$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Lawn8UtyJ__kTP1DlPc09N5e3jY.roa File: Lawn8UtyJ__kTP1DlPc09N5e3jY.roa (raw, json) Hash identifier: ID4iUArdQhw0jhrbjvnz/zgixlxPFNPMQez+TMNMBNg= Subject key identifier: 2D:AC:27:F1:4B:72:27:FF:E4:4C:FD:43:94:F7:34:F4:DE:5E:DE:36 Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0CA3 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Lawn8UtyJ__kTP1DlPc09N5e3jY.roa Signing time: Mon 26 Aug 2024 05:26:55 +0000 ROA not before: Mon 26 Aug 2024 05:26:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 111.125.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3235 (0xca3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Aug 26 05:26:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2DAC27F14B7227FFE44CFD4394F734F4DE5EDE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:a1:81:72:d9:54:a2:05:33:c4:70:1c:ef: 60:cf:90:80:28:a5:1e:40:7c:b8:f7:98:01:0c:c4: 53:d3:46:ec:61:a8:d1:ae:6d:97:11:17:03:28:5a: df:b5:3e:37:e9:4c:e2:d7:f3:a0:74:29:e3:64:5c: b2:0e:ac:af:c7:26:8f:7c:2d:25:3a:e1:5a:9b:4f: 8e:28:ad:44:cf:8a:21:10:ad:a1:d1:6a:81:fb:43: 80:11:eb:33:e0:6e:1a:06:8d:21:4d:a5:85:bf:1b: 98:e8:74:44:8b:a5:77:72:4c:08:3b:25:ae:34:4d: af:3e:1f:1a:2b:41:fd:44:6a:78:d4:a0:12:86:6b: f2:8a:03:24:70:07:4d:a1:47:71:ca:f7:0d:f3:da: 98:3b:23:b3:da:97:af:45:30:ff:0b:35:cb:8d:ae: 94:a5:a6:b3:aa:bb:02:75:a3:85:9c:94:02:d1:ab: 2b:3b:4d:47:db:d6:83:bc:8a:b2:3d:b4:49:ff:a0: ea:8f:e2:cc:7c:e8:c2:d5:e7:0f:c5:84:48:7e:34: 7e:8a:4c:94:54:e9:27:31:51:30:e0:93:ef:9a:87: f1:8b:3d:bf:81:6a:f8:8a:f2:9d:68:55:d4:38:fb: 35:c5:0f:cb:3a:67:77:45:7b:1a:06:1c:58:01:f2: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AC:27:F1:4B:72:27:FF:E4:4C:FD:43:94:F7:34:F4:DE:5E:DE:36 X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Lawn8UtyJ__kTP1DlPc09N5e3jY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 111.125.128.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:47:3c:26:0a:08:5a:05:f4:ad:a2:09:f6:87:37:d0:7f:a0: 37:9e:be:01:cc:3f:8b:ba:31:e1:af:90:34:46:f7:f9:36:b5: d0:ce:9b:1f:0f:86:fa:6d:fe:45:0f:7f:e0:12:98:09:36:89: f7:32:8c:c1:3f:15:70:7d:48:5e:b4:23:9a:b8:b5:23:a6:9a: f8:af:ea:82:f5:a9:8a:25:9d:93:f3:44:2c:5c:fc:f6:80:57: c0:b0:3f:37:78:1b:17:e4:9c:a5:30:ad:75:5b:44:20:b2:5c: b7:47:7b:f7:5d:57:04:fe:48:c1:52:02:a6:ae:0e:9b:65:3a: 05:73:31:31:db:12:cc:a3:71:61:9b:d7:56:83:ba:8a:5c:7c: d1:48:43:36:15:87:8b:68:5f:f0:f2:13:18:2c:3f:ce:2e:94: 3e:43:47:90:1e:50:a0:97:58:c4:3f:9b:9c:6f:7f:60:81:cf: 22:90:96:3f:d3:34:d2:50:5a:44:df:bf:25:66:b0:60:70:a3: 13:1d:77:41:3d:16:68:99:a8:52:51:c2:fb:e1:44:84:b8:d5: 8c:e3:99:81:c5:8a:49:20:d4:e3:9f:be:31:ee:b3:56:11:eb: 6a:3c:73:56:64:f8:e7:c3:cd:78:b6:21:e0:32:8b:d7:4b:df: 7f:eb:96:a6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNDA4MjYw NTI2NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJEQUMyN0YxNEI3MjI3 RkZFNDRDRkQ0Mzk0RjczNEY0REU1RURFMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSmqGBctlUogUzxHAc72DPkIAopR5AfLj3mAEMxFPTRuxhqNGu bZcRFwMoWt+1PjfpTOLX86B0KeNkXLIOrK/HJo98LSU64VqbT44orUTPiiEQraHR aoH7Q4AR6zPgbhoGjSFNpYW/G5jodESLpXdyTAg7Ja40Ta8+HxorQf1EanjUoBKG a/KKAyRwB02hR3HK9w3z2pg7I7Pal69FMP8LNcuNrpSlprOquwJ1o4WclALRqys7 TUfb1oO8irI9tEn/oOqP4sx86MLV5w/FhEh+NH6KTJRU6ScxUTDgk++ah/GLPb+B aviK8p1oVdQ4+zXFD8s6Z3dFexoGHFgB8g25AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQULawn8UtyJ//kTP1DlPc09N5e3jYwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L0xhd244VXR5Sl9f a1RQMURsUGMwOU41ZTNqWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBANvfYAwDQYJKoZIhvcNAQELBQADggEBAB1HPCYKCFoF9K2iCfaHN9B/oDee vgHMP4u6MeGvkDRG9/k2tdDOmx8Phvpt/kUPf+ASmAk2ifcyjME/FXB9SF60I5q4 tSOmmviv6oL1qYolnZPzRCxc/PaAV8CwPzd4GxfknKUwrXVbRCCyXLdHe/ddVwT+ SMFSAqauDptlOgVzMTHbEsyjcWGb11aDuopcfNFIQzYVh4toX/DyExgsP84ulD5D R5AeUKCXWMQ/m5xvf2CBzyKQlj/TNNJQWkTfvyVmsGBwoxMdd0E9FmiZqFJRwvvh RIS41YzjmYHFikkg1OOfvjHus1YR62o8c1Zk+OfDzXi2IeAyi9dL33/rlqY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org