$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/ojYZj997CNQAFhp8iq51PrMSntk.roa File: ojYZj997CNQAFhp8iq51PrMSntk.roa (raw, json) Hash identifier: qB1LdN99FgVo3hK51/IZx+l5MpiEqMvWIEorQRFKDIM= Subject key identifier: A2:36:19:8F:DF:7B:08:D4:00:16:1A:7C:8A:AE:75:3E:B3:12:9E:D9 Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Certificate serial: 10B2 Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/ojYZj997CNQAFhp8iq51PrMSntk.roa Signing time: Mon 19 Feb 2024 12:51:58 +0000 ROA not before: Mon 19 Feb 2024 12:51:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131633 IP address blocks: 103.127.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 23:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4274 (0x10b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Validity Not Before: Feb 19 12:51:58 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A236198FDF7B08D400161A7C8AAE753EB3129ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:a9:d5:d6:19:77:4a:b6:e4:6f:79:7d:a1: 5b:82:5f:9d:ba:72:4f:43:39:77:57:ca:13:4b:96: a3:15:9b:e3:c2:64:9e:28:35:89:42:04:b3:9f:0d: d9:a4:de:be:b0:2c:76:3c:65:a0:b6:76:59:40:e6: 3f:93:7a:61:bc:9b:a3:d9:23:f1:ee:7b:ef:ca:fb: 93:34:95:13:92:07:b2:7a:1a:d3:29:f4:dd:13:3a: a5:d7:c2:2b:39:ec:03:d5:2f:b6:75:bc:88:83:28: 24:03:0f:73:dc:67:90:3d:a3:64:1e:48:a3:8f:f0: 21:ab:cd:18:bb:81:e8:56:2f:5d:5c:0a:17:cd:a0: 06:76:82:4c:21:6b:1d:7a:be:49:80:c5:1d:41:3a: f7:73:5c:4b:b8:8d:af:d6:08:95:66:3d:a9:5a:b3: 48:bf:90:eb:15:77:3b:fe:e1:29:07:30:30:46:94: 59:bf:39:ec:e5:0c:b6:e3:21:15:46:62:5b:d0:04: 74:8c:69:6a:11:44:8a:7d:f9:1a:bf:98:a5:20:3e: 4c:2f:eb:e1:ae:b5:61:37:6a:7a:58:e6:fb:b1:56: 38:24:0e:63:69:8b:42:50:98:25:88:1c:43:bd:9b: fd:3a:58:09:b7:00:36:d5:b6:2a:26:43:f8:ae:03: 11:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:19:8F:DF:7B:08:D4:00:16:1A:7C:8A:AE:75:3E:B3:12:9E:D9 X509v3 Authority Key Identifier: keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/ojYZj997CNQAFhp8iq51PrMSntk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.238.0/23 Signature Algorithm: sha256WithRSAEncryption 75:a4:a8:5e:6b:f1:3e:c6:61:1e:4e:8e:3e:73:f4:dd:dc:8e: fd:e5:86:0a:0d:5e:30:2b:4a:92:0d:ea:bf:17:18:03:e2:aa: 98:de:cd:e6:40:d7:93:57:2c:e7:04:1f:15:63:32:1b:4b:ea: ba:40:fd:71:a8:f5:63:57:88:47:73:8b:30:1c:fe:b1:51:57: dd:a8:67:d4:bb:65:af:db:91:4a:06:9e:b1:86:5a:f8:58:e7: 6b:26:91:b1:6e:28:c1:0a:cf:46:37:20:80:e5:53:2d:eb:1d: 2b:73:f3:85:da:f9:e4:3b:c6:66:9e:6c:5d:67:d9:23:92:64: ce:ff:f8:d7:64:8b:9e:8f:ec:47:4a:7b:a6:b0:5f:e8:43:db: 80:19:95:62:70:1e:6a:19:03:f1:0d:fb:13:9d:10:11:e7:f3: f2:a9:ca:a9:c9:2a:ff:fa:34:94:7a:17:f5:d1:c5:66:4a:06: 5c:73:5c:44:33:a2:20:1b:28:88:c4:6c:d9:bf:e3:e9:e4:98: 13:ed:e2:ae:e5:5d:2c:45:bd:b0:b5:c9:93:4b:da:ae:05:b3: 46:b1:81:1d:26:c6:8b:58:62:f4:d9:db:82:65:d0:3f:b7:0b: 0c:c6:45:6b:1c:d7:99:9c:17:97:90:0a:f2:71:6e:40:3b:3c: 35:21:27:c3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICELIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNDAyMTkx MjUxNThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEEyMzYxOThGREY3QjA4 RDQwMDE2MUE3QzhBQUU3NTNFQjMxMjlFRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGOqnV1hl3Srbkb3l9oVuCX526ck9DOXdXyhNLlqMVm+PCZJ4o NYlCBLOfDdmk3r6wLHY8ZaC2dllA5j+TemG8m6PZI/Hue+/K+5M0lROSB7J6GtMp 9N0TOqXXwis57APVL7Z1vIiDKCQDD3PcZ5A9o2QeSKOP8CGrzRi7gehWL11cChfN oAZ2gkwhax16vkmAxR1BOvdzXEu4ja/WCJVmPalas0i/kOsVdzv+4SkHMDBGlFm/ OezlDLbjIRVGYlvQBHSMaWoRRIp9+Rq/mKUgPkwv6+GutWE3anpY5vuxVjgkDmNp i0JQmCWIHEO9m/06WAm3ADbVtiomQ/iuAxEDAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUojYZj997CNQAFhp8iq51PrMSntkwHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7 k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9vallaajk5N0NOUUFG aHA4aXE1MVByTVNudGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3/uMA0GCSqGSIb3DQEBCwUAA4IBAQB1pKhea/E+xmEeTo4+c/Td3I795YYK DV4wK0qSDeq/FxgD4qqY3s3mQNeTVyznBB8VYzIbS+q6QP1xqPVjV4hHc4swHP6x UVfdqGfUu2Wv25FKBp6xhlr4WOdrJpGxbijBCs9GNyCA5VMt6x0rc/OF2vnkO8Zm nmxdZ9kjkmTO//jXZIuej+xHSnumsF/oQ9uAGZVicB5qGQPxDfsTnRAR5/Pyqcqp ySr/+jSUehf10cVmSgZcc1xEM6IgGyiIxGzZv+Pp5JgT7eKu5V0sRb2wtcmTS9qu BbNGsYEdJsaLWGL02duCZdA/twsMxkVrHNeZnBeXkArycW5AOzw1ISfD -----END CERTIFICATE-----Generated at Tue Apr 30 18:14:07 2024 by rpki-client on console-fra.rpki-client.org