$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/3fbKXNzCOaJvXfvMNI0Krujy0qo.roa File: 3fbKXNzCOaJvXfvMNI0Krujy0qo.roa (raw, json) Hash identifier: DOf8LdW9a1RrWGxAibhsQSa3ZrVxIWR8N8fJwZx+w3s= Subject key identifier: DD:F6:CA:5C:DC:C2:39:A2:6F:5D:FB:CC:34:8D:0A:AE:E8:F2:D2:AA Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5 Certificate serial: 0B21 Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/3fbKXNzCOaJvXfvMNI0Krujy0qo.roa Signing time: Sat 07 Oct 2023 08:03:45 +0000 ROA not before: Sat 07 Oct 2023 08:03:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18464 IP address blocks: 103.122.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 01:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5 Validity Not Before: Oct 7 08:03:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DDF6CA5CDCC239A26F5DFBCC348D0AAEE8F2D2AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:6b:46:82:dd:ca:b3:1b:e4:10:fd:ef:c6: b4:b9:31:bf:d9:33:75:82:5e:b6:4a:d7:85:72:72: fa:65:00:4e:1c:3c:0a:42:c8:de:be:ec:d0:5e:36: 07:24:6f:ff:cc:7b:cf:45:91:b4:6a:94:85:fd:49: 02:ec:ef:37:f2:3a:de:a7:12:ef:d9:14:9d:f6:4f: 06:37:a4:47:89:9a:f2:9f:ae:79:05:27:2b:db:fb: 9a:eb:c6:65:8c:e8:ec:c2:96:01:98:af:ae:41:c0: c4:5c:5a:44:8d:39:a3:35:f6:f7:61:16:f0:d8:6b: 20:4d:4f:aa:3a:35:c7:be:91:99:05:ab:e3:6a:54: 39:43:73:9e:bb:a5:d2:4f:b1:9e:a9:61:75:89:01: b7:18:a4:cd:ce:da:be:67:23:f1:df:47:c5:df:14: 44:39:1d:91:03:0b:72:1f:c6:f5:86:02:4e:68:9e: 81:a5:6f:90:4e:08:84:36:4e:00:7e:ea:ce:b1:c9: 4c:3c:3a:b6:15:e9:59:1f:f3:2a:31:92:d1:9f:08: ae:4a:39:70:3b:0c:d8:29:32:f6:2b:11:2e:b1:23: c2:30:0b:8d:4c:59:d1:94:57:cb:8d:03:2a:58:98: e8:46:15:33:13:74:bf:5e:31:7f:eb:e8:4b:29:15: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F6:CA:5C:DC:C2:39:A2:6F:5D:FB:CC:34:8D:0A:AE:E8:F2:D2:AA X509v3 Authority Key Identifier: keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/3fbKXNzCOaJvXfvMNI0Krujy0qo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.23.0/24 Signature Algorithm: sha256WithRSAEncryption b8:d9:a8:32:6e:00:84:43:63:d0:61:7f:44:ed:35:df:49:cf: 7e:f1:ac:a0:39:a6:4e:ef:57:05:38:28:1d:c0:41:f7:04:e0: 99:97:76:a6:b3:24:d7:6a:45:76:90:c3:2e:0e:76:9e:40:b8: e8:64:27:d2:3e:05:af:5d:c4:63:63:77:de:b6:d9:72:06:1a: 0e:c4:b2:e1:6f:90:a8:f4:e3:34:cb:dc:16:a0:e1:60:35:c7: 5d:9f:a6:e9:ca:d1:cf:a7:44:de:44:f9:32:40:ee:5a:99:dc: a1:2d:c5:79:35:ae:2c:9a:83:94:a7:3e:ad:61:37:f7:d6:21: d5:88:d9:e5:88:01:a5:ee:03:3c:b1:4d:2a:f9:4a:4e:95:50: 23:ac:41:b0:61:bf:cf:fb:f7:94:a8:f7:09:13:6d:96:92:89: 03:07:69:ae:dd:2d:83:0a:a9:7e:3b:21:cb:26:46:f8:59:7f: a0:d0:93:f0:08:70:39:60:11:e8:3a:b5:0c:e2:27:94:9e:30: 9b:4a:db:35:66:2d:c5:90:47:80:87:71:49:2c:38:01:9a:75: 61:6f:d4:1f:f6:35:f4:a5:1e:1c:2d:98:9c:8f:15:2f:e1:13: c3:ff:a0:f8:05:7a:50:57:f9:4b:8f:f2:cc:89:28:a4:af:7c: 33:b6:28:85 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkz RjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVDNTAeFw0yMzEwMDcw ODAzNDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERERjZDQTVDRENDMjM5 QTI2RjVERkJDQzM0OEQwQUFFRThGMkQyQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7DmtGgt3KsxvkEP3vxrS5Mb/ZM3WCXrZK14VycvplAE4cPApC yN6+7NBeNgckb//Me89FkbRqlIX9SQLs7zfyOt6nEu/ZFJ32TwY3pEeJmvKfrnkF Jyvb+5rrxmWM6OzClgGYr65BwMRcWkSNOaM19vdhFvDYayBNT6o6Nce+kZkFq+Nq VDlDc567pdJPsZ6pYXWJAbcYpM3O2r5nI/HfR8XfFEQ5HZEDC3IfxvWGAk5onoGl b5BOCIQ2TgB+6s6xyUw8OrYV6Vkf8yoxktGfCK5KOXA7DNgpMvYrES6xI8IwC41M WdGUV8uNAypYmOhGFTMTdL9eMX/r6EspFXmRAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU3fbKXNzCOaJvXfvMNI0Krujy0qowHwYDVR0jBBgwFoAUmT9ygPH5tlQ53WWt +2jKDWyZvsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJB SE9TVC9tVDl5Z1BINXRsUTUzV1d0LTJqS0RXeVp2c1UuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBS1VSQUhPU1QvM2ZiS1hOekNP YUp2WGZ2TU5JMEtydWp5MHFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGd6FzANBgkqhkiG9w0BAQsFAAOCAQEAuNmoMm4AhENj0GF/RO0130nP fvGsoDmmTu9XBTgoHcBB9wTgmZd2prMk12pFdpDDLg52nkC46GQn0j4Fr13EY2N3 3rbZcgYaDsSy4W+QqPTjNMvcFqDhYDXHXZ+m6crRz6dE3kT5MkDuWpncoS3FeTWu LJqDlKc+rWE399Yh1YjZ5YgBpe4DPLFNKvlKTpVQI6xBsGG/z/v3lKj3CRNtlpKJ Awdprt0tgwqpfjshyyZG+Fl/oNCT8AhwOWAR6Dq1DOInlJ4wm0rbNWYtxZBHgIdx SSw4AZp1YW/UH/Y19KUeHC2YnI8VL+ETw/+g+AV6UFf5S4/yzIkopK98M7YohQ== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org