$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jZJ8P_z1Eg48-cN6TAZR7LyIwT0.roa File: jZJ8P_z1Eg48-cN6TAZR7LyIwT0.roa (raw, json) Hash identifier: rxufULm4oNbjsZ1l1dDmGu96xFxVtiCWA1WkJoDHpqg= Subject key identifier: 8D:92:7C:3F:FC:F5:12:0E:3C:F9:C3:7A:4C:06:51:EC:BC:88:C1:3D Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F Certificate serial: 0BF8 Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jZJ8P_z1Eg48-cN6TAZR7LyIwT0.roa Signing time: Mon 26 Aug 2024 05:26:24 +0000 ROA not before: Mon 26 Aug 2024 05:26:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131618 IP address blocks: 103.129.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3064 (0xbf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F Validity Not Before: Aug 26 05:26:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8D927C3FFCF5120E3CF9C37A4C0651ECBC88C13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:04:44:02:ae:30:b5:69:51:0c:40:4c:53: 2f:05:7e:03:a2:17:30:3e:d7:ac:b7:20:f3:a2:8e: e7:09:df:16:fc:e1:6c:6f:74:d7:b6:9d:29:ee:9a: 02:70:33:f0:3e:54:04:68:9e:89:20:ee:76:79:94: 6b:24:f4:8d:63:b0:92:87:fb:bc:bd:97:91:bb:1d: 82:6b:da:25:4a:99:95:01:49:d9:2c:33:26:6d:98: 02:38:3c:7b:61:80:28:ab:2c:23:45:21:0f:58:0e: d9:42:af:0d:19:37:1b:2f:6c:3c:37:0c:3d:3d:6d: 51:b9:ba:78:ee:4c:04:d6:8d:c9:15:bd:a2:74:a9: 9d:d1:98:de:ef:4f:2a:18:ea:e1:d9:55:fa:dd:4b: 63:3a:f3:ed:e3:e8:7f:19:40:99:e6:64:1e:8c:67: 3f:1c:46:80:6f:e7:f1:f9:1a:e6:11:fa:7d:31:3a: f0:ce:84:39:d4:63:3f:72:31:de:de:ca:43:20:7e: d1:a5:a3:6e:20:ab:79:d9:4f:85:38:0f:ab:b9:78: ea:0f:6c:a4:46:92:1b:5d:56:6e:c5:2e:e9:1c:a6: e3:59:2a:49:4e:a7:a1:80:d8:20:d8:86:f0:44:7b: 68:9d:a6:06:a7:5a:ca:ea:11:e4:be:09:0d:9b:04: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:92:7C:3F:FC:F5:12:0E:3C:F9:C3:7A:4C:06:51:EC:BC:88:C1:3D X509v3 Authority Key Identifier: keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jZJ8P_z1Eg48-cN6TAZR7LyIwT0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.136.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:9f:00:59:ec:c9:c6:39:b5:80:37:bf:43:91:d8:31:56:ec: 69:34:9b:6c:e6:2a:d4:6d:42:bd:d6:9b:b4:1f:1c:10:1e:55: b0:aa:1b:f4:c3:2b:fd:9a:a4:1e:13:97:22:89:2c:90:e7:ff: 36:b5:39:37:44:1d:d5:93:a9:72:71:96:b4:e0:7b:03:9b:2c: 08:e1:ae:38:41:74:cd:a1:ca:30:df:12:d7:8c:62:d0:2c:6e: 91:21:90:ae:96:b0:84:a7:2c:77:f2:6b:07:c0:cd:a9:f5:55: 1f:9f:89:14:18:0b:ef:e0:ba:19:03:9e:1b:3e:4a:ee:a3:0b: 65:bf:c9:45:cc:5e:6f:69:54:2a:56:0d:e3:7d:bd:6a:21:3f: 3a:46:82:18:9b:3d:9a:a6:ee:77:8c:8d:79:15:bf:a6:ce:50: cd:97:3f:b9:6e:9b:ea:1d:0a:7a:e2:a6:f8:9b:7c:01:26:2b: 4f:68:78:1d:15:25:a4:41:cd:e0:a6:46:53:78:64:7e:a7:b6: ee:2a:a6:a5:1e:55:3b:26:f1:fc:ba:08:a9:0a:a1:ee:aa:1b: 29:aa:25:fc:ec:76:0c:86:d1:65:df:cd:be:e4:8e:87:35:ea: 6d:80:b0:66:14:4c:85:06:30:de:b8:22:f4:7f:19:83:a4:4b: 5d:b9:bb:ed -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yNDA4MjYw NTI2MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhEOTI3QzNGRkNGNTEy MEUzQ0Y5QzM3QTRDMDY1MUVDQkM4OEMxM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFHwREAq4wtWlRDEBMUy8FfgOiFzA+16y3IPOijucJ3xb84Wxv dNe2nSnumgJwM/A+VARonokg7nZ5lGsk9I1jsJKH+7y9l5G7HYJr2iVKmZUBSdks MyZtmAI4PHthgCirLCNFIQ9YDtlCrw0ZNxsvbDw3DD09bVG5unjuTATWjckVvaJ0 qZ3RmN7vTyoY6uHZVfrdS2M68+3j6H8ZQJnmZB6MZz8cRoBv5/H5GuYR+n0xOvDO hDnUYz9yMd7eykMgftGlo24gq3nZT4U4D6u5eOoPbKRGkhtdVm7FLukcpuNZKklO p6GA2CDYhvBEe2idpganWsrqEeS+CQ2bBJhvAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUjZJ8P/z1Eg48+cN6TAZR7LyIwT0wHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL +wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9qWko4UF96MUVnNDgt Y042VEFaUjdMeUl3VDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4GIMA0GCSqGSIb3DQEBCwUAA4IBAQBtnwBZ7MnGObWAN79DkdgxVuxpNJts 5irUbUK91pu0HxwQHlWwqhv0wyv9mqQeE5ciiSyQ5/82tTk3RB3Vk6lycZa04HsD mywI4a44QXTNocow3xLXjGLQLG6RIZCulrCEpyx38msHwM2p9VUfn4kUGAvv4LoZ A54bPkruowtlv8lFzF5vaVQqVg3jfb1qIT86RoIYmz2apu53jI15Fb+mzlDNlz+5 bpvqHQp64qb4m3wBJitPaHgdFSWkQc3gpkZTeGR+p7buKqalHlU7JvH8ugipCqHu qhspqiX87HYMhtFl382+5I6HNeptgLBmFEyFBjDeuCL0fxmDpEtdubvt -----END CERTIFICATE-----Generated at Mon Nov 25 06:08:06 2024 by rpki-client on console-ams.rpki-client.org