$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/qvV1ZGgWsHe3Hkgn5egDN0tECVA.roa File: qvV1ZGgWsHe3Hkgn5egDN0tECVA.roa (raw, json) Hash identifier: OT2+QEI52tAcroQM24+LOSXSIBeEcwXJfB8s+gZ3FUE= Subject key identifier: AA:F5:75:64:68:16:B0:77:B7:1E:48:27:E5:E8:03:37:4B:44:09:50 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 121B Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/qvV1ZGgWsHe3Hkgn5egDN0tECVA.roa Signing time: Fri 01 Sep 2023 09:41:07 +0000 ROA not before: Fri 01 Sep 2023 09:41:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 16509 IP address blocks: 103.123.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4635 (0x121b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Sep 1 09:41:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AAF575646816B077B71E4827E5E803374B440950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:e7:9a:f8:13:b2:8d:8f:fc:db:bb:fb:8c: f5:06:cb:87:51:72:7d:f7:f8:24:6b:c4:1f:ed:d7: 62:49:cd:84:03:34:3f:06:ab:de:75:f5:ce:9b:55: 14:47:94:83:87:f7:e1:67:be:0f:fc:9c:b9:b9:fe: 4f:68:73:44:31:03:c6:ba:1e:60:6e:23:c7:b0:30: 6d:29:d4:fd:f4:5e:35:d6:a3:e7:f1:46:5c:a9:ff: 29:f3:1b:fe:0f:7e:99:30:c1:da:80:6d:db:49:77: 0d:86:74:62:cc:c1:f1:7a:c7:8d:c3:96:f7:e9:4a: 8f:8f:5f:a4:7d:dc:3a:7e:bd:4f:da:a8:da:f1:86: d9:8d:84:fa:0d:84:dc:f1:d4:39:09:67:0c:7f:d3: 01:d9:ae:13:77:0d:54:a4:bb:c9:73:93:d4:77:68: cc:bd:2f:8e:ec:35:99:c8:94:aa:bb:fa:c5:35:ad: 65:50:9b:52:14:6e:bd:8a:4d:42:21:30:3a:a6:b3: df:c5:ea:59:11:68:c7:fd:9d:0d:9f:29:e2:32:88: 50:58:91:d4:5a:2d:a5:16:5b:fb:4e:f5:53:5e:e8: 6c:b9:d9:3d:dd:f3:97:c2:5e:61:b2:6a:1c:c5:4d: 6e:c2:3b:87:16:30:6d:ef:b0:81:ee:13:6c:92:e3: 70:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F5:75:64:68:16:B0:77:B7:1E:48:27:E5:E8:03:37:4B:44:09:50 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/qvV1ZGgWsHe3Hkgn5egDN0tECVA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.218.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:42:f4:1b:7a:f1:d3:af:5e:e8:8b:55:78:a5:71:d7:97:d2: c5:36:75:ca:1a:f3:27:71:ab:b1:70:4b:ac:e7:00:c4:32:d6: 89:63:f9:3b:50:dc:9c:0d:98:bb:33:b9:eb:28:1c:22:7f:d1: 6e:b0:10:f2:20:83:d5:02:8c:f0:87:ee:3d:93:5c:7e:b4:8e: 45:24:5f:aa:43:81:7b:2c:2f:ae:c4:db:81:90:ed:7a:db:53: 75:73:31:8e:c4:de:de:f0:b4:4a:83:a2:67:ed:a0:70:00:52: 7c:f2:37:41:92:83:04:64:f1:af:1b:c6:ce:0e:d7:14:3c:cf: 14:8f:6e:a4:86:b3:4e:25:76:f7:10:5a:e1:d9:15:7e:03:0f: 08:5c:10:ac:42:95:69:06:08:3b:bb:68:85:54:06:b1:2e:42: f5:c3:d7:63:c6:85:2f:eb:a3:08:33:4d:a6:59:4e:74:fd:32: af:d7:05:f4:ff:b9:86:5e:27:83:c9:c1:09:ac:a4:b2:98:41: 67:57:e3:c4:cf:72:3d:fc:6b:4a:d3:2f:41:bc:12:74:86:5b: 63:ba:03:5e:2b:fa:b2:a0:37:b0:19:f0:56:cf:4e:95:78:9f: b4:27:77:cf:a5:f9:bc:b1:f5:28:e7:ec:c8:d1:47:c2:c5:85: 62:c8:c9:b0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yMzA5MDEw OTQxMDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFBRjU3NTY0NjgxNkIw NzdCNzFFNDgyN0U1RTgwMzM3NEI0NDA5NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC08Oea+BOyjY/827v7jPUGy4dRcn33+CRrxB/t12JJzYQDND8G q9519c6bVRRHlIOH9+Fnvg/8nLm5/k9oc0QxA8a6HmBuI8ewMG0p1P30XjXWo+fx Rlyp/ynzG/4PfpkwwdqAbdtJdw2GdGLMwfF6x43DlvfpSo+PX6R93Dp+vU/aqNrx htmNhPoNhNzx1DkJZwx/0wHZrhN3DVSku8lzk9R3aMy9L47sNZnIlKq7+sU1rWVQ m1IUbr2KTUIhMDqms9/F6lkRaMf9nQ2fKeIyiFBYkdRaLaUWW/tO9VNe6Gy52T3d 85fCXmGyahzFTW7CO4cWMG3vsIHuE2yS43D5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUqvV1ZGgWsHe3Hkgn5egDN0tECVAwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9xdlYxWkdnV3NIZTNIa2duNWVn RE4wdEVDVkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3va MA0GCSqGSIb3DQEBCwUAA4IBAQAtQvQbevHTr17oi1V4pXHXl9LFNnXKGvMncaux cEus5wDEMtaJY/k7UNycDZi7M7nrKBwif9FusBDyIIPVAozwh+49k1x+tI5FJF+q Q4F7LC+uxNuBkO1621N1czGOxN7e8LRKg6Jn7aBwAFJ88jdBkoMEZPGvG8bODtcU PM8Uj26khrNOJXb3EFrh2RV+Aw8IXBCsQpVpBgg7u2iFVAaxLkL1w9djxoUv66MI M02mWU50/TKv1wX0/7mGXieDycEJrKSymEFnV+PEz3I9/GtK0y9BvBJ0hltjugNe K/qyoDewGfBWz06VeJ+0J3fPpfm8sfUo5+zI0UfCxYViyMmw -----END CERTIFICATE-----Generated at Thu May 2 22:22:47 2024 by rpki-client on console-fra.rpki-client.org