$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/vYEVpqg5XuyYbyOrODiWdMqkG-E.roa File: vYEVpqg5XuyYbyOrODiWdMqkG-E.roa (raw, json) Hash identifier: w7oCQcpJleZCkBl1yO3T2DdA1UMoTjuaoh+sqwfjQxc= Subject key identifier: BD:81:15:A6:A8:39:5E:EC:98:6F:23:AB:38:38:96:74:CA:A4:1B:E1 Certificate issuer: /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5 Certificate serial: 0AFF Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/vYEVpqg5XuyYbyOrODiWdMqkG-E.roa Signing time: Fri 01 Sep 2023 09:40:22 +0000 ROA not before: Fri 01 Sep 2023 09:40:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 48024 IP address blocks: 103.122.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5 Validity Not Before: Sep 1 09:40:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BD8115A6A8395EEC986F23AB38389674CAA41BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:67:74:51:86:c6:44:ba:da:63:30:59:0b: 64:6c:87:e3:8c:c9:ea:f0:30:85:f0:e3:7c:40:ab: 8a:ca:d4:25:2b:92:df:4d:f5:33:b7:ae:8f:7e:4e: 85:91:e2:19:68:55:ee:76:3e:c1:e6:b5:b4:3f:a4: 03:e2:eb:f0:89:ab:42:9b:5a:82:cc:c1:b9:00:44: 7e:47:94:ec:c4:57:fe:31:36:4a:e7:4a:85:37:cf: e7:ea:57:1b:3a:53:46:66:97:b6:e9:dc:5d:b9:0b: a8:f3:41:f2:ed:ac:1c:d9:74:d2:aa:ab:9e:d8:09: 03:52:a7:b7:20:16:2d:28:92:8d:85:c5:02:17:de: c0:a9:24:b4:b1:9e:2c:45:46:7b:57:cb:68:02:5d: 77:b2:ae:95:17:9d:95:79:8d:87:a7:1d:06:95:a3: fa:ef:f2:9c:a9:7c:da:e7:7c:33:0b:c9:df:92:62: 6f:e3:c1:5e:61:63:40:d5:c0:f9:33:29:41:bc:f9: bc:34:1c:d8:ff:04:e4:63:02:bc:55:c4:b1:f9:df: 7e:1e:be:7a:95:c1:e6:33:ae:2e:aa:3e:a5:cd:64: 75:a9:e7:87:9f:a3:18:1d:00:4d:ee:53:66:2c:f9: a5:65:ce:16:3d:43:a5:a5:08:4b:da:72:e0:95:ff: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:15:A6:A8:39:5E:EC:98:6F:23:AB:38:38:96:74:CA:A4:1B:E1 X509v3 Authority Key Identifier: keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/vYEVpqg5XuyYbyOrODiWdMqkG-E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.20.0/22 Signature Algorithm: sha256WithRSAEncryption 18:48:c3:0a:70:81:88:17:66:13:30:a2:da:68:7d:c7:2e:4b: c9:ed:ac:c1:c3:40:4a:9e:b8:dd:52:1b:6a:57:bd:66:91:fd: 09:d3:96:c9:4c:a9:42:9d:3f:36:5b:f2:fa:67:5b:60:02:f3: 2d:20:2a:92:ab:af:9e:0b:08:bb:24:14:65:b7:58:55:f1:31: da:63:5b:6f:87:a6:2d:9c:1d:76:bd:27:5e:fb:37:e2:0d:c1: a6:23:fd:6c:ac:e7:bf:32:46:fa:8c:35:5c:32:d4:a3:de:9b: e0:91:a4:48:bf:92:ad:ed:a4:7b:f1:05:30:fd:b2:7a:22:70: cb:72:09:99:34:5e:cd:5e:e0:e9:cd:99:eb:95:e5:e5:92:c5: 5e:81:05:02:20:b0:a8:ae:1d:26:4e:c6:08:73:a3:1f:6e:39: 7a:78:da:d7:73:c6:28:08:0a:49:5b:b7:ec:21:f7:b9:0c:16: 31:e3:ec:68:5e:c4:56:56:48:06:70:32:07:c9:8b:39:fb:8e: ba:67:ab:3c:b1:43:f8:d2:6e:95:43:9d:b4:e4:08:f4:e9:66: 42:ea:86:e9:d1:f1:7f:60:df:5b:ec:ef:25:7b:89:30:f8:15: d4:b8:12:80:70:68:97:e8:e5:88:24:67:26:2a:ed:67:8f:dd: 24:81:e6:46 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkz RjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVDNTAeFw0yMzA5MDEw OTQwMjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJEODExNUE2QTgzOTVF RUM5ODZGMjNBQjM4Mzg5Njc0Q0FBNDFCRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDAGd0UYbGRLraYzBZC2Rsh+OMyerwMIXw43xAq4rK1CUrkt9N 9TO3ro9+ToWR4hloVe52PsHmtbQ/pAPi6/CJq0KbWoLMwbkARH5HlOzEV/4xNkrn SoU3z+fqVxs6U0Zml7bp3F25C6jzQfLtrBzZdNKqq57YCQNSp7cgFi0oko2FxQIX 3sCpJLSxnixFRntXy2gCXXeyrpUXnZV5jYenHQaVo/rv8pypfNrnfDMLyd+SYm/j wV5hY0DVwPkzKUG8+bw0HNj/BORjArxVxLH5334evnqVweYzri6qPqXNZHWp54ef oxgdAE3uU2Ys+aVlzhY9Q6WlCEvacuCV/8L5AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUvYEVpqg5XuyYbyOrODiWdMqkG+EwHwYDVR0jBBgwFoAUmT9ygPH5tlQ53WWt +2jKDWyZvsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJB SE9TVC9tVDl5Z1BINXRsUTUzV1d0LTJqS0RXeVp2c1UuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBS1VSQUhPU1QvdllFVnBxZzVY dXlZYnlPck9EaVdkTXFrRy1FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmd6FDANBgkqhkiG9w0BAQsFAAOCAQEAGEjDCnCBiBdmEzCi2mh9xy5L ye2swcNASp643VIbale9ZpH9CdOWyUypQp0/Nlvy+mdbYALzLSAqkquvngsIuyQU ZbdYVfEx2mNbb4emLZwddr0nXvs34g3BpiP9bKznvzJG+ow1XDLUo96b4JGkSL+S re2ke/EFMP2yeiJwy3IJmTRezV7g6c2Z65Xl5ZLFXoEFAiCwqK4dJk7GCHOjH245 enja13PGKAgKSVu37CH3uQwWMePsaF7EVlZIBnAyB8mLOfuOumerPLFD+NJulUOd tOQI9OlmQuqG6dHxf2DfW+zvJXuJMPgV1LgSgHBol+jliCRnJirtZ4/dJIHmRg== -----END CERTIFICATE-----Generated at Mon May 6 02:29:01 2024 by rpki-client on console-fra.rpki-client.org