$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ZVnyuHTkBnBaLUvQW_0yWgBa4b0.roa File: ZVnyuHTkBnBaLUvQW_0yWgBa4b0.roa (raw, json) Hash identifier: lz+vyEKIEYfAsLet99/WHUpxxgyRWqPjaz5vIWnsDpQ= Subject key identifier: 65:59:F2:B8:74:E4:06:70:5A:2D:4B:D0:5B:FD:32:5A:00:5A:E1:BD Certificate issuer: /CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D Certificate serial: 08AC Authority key identifier: 0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ZVnyuHTkBnBaLUvQW_0yWgBa4b0.roa Signing time: Fri 01 Sep 2023 09:43:50 +0000 ROA not before: Fri 01 Sep 2023 09:43:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 48024 IP address blocks: 103.126.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BDA25C630F8FF46E307B194CD2AAD1E6D06331D Validity Not Before: Sep 1 09:43:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6559F2B874E406705A2D4BD05BFD325A005AE1BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:ad:1e:9c:d0:0a:ec:c4:9e:f9:c3:74:d4:bd: fe:8a:ec:71:c2:f4:8b:17:b8:fb:3f:61:5c:62:73: a7:65:7a:d5:76:f7:2a:c7:d4:e1:e8:54:9a:17:33: c3:f2:80:6b:82:c2:c7:82:80:39:a1:10:93:f5:b9: 54:e0:64:d6:b5:aa:ce:d3:96:54:7b:2a:da:2a:fc: b1:c5:01:18:f7:67:36:a0:9c:2b:49:b3:05:66:f5: 6f:91:88:d9:3d:79:87:28:05:bd:df:62:e0:66:e8: 90:ef:47:d0:60:58:5e:e8:fc:b5:6d:c6:28:23:95: c9:eb:cb:f1:99:74:73:ce:bd:6f:11:32:c7:f9:24: 38:7f:db:5a:8a:c6:ff:24:b4:71:a7:cc:8c:75:26: 32:9f:4f:8c:30:d3:04:d6:1d:4f:c4:fe:d1:7a:2b: ba:37:85:dd:ee:2a:57:98:24:61:d5:63:53:e6:ea: ca:d0:23:8b:c5:f7:e5:05:27:e5:60:a4:60:20:20: 55:19:fc:b3:02:1e:8c:03:c2:29:a0:ef:9c:c6:bc: 31:87:db:05:d5:90:a1:47:f5:fc:ef:5b:9e:c9:51: a2:17:22:bf:a2:4c:e6:27:03:63:7b:e7:e8:53:0e: 1f:ae:ca:cc:3f:a9:db:a1:ec:a5:66:34:26:a4:fd: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:59:F2:B8:74:E4:06:70:5A:2D:4B:D0:5B:FD:32:5A:00:5A:E1:BD X509v3 Authority Key Identifier: keyid:0B:DA:25:C6:30:F8:FF:46:E3:07:B1:94:CD:2A:AD:1E:6D:06:33:1D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/C9olxjD4_0bjB7GUzSqtHm0GMx0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C9olxjD4_0bjB7GUzSqtHm0GMx0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHANGFU/ZVnyuHTkBnBaLUvQW_0yWgBa4b0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.126.88.0/24 Signature Algorithm: sha256WithRSAEncryption 10:a9:3b:62:62:74:8a:24:de:03:b0:45:0b:2d:b0:16:2b:8f: fa:9d:16:45:f0:e8:33:94:8c:59:fb:2e:c2:07:bb:e1:46:88: b4:19:6b:7a:33:19:d0:d8:04:c3:d9:01:71:ff:7d:cd:71:56: 42:0a:e3:2c:53:0f:35:d6:7e:22:48:79:14:80:14:cd:9e:0d: 94:05:09:50:8c:f0:be:10:b6:b0:75:6f:47:4d:3c:14:ba:77: 35:77:50:f1:6e:67:f3:c7:ca:31:64:27:6b:35:50:ba:17:73: 2d:0e:26:44:e7:f5:6d:de:76:a9:92:9e:ac:70:b8:d4:dc:04: dd:94:49:1e:12:7c:bc:9d:48:73:c5:e2:a0:af:a1:c7:6d:2c: eb:19:65:2e:49:90:41:3d:f0:be:e7:0e:a9:89:e4:e2:63:c6: 1c:e8:33:b9:17:69:ff:c4:31:95:dc:15:9a:01:c3:a7:ec:ec: 3e:6c:1e:7c:b4:12:2f:42:e9:ed:bd:34:d8:36:6e:48:b5:72: cd:86:9d:d0:97:c2:24:64:3a:23:83:72:11:bc:08:a6:11:05: 20:cb:57:04:80:71:a0:c8:60:a4:1e:f3:ca:cf:90:a0:4a:ea: 00:0b:36:0d:a8:13:0d:c4:fc:28:11:0e:41:e1:88:6d:e9:11: 40:e2:dd:71 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEJE QTI1QzYzMEY4RkY0NkUzMDdCMTk0Q0QyQUFEMUU2RDA2MzMxRDAeFw0yMzA5MDEw OTQzNTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY1NTlGMkI4NzRFNDA2 NzA1QTJENEJEMDVCRkQzMjVBMDA1QUUxQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD9rR6c0ArsxJ75w3TUvf6K7HHC9IsXuPs/YVxic6dletV29yrH 1OHoVJoXM8PygGuCwseCgDmhEJP1uVTgZNa1qs7TllR7Ktoq/LHFARj3ZzagnCtJ swVm9W+RiNk9eYcoBb3fYuBm6JDvR9BgWF7o/LVtxigjlcnry/GZdHPOvW8RMsf5 JDh/21qKxv8ktHGnzIx1JjKfT4ww0wTWHU/E/tF6K7o3hd3uKleYJGHVY1Pm6srQ I4vF9+UFJ+VgpGAgIFUZ/LMCHowDwimg75zGvDGH2wXVkKFH9fzvW57JUaIXIr+i TOYnA2N75+hTDh+uysw/qduh7KVmNCak/VkfAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUZVnyuHTkBnBaLUvQW/0yWgBa4b0wHwYDVR0jBBgwFoAUC9olxjD4/0bjB7GU zSqtHm0GMx0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hBTkdG VS9DOW9seGpENF8wYmpCN0dVelNxdEhtMEdNeDAuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0M5b2x4akQ0XzBiakI3R1V6U3F0SG0wR014MC5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NIQU5HRlUvWlZueXVIVGtCbkJhTFV2 UVdfMHlXZ0JhNGIwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGd+WDANBgkqhkiG9w0BAQsFAAOCAQEAEKk7YmJ0iiTeA7BFCy2wFiuP+p0WRfDo M5SMWfsuwge74UaItBlrejMZ0NgEw9kBcf99zXFWQgrjLFMPNdZ+Ikh5FIAUzZ4N lAUJUIzwvhC2sHVvR008FLp3NXdQ8W5n88fKMWQnazVQuhdzLQ4mROf1bd52qZKe rHC41NwE3ZRJHhJ8vJ1Ic8XioK+hx20s6xllLkmQQT3wvucOqYnk4mPGHOgzuRdp /8QxldwVmgHDp+zsPmwefLQSL0Lp7b002DZuSLVyzYad0JfCJGQ6I4NyEbwIphEF IMtXBIBxoMhgpB7zys+QoErqAAs2DagTDcT8KBEOQeGIbekRQOLdcQ== -----END CERTIFICATE-----Generated at Mon May 6 16:42:15 2024 by rpki-client on console-ams.rpki-client.org