$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/L04X9V37JWt8euwubv8lyfLUBZQ.roa File: L04X9V37JWt8euwubv8lyfLUBZQ.roa (raw, json) Hash identifier: 4kjoxtbegsNTOSaYIKtpO0roAeB326DnrVMTEEykS80= Subject key identifier: 2F:4E:17:F5:5D:FB:25:6B:7C:7A:EC:2E:6E:FF:25:C9:F2:D4:05:94 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 135B Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/L04X9V37JWt8euwubv8lyfLUBZQ.roa Signing time: Mon 26 Aug 2024 05:25:30 +0000 ROA not before: Mon 26 Aug 2024 05:25:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 202525 IP address blocks: 103.123.218.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4955 (0x135b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Aug 26 05:25:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2F4E17F55DFB256B7C7AEC2E6EFF25C9F2D40594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:8a:3d:3d:46:6d:dc:91:9c:51:5c:05:ef: 55:cc:7c:85:c5:0a:a0:f7:af:08:a8:47:ec:a0:f1: d2:14:01:a5:2a:6d:0d:6d:79:06:3e:17:e8:f7:16: b9:0c:cc:1f:58:fc:36:f5:6f:40:72:42:b9:f7:8d: f9:b9:a9:a4:32:d8:68:2d:ef:70:1e:83:50:b2:fd: f5:be:09:14:04:74:98:04:96:f2:7a:eb:28:a4:cf: b6:dd:89:61:3d:18:9e:13:48:a4:92:cd:4e:64:c6: 1c:c0:87:04:ef:bf:2e:76:6f:83:f7:07:fe:c4:ec: 1a:4f:76:db:1a:6f:44:0e:77:01:63:51:08:4a:c1: 39:f0:48:97:47:8f:bd:d5:51:a4:d0:d6:00:9b:04: 55:4c:24:14:2e:43:74:a7:48:a5:f1:ec:50:95:21: aa:ca:5b:ec:60:09:8d:75:08:af:6e:73:fe:f7:ad: fa:45:9a:e1:82:2c:c1:70:cc:5c:7e:3a:8c:c4:74: 6d:6e:8d:2c:d3:a6:7d:f7:fd:6e:0a:0a:b6:71:1e: ae:e8:0a:a9:d9:6c:50:98:4f:67:db:95:33:04:23: b3:6e:e4:21:f4:cb:e4:fd:16:fa:fc:93:f7:f6:a6: 02:1b:32:06:e5:67:7a:46:5e:84:5d:5d:ba:aa:36: 30:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4E:17:F5:5D:FB:25:6B:7C:7A:EC:2E:6E:FF:25:C9:F2:D4:05:94 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/L04X9V37JWt8euwubv8lyfLUBZQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.218.0/24 Signature Algorithm: sha256WithRSAEncryption b7:a5:e4:f9:16:23:04:38:26:0b:61:03:ae:3c:d5:8b:f0:47: 91:d8:af:5c:76:b1:aa:5f:8f:c0:69:4f:a8:4f:71:69:37:22: 65:7c:c0:8d:90:c7:1e:71:cb:cc:19:ff:ee:28:26:dc:68:d3: 6e:2d:5b:01:19:89:ef:61:2f:48:ce:bf:5e:a2:b6:ae:b1:a3: 7a:a1:4b:5a:8d:d7:cf:64:a2:17:09:e4:3d:c7:3f:56:ba:94: 64:2e:1e:b9:b0:8d:03:5a:8a:ef:c0:bb:6e:68:2d:3f:b5:bd: 10:65:b6:b4:2e:c2:77:1c:f6:46:9e:9a:3c:db:2b:dd:a4:d0: 1a:24:d9:7d:20:ef:a4:ca:0a:c8:2d:e9:12:18:23:f4:f5:58: 7e:3b:ec:20:5b:4e:10:ec:90:3f:6c:fb:3b:ed:e6:fb:5e:33: c9:e0:38:62:c0:c6:94:b9:77:ef:ba:d5:67:ce:bc:25:88:e9: 77:44:b8:aa:3f:2c:ae:c9:a6:db:eb:37:73:19:65:da:29:e7: 29:de:86:52:31:61:89:2b:b4:b0:15:20:01:c1:8a:b9:9e:78: 52:09:ba:da:9e:08:4a:e8:2c:52:97:3d:2e:00:52:42:09:98: 7d:59:ad:5a:51:45:52:19:32:7e:68:1b:d8:aa:bc:e3:07:30: b0:bf:3a:62 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA4MjYw NTI1MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJGNEUxN0Y1NURGQjI1 NkI3QzdBRUMyRTZFRkYyNUM5RjJENDA1OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQJYo9PUZt3JGcUVwF71XMfIXFCqD3rwioR+yg8dIUAaUqbQ1t eQY+F+j3FrkMzB9Y/Db1b0ByQrn3jfm5qaQy2Ggt73Aeg1Cy/fW+CRQEdJgElvJ6 6yikz7bdiWE9GJ4TSKSSzU5kxhzAhwTvvy52b4P3B/7E7BpPdtsab0QOdwFjUQhK wTnwSJdHj73VUaTQ1gCbBFVMJBQuQ3SnSKXx7FCVIarKW+xgCY11CK9uc/73rfpF muGCLMFwzFx+OozEdG1ujSzTpn33/W4KCrZxHq7oCqnZbFCYT2fblTMEI7Nu5CH0 y+T9Fvr8k/f2pgIbMgblZ3pGXoRdXbqqNjBrAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUL04X9V37JWt8euwubv8lyfLUBZQwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9MMDRYOVYzN0pXdDhldXd1YnY4 bHlmTFVCWlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3va MA0GCSqGSIb3DQEBCwUAA4IBAQC3peT5FiMEOCYLYQOuPNWL8EeR2K9cdrGqX4/A aU+oT3FpNyJlfMCNkMceccvMGf/uKCbcaNNuLVsBGYnvYS9Izr9eorausaN6oUta jdfPZKIXCeQ9xz9WupRkLh65sI0DWorvwLtuaC0/tb0QZba0LsJ3HPZGnpo82yvd pNAaJNl9IO+kygrILekSGCP09Vh+O+wgW04Q7JA/bPs77eb7XjPJ4DhiwMaUuXfv utVnzrwliOl3RLiqPyyuyabb6zdzGWXaKecp3oZSMWGJK7SwFSABwYq5nnhSCbra nghK6CxSlz0uAFJCCZh9Wa1aUUVSGTJ+aBvYqrzjBzCwvzpi -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:34 2024 by rpki-client on console-fra.rpki-client.org