$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/D1tAC357mHvOrKeFWMgaRjXSrtI.roa File: D1tAC357mHvOrKeFWMgaRjXSrtI.roa (raw, json) Hash identifier: LDRCLo5hSgXAblQA3YSBpZd3rpok3H1SJzIAqL0Bw+g= Subject key identifier: 0F:5B:40:0B:7E:7B:98:7B:CE:AC:A7:85:58:C8:1A:46:35:D2:AE:D2 Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0CA6 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/D1tAC357mHvOrKeFWMgaRjXSrtI.roa Signing time: Mon 26 Aug 2024 05:26:55 +0000 ROA not before: Mon 26 Aug 2024 05:26:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 103.31.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Aug 26 05:26:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0F5B400B7E7B987BCEACA78558C81A4635D2AED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:39:d5:65:4a:25:8d:29:4f:5a:a4:00:4e: 6f:74:bd:57:25:d7:7f:87:c7:97:af:3a:b0:05:25: 62:97:b7:f5:2f:81:eb:4a:f6:82:85:6b:f4:17:9e: d0:01:59:21:97:35:47:34:73:7e:7d:bb:14:04:07: c6:2a:19:a9:72:c9:ec:d0:c3:f0:fb:6d:0c:57:00: 83:2e:4a:32:1c:c6:17:62:30:11:d4:78:8a:a6:a6: 8d:79:98:3a:99:5c:57:53:96:96:22:80:ec:a8:9f: 90:02:4e:1f:bb:b0:07:52:81:d4:0a:81:85:a6:d9: 5c:c2:12:e5:06:33:60:f9:14:31:5e:c4:16:bf:24: 55:72:87:b1:c7:4e:dd:3c:c8:9c:82:2b:cd:28:a2: 8b:63:dc:d9:87:69:3f:89:2c:0c:61:08:ed:b6:99: 13:a6:82:c9:a7:56:59:48:75:ce:48:d5:a0:85:df: 61:bb:b3:20:b7:da:b1:6e:46:1a:fd:96:a5:4d:1d: af:71:52:41:81:7a:50:28:2a:c1:19:94:67:54:85: 4d:7c:23:82:31:27:07:f9:10:e9:64:14:15:2e:70: 6c:2e:b7:b8:e6:94:01:11:e7:4e:4d:b0:97:ac:54: c1:c8:e1:f3:23:72:df:32:fa:d4:7c:a2:eb:88:cc: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:40:0B:7E:7B:98:7B:CE:AC:A7:85:58:C8:1A:46:35:D2:AE:D2 X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/D1tAC357mHvOrKeFWMgaRjXSrtI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.31.196.0/22 Signature Algorithm: sha256WithRSAEncryption 42:b9:7b:2e:ad:f8:00:d3:6e:e5:a2:90:2c:62:51:0e:5d:2f: 76:f1:16:ef:8b:b7:11:78:9e:9e:42:70:4c:b9:30:a2:91:e8: 56:d6:4a:ff:28:a1:bb:de:d6:67:c2:9d:80:e7:a2:42:34:2a: 94:ab:45:ab:66:16:27:60:e4:78:36:46:d3:95:94:ee:82:a1: 61:ae:f8:21:25:8b:df:0c:e3:ed:dc:a5:ba:25:3a:23:00:a0: 25:66:65:e3:27:b0:47:a7:eb:b6:cc:83:e2:0c:f8:6f:30:d2: 88:73:67:2f:fe:e0:bc:a0:50:04:9c:d8:9c:0d:9f:14:44:58: 6b:c5:23:5c:50:39:94:06:0d:d6:0f:a4:df:dc:9b:c3:87:da: 18:5c:5a:78:9b:37:1a:c6:bc:69:34:e5:e7:19:c1:de:cb:67: c5:a5:cf:dd:a5:cb:7e:c7:5b:85:8e:20:88:28:ce:42:eb:0c: 1c:44:cd:98:45:0a:5a:ef:c3:9e:96:ad:11:97:99:0b:00:11: e4:3f:55:4b:68:02:22:99:ce:93:4c:e5:70:d9:01:85:d6:0a: 0b:61:00:3f:e8:f2:8d:0a:3d:b1:e8:89:e1:c6:ea:13:6f:89: 7e:2e:25:f5:fb:82:1d:a6:fd:cf:54:b3:30:e9:74:e8:1f:ec: 60:cd:7d:35 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNDA4MjYw NTI2NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBGNUI0MDBCN0U3Qjk4 N0JDRUFDQTc4NTU4QzgxQTQ2MzVEMkFFRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjFznVZUoljSlPWqQATm90vVcl13+Hx5evOrAFJWKXt/UvgetK 9oKFa/QXntABWSGXNUc0c359uxQEB8YqGalyyezQw/D7bQxXAIMuSjIcxhdiMBHU eIqmpo15mDqZXFdTlpYigOyon5ACTh+7sAdSgdQKgYWm2VzCEuUGM2D5FDFexBa/ JFVyh7HHTt08yJyCK80oootj3NmHaT+JLAxhCO22mROmgsmnVllIdc5I1aCF32G7 syC32rFuRhr9lqVNHa9xUkGBelAoKsEZlGdUhU18I4IxJwf5EOlkFBUucGwut7jm lAER505NsJesVMHI4fMjct8y+tR8ouuIzBThAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUD1tAC357mHvOrKeFWMgaRjXSrtIwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L0QxdEFDMzU3bUh2 T3JLZUZXTWdhUmpYU3J0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJnH8QwDQYJKoZIhvcNAQELBQADggEBAEK5ey6t+ADTbuWikCxiUQ5dL3bx Fu+LtxF4np5CcEy5MKKR6FbWSv8oobve1mfCnYDnokI0KpSrRatmFidg5Hg2RtOV lO6CoWGu+CEli98M4+3cpbolOiMAoCVmZeMnsEen67bMg+IM+G8w0ohzZy/+4Lyg UASc2JwNnxREWGvFI1xQOZQGDdYPpN/cm8OH2hhcWnibNxrGvGk05ecZwd7LZ8Wl z92ly37HW4WOIIgozkLrDBxEzZhFClrvw56WrRGXmQsAEeQ/VUtoAiKZzpNM5XDZ AYXWCgthAD/o8o0KPbHoieHG6hNviX4uJfX7gh2m/c9UszDpdOgf7GDNfTU= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org