvcNAQELBQADggEBAKRWTyOgTKVMi4vXAcC9yMHHTGCHtf9hcheu rQwhuz+5RrzhqGM5mNl0f6PtSV+8UAfOKjauvL/wVUz1COcYBAnwYxWWB9RI8+Ac lbbe1af+kTRHgGJIXJcYDgDiEhMoysDR/L6umlb7oSX+NZyRWsMoW80JHXE+W8mw FQr1A9WlW5KGb6XBGWHTn2V9L4tmy59JzXGzPUU62GEQvFde9FqhRFDEJJe51UGT OMc9oSybN3xwCvX6Pf2V6vr6mznECxRicXK67V75GIaVncCrKwLs5uDhtzBpstG3 JVgOLeGMJRCw5lYj5GTBSsI7cQqm7BDm9AyKV7GCVHRFIAfRs2A= -----END CERTIFICATE-----Generated at Fri Sep 20 09:06:44 2024 by rpki-client on console-ams.rpki-client.org