$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPETW/Y1Bkn-HibsrLH_7EB2KVJbFxSbo.roa File: Y1Bkn-HibsrLH_7EB2KVJbFxSbo.roa (raw, json) Hash identifier: uKBrIB2maW1Ig3tj5nhjZx6D9drfqdOcf94As7JrL0M= Subject key identifier: 63:50:64:9F:E1:E2:6E:CA:CB:1F:FE:C4:07:62:95:25:B1:71:49:BA Certificate issuer: /CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2 Certificate serial: 0BFF Authority key identifier: 6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/Y1Bkn-HibsrLH_7EB2KVJbFxSbo.roa Signing time: Mon 26 Aug 2024 05:26:39 +0000 ROA not before: Mon 26 Aug 2024 05:26:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131634 IP address blocks: 103.117.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3071 (0xbff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F8C92DFC78CBFE8C5EFD6BA5A37A1628221FFE2 Validity Not Before: Aug 26 05:26:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6350649FE1E26ECACB1FFEC407629525B17149BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:12:5a:6a:39:64:b2:a2:ca:37:e9:f2:cb: 05:1a:ab:b0:99:2c:57:67:77:3d:55:86:a5:15:d5: 56:c5:78:15:a4:c7:2a:8d:a0:fe:89:04:58:95:67: 75:99:e2:db:91:0a:58:cc:eb:1a:b6:4b:ab:ad:90: 44:01:2a:d7:db:6d:47:26:0c:5d:30:72:ca:09:01: ae:f3:82:5e:de:42:f6:c5:db:95:04:83:03:b3:d5: 2a:be:f1:57:ab:1c:38:33:c5:82:88:5f:39:dc:dc: 5c:b6:2a:55:2b:ac:cc:9d:c5:e2:6b:1e:b4:8a:8a: 3f:2c:e4:01:11:5d:46:6c:d7:ce:1b:73:6e:64:56: 71:ac:80:8a:3e:42:bc:fb:c8:8a:21:8a:c9:27:8d: 5b:3c:dc:97:a5:c4:30:1d:a0:42:24:98:80:a1:19: ce:5d:b2:db:f7:28:d9:91:ac:be:93:33:a0:26:2b: 18:c9:ad:74:9b:8b:b3:34:7b:9d:8b:1b:85:3e:fa: ea:1f:30:f7:2d:c9:ed:03:76:16:d1:72:bf:32:b7: da:6e:ee:b5:f7:83:6a:77:57:3b:4d:8d:dc:03:9c: 17:18:f0:68:e2:2e:6d:7d:f0:98:8a:91:10:ab:51: 6d:04:73:9b:62:89:9c:7c:fc:8d:c0:21:23:a5:fa: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:50:64:9F:E1:E2:6E:CA:CB:1F:FE:C4:07:62:95:25:B1:71:49:BA X509v3 Authority Key Identifier: keyid:6F:8C:92:DF:C7:8C:BF:E8:C5:EF:D6:BA:5A:37:A1:62:82:21:FF:E2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/b4yS38eMv-jF79a6WjehYoIh_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b4yS38eMv-jF79a6WjehYoIh_-I.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPETW/Y1Bkn-HibsrLH_7EB2KVJbFxSbo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.117.4.0/22 Signature Algorithm: sha256WithRSAEncryption 06:52:21:c9:05:19:87:74:b3:ea:93:95:78:d1:91:80:11:65: 85:e2:b8:a3:57:3b:80:de:a9:ef:56:c9:06:bd:92:6e:36:90: 82:1b:8f:30:9d:7b:c7:26:18:9b:7c:fa:30:1e:d6:4b:25:f7: e7:d6:96:43:53:fb:f4:4c:08:37:1e:17:bb:d6:73:49:2f:20: 4f:62:c5:b7:b0:ed:5d:c5:e2:56:5a:05:9b:0b:71:42:22:14: 02:66:11:39:9d:5e:f7:72:6b:fc:7c:39:6b:96:8b:f1:9c:51: e9:fc:33:31:a3:29:93:dd:a9:06:57:1c:8d:f3:24:b4:ec:ae: 6e:69:78:4e:ed:e4:cc:02:fd:f4:a1:c5:7f:ce:42:8c:73:9f: 0d:58:63:cb:c9:3b:8e:cf:cc:3f:12:aa:45:a8:56:94:c0:8b: 8e:0e:d3:3c:99:e0:ed:a2:f8:54:1e:21:d1:82:9c:7e:6e:41: c3:be:ff:66:cc:b6:42:aa:23:d8:43:fe:fa:d3:4e:08:53:95: 27:fd:80:fd:c4:4a:4a:35:8f:29:b9:80:b8:8d:d5:b1:1b:d1: a4:18:89:e0:d7:67:fb:8c:22:90:b4:52:8b:4c:68:71:5a:b5: 30:4f:c3:ac:84:29:5f:d6:90:ac:48:ef:6e:70:39:99:22:7f: 72:43:55:23 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkY4 QzkyREZDNzhDQkZFOEM1RUZENkJBNUEzN0ExNjI4MjIxRkZFMjAeFw0yNDA4MjYw NTI2MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzNTA2NDlGRTFFMjZF Q0FDQjFGRkVDNDA3NjI5NTI1QjE3MTQ5QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi5BJaajlksqLKN+nyywUaq7CZLFdndz1VhqUV1VbFeBWkxyqN oP6JBFiVZ3WZ4tuRCljM6xq2S6utkEQBKtfbbUcmDF0wcsoJAa7zgl7eQvbF25UE gwOz1Sq+8VerHDgzxYKIXznc3Fy2KlUrrMydxeJrHrSKij8s5AERXUZs184bc25k VnGsgIo+Qrz7yIohisknjVs83JelxDAdoEIkmIChGc5dstv3KNmRrL6TM6AmKxjJ rXSbi7M0e52LG4U++uofMPctye0DdhbRcr8yt9pu7rX3g2p3VztNjdwDnBcY8Gji Lm198JiKkRCrUW0Ec5tiiZx8/I3AISOl+kQdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUY1Bkn+HibsrLH/7EB2KVJbFxSbowHwYDVR0jBBgwFoAUb4yS38eMv+jF79a6 WjehYoIh/+IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1BFVFcv YjR5UzM4ZU12LWpGNzlhNldqZWhZb0loXy1JLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9iNHlTMzhlTXYtakY3OWE2V2plaFlvSWhfLUkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TUEVUVy9ZMUJrbi1IaWJzckxIXzdFQjJL VkpiRnhTYm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3UE MA0GCSqGSIb3DQEBCwUAA4IBAQAGUiHJBRmHdLPqk5V40ZGAEWWF4rijVzuA3qnv VskGvZJuNpCCG48wnXvHJhibfPowHtZLJffn1pZDU/v0TAg3Hhe71nNJLyBPYsW3 sO1dxeJWWgWbC3FCIhQCZhE5nV73cmv8fDlrlovxnFHp/DMxoymT3akGVxyN8yS0 7K5uaXhO7eTMAv30ocV/zkKMc58NWGPLyTuOz8w/EqpFqFaUwIuODtM8meDtovhU HiHRgpx+bkHDvv9mzLZCqiPYQ/76004IU5Un/YD9xEpKNY8puYC4jdWxG9GkGIng 12f7jCKQtFKLTGhxWrUwT8OshClf1pCsSO9ucDmZIn9yQ1Uj -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:44 2024 by rpki-client on console-fra.rpki-client.org