$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/BZ9DWuJXoDv4y7eXdvSPrCpUWiM.roa File: BZ9DWuJXoDv4y7eXdvSPrCpUWiM.roa (raw, json) Hash identifier: vpG3bt/AM/E8Zd7aCrgZar9f22BciwWR1ZKfcKiBrDI= Subject key identifier: 05:9F:43:5A:E2:57:A0:3B:F8:CB:B7:97:76:F4:8F:AC:2A:54:5A:23 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 12A2 Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/BZ9DWuJXoDv4y7eXdvSPrCpUWiM.roa Signing time: Mon 12 Feb 2024 16:30:37 +0000 ROA not before: Mon 12 Feb 2024 16:30:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131631 IP address blocks: 103.123.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 01:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4770 (0x12a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Feb 12 16:30:37 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=059F435AE257A03BF8CBB79776F48FAC2A545A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:21:26:93:4e:07:2b:e2:50:e3:dd:de:78: 56:00:a8:e5:78:47:8f:82:db:5f:a7:16:a9:c8:ff: 58:55:9f:0c:8c:e7:00:9c:a2:6b:11:c2:ce:4c:bb: 01:ec:b0:e7:9f:54:00:ef:6c:7c:8c:ac:82:48:52: d2:3b:88:65:c7:d5:62:b9:0a:64:aa:db:78:27:9e: af:9a:10:7f:b0:e3:fd:87:85:26:ac:a7:df:e2:ac: 19:84:ba:91:d8:8d:48:17:df:5d:5f:35:f3:ce:57: 85:90:78:da:41:6c:62:aa:60:86:83:c0:c0:c6:6c: 0d:41:af:d4:32:77:8a:cc:4d:2d:a4:6f:d6:a9:35: f2:24:0b:b2:5d:eb:b0:91:80:3f:7f:7a:1e:3d:61: bc:7f:05:09:c6:bc:9b:de:86:08:51:4d:d3:1c:08: 11:33:22:fe:6d:95:a9:6c:8a:f5:42:84:9b:90:01: 56:7e:93:4e:a9:13:ee:0d:80:14:9d:b3:71:c8:ca: 1b:95:ce:d3:0e:a1:93:d5:c6:06:d5:23:fe:a7:dc: c0:bc:5d:af:2d:e7:17:d3:0f:74:df:c6:d2:67:8c: dd:bb:4a:a5:a0:da:6b:d2:91:0d:27:80:7d:fb:0b: b3:35:50:9d:4c:69:8d:3b:28:d8:4e:60:72:a6:6f: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9F:43:5A:E2:57:A0:3B:F8:CB:B7:97:76:F4:8F:AC:2A:54:5A:23 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/BZ9DWuJXoDv4y7eXdvSPrCpUWiM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.218.0/24 Signature Algorithm: sha256WithRSAEncryption 68:e6:1b:a0:a0:eb:50:6f:b0:88:8b:3b:2e:01:b7:0d:7e:e6: c1:d3:ac:8f:ce:06:f0:5b:b3:a4:9c:ec:73:e2:86:27:ec:61: 64:d8:7f:cf:91:c4:cb:0d:ee:7d:f4:8d:4e:51:20:17:0a:b2: 23:dd:fe:97:2d:ee:91:81:2b:8b:40:7e:ea:ed:4b:a9:36:ce: 83:5b:76:12:fd:64:a7:f6:b1:94:85:72:18:e5:7c:d3:b6:a0: a9:45:ec:1e:0d:ff:3a:8f:1e:f0:4e:fd:3d:6b:7f:4e:25:fa: cf:a2:e0:57:aa:21:2b:ce:8b:25:8c:b0:45:9c:68:eb:5d:a7: b2:f4:ab:06:08:27:dd:02:82:04:e1:c8:8e:89:0c:2d:79:81: 60:c9:43:03:4a:b4:32:27:6b:e6:30:a6:6c:08:08:c1:ab:f2: 44:5e:3f:13:6a:9a:b3:96:11:f6:dc:a3:0d:3d:c4:62:e9:8a: e2:39:00:f7:7f:0b:5c:07:23:2b:b5:11:0e:4e:91:95:dd:c2: 5b:77:e0:b4:56:da:69:6a:34:5c:f6:7f:41:5f:7b:e4:f9:0f: d5:9d:e0:cf:87:c9:9f:b1:d9:d7:1d:45:85:7d:db:89:99:29: 62:55:a7:e2:41:42:03:b6:b1:29:f2:e4:e2:bc:06:d0:10:1d: 43:b3:f9:7f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDAyMTIx NjMwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA1OUY0MzVBRTI1N0Ew M0JGOENCQjc5Nzc2RjQ4RkFDMkE1NDVBMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdgCEmk04HK+JQ493eeFYAqOV4R4+C21+nFqnI/1hVnwyM5wCc omsRws5MuwHssOefVADvbHyMrIJIUtI7iGXH1WK5CmSq23gnnq+aEH+w4/2HhSas p9/irBmEupHYjUgX311fNfPOV4WQeNpBbGKqYIaDwMDGbA1Br9Qyd4rMTS2kb9ap NfIkC7Jd67CRgD9/eh49Ybx/BQnGvJvehghRTdMcCBEzIv5tlalsivVChJuQAVZ+ k06pE+4NgBSds3HIyhuVztMOoZPVxgbVI/6n3MC8Xa8t5xfTD3TfxtJnjN27SqWg 2mvSkQ0ngH37C7M1UJ1MaY07KNhOYHKmbzLVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUBZ9DWuJXoDv4y7eXdvSPrCpUWiMwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9CWjlEV3VKWG9EdjR5N2VYZHZT UHJDcFVXaU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3va MA0GCSqGSIb3DQEBCwUAA4IBAQBo5hugoOtQb7CIizsuAbcNfubB06yPzgbwW7Ok nOxz4oYn7GFk2H/PkcTLDe599I1OUSAXCrIj3f6XLe6RgSuLQH7q7UupNs6DW3YS /WSn9rGUhXIY5XzTtqCpReweDf86jx7wTv09a39OJfrPouBXqiErzosljLBFnGjr Xaey9KsGCCfdAoIE4ciOiQwteYFgyUMDSrQyJ2vmMKZsCAjBq/JEXj8TapqzlhH2 3KMNPcRi6YriOQD3fwtcByMrtREOTpGV3cJbd+C0VtppajRc9n9BX3vk+Q/VneDP h8mfsdnXHUWFfduJmSliVafiQUIDtrEp8uTivAbQEB1Ds/l/ -----END CERTIFICATE-----Generated at Sat Jun 8 09:03:25 2024 by rpki-client on console-ams.rpki-client.org