$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LfBAesebvRGcmdOms-0oi_nrQXA.roa File: LfBAesebvRGcmdOms-0oi_nrQXA.roa (raw, json) Hash identifier: stx/qqAL4vVPTw/m9A20z+S2d4WOqjYWwiBIdT5gydA= Subject key identifier: 2D:F0:40:7A:C7:9B:BD:11:9C:99:D3:A6:B3:ED:28:8B:F9:EB:41:70 Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0C36 Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LfBAesebvRGcmdOms-0oi_nrQXA.roa Signing time: Wed 20 Mar 2024 02:18:32 +0000 ROA not before: Wed 20 Mar 2024 02:18:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 103.133.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 21:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Mar 20 02:18:32 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2DF0407AC79BBD119C99D3A6B3ED288BF9EB4170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c4:1f:20:d2:d1:ac:84:5d:ca:f1:73:32:32: 66:6f:06:72:57:96:21:4a:38:63:c2:d2:0c:45:27: e0:d2:c7:7e:91:5c:44:d3:aa:9a:b1:d2:dd:17:e0: 37:ff:6d:07:59:20:22:d9:97:4f:94:a8:aa:f6:7b: e4:20:17:8b:20:42:43:be:c2:ce:3d:71:20:6f:7e: 0f:c2:2f:df:5f:3e:cf:67:df:41:4f:ad:d6:15:cc: 70:67:50:19:14:30:4c:79:01:29:38:27:02:6b:b0: c3:fb:8f:c2:67:02:a3:bf:21:17:0b:1e:37:d0:2d: 81:dd:ec:6b:d5:3a:bc:25:2d:54:83:b2:f0:21:d0: 1b:71:89:0d:e9:f7:9e:73:54:f4:1e:c7:82:5d:92: e0:c3:b3:0e:fc:e7:53:32:e2:cd:1a:03:e6:53:16: 0e:70:39:bc:c5:be:5f:03:68:09:96:50:05:e3:c1: 42:6b:b7:e8:8d:1e:21:89:ab:19:27:2a:82:6d:9f: 92:da:6a:0c:40:19:f0:0c:42:bd:89:b6:3a:a9:14: e5:26:af:1c:73:15:93:65:55:ea:00:cc:19:6d:20: 9a:c0:26:db:7b:67:a9:a4:bf:89:b1:9f:aa:ac:42: f4:cb:38:50:9a:74:79:e0:8f:c8:59:6b:d4:d0:9b: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F0:40:7A:C7:9B:BD:11:9C:99:D3:A6:B3:ED:28:8B:F9:EB:41:70 X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/LfBAesebvRGcmdOms-0oi_nrQXA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.133.152.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:fd:23:de:9c:ed:3b:5a:a2:44:98:72:d5:cb:c3:6c:09:3e: 0e:73:b1:66:1c:92:fd:7a:28:07:f3:cd:46:89:a3:55:22:7b: 48:e1:a5:3a:aa:6a:9d:64:d9:89:cb:b4:2c:73:34:21:fc:54: f2:a5:cd:44:b8:49:06:bf:28:7e:45:33:93:49:a8:3d:dc:cc: e9:9b:0a:26:83:59:4e:db:f9:90:60:e2:f1:e2:96:22:8a:8d: 94:df:a2:d0:3d:db:2c:40:db:0d:99:96:c2:8f:be:19:c9:22: 14:56:cc:44:29:08:e1:4c:aa:d1:0c:3b:e8:d5:89:ce:75:b8: 99:3e:df:13:25:26:d6:f5:f9:ad:80:10:d3:dc:ef:c9:a7:be: 34:07:79:f9:2a:29:95:ea:19:5d:5a:51:86:c5:ab:c2:9a:2d: d8:8a:0b:a9:db:82:94:1e:4b:cf:5d:f1:77:d8:f9:3b:d5:e1: e1:3e:0b:6b:8f:72:f0:53:ad:2f:a1:47:20:91:c7:59:0e:e5: 82:d1:99:b8:1f:67:ea:50:d6:91:0f:76:6b:8d:03:57:db:72: 62:b9:c4:ff:7d:d3:93:ab:67:1e:fb:07:0e:34:79:a4:49:7e: 40:82:1f:c7:7f:c9:fd:58:00:58:c4:11:2b:04:1a:41:78:84: 06:66:c7:d6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNDAzMjAw MjE4MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJERjA0MDdBQzc5QkJE MTE5Qzk5RDNBNkIzRUQyODhCRjlFQjQxNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwxB8g0tGshF3K8XMyMmZvBnJXliFKOGPC0gxFJ+DSx36RXETT qpqx0t0X4Df/bQdZICLZl0+UqKr2e+QgF4sgQkO+ws49cSBvfg/CL99fPs9n30FP rdYVzHBnUBkUMEx5ASk4JwJrsMP7j8JnAqO/IRcLHjfQLYHd7GvVOrwlLVSDsvAh 0BtxiQ3p955zVPQex4JdkuDDsw7851My4s0aA+ZTFg5wObzFvl8DaAmWUAXjwUJr t+iNHiGJqxknKoJtn5LaagxAGfAMQr2JtjqpFOUmrxxzFZNlVeoAzBltIJrAJtt7 Z6mkv4mxn6qsQvTLOFCadHngj8hZa9TQm2JXAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQULfBAesebvRGcmdOms+0oi/nrQXAwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL0xmQkFlc2VidlJH Y21kT21zLTBvaV9uclFYQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnhZgwDQYJKoZIhvcNAQELBQADggEBAIr9I96c7TtaokSYctXLw2wJPg5z sWYckv16KAfzzUaJo1Uie0jhpTqqap1k2YnLtCxzNCH8VPKlzUS4SQa/KH5FM5NJ qD3czOmbCiaDWU7b+ZBg4vHiliKKjZTfotA92yxA2w2ZlsKPvhnJIhRWzEQpCOFM qtEMO+jVic51uJk+3xMlJtb1+a2AENPc78mnvjQHefkqKZXqGV1aUYbFq8KaLdiK C6nbgpQeS89d8XfY+TvV4eE+C2uPcvBTrS+hRyCRx1kO5YLRmbgfZ+pQ1pEPdmuN A1fbcmK5xP9905OrZx77Bw40eaRJfkCCH8d/yf1YAFjEESsEGkF4hAZmx9Y= -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:36 2024 by rpki-client on console-ams.rpki-client.org