$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/rUlyzciChB4lk0w74PjENW97hB4.roa File: rUlyzciChB4lk0w74PjENW97hB4.roa (raw, json) Hash identifier: EBqSgEPYDsrxw7gea56H7XPhPCcsXpGwB4mjFtgvvXQ= Subject key identifier: AD:49:72:CD:C8:82:84:1E:25:93:4C:3B:E0:F8:C4:35:6F:7B:84:1E Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 136C Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/rUlyzciChB4lk0w74PjENW97hB4.roa Signing time: Mon 26 Aug 2024 05:25:34 +0000 ROA not before: Mon 26 Aug 2024 05:25:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 14618 IP address blocks: 103.123.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Oct 2024 23:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4972 (0x136c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Aug 26 05:25:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AD4972CDC882841E25934C3BE0F8C4356F7B841E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:83:5e:97:76:f7:cc:d6:88:eb:ea:db:1d: 07:c1:2f:aa:63:0b:3e:96:41:9f:90:ac:cf:17:ee: 9d:7d:fe:0c:5f:74:e7:a0:6b:97:52:ed:6e:ce:0a: dc:f3:c5:a8:28:84:7e:8e:8b:df:a5:b2:98:62:58: 27:90:8d:99:fe:4e:52:5c:28:10:48:73:e7:08:0a: 6f:a2:c2:3e:ee:2f:6f:d2:1d:a8:bd:ef:db:38:67: f4:00:a1:c0:ff:7a:08:d4:bd:a8:f3:db:ba:74:22: fc:8a:32:4b:87:2c:02:2c:41:44:97:be:ae:0b:c4: 77:0a:6b:d2:52:f1:5b:93:51:af:ce:49:1f:48:2e: 01:fc:10:87:d1:8e:5c:b7:3d:71:c5:8f:bd:1b:62: e6:b4:db:60:fe:3b:48:55:34:8a:dd:36:de:e7:d1: bc:b5:a0:67:d1:ce:7f:eb:40:6c:ec:78:de:be:32: 9e:55:0e:81:cf:c6:06:4a:1c:f9:ed:c6:f8:1a:ad: ce:cf:4a:03:ee:6d:fb:d6:33:c7:25:0f:02:01:9b: f5:43:59:0d:ad:67:f7:8b:a3:a9:a6:16:4a:d9:93: a5:17:e7:b1:7f:91:4d:07:be:e4:df:c1:20:24:a7: ee:4c:4a:b3:5f:68:e4:08:9f:ab:15:f0:96:32:e3: 44:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:49:72:CD:C8:82:84:1E:25:93:4C:3B:E0:F8:C4:35:6F:7B:84:1E X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/rUlyzciChB4lk0w74PjENW97hB4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.218.0/24 Signature Algorithm: sha256WithRSAEncryption c3:ca:33:40:83:16:95:13:59:5d:24:09:af:55:15:34:8d:00: 6e:6b:45:78:e8:a1:8a:8a:27:3d:ec:56:e9:e9:da:31:0d:f3: 6e:64:30:aa:35:1b:cc:77:36:9d:b6:f8:6f:56:e9:c2:f4:f8: 6a:6c:03:a1:d3:23:f2:4a:a9:7e:a0:84:ae:e1:10:df:bd:3a: c1:b6:ff:da:9f:e2:22:1e:00:be:a6:86:f2:f7:fd:94:57:88: 5f:80:dc:6a:7f:57:9b:04:9b:91:45:df:a5:31:42:10:64:bc: 8d:11:13:d8:a8:7c:7c:76:81:49:4f:03:38:9e:f2:ae:1f:e0: 6c:c2:28:9e:6a:0e:fc:39:a8:5e:9b:25:42:53:69:6e:28:15: c3:34:3d:ad:41:93:bd:d7:11:b1:3b:ee:e2:bc:38:9d:eb:69: f1:9a:96:c8:83:03:69:bb:ed:67:df:4a:1b:7b:42:af:d2:a6: a5:fa:0a:58:b8:46:8e:d3:dd:fe:72:24:39:39:32:aa:f0:a7: 21:7d:9a:4d:d5:9d:13:1e:c7:36:06:ab:06:c1:fb:d4:3d:3d: 9c:d2:1d:5e:fe:07:07:04:c6:d7:14:d5:45:9a:0a:10:97:04: f7:08:3b:24:ba:56:fc:a7:e6:70:74:87:24:b2:67:37:dc:fc: cf:56:c1:2b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICE2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDA4MjYw NTI1MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFENDk3MkNEQzg4Mjg0 MUUyNTkzNEMzQkUwRjhDNDM1NkY3Qjg0MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYSoNel3b3zNaI6+rbHQfBL6pjCz6WQZ+QrM8X7p19/gxfdOeg a5dS7W7OCtzzxagohH6Oi9+lsphiWCeQjZn+TlJcKBBIc+cICm+iwj7uL2/SHai9 79s4Z/QAocD/egjUvajz27p0IvyKMkuHLAIsQUSXvq4LxHcKa9JS8VuTUa/OSR9I LgH8EIfRjly3PXHFj70bYua022D+O0hVNIrdNt7n0by1oGfRzn/rQGzseN6+Mp5V DoHPxgZKHPntxvgarc7PSgPubfvWM8clDwIBm/VDWQ2tZ/eLo6mmFkrZk6UX57F/ kU0HvuTfwSAkp+5MSrNfaOQIn6sV8JYy40TvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUrUlyzciChB4lk0w74PjENW97hB4wHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9yVWx5emNpQ2hCNGxrMHc3NFBq RU5XOTdoQjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3va MA0GCSqGSIb3DQEBCwUAA4IBAQDDyjNAgxaVE1ldJAmvVRU0jQBua0V46KGKiic9 7Fbp6doxDfNuZDCqNRvMdzadtvhvVunC9PhqbAOh0yPySql+oISu4RDfvTrBtv/a n+IiHgC+poby9/2UV4hfgNxqf1ebBJuRRd+lMUIQZLyNERPYqHx8doFJTwM4nvKu H+Bswiieag78OahemyVCU2luKBXDND2tQZO91xGxO+7ivDid62nxmpbIgwNpu+1n 30obe0Kv0qal+gpYuEaO093+ciQ5OTKq8KchfZpN1Z0THsc2BqsGwfvUPT2c0h1e /gcHBMbXFNVFmgoQlwT3CDskulb8p+ZwdIcksmc33PzPVsEr -----END CERTIFICATE-----Generated at Tue Oct 22 19:33:10 2024 by rpki-client on console-ams.rpki-client.org