$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/quAisqUHsQkj5-9axGM7iupOhgI.roa File: quAisqUHsQkj5-9axGM7iupOhgI.roa (raw, json) Hash identifier: WxOBX0SJrAbAILBv8+cUMCQBdcd9WfDZRJGWiyOiXTE= Subject key identifier: AA:E0:22:B2:A5:07:B1:09:23:E7:EF:5A:C4:63:3B:8A:EA:4E:86:02 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 12DD Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/quAisqUHsQkj5-9axGM7iupOhgI.roa Signing time: Tue 30 Apr 2024 12:46:15 +0000 ROA not before: Tue 30 Apr 2024 12:46:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 215913 IP address blocks: 103.123.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 01:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4829 (0x12dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Apr 30 12:46:15 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AAE022B2A507B10923E7EF5AC4633B8AEA4E8602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:01:4d:32:66:64:bc:5d:59:4a:4d:86:0c:7d: 02:b2:f0:b8:a7:08:33:15:6b:bd:b6:05:1e:0b:75: d5:af:89:a7:6e:56:b1:db:5e:ae:70:8d:b6:e4:ec: 19:91:81:d6:81:c3:e2:d2:e4:3a:f7:bd:d9:e0:be: a6:8c:5e:4f:74:ff:c9:ff:fb:5a:d6:e8:85:55:35: 42:ed:b1:26:14:3e:d4:fc:d0:df:1b:aa:01:d7:03: 60:97:48:05:44:0d:88:5b:02:5f:41:ca:cd:ec:eb: 83:bd:b3:37:b2:83:27:58:d2:05:a9:18:00:8e:5a: 36:4b:43:00:56:4e:23:ab:e8:e6:96:64:2a:62:f8: c9:bc:73:a3:30:9e:9e:cd:e7:e3:a9:04:c5:ec:e1: f0:3d:84:7b:62:ea:9a:5b:20:65:a3:fb:76:e1:65: 1c:99:f5:ae:05:0a:4c:9a:ce:4e:08:c8:cc:b9:d0: 84:a1:55:eb:95:e1:45:b6:96:90:56:ce:98:2f:2a: df:9e:58:c1:92:f4:72:94:bd:8b:66:6a:e8:73:ae: 5b:86:ec:6e:32:3f:a6:cc:e4:8f:ad:fd:b1:96:64: 02:84:a8:5d:a1:55:0f:73:af:c1:94:cb:df:9e:20: 63:b3:33:8f:5a:06:4f:4d:df:85:3a:0c:f6:b9:fb: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E0:22:B2:A5:07:B1:09:23:E7:EF:5A:C4:63:3B:8A:EA:4E:86:02 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/quAisqUHsQkj5-9axGM7iupOhgI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.216.0/24 Signature Algorithm: sha256WithRSAEncryption da:b4:d4:41:23:09:41:bf:dd:c5:db:01:31:1d:44:50:d3:8b: 4d:9d:58:41:41:51:06:51:9b:ab:b1:00:3b:fb:f8:50:e2:30: 76:41:d0:71:16:76:dd:c9:51:9a:63:38:1e:b7:22:98:0c:1e: fd:42:0f:a7:5f:99:48:2e:c3:9c:5d:b8:5e:cd:ec:50:7e:66: 13:49:a4:47:02:a1:d9:04:fb:da:42:fc:6c:38:d9:00:d4:32: 28:55:d2:0e:3f:de:21:41:24:d1:ef:50:f4:3f:a4:b6:63:9a: 0b:c0:41:03:d5:3f:94:da:ce:e7:9b:45:18:df:10:31:ef:26: bf:c5:72:65:87:c4:ed:ed:25:1f:86:68:a7:34:19:32:f4:15: 8c:60:dc:c6:60:2d:b3:59:ce:f0:15:dd:ff:a9:8b:cd:2d:87: 89:4c:e0:23:3e:b7:30:08:6f:e6:68:04:a0:87:04:d9:0b:c6: 36:bb:3c:be:24:a8:4b:55:73:a6:d7:56:68:74:3c:24:99:56: cb:40:f7:19:2e:f2:74:26:25:aa:c5:82:8e:d9:4e:30:61:a7: be:be:a6:45:bf:20:c8:99:3f:af:a2:ab:8b:69:bf:81:40:3c: a2:af:f2:01:fb:35:cf:9a:28:01:b3:bb:40:e6:d8:f0:40:36: 82:6c:4d:91 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA0MzAx MjQ2MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFBRTAyMkIyQTUwN0Ix MDkyM0U3RUY1QUM0NjMzQjhBRUE0RTg2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpAU0yZmS8XVlKTYYMfQKy8LinCDMVa722BR4LddWviaduVrHb Xq5wjbbk7BmRgdaBw+LS5Dr3vdngvqaMXk90/8n/+1rW6IVVNULtsSYUPtT80N8b qgHXA2CXSAVEDYhbAl9Bys3s64O9szeygydY0gWpGACOWjZLQwBWTiOr6OaWZCpi +Mm8c6Mwnp7N5+OpBMXs4fA9hHti6ppbIGWj+3bhZRyZ9a4FCkyazk4IyMy50ISh VeuV4UW2lpBWzpgvKt+eWMGS9HKUvYtmauhzrluG7G4yP6bM5I+t/bGWZAKEqF2h VQ9zr8GUy9+eIGOzM49aBk9N34U6DPa5+6chAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUquAisqUHsQkj5+9axGM7iupOhgIwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9xdUFpc3FVSHNRa2o1LTlheEdN N2l1cE9oZ0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vY MA0GCSqGSIb3DQEBCwUAA4IBAQDatNRBIwlBv93F2wExHURQ04tNnVhBQVEGUZur sQA7+/hQ4jB2QdBxFnbdyVGaYzgetyKYDB79Qg+nX5lILsOcXbhezexQfmYTSaRH AqHZBPvaQvxsONkA1DIoVdIOP94hQSTR71D0P6S2Y5oLwEED1T+U2s7nm0UY3xAx 7ya/xXJlh8Tt7SUfhminNBky9BWMYNzGYC2zWc7wFd3/qYvNLYeJTOAjPrcwCG/m aASghwTZC8Y2uzy+JKhLVXOm11ZodDwkmVbLQPcZLvJ0JiWqxYKO2U4wYae+vqZF vyDImT+voquLab+BQDyir/IB+zXPmigBs7tA5tjwQDaCbE2R -----END CERTIFICATE-----Generated at Sat Jun 1 17:04:07 2024 by rpki-client on console-ams.rpki-client.org