$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/42Wof98oKpuZM9fQWMbkCIyaJc0.roa File: 42Wof98oKpuZM9fQWMbkCIyaJc0.roa (raw, json) Hash identifier: wTjoNliAkDzSyYtpfmADD0IHkYpdpFAssD8N2285cRY= Subject key identifier: E3:65:A8:7F:DF:28:2A:9B:99:33:D7:D0:58:C6:E4:08:8C:9A:25:CD Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5 Certificate serial: 0C0B Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/42Wof98oKpuZM9fQWMbkCIyaJc0.roa Signing time: Mon 26 Aug 2024 05:25:16 +0000 ROA not before: Mon 26 Aug 2024 05:25:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18464 IP address blocks: 103.122.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3083 (0xc0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5 Validity Not Before: Aug 26 05:25:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E365A87FDF282A9B9933D7D058C6E4088C9A25CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:e4:2d:c3:89:a4:07:91:1a:57:c1:28:53: e4:b1:a0:a1:06:93:50:35:8e:7d:fb:d9:5b:fc:99: 13:27:6f:04:dd:b5:50:bb:9f:c9:58:f2:89:f0:cf: af:32:80:c5:16:82:91:de:f8:f2:77:fb:1c:4c:4f: 26:5a:23:19:eb:76:64:4c:07:d8:37:72:ab:68:3a: ba:55:bb:51:99:6d:e5:f6:ce:0c:a9:fc:a7:44:e7: f5:3d:72:5b:b9:f8:f1:a5:6f:62:4c:18:24:af:e2: 1f:40:fb:95:a2:9d:93:18:29:78:51:1b:4d:fb:19: ae:1a:54:2a:59:22:12:9a:7f:d5:1d:8c:0e:b0:57: 59:84:8a:9d:54:30:0a:a8:94:77:34:ad:c2:be:4a: d9:9b:4b:c4:05:e5:5b:5d:d1:ed:e8:ef:a2:46:d7: a8:66:40:42:ff:e9:79:a2:50:75:10:8f:3c:94:2e: 0d:62:d5:f4:79:c0:96:0f:35:32:7d:20:5b:1a:27: 71:18:68:23:58:82:3a:62:2b:6f:22:2f:aa:29:ab: ac:b7:ab:ad:2b:09:69:b7:3c:47:84:8b:c8:44:66: ba:70:e7:a0:7a:a6:44:4d:65:2c:0d:4b:1a:ef:5e: 81:06:6c:c3:86:b5:4b:96:be:0f:be:27:f8:f8:f3: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:65:A8:7F:DF:28:2A:9B:99:33:D7:D0:58:C6:E4:08:8C:9A:25:CD X509v3 Authority Key Identifier: keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/42Wof98oKpuZM9fQWMbkCIyaJc0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.22.0/23 Signature Algorithm: sha256WithRSAEncryption 89:c2:81:d2:3f:5e:b5:a3:0d:bc:bc:9a:70:43:57:48:e6:f7: 6b:17:9f:00:ac:f3:f9:7e:21:e2:9a:b2:be:26:eb:e6:81:07: 50:c9:3b:2d:b4:27:93:57:c4:6b:f2:2e:3b:11:a5:2a:89:a7: f6:49:84:66:90:da:5a:e7:40:9e:5c:50:21:f6:5f:ad:43:91: 6b:b7:b3:f7:c4:04:3f:37:ab:44:25:a1:ef:b2:3c:25:2b:17: c9:4e:83:1d:90:08:fe:02:52:13:4d:73:db:a7:b8:b1:f3:bd: 42:77:32:74:0b:48:fb:28:00:80:3d:e5:65:48:10:ea:50:7a: 7d:11:9c:e1:62:2c:84:ec:df:e7:1c:57:2b:07:dc:f6:4f:ea: 18:e0:3c:2f:8a:a7:7e:2f:37:62:52:80:b4:6d:d5:85:f8:20: d1:ad:33:ae:85:c7:be:ae:5b:67:0e:40:ce:c5:37:4c:f6:a0: 21:a7:51:79:b5:0e:61:8d:14:d4:79:56:c4:8c:9e:64:86:f6: ea:4d:2b:fd:21:b7:9e:fc:2a:8a:70:7d:30:20:90:b8:6e:15: 5d:8d:3b:90:c6:5f:ea:4e:d0:06:c6:92:6d:bc:3a:f4:ab:fb: 2a:9b:89:88:8a:99:24:df:89:6b:45:a0:8f:4a:22:30:63:d7: e9:a7:3e:c6 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDAswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkz RjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVDNTAeFw0yNDA4MjYw NTI1MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzNjVBODdGREYyODJB OUI5OTMzRDdEMDU4QzZFNDA4OEM5QTI1Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPvOQtw4mkB5EaV8EoU+SxoKEGk1A1jn372Vv8mRMnbwTdtVC7 n8lY8onwz68ygMUWgpHe+PJ3+xxMTyZaIxnrdmRMB9g3cqtoOrpVu1GZbeX2zgyp /KdE5/U9clu5+PGlb2JMGCSv4h9A+5WinZMYKXhRG037Ga4aVCpZIhKaf9UdjA6w V1mEip1UMAqolHc0rcK+StmbS8QF5Vtd0e3o76JG16hmQEL/6XmiUHUQjzyULg1i 1fR5wJYPNTJ9IFsaJ3EYaCNYgjpiK28iL6opq6y3q60rCWm3PEeEi8hEZrpw56B6 pkRNZSwNSxrvXoEGbMOGtUuWvg++J/j481rBAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQU42Wof98oKpuZM9fQWMbkCIyaJc0wHwYDVR0jBBgwFoAUmT9ygPH5tlQ53WWt +2jKDWyZvsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJB SE9TVC9tVDl5Z1BINXRsUTUzV1d0LTJqS0RXeVp2c1UuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBS1VSQUhPU1QvNDJXb2Y5OG9L cHVaTTlmUVdNYmtDSXlhSmMwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWd6FjANBgkqhkiG9w0BAQsFAAOCAQEAicKB0j9etaMNvLyacENXSOb3 axefAKzz+X4h4pqyvibr5oEHUMk7LbQnk1fEa/IuOxGlKomn9kmEZpDaWudAnlxQ IfZfrUORa7ez98QEPzerRCWh77I8JSsXyU6DHZAI/gJSE01z26e4sfO9QncydAtI +ygAgD3lZUgQ6lB6fRGc4WIshOzf5xxXKwfc9k/qGOA8L4qnfi83YlKAtG3Vhfgg 0a0zroXHvq5bZw5AzsU3TPagIadRebUOYY0U1HlWxIyeZIb26k0r/SG3nvwqinB9 MCCQuG4VXY07kMZf6k7QBsaSbbw69Kv7KpuJiIqZJN+Ja0Wgj0oiMGPX6ac+xg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org