$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/_XQwEd27PnxkWrF1cpvQ8Jh14Og.roa File: _XQwEd27PnxkWrF1cpvQ8Jh14Og.roa (raw, json) Hash identifier: Ns+stcq03tXYI/2vjAHiv8F2CAjgvV9huQ9iB6U+drg= Subject key identifier: FD:74:30:11:DD:BB:3E:7C:64:5A:B1:75:72:9B:D0:F0:98:75:E0:E8 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 1363 Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/_XQwEd27PnxkWrF1cpvQ8Jh14Og.roa Signing time: Mon 26 Aug 2024 05:25:32 +0000 ROA not before: Mon 26 Aug 2024 05:25:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 14618 IP address blocks: 103.123.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Oct 2024 23:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4963 (0x1363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Aug 26 05:25:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FD743011DDBB3E7C645AB175729BD0F09875E0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:8c:c9:c9:dc:79:cd:c6:04:24:79:d8:79: b8:70:68:43:bb:d7:51:e0:25:dd:0a:c3:19:6e:aa: 55:62:fb:2f:9c:e0:b6:53:33:74:8a:b0:82:8e:b3: fb:df:1e:80:e5:70:57:c9:af:68:96:d2:54:28:92: 2b:d1:c0:c0:18:b3:e4:ff:7d:9e:04:73:41:ab:23: df:ea:fa:0b:1a:0e:16:4d:98:4d:3a:ae:eb:cf:ff: 97:c8:6c:3c:3b:f3:9e:94:bf:7d:86:4a:55:62:07: 25:c5:ff:9c:38:75:d3:b1:b9:67:da:ba:cf:12:83: 05:1d:ba:23:0d:f9:59:bc:a7:52:ca:66:b2:7e:a8: c3:c1:77:66:50:f8:86:2a:ed:65:59:d7:17:c7:37: 46:65:b2:06:01:11:e4:33:94:42:db:51:b8:d9:a3: 10:ca:2a:69:bf:ff:9a:d2:20:39:e1:a7:d6:75:90: f0:0c:0a:4c:a4:90:3b:43:83:df:34:da:db:3c:92: 5d:a8:16:1e:5e:77:e3:6a:18:26:5c:8c:9b:cb:40: e1:aa:01:ac:c9:33:c5:b9:c9:3d:f9:b9:c0:a2:90: d2:65:00:ed:d6:02:0b:e5:2c:88:9a:e7:48:95:dc: f4:42:ca:84:3c:3d:2c:16:99:f8:09:ed:49:be:49: de:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:74:30:11:DD:BB:3E:7C:64:5A:B1:75:72:9B:D0:F0:98:75:E0:E8 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/_XQwEd27PnxkWrF1cpvQ8Jh14Og.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.216.0/24 Signature Algorithm: sha256WithRSAEncryption 86:68:79:6f:48:6d:0f:7a:e5:6d:f9:14:d1:80:dc:d6:78:2c: b2:32:2d:fb:23:69:28:36:e5:44:bb:ff:e4:a9:39:40:95:d7: e4:76:bd:d1:3a:c5:ac:aa:16:dd:27:fa:b6:2b:a8:2f:53:45: b9:77:7d:dc:d0:fd:55:55:13:e8:20:0e:23:62:77:10:1a:f8: bc:d5:4c:52:d4:d9:01:d4:e9:9a:e3:66:bb:a9:90:28:6e:fb: ee:f5:cc:d9:52:d0:c9:fb:71:e6:df:98:88:cf:36:da:97:9b: d1:37:82:66:55:83:d5:1f:07:49:92:f5:a2:16:0b:4f:c0:45: 76:73:81:eb:ea:c5:a4:32:92:d8:f3:12:24:a2:17:3c:55:c0: e7:d7:f7:0d:0e:ff:80:3f:19:98:d8:a1:d9:c6:f3:94:d5:dc: 5b:39:90:ff:c1:f6:84:ac:4a:26:be:1a:67:c2:91:07:2a:da: cb:e5:ca:9f:a5:c3:25:9f:73:f5:05:2f:08:7d:29:c8:80:c3: 1e:85:2d:e0:66:a4:f0:c0:20:76:2b:59:9c:b7:cd:15:a4:4a: b7:ae:9b:1b:f2:40:c0:f7:12:8c:02:3d:b5:15:c7:6b:8b:7f: 27:a7:26:c8:ec:3b:a4:34:9e:0a:63:ba:44:f8:37:ea:6a:65: 47:d5:44:8e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA4MjYw NTI1MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZENzQzMDExRERCQjNF N0M2NDVBQjE3NTcyOUJEMEYwOTg3NUUwRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+g4zJydx5zcYEJHnYebhwaEO711HgJd0KwxluqlVi+y+c4LZT M3SKsIKOs/vfHoDlcFfJr2iW0lQokivRwMAYs+T/fZ4Ec0GrI9/q+gsaDhZNmE06 ruvP/5fIbDw7856Uv32GSlViByXF/5w4ddOxuWfaus8SgwUduiMN+Vm8p1LKZrJ+ qMPBd2ZQ+IYq7WVZ1xfHN0ZlsgYBEeQzlELbUbjZoxDKKmm//5rSIDnhp9Z1kPAM CkykkDtDg9802ts8kl2oFh5ed+NqGCZcjJvLQOGqAazJM8W5yT35ucCikNJlAO3W AgvlLIia50iV3PRCyoQ8PSwWmfgJ7Um+Sd5/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/XQwEd27PnxkWrF1cpvQ8Jh14OgwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9fWFF3RWQyN1BueGtXckYxY3B2 UThKaDE0T2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vY MA0GCSqGSIb3DQEBCwUAA4IBAQCGaHlvSG0PeuVt+RTRgNzWeCyyMi37I2koNuVE u//kqTlAldfkdr3ROsWsqhbdJ/q2K6gvU0W5d33c0P1VVRPoIA4jYncQGvi81UxS 1NkB1Oma42a7qZAobvvu9czZUtDJ+3Hm35iIzzbal5vRN4JmVYPVHwdJkvWiFgtP wEV2c4Hr6sWkMpLY8xIkohc8VcDn1/cNDv+APxmY2KHZxvOU1dxbOZD/wfaErEom vhpnwpEHKtrL5cqfpcMln3P1BS8IfSnIgMMehS3gZqTwwCB2K1mct80VpEq3rpsb 8kDA9xKMAj21Fcdri38npybI7DukNJ4KY7pE+DfqamVH1USO -----END CERTIFICATE-----Generated at Tue Oct 22 19:33:10 2024 by rpki-client on console-ams.rpki-client.org