$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/LndGobw4KPq9rudPieuKfNFfn5A.roa File: LndGobw4KPq9rudPieuKfNFfn5A.roa (raw, json) Hash identifier: gxNotrNBScGVXMVXhUtCDCOq2wnJmqtzqbqd+ylGmZY= Subject key identifier: 2E:77:46:A1:BC:38:28:FA:BD:AE:E7:4F:89:EB:8A:7C:D1:5F:9F:90 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 1361 Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/LndGobw4KPq9rudPieuKfNFfn5A.roa Signing time: Mon 26 Aug 2024 05:25:31 +0000 ROA not before: Mon 26 Aug 2024 05:25:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 202525 IP address blocks: 103.123.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4961 (0x1361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Aug 26 05:25:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2E7746A1BC3828FABDAEE74F89EB8A7CD15F9F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a1:e0:7f:6e:8f:62:6e:df:9b:b0:19:ac:87: 91:4c:24:e5:85:f9:64:c6:28:ce:ff:e3:88:f5:85: e3:ea:0e:cd:36:47:be:9b:9f:ae:c6:59:d1:71:09: a9:5c:41:ed:0a:44:61:b2:d5:dd:36:fc:02:81:4d: ae:49:f0:38:b7:b6:02:ed:86:9d:b3:da:17:74:c9: 2f:30:90:0d:e8:7a:10:c7:18:69:24:bc:49:7a:b1: 98:17:fd:a6:ec:0e:26:45:2f:66:fb:a6:19:49:d4: 4b:9b:07:28:e6:fb:6e:28:89:6e:85:8a:f1:84:e6: fc:c3:72:a4:38:75:34:4d:5e:04:e9:ed:be:e0:f7: 9d:da:8c:2d:7a:e7:03:63:a3:67:a4:c2:b0:b8:7a: 3e:0e:b9:e6:6f:1a:63:b7:59:98:88:83:3e:4e:a6: 7f:3d:6e:87:3a:60:5c:82:f4:e1:17:79:4c:16:07: b5:24:10:d2:c5:82:82:8a:1f:a6:dd:a3:c6:6b:6b: c1:45:a7:5a:5b:7d:21:ba:54:a6:b7:0d:81:0a:8f: 68:0f:ec:68:4d:47:82:15:dc:c4:d7:74:50:da:ac: f1:e7:90:ff:b3:d7:08:63:50:aa:f7:a1:d9:68:46: 43:4b:1c:e1:92:e4:29:a8:6f:38:ad:3a:11:1c:fc: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:77:46:A1:BC:38:28:FA:BD:AE:E7:4F:89:EB:8A:7C:D1:5F:9F:90 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/LndGobw4KPq9rudPieuKfNFfn5A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.217.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:ba:e7:c6:57:ca:80:9f:1f:1f:e6:98:37:e4:e7:e9:20:12: d5:fa:55:7b:43:0e:13:53:13:2c:b5:c5:e0:84:52:70:1c:99: 8c:62:93:e2:c1:ff:9b:0f:33:5e:a9:7d:68:55:53:64:be:59: a1:05:f3:03:e2:6f:c7:fb:62:eb:4c:fa:e4:72:ae:87:15:83: 96:f0:21:d1:88:fe:33:f0:98:d4:82:21:98:5e:18:63:cd:7c: 74:2a:b2:3c:80:d7:9e:fc:fc:bc:a6:f4:57:7a:49:55:e7:7b: 1d:48:67:37:e3:1f:88:9a:6b:61:8c:5b:ef:41:d1:0b:58:b9: 73:18:4b:91:97:df:7d:ba:be:26:2e:ec:7a:bc:d4:c7:3d:ca: 1d:11:3a:89:07:63:e2:86:b8:2d:7f:a7:51:47:5b:3c:dd:97: c8:c8:f1:14:80:b9:fb:e2:5c:02:1b:f6:b9:fb:98:8c:6f:b6: ce:5b:1d:e3:8a:68:de:85:5e:2c:3e:8e:7a:73:d3:48:59:50: dc:a2:ac:35:dc:fe:b7:40:da:aa:ef:b0:d1:c7:2e:21:59:b9: c0:c0:31:5c:3c:b4:79:55:e8:f1:57:cb:d9:15:0a:fb:df:8d: 79:fa:6d:5b:8b:38:87:e6:f6:81:13:f9:35:55:21:8c:47:87: b5:5c:10:a2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA4MjYw NTI1MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJFNzc0NkExQkMzODI4 RkFCREFFRTc0Rjg5RUI4QTdDRDE1RjlGOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcoeB/bo9ibt+bsBmsh5FMJOWF+WTGKM7/44j1hePqDs02R76b n67GWdFxCalcQe0KRGGy1d02/AKBTa5J8Di3tgLthp2z2hd0yS8wkA3oehDHGGkk vEl6sZgX/absDiZFL2b7phlJ1EubByjm+24oiW6FivGE5vzDcqQ4dTRNXgTp7b7g 953ajC165wNjo2ekwrC4ej4OueZvGmO3WZiIgz5Opn89boc6YFyC9OEXeUwWB7Uk ENLFgoKKH6bdo8Zra8FFp1pbfSG6VKa3DYEKj2gP7GhNR4IV3MTXdFDarPHnkP+z 1whjUKr3odloRkNLHOGS5CmobzitOhEc/NZHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQULndGobw4KPq9rudPieuKfNFfn5AwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9MbmRHb2J3NEtQcTlydWRQaWV1 S2ZORmZuNUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vZ MA0GCSqGSIb3DQEBCwUAA4IBAQB8uufGV8qAnx8f5pg35OfpIBLV+lV7Qw4TUxMs tcXghFJwHJmMYpPiwf+bDzNeqX1oVVNkvlmhBfMD4m/H+2LrTPrkcq6HFYOW8CHR iP4z8JjUgiGYXhhjzXx0KrI8gNee/Py8pvRXeklV53sdSGc34x+ImmthjFvvQdEL WLlzGEuRl999ur4mLux6vNTHPcodETqJB2Pihrgtf6dRR1s83ZfIyPEUgLn74lwC G/a5+5iMb7bOWx3jimjehV4sPo56c9NIWVDcoqw13P63QNqq77DRxy4hWbnAwDFc PLR5VejxV8vZFQr73415+m1biziH5vaBE/k1VSGMR4e1XBCi -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:14 2024 by rpki-client on console-ams.rpki-client.org