$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/JpqIByc-VgPegyd6nE5EcBj58IE.roa File: JpqIByc-VgPegyd6nE5EcBj58IE.roa (raw, json) Hash identifier: XOQveR3U06xUts+GMzSf67Z9qXu8MBlSO0pX7AVaWOY= Subject key identifier: 26:9A:88:07:27:3E:56:03:DE:83:27:7A:9C:4E:44:70:18:F9:F0:81 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 126F Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/JpqIByc-VgPegyd6nE5EcBj58IE.roa Signing time: Tue 19 Dec 2023 16:40:15 +0000 ROA not before: Tue 19 Dec 2023 16:40:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 16509 IP address blocks: 103.123.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4719 (0x126f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Dec 19 16:40:15 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=269A8807273E5603DE83277A9C4E447018F9F081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:ca:58:98:c0:fd:0f:10:48:f9:78:4a:0b: 9a:cf:52:99:30:0c:69:0d:46:98:c1:2a:99:30:85: 1a:d7:8a:ff:6d:27:a5:32:59:5f:0d:a0:8f:5b:b1: 19:9c:a5:a6:b6:cb:a5:28:9d:e3:f3:2a:6a:38:a7: c2:44:5f:69:16:30:e8:81:9c:64:57:a4:9f:35:81: 07:92:a1:08:bc:eb:6b:d3:ae:52:ce:87:41:2e:90: d7:ec:35:d9:12:a0:5e:34:9e:f1:be:c5:8c:90:eb: 91:65:bf:aa:70:9e:2b:43:e8:18:63:ca:90:be:b0: 9f:8e:4b:d3:a5:00:1c:56:e4:b2:e8:27:7d:30:d7: f2:65:71:f6:9f:89:c2:e7:31:89:49:33:5c:a0:66: a9:18:aa:e7:e3:46:2e:24:13:47:f8:dd:53:ce:02: fc:7f:97:d1:70:2a:28:f6:0b:83:72:ff:74:7f:57: b8:31:34:ca:e7:94:03:cf:6e:29:f9:24:7f:97:a5: 16:4b:e2:52:71:26:fb:90:bd:df:dd:0d:c6:0a:7f: 58:42:b3:7c:7f:e6:0f:9d:92:d1:59:40:01:c8:fb: 9e:03:ac:db:16:bf:f4:d8:80:d1:a3:5a:92:c9:4a: 19:2d:94:fc:b0:66:fd:c5:dd:ed:b7:08:81:a4:ab: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9A:88:07:27:3E:56:03:DE:83:27:7A:9C:4E:44:70:18:F9:F0:81 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/JpqIByc-VgPegyd6nE5EcBj58IE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.216.0/24 Signature Algorithm: sha256WithRSAEncryption 23:b1:54:f5:ab:10:dc:c1:93:3b:c7:4f:4f:3a:82:52:f5:00: 48:ca:4a:14:87:40:7b:0b:1b:3f:16:85:5f:2e:18:bc:be:85: d0:38:95:bb:db:1d:bd:5b:48:00:04:95:db:46:d2:b1:fc:37: fd:59:0e:a2:7f:d1:4f:a3:50:81:be:0f:9f:bc:27:47:7b:d0: d9:28:d5:cd:d9:07:06:b8:93:d9:3f:21:b8:4c:c2:aa:12:89: 32:16:79:12:7b:bf:1d:46:18:a1:0d:e7:58:b7:1f:23:bf:be: 0b:f5:6c:78:4c:7e:5c:e4:98:b9:ce:70:20:a2:49:e0:f8:ed: ce:40:13:78:c7:79:b2:ae:5f:4c:2b:31:95:39:c0:e4:00:e2: a2:d1:f6:a5:0f:40:52:4c:cf:4a:35:05:b1:9e:89:52:c1:91: 0d:96:2b:d8:47:33:b6:30:0c:35:38:84:3a:04:e0:a0:e5:d0: e7:27:67:69:dd:7e:fb:dc:bd:07:2d:8c:c1:18:29:8e:e0:d7: 53:26:fa:67:60:02:cb:24:bc:7f:71:da:b8:11:b5:b3:0b:05: fa:f8:c4:fc:c4:7c:95:b0:db:b1:46:d9:69:dc:00:e2:e0:e6: 7c:e6:9c:19:28:91:c8:db:89:d5:21:8e:bb:d2:9d:60:4b:2f: f2:0e:cf:4d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yMzEyMTkx NjQwMTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI2OUE4ODA3MjczRTU2 MDNERTgzMjc3QTlDNEU0NDcwMThGOUYwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBMMpYmMD9DxBI+XhKC5rPUpkwDGkNRpjBKpkwhRrXiv9tJ6Uy WV8NoI9bsRmcpaa2y6UonePzKmo4p8JEX2kWMOiBnGRXpJ81gQeSoQi862vTrlLO h0EukNfsNdkSoF40nvG+xYyQ65Flv6pwnitD6BhjypC+sJ+OS9OlABxW5LLoJ30w 1/JlcfaficLnMYlJM1ygZqkYqufjRi4kE0f43VPOAvx/l9FwKij2C4Ny/3R/V7gx NMrnlAPPbin5JH+XpRZL4lJxJvuQvd/dDcYKf1hCs3x/5g+dktFZQAHI+54DrNsW v/TYgNGjWpLJShktlPywZv3F3e23CIGkq38NAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUJpqIByc+VgPegyd6nE5EcBj58IEwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9KcHFJQnljLVZnUGVneWQ2bkU1 RWNCajU4SUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vY MA0GCSqGSIb3DQEBCwUAA4IBAQAjsVT1qxDcwZM7x09POoJS9QBIykoUh0B7Cxs/ FoVfLhi8voXQOJW72x29W0gABJXbRtKx/Df9WQ6if9FPo1CBvg+fvCdHe9DZKNXN 2QcGuJPZPyG4TMKqEokyFnkSe78dRhihDedYtx8jv74L9Wx4TH5c5Ji5znAgokng +O3OQBN4x3myrl9MKzGVOcDkAOKi0falD0BSTM9KNQWxnolSwZENlivYRzO2MAw1 OIQ6BOCg5dDnJ2dp3X773L0HLYzBGCmO4NdTJvpnYALLJLx/cdq4EbWzCwX6+MT8 xHyVsNuxRtlp3ADi4OZ85pwZKJHI24nVIY670p1gSy/yDs9N -----END CERTIFICATE-----Generated at Thu May 2 04:47:36 2024 by rpki-client on console-fra.rpki-client.org