$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/FMagGuCGK0XvcnQtmac_Bc3tjOk.roa File: FMagGuCGK0XvcnQtmac_Bc3tjOk.roa (raw, json) Hash identifier: dwNx0leDUzQijBGbIMHYZVwR3FTjgMlvRlUkaXbIti0= Subject key identifier: 14:C6:A0:1A:E0:86:2B:45:EF:72:74:2D:99:A7:3F:05:CD:ED:8C:E9 Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Certificate serial: 1140 Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/FMagGuCGK0XvcnQtmac_Bc3tjOk.roa Signing time: Mon 26 Aug 2024 05:26:05 +0000 ROA not before: Mon 26 Aug 2024 05:26:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131633 IP address blocks: 103.127.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4416 (0x1140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Validity Not Before: Aug 26 05:26:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=14C6A01AE0862B45EF72742D99A73F05CDED8CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:91:8e:c0:37:12:91:5c:ac:9a:91:f2:4e: 96:e6:c4:0b:a1:61:30:2e:9e:0e:b3:d2:84:42:70: dd:8a:a1:6c:2d:37:d9:f1:f8:71:24:c1:bf:b9:0a: 19:43:2f:32:69:78:d8:af:eb:ed:d9:9e:3e:b5:3e: 6b:2a:9f:a0:38:5c:a1:94:49:02:86:36:84:95:07: d8:55:4d:24:28:80:1a:eb:da:fb:60:51:e0:91:6c: 3a:47:64:34:48:75:7e:cb:61:61:50:f8:0c:4b:06: 0c:b7:1c:13:e3:cd:4b:c3:f2:ac:01:52:eb:7d:2a: 15:8e:8f:aa:6e:d5:81:5e:70:2c:86:d5:30:4b:4f: b2:72:59:51:7f:0d:bb:58:40:21:9d:26:3c:56:2c: c5:c6:ba:37:ae:59:5b:d4:7e:ff:91:3f:36:d0:61: 8b:58:79:36:79:c8:14:ac:23:fc:cd:7a:19:ae:cb: 4a:68:8b:31:c2:a8:fb:e9:7b:00:c4:2c:bc:79:f7: 57:5d:15:6e:ba:16:2f:12:ff:72:c5:d3:91:1b:03: 10:a5:28:65:45:7d:17:d1:c8:94:81:68:8c:49:65: b6:65:1d:11:a5:4c:09:0b:11:82:ce:8a:44:b2:30: c3:8b:e0:71:f0:c6:a4:9e:13:3e:c0:ca:f3:f9:e4: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C6:A0:1A:E0:86:2B:45:EF:72:74:2D:99:A7:3F:05:CD:ED:8C:E9 X509v3 Authority Key Identifier: keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/FMagGuCGK0XvcnQtmac_Bc3tjOk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.238.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:db:c6:76:9a:d4:7a:da:c3:59:04:7c:f3:80:71:ea:1e:d0: 2a:df:8b:bd:73:5a:9f:71:2a:b3:3c:21:8a:7a:e8:a3:9e:af: 90:8e:96:a7:ac:5d:ef:4e:14:f7:5c:2d:f3:52:ca:cd:89:b9: 62:4c:5b:1a:0a:21:07:47:20:60:d0:59:f6:e0:7c:f7:91:5b: bd:1e:9d:10:33:2a:3e:c7:79:dc:26:df:da:cb:54:d6:3a:7e: af:8d:c3:2e:63:3d:05:98:ee:f5:1f:a9:fb:82:fd:9e:5c:24: 87:19:80:4c:d0:8c:af:75:36:81:b1:18:6a:cd:a0:16:3b:7e: 62:c1:fa:6e:fc:6e:c3:e7:4e:25:5d:dc:b9:f2:27:76:96:86: ff:ee:8d:9a:62:58:a2:d6:8f:7b:dc:c5:4f:ff:ae:5e:3c:d3: f1:7a:c6:49:78:39:0c:58:21:40:6a:a1:56:b4:34:38:a7:f1: 81:c8:1c:6f:59:46:87:85:60:63:75:7a:ab:3c:a2:97:7e:33: 49:98:84:89:27:38:06:86:93:46:4a:77:ea:0c:e4:f1:f8:48: 2d:61:28:e8:70:f0:14:13:34:c5:15:b9:d9:7b:f6:7e:31:3a: cd:68:86:d0:60:b6:2d:bc:2f:95:00:03:1d:44:cd:10:f4:5d: 97:70:57:fd -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNDA4MjYw NTI2MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0QzZBMDFBRTA4NjJC NDVFRjcyNzQyRDk5QTczRjA1Q0RFRDhDRTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/BZGOwDcSkVysmpHyTpbmxAuhYTAung6z0oRCcN2KoWwtN9nx +HEkwb+5ChlDLzJpeNiv6+3Znj61Pmsqn6A4XKGUSQKGNoSVB9hVTSQogBrr2vtg UeCRbDpHZDRIdX7LYWFQ+AxLBgy3HBPjzUvD8qwBUut9KhWOj6pu1YFecCyG1TBL T7JyWVF/DbtYQCGdJjxWLMXGujeuWVvUfv+RPzbQYYtYeTZ5yBSsI/zNehmuy0po izHCqPvpewDELLx591ddFW66Fi8S/3LF05EbAxClKGVFfRfRyJSBaIxJZbZlHRGl TAkLEYLOikSyMMOL4HHwxqSeEz7AyvP55OPFAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUFMagGuCGK0XvcnQtmac/Bc3tjOkwHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7 k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9GTWFnR3VDR0swWHZj blF0bWFjX0JjM3RqT2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3/uMA0GCSqGSIb3DQEBCwUAA4IBAQAe28Z2mtR62sNZBHzzgHHqHtAq34u9 c1qfcSqzPCGKeuijnq+QjpanrF3vThT3XC3zUsrNibliTFsaCiEHRyBg0Fn24Hz3 kVu9Hp0QMyo+x3ncJt/ay1TWOn6vjcMuYz0FmO71H6n7gv2eXCSHGYBM0IyvdTaB sRhqzaAWO35iwfpu/G7D504lXdy58id2lob/7o2aYlii1o973MVP/65ePNPxesZJ eDkMWCFAaqFWtDQ4p/GByBxvWUaHhWBjdXqrPKKXfjNJmISJJzgGhpNGSnfqDOTx +EgtYSjocPAUEzTFFbnZe/Z+MTrNaIbQYLYtvC+VAAMdRM0Q9F2XcFf9 -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:14 2024 by rpki-client on console-ams.rpki-client.org