$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/1egI-mDSxArOgBV3lLuc3lRL_h4.roa File: 1egI-mDSxArOgBV3lLuc3lRL_h4.roa (raw, json) Hash identifier: Z82HydLwq9WUmWvay7XBfo0Gdv+fp2rQc5tr+68I57I= Subject key identifier: D5:E8:08:FA:60:D2:C4:0A:CE:80:15:77:94:BB:9C:DE:54:4B:FE:1E Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 136A Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/1egI-mDSxArOgBV3lLuc3lRL_h4.roa Signing time: Mon 26 Aug 2024 05:25:33 +0000 ROA not before: Mon 26 Aug 2024 05:25:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 14618 IP address blocks: 103.123.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Oct 2024 23:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4970 (0x136a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Aug 26 05:25:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5E808FA60D2C40ACE80157794BB9CDE544BFE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:ad:5f:45:9c:b9:a8:9d:e5:6c:93:cc:ed: ae:02:33:47:56:02:0c:0f:75:87:1a:ad:4b:53:e1: a5:f0:bf:bd:ed:26:d5:b6:55:98:8a:3b:e9:1f:53: 28:01:68:cd:0f:10:cd:f9:d0:7c:3a:69:1c:5c:35: 54:29:0e:ea:0c:fa:11:0d:48:54:73:93:ef:c1:a4: d6:b3:72:76:f0:02:61:e9:03:35:3a:23:38:dd:ff: c9:81:1e:14:b9:12:76:cc:32:d9:c3:74:0f:21:d8: 16:a7:75:df:5e:fe:eb:fe:ce:72:2c:08:70:41:31: a3:09:3c:f3:ec:09:7a:fd:4b:ce:c5:72:f5:21:91: 00:7f:17:fb:87:73:60:b0:3e:5c:3e:70:52:d5:68: 44:f5:43:19:f0:a7:21:bb:f3:28:38:25:cf:57:2c: 47:fd:f1:f9:b4:82:bb:63:fe:68:60:31:ed:4b:95: a6:54:f5:42:ce:d2:7c:7a:ee:7f:27:ef:95:db:b6: 4c:63:1f:5e:69:ed:9a:7b:37:c2:41:c9:e8:0c:6b: e8:a3:7e:2a:d2:e8:32:e2:47:ee:d5:ea:86:7e:5d: ed:73:78:da:f1:05:df:84:b2:9c:7a:fb:ba:e8:60: b5:95:a4:e5:81:0c:d8:f9:c6:c6:98:74:7e:aa:5d: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E8:08:FA:60:D2:C4:0A:CE:80:15:77:94:BB:9C:DE:54:4B:FE:1E X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/1egI-mDSxArOgBV3lLuc3lRL_h4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.217.0/24 Signature Algorithm: sha256WithRSAEncryption b2:31:df:7d:c7:9f:c3:85:31:60:30:03:0a:9a:89:dd:6c:c7: 24:21:e4:fa:0d:d3:64:09:13:6d:c4:c0:cd:1b:36:f2:95:60: 4f:9a:c4:a2:83:f2:41:ae:49:b3:c2:7b:12:bd:ea:9c:fd:50: b7:dc:a7:23:e6:b4:88:b0:f2:25:25:94:64:b1:5a:af:7d:55: 83:0c:8e:7e:44:83:14:f6:29:30:db:50:47:95:19:85:cc:55: 9c:6d:ae:a7:a5:e7:fa:67:88:19:0c:86:08:bb:68:5f:c5:cc: e2:25:08:62:9c:8a:04:fe:4a:5b:c0:43:16:7a:ec:53:bd:f4: 16:cb:87:8f:23:5a:5c:1d:28:02:8b:62:fd:e2:29:3e:97:1f: 53:66:96:e8:ec:07:c6:a1:f6:b3:b8:9c:92:19:08:3b:f3:7d: 12:8c:c0:48:67:19:14:35:8d:ea:e2:42:b3:46:56:72:4a:d3: 04:39:cd:f0:c6:f2:32:15:e3:99:11:8c:ca:67:cc:b0:bd:83: 70:ba:1c:05:59:e8:f7:54:40:7a:1d:44:7b:97:f7:cb:95:23: d2:29:e0:e3:9b:9a:82:5f:aa:e2:36:15:02:d9:dc:50:27:7d: 15:d4:93:01:83:07:c7:ce:f5:56:53:92:d6:8b:f1:a3:8e:1f: a8:12:8b:48 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA4MjYw NTI1MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1RTgwOEZBNjBEMkM0 MEFDRTgwMTU3Nzk0QkI5Q0RFNTQ0QkZFMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDK/q1fRZy5qJ3lbJPM7a4CM0dWAgwPdYcarUtT4aXwv73tJtW2 VZiKO+kfUygBaM0PEM350Hw6aRxcNVQpDuoM+hENSFRzk+/BpNazcnbwAmHpAzU6 Izjd/8mBHhS5EnbMMtnDdA8h2Bandd9e/uv+znIsCHBBMaMJPPPsCXr9S87FcvUh kQB/F/uHc2CwPlw+cFLVaET1QxnwpyG78yg4Jc9XLEf98fm0grtj/mhgMe1LlaZU 9ULO0nx67n8n75XbtkxjH15p7Zp7N8JByegMa+ijfirS6DLiR+7V6oZ+Xe1zeNrx Bd+Espx6+7roYLWVpOWBDNj5xsaYdH6qXQivAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU1egI+mDSxArOgBV3lLuc3lRL/h4wHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC8xZWdJLW1EU3hBck9nQlYzbEx1 YzNsUkxfaDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vZ MA0GCSqGSIb3DQEBCwUAA4IBAQCyMd99x5/DhTFgMAMKmondbMckIeT6DdNkCRNt xMDNGzbylWBPmsSig/JBrkmzwnsSveqc/VC33Kcj5rSIsPIlJZRksVqvfVWDDI5+ RIMU9ikw21BHlRmFzFWcba6npef6Z4gZDIYIu2hfxcziJQhinIoE/kpbwEMWeuxT vfQWy4ePI1pcHSgCi2L94ik+lx9TZpbo7AfGofazuJySGQg7830SjMBIZxkUNY3q 4kKzRlZyStMEOc3wxvIyFeOZEYzKZ8ywvYNwuhwFWej3VEB6HUR7l/fLlSPSKeDj m5qCX6riNhUC2dxQJ30V1JMBgwfHzvVWU5LWi/Gjjh+oEotI -----END CERTIFICATE-----Generated at Tue Oct 22 19:06:30 2024 by rpki-client on console-fra.rpki-client.org