$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/CViv7k-guZVO7c4Rm6UfRznD2xM.roa File: CViv7k-guZVO7c4Rm6UfRznD2xM.roa (raw, json) Hash identifier: 3JaoR3ayYU4nQ3uvnTsk7aWsEdj3IK/zF0deiSt4cIY= Subject key identifier: 09:58:AF:EE:4F:A0:B9:95:4E:ED:CE:11:9B:A5:1F:47:39:C3:DB:13 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 135D Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/CViv7k-guZVO7c4Rm6UfRznD2xM.roa Signing time: Mon 26 Aug 2024 05:25:30 +0000 ROA not before: Mon 26 Aug 2024 05:25:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131631 IP address blocks: 103.123.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4957 (0x135d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Aug 26 05:25:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0958AFEE4FA0B9954EEDCE119BA51F4739C3DB13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2a:08:4d:43:76:20:8e:94:6e:e9:07:66:34: 7c:8e:2e:5e:96:23:25:3d:6d:d7:84:16:f0:76:15: 0c:c8:5f:85:fd:17:6e:fb:b3:8b:21:3e:02:e0:df: 45:75:d0:cd:4d:62:41:1e:e3:a2:41:33:ef:31:c8: 49:f1:f9:4c:82:4f:bb:7f:36:fe:f1:f5:8c:b6:64: 4b:5c:4c:f2:5f:91:73:e5:51:9a:72:d0:05:34:2e: 11:6b:22:69:07:27:83:85:06:bd:7a:bc:5d:8c:c4: 0b:3c:31:66:a5:52:a1:b1:df:97:9f:9e:bc:f6:fc: e1:bb:bf:64:cb:9c:0a:b8:9b:c7:50:ec:69:9f:24: da:67:42:c2:b4:4a:11:01:4d:c6:e9:75:39:5d:cf: b2:52:f3:c4:73:74:91:83:ec:c4:8e:a7:9d:1f:c8: 3e:1f:8f:0d:15:4a:ec:7a:07:54:14:bb:54:f5:58: 2f:52:ec:e8:5e:67:27:69:b1:96:9e:80:d4:9a:74: 2c:c9:ca:94:77:0a:9a:7a:9c:a6:5e:b5:9d:f0:56: 9b:2a:08:83:96:67:5c:e3:c9:29:54:6c:72:d3:ff: 4c:b5:3b:8d:11:32:79:05:92:89:99:19:07:c2:3d: 74:c1:d5:38:c1:7a:89:d8:08:85:dc:33:f7:4f:e4: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:58:AF:EE:4F:A0:B9:95:4E:ED:CE:11:9B:A5:1F:47:39:C3:DB:13 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/CViv7k-guZVO7c4Rm6UfRznD2xM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.218.0/24 Signature Algorithm: sha256WithRSAEncryption ac:b6:81:91:84:2c:35:d9:ca:35:72:fa:83:f1:a3:b0:a6:83: fb:ee:bf:e3:be:6d:56:d8:ae:c4:6c:d7:35:5c:10:cf:ad:0d: 43:32:6b:c0:56:1a:df:8d:8e:4d:7c:fb:6a:3a:ba:6a:79:f8: 4d:82:6a:f6:a0:0d:1d:0c:46:df:1b:e0:30:4e:52:bc:aa:6e: 43:3c:db:6d:65:96:e8:d8:2b:ef:85:9a:6e:b8:07:0e:24:03: b3:fb:19:ea:8d:40:26:64:19:81:66:60:6c:e8:29:48:1e:1f: b3:96:ad:b5:a0:b7:40:ae:85:5f:c5:fe:e0:ca:fc:be:27:f5: 2c:e5:ad:42:20:32:51:a1:65:40:59:e1:ae:72:33:74:18:c8: e9:ac:37:6d:0e:0b:f2:05:c5:d4:be:08:42:bf:2b:fc:36:1d: 38:38:ca:ad:13:a0:6b:26:d0:35:2a:be:60:d8:ea:f0:ba:be: 12:0d:ab:09:c9:55:71:ae:43:ad:c9:be:4d:ee:20:06:22:5c: fe:4d:0d:e2:ef:c0:5b:b9:de:b5:2a:23:59:05:59:07:ad:c4: 22:53:8e:e2:1d:d5:d8:29:62:ec:b1:4a:31:57:ef:56:82:86: 12:82:b2:78:7d:91:cd:33:1f:a4:e8:b8:d6:e4:cf:0d:19:58: 97:41:98:29 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA4MjYw NTI1MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5NThBRkVFNEZBMEI5 OTU0RUVEQ0UxMTlCQTUxRjQ3MzlDM0RCMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKKghNQ3YgjpRu6QdmNHyOLl6WIyU9bdeEFvB2FQzIX4X9F277 s4shPgLg30V10M1NYkEe46JBM+8xyEnx+UyCT7t/Nv7x9Yy2ZEtcTPJfkXPlUZpy 0AU0LhFrImkHJ4OFBr16vF2MxAs8MWalUqGx35efnrz2/OG7v2TLnAq4m8dQ7Gmf JNpnQsK0ShEBTcbpdTldz7JS88RzdJGD7MSOp50fyD4fjw0VSux6B1QUu1T1WC9S 7OheZydpsZaegNSadCzJypR3Cpp6nKZetZ3wVpsqCIOWZ1zjySlUbHLT/0y1O40R MnkFkomZGQfCPXTB1TjBeonYCIXcM/dP5HS7AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUCViv7k+guZVO7c4Rm6UfRznD2xMwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9DVml2N2stZ3VaVk83YzRSbTZV ZlJ6bkQyeE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3va MA0GCSqGSIb3DQEBCwUAA4IBAQCstoGRhCw12co1cvqD8aOwpoP77r/jvm1W2K7E bNc1XBDPrQ1DMmvAVhrfjY5NfPtqOrpqefhNgmr2oA0dDEbfG+AwTlK8qm5DPNtt ZZbo2CvvhZpuuAcOJAOz+xnqjUAmZBmBZmBs6ClIHh+zlq21oLdAroVfxf7gyvy+ J/Us5a1CIDJRoWVAWeGucjN0GMjprDdtDgvyBcXUvghCvyv8Nh04OMqtE6BrJtA1 Kr5g2Orwur4SDasJyVVxrkOtyb5N7iAGIlz+TQ3i78Bbud61KiNZBVkHrcQiU47i HdXYKWLssUoxV+9WgoYSgrJ4fZHNMx+k6LjW5M8NGViXQZgp -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org