$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/8w_mN7WXpppOF3UpEjodVHsTnZI.roa File: 8w_mN7WXpppOF3UpEjodVHsTnZI.roa (raw, json) Hash identifier: 3Cvw3TLnRs7Xrf5H3FY7MCakjWxLKoPO2pPn+dgkD3U= Subject key identifier: F3:0F:E6:37:B5:97:A6:9A:4E:17:75:29:12:3A:1D:54:7B:13:9D:92 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 1275 Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/8w_mN7WXpppOF3UpEjodVHsTnZI.roa Signing time: Tue 19 Dec 2023 16:47:04 +0000 ROA not before: Tue 19 Dec 2023 16:47:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 16509 IP address blocks: 103.123.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4725 (0x1275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Dec 19 16:47:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F30FE637B597A69A4E177529123A1D547B139D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:01:d6:1b:22:8a:96:fe:8c:4c:38:f2:c5: 4b:12:fc:c2:8b:9c:ed:06:50:8b:d2:d3:7e:fd:fe: b2:c2:80:e7:a6:8e:42:a6:10:03:ee:65:ba:e1:37: dc:7e:32:cd:5a:ce:fb:91:e4:cb:db:30:b2:59:81: 66:58:ac:58:d1:b7:e7:10:c6:ae:e0:1f:3e:3b:cb: d0:3c:2e:20:b7:14:97:c4:e3:2f:a7:43:23:2e:a9: d7:1a:a7:04:d4:fb:2a:8f:c2:8a:04:95:87:71:09: 87:cf:ea:6c:e4:3c:e2:d7:d9:f2:a5:16:21:3f:6d: 35:5c:aa:58:ed:7e:cd:0e:39:4a:61:73:1c:82:a6: f5:ef:48:fa:e2:5e:85:6b:60:2d:de:f2:77:72:67: 6e:2f:04:7a:16:9e:a0:2e:fc:98:c9:4f:70:36:ac: 7b:6e:e6:a5:32:b7:33:e5:2c:ed:82:da:62:d4:cf: ff:07:3d:ef:b7:f7:f4:d4:ee:af:96:bf:3e:42:89: 3b:3c:a8:2f:a3:bc:9d:18:d8:36:22:b2:05:8b:01: 4c:f0:39:42:b5:3c:99:14:25:41:32:3f:11:53:19: c0:20:24:d5:40:eb:3d:4e:52:28:f9:5d:11:90:bd: a8:91:ce:dd:50:ab:4e:5d:8c:3b:da:1d:1e:2d:b0: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0F:E6:37:B5:97:A6:9A:4E:17:75:29:12:3A:1D:54:7B:13:9D:92 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/8w_mN7WXpppOF3UpEjodVHsTnZI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.217.0/24 Signature Algorithm: sha256WithRSAEncryption 85:5c:d5:3e:4c:35:c4:51:17:72:0b:14:6b:82:6d:19:ef:db: e2:72:ac:a5:89:b5:7c:c0:e4:b0:f5:33:03:37:a4:79:a6:d8: af:53:71:a6:33:d7:9d:33:8f:d5:b2:63:76:4d:e2:71:32:6d: 50:86:b3:22:cb:d2:0e:27:bb:ce:e3:5a:dc:31:86:78:b0:02: 46:6b:62:0c:89:d4:20:12:3f:a2:95:32:24:d3:ed:81:93:94: 16:5a:dc:6a:fa:72:96:b0:1a:07:47:10:aa:96:1c:b7:31:dc: 4f:0e:a0:cd:17:4e:6a:cd:b5:8b:f7:35:68:fd:94:b4:ae:12: 8a:58:95:ad:b5:c9:8c:18:e7:19:d7:29:1c:16:09:9f:4b:76: ff:7b:65:7c:d8:ea:8c:95:71:8e:f2:b2:f7:d6:c7:35:c9:eb: 08:4c:da:03:4c:a3:b6:5c:cf:62:74:34:f4:c1:ab:01:5b:25: f3:99:7e:d0:cf:b1:58:61:18:8c:28:ce:92:72:c1:a6:c6:d4: 3b:46:d0:ab:60:11:06:b5:54:cf:6a:db:f8:47:5f:f3:fa:7e: 46:f3:5c:f5:5e:8c:df:e9:c0:42:f5:55:6b:e5:56:88:be:d3: 1a:2c:74:ca:ee:dd:ff:50:9b:12:ca:7d:8a:51:33:01:34:b3: 6a:ce:be:0a -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEnUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yMzEyMTkx NjQ3MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYzMEZFNjM3QjU5N0E2 OUE0RTE3NzUyOTEyM0ExRDU0N0IxMzlEOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0nwHWGyKKlv6MTDjyxUsS/MKLnO0GUIvS0379/rLCgOemjkKm EAPuZbrhN9x+Ms1azvuR5MvbMLJZgWZYrFjRt+cQxq7gHz47y9A8LiC3FJfE4y+n QyMuqdcapwTU+yqPwooElYdxCYfP6mzkPOLX2fKlFiE/bTVcqljtfs0OOUphcxyC pvXvSPriXoVrYC3e8ndyZ24vBHoWnqAu/JjJT3A2rHtu5qUytzPlLO2C2mLUz/8H Pe+39/TU7q+Wvz5CiTs8qC+jvJ0Y2DYisgWLAUzwOUK1PJkUJUEyPxFTGcAgJNVA 6z1OUij5XRGQvaiRzt1Qq05djDvaHR4tsFPbAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU8w/mN7WXpppOF3UpEjodVHsTnZIwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC84d19tTjdXWHBwcE9GM1VwRWpv ZFZIc1RuWkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vZ MA0GCSqGSIb3DQEBCwUAA4IBAQCFXNU+TDXEURdyCxRrgm0Z79vicqylibV8wOSw 9TMDN6R5ptivU3GmM9edM4/VsmN2TeJxMm1QhrMiy9IOJ7vO41rcMYZ4sAJGa2IM idQgEj+ilTIk0+2Bk5QWWtxq+nKWsBoHRxCqlhy3MdxPDqDNF05qzbWL9zVo/ZS0 rhKKWJWttcmMGOcZ1ykcFgmfS3b/e2V82OqMlXGO8rL31sc1yesITNoDTKO2XM9i dDT0wasBWyXzmX7Qz7FYYRiMKM6ScsGmxtQ7RtCrYBEGtVTPatv4R1/z+n5G81z1 Xozf6cBC9VVr5VaIvtMaLHTK7t3/UJsSyn2KUTMBNLNqzr4K -----END CERTIFICATE-----Generated at Thu May 2 22:39:42 2024 by rpki-client on console-ams.rpki-client.org