$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/lkfdWKeNej2hofOoS_9fE6CGX8Y.roa File: lkfdWKeNej2hofOoS_9fE6CGX8Y.roa (raw, json) Hash identifier: UPj5fagpr85Sbzrtoylblqxu2YscKju9VGV+TsiWy70= Subject key identifier: 96:47:DD:58:A7:8D:7A:3D:A1:A1:F3:A8:4B:FF:5F:13:A0:86:5F:C6 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 1366 Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/lkfdWKeNej2hofOoS_9fE6CGX8Y.roa Signing time: Mon 26 Aug 2024 05:25:32 +0000 ROA not before: Mon 26 Aug 2024 05:25:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 202525 IP address blocks: 103.123.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4966 (0x1366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Aug 26 05:25:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9647DD58A78D7A3DA1A1F3A84BFF5F13A0865FC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:bc:89:f6:01:be:42:1b:67:5d:f0:b7:27: e0:37:b1:0c:54:29:22:b9:15:ed:40:a3:a7:ec:59: 26:b8:5b:06:fd:12:52:bd:f1:42:49:e6:70:23:ac: 5f:46:3b:d9:dc:33:cf:25:c0:91:d9:3f:cd:8a:7d: 8c:b2:0d:6c:22:f5:07:b8:d7:b0:a1:14:3d:1b:23: b0:e0:1a:72:26:9c:05:f3:71:4d:01:33:31:af:46: f6:7d:a0:40:97:15:09:d9:e0:b1:b8:9d:fe:67:a8: 2e:ab:ec:80:5c:c6:fe:f1:10:e8:0b:50:8a:17:1b: b8:6f:b2:d8:98:30:3d:da:27:d3:12:aa:2c:00:e1: f9:bd:72:45:bf:c4:83:fa:73:0c:a2:f9:a1:15:a0: 37:3e:5b:e2:ab:56:05:8c:51:bb:4a:32:e2:9b:19: 11:72:86:ad:df:16:a9:90:6f:0a:f7:93:3b:b3:ba: 88:6b:34:bb:49:bb:79:16:8b:58:55:74:3e:02:4c: 92:b8:69:86:7a:ee:21:89:6a:12:7e:82:ca:03:39: 33:51:0b:00:3a:b8:83:2a:29:37:af:dc:32:a7:fb: 4f:7c:96:ec:f8:49:8e:35:e5:6b:36:a9:d9:44:4f: c7:8d:dd:cf:cd:6c:6c:d4:17:3a:d0:04:a3:fa:b3: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:47:DD:58:A7:8D:7A:3D:A1:A1:F3:A8:4B:FF:5F:13:A0:86:5F:C6 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/lkfdWKeNej2hofOoS_9fE6CGX8Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.219.0/24 Signature Algorithm: sha256WithRSAEncryption c4:37:bf:77:bc:3f:a4:a9:b1:c3:6e:4b:da:79:5d:45:34:fe: 0f:ee:f5:f2:a5:a0:8a:17:43:31:f9:0c:58:38:43:bf:59:79: 7d:c3:f6:95:45:b2:60:a4:e8:02:77:1c:79:be:40:bc:d4:b5: 75:ad:20:77:c8:cc:d3:d7:7a:82:78:fd:1e:b2:fb:e1:f6:ce: 70:9a:1e:44:d7:d0:9f:a5:27:2f:f6:7e:69:54:58:58:25:b1: bc:d7:00:93:83:71:42:3b:5e:77:78:f3:82:14:1f:f9:e8:19: 6c:fe:bf:92:da:1c:82:72:48:d6:55:66:ea:51:0f:e6:45:43: 74:c7:0a:96:c6:75:25:fa:19:3e:a7:05:1a:6f:bb:3d:c6:ad: a3:6f:e1:5a:57:3d:d8:fd:8a:d1:56:62:63:f8:d3:34:c1:41: 5f:ff:07:9d:2d:57:28:ce:a6:b2:73:4a:69:3e:61:cb:65:06: bc:ef:16:2d:e2:a4:04:d7:3f:57:db:85:e7:dd:91:a7:c2:e1: cd:4b:3e:d8:72:61:71:aa:47:8b:39:eb:94:3e:cc:31:ce:ea: d8:15:ec:16:9c:b7:d4:9a:23:1b:09:a2:c9:de:46:c9:ba:cf: 79:ed:e7:1d:12:e0:3c:3a:21:0b:04:57:d4:ab:90:f5:ef:1f: 0f:75:a0:c7 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA4MjYw NTI1MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2NDdERDU4QTc4RDdB M0RBMUExRjNBODRCRkY1RjEzQTA4NjVGQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCunryJ9gG+QhtnXfC3J+A3sQxUKSK5Fe1Ao6fsWSa4Wwb9ElK9 8UJJ5nAjrF9GO9ncM88lwJHZP82KfYyyDWwi9Qe417ChFD0bI7DgGnImnAXzcU0B MzGvRvZ9oECXFQnZ4LG4nf5nqC6r7IBcxv7xEOgLUIoXG7hvstiYMD3aJ9MSqiwA 4fm9ckW/xIP6cwyi+aEVoDc+W+KrVgWMUbtKMuKbGRFyhq3fFqmQbwr3kzuzuohr NLtJu3kWi1hVdD4CTJK4aYZ67iGJahJ+gsoDOTNRCwA6uIMqKTev3DKn+098luz4 SY415Ws2qdlET8eN3c/NbGzUFzrQBKP6s2DjAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUlkfdWKeNej2hofOoS/9fE6CGX8YwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9sa2ZkV0tlTmVqMmhvZk9vU185 ZkU2Q0dYOFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vb MA0GCSqGSIb3DQEBCwUAA4IBAQDEN793vD+kqbHDbkvaeV1FNP4P7vXypaCKF0Mx +QxYOEO/WXl9w/aVRbJgpOgCdxx5vkC81LV1rSB3yMzT13qCeP0esvvh9s5wmh5E 19CfpScv9n5pVFhYJbG81wCTg3FCO153ePOCFB/56Bls/r+S2hyCckjWVWbqUQ/m RUN0xwqWxnUl+hk+pwUab7s9xq2jb+FaVz3Y/YrRVmJj+NM0wUFf/wedLVcozqay c0ppPmHLZQa87xYt4qQE1z9X24Xn3ZGnwuHNSz7YcmFxqkeLOeuUPswxzurYFewW nLfUmiMbCaLJ3kbJus957ecdEuA8OiELBFfUq5D17x8PdaDH -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org