$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/wk_TNXvrhlDlMowuY05LRVcdn3Q.roa File: wk_TNXvrhlDlMowuY05LRVcdn3Q.roa (raw, json) Hash identifier: sw6rdIslFnMHNNJugCOrLMRYrN12XbLsADvil9+244k= Subject key identifier: C2:4F:D3:35:7B:EB:86:50:E5:32:8C:2E:63:4E:4B:45:57:1D:9F:74 Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Certificate serial: 1148 Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/wk_TNXvrhlDlMowuY05LRVcdn3Q.roa Signing time: Wed 04 Sep 2024 00:30:19 +0000 ROA not before: Wed 04 Sep 2024 00:30:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10103 IP address blocks: 103.127.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4424 (0x1148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF Validity Not Before: Sep 4 00:30:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C24FD3357BEB8650E5328C2E634E4B45571D9F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:6e:34:ca:6d:cf:d0:b2:95:4e:93:94:aa: 30:8c:79:c2:ca:e3:6d:d4:31:ad:5d:d7:09:c5:ef: 08:a0:8c:c3:c5:4e:da:92:1f:72:c8:a1:b8:f0:b5: dd:45:7a:1b:4f:57:b8:bc:de:e2:30:bd:d8:c8:ee: ff:99:cd:b5:0e:49:53:a3:78:8d:16:3a:13:32:a9: ab:1a:6f:28:99:62:11:0e:71:bc:38:7b:6c:08:7b: 44:11:00:24:fa:a4:4a:2a:e7:42:65:3e:4f:08:da: f2:3a:2e:d8:9c:d1:71:f3:d9:74:22:78:3d:1f:85: 50:88:fa:f1:cf:3b:7c:d8:ab:83:a0:f2:b0:39:5c: ed:a0:89:e0:2e:01:04:81:55:5d:d6:1c:ba:ea:99: 23:c0:dc:e5:e5:69:a8:56:47:61:12:9a:30:68:d9: 12:8c:c6:ba:e1:93:3f:ca:3e:b9:bc:dc:9b:6a:8f: 67:d7:a1:04:b7:ad:41:0b:fb:78:51:9e:1f:bc:8b: ea:cf:a9:ea:1b:a7:a0:51:5e:cc:c6:f4:e3:49:60: 5a:31:ef:3d:3d:25:26:31:c9:01:de:5e:ab:9a:7b: 9f:f5:24:98:19:b1:98:dd:7f:b6:16:7c:81:f4:e4: 59:43:42:c1:34:64:30:65:de:6d:0d:a5:d3:d8:32: 78:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4F:D3:35:7B:EB:86:50:E5:32:8C:2E:63:4E:4B:45:57:1D:9F:74 X509v3 Authority Key Identifier: keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/wk_TNXvrhlDlMowuY05LRVcdn3Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.127.239.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:57:8b:8d:c4:cb:e9:d4:c6:54:37:c7:89:37:e5:2f:1a:f3: e2:47:de:e0:ea:0f:80:ca:ed:a3:56:e5:94:9c:ae:58:bb:21: 52:bc:95:6a:99:24:f4:0c:aa:51:a5:40:b7:47:02:91:9b:06: bf:a2:9f:21:01:20:05:f6:d7:8a:61:f2:e4:46:e3:02:32:e7: 00:10:00:30:5a:95:b7:2e:69:04:08:ce:0b:91:f7:91:7c:60: 58:b2:d2:f3:7e:a2:49:70:59:f5:f6:b6:06:e0:b4:0c:dd:9c: 61:6e:74:4c:39:a6:19:66:2e:9e:80:2a:e1:64:c3:3d:4e:3b: 0e:b2:3a:ab:2e:ba:fc:d2:a8:33:75:d7:82:81:5e:7a:6c:ce: 41:5d:06:4b:fa:44:48:b6:73:85:00:48:fd:dc:9d:4c:7e:09: e6:62:cf:3a:82:51:46:53:04:68:a1:87:80:c2:23:31:9c:6e: 63:ac:91:8c:44:a8:15:3d:3a:07:87:f3:ba:ad:c4:ce:cd:21: 66:ca:da:0a:e7:47:27:49:7f:9d:22:ea:83:84:ae:28:f1:52: e5:d4:02:77:30:ca:88:40:d7:16:37:9b:1a:11:72:e3:b7:19: 18:2a:a6:a5:56:78:ad:3d:49:86:4e:92:9d:d3:f8:45:ae:51: 22:f9:7f:88 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICEUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNDA5MDQw MDMwMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMyNEZEMzM1N0JFQjg2 NTBFNTMyOEMyRTYzNEU0QjQ1NTcxRDlGNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEaW40ym3P0LKVTpOUqjCMecLK423UMa1d1wnF7wigjMPFTtqS H3LIobjwtd1FehtPV7i83uIwvdjI7v+ZzbUOSVOjeI0WOhMyqasabyiZYhEOcbw4 e2wIe0QRACT6pEoq50JlPk8I2vI6Ltic0XHz2XQieD0fhVCI+vHPO3zYq4Og8rA5 XO2gieAuAQSBVV3WHLrqmSPA3OXlaahWR2ESmjBo2RKMxrrhkz/KPrm83Jtqj2fX oQS3rUEL+3hRnh+8i+rPqeobp6BRXszG9ONJYFox7z09JSYxyQHeXquae5/1JJgZ sZjdf7YWfIH05FlDQsE0ZDBl3m0NpdPYMnghAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUwk/TNXvrhlDlMowuY05LRVcdn3QwHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7 k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy93a19UTlh2cmhsRGxN b3d1WTA1TFJWY2RuM1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3/vMA0GCSqGSIb3DQEBCwUAA4IBAQBsV4uNxMvp1MZUN8eJN+UvGvPiR97g 6g+Ayu2jVuWUnK5YuyFSvJVqmST0DKpRpUC3RwKRmwa/op8hASAF9teKYfLkRuMC MucAEAAwWpW3LmkECM4LkfeRfGBYstLzfqJJcFn19rYG4LQM3ZxhbnRMOaYZZi6e gCrhZMM9TjsOsjqrLrr80qgzddeCgV56bM5BXQZL+kRItnOFAEj93J1MfgnmYs86 glFGUwRooYeAwiMxnG5jrJGMRKgVPToHh/O6rcTOzSFmytoK50cnSX+dIuqDhK4o 8VLl1AJ3MMqIQNcWN5saEXLjtxkYKqalVnitPUmGTpKd0/hFrlEi+X+I -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:09 2024 by rpki-client on console-ams.rpki-client.org