$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/cEdBztWSSJnEQAQaHiabnW1o_yE.roa File: cEdBztWSSJnEQAQaHiabnW1o_yE.roa (raw, json) Hash identifier: l6JL+jqO8mFKnL51phyHOH6Rc+p7cj+xxYr3emmiGg8= Subject key identifier: 70:47:41:CE:D5:92:48:99:C4:40:04:1A:1E:26:9B:9D:6D:68:FF:21 Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28 Certificate serial: 0C5E Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/cEdBztWSSJnEQAQaHiabnW1o_yE.roa Signing time: Mon 26 Aug 2024 05:27:41 +0000 ROA not before: Mon 26 Aug 2024 05:27:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131590 IP address blocks: 103.227.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28 Validity Not Before: Aug 26 05:27:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=704741CED5924899C440041A1E269B9D6D68FF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:0e:42:f8:6e:3e:5f:d6:18:69:ad:d1:fe: f7:d1:c1:18:ab:60:63:38:f3:88:75:8f:08:51:c7: b4:25:82:aa:9f:88:48:7d:43:d3:53:7d:dc:22:10: ad:93:f5:8f:b0:ef:77:32:e1:67:bf:82:82:1f:73: f2:2b:20:6e:ed:66:94:d2:ff:35:50:e5:5c:ec:aa: 7f:91:66:b9:09:12:fd:e6:a2:74:db:7d:7e:54:9f: c9:c8:c0:5a:9c:8f:e9:41:36:01:aa:b7:42:4e:40: 8c:f8:2b:ec:9f:34:94:62:43:71:d1:c0:18:0b:6b: cf:f7:de:e4:88:25:44:04:1b:43:82:3f:42:18:a0: 98:5c:24:be:d0:23:14:9f:4c:77:99:5d:17:ee:c5: 55:10:e3:38:05:1e:89:ed:e5:52:87:d7:2a:f0:e3: e7:f5:de:dd:89:03:9e:ed:b5:63:1b:47:40:13:75: 72:7c:58:2e:6a:2e:07:88:f4:6f:d3:63:3d:40:7d: a2:40:79:d1:b0:3b:ed:88:f9:67:0b:b6:fd:50:ec: 5e:b2:e9:e7:ea:da:ba:79:6b:d0:6d:3c:f9:bb:a7: 3a:9a:1b:d6:3e:74:1e:7e:7c:1d:8d:bb:72:7c:86: e7:a9:ae:14:7d:89:f9:a8:8a:42:77:63:02:bc:ba: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:47:41:CE:D5:92:48:99:C4:40:04:1A:1E:26:9B:9D:6D:68:FF:21 X509v3 Authority Key Identifier: keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/cEdBztWSSJnEQAQaHiabnW1o_yE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.227.226.0/24 Signature Algorithm: sha256WithRSAEncryption c1:e9:2f:fe:1d:22:ae:ad:3e:a6:b3:d0:6c:f5:5b:fb:51:b3: 20:2d:a8:30:01:0c:cb:1a:41:20:df:4d:f7:3a:c3:3b:9f:d0: 5c:4d:3c:55:8d:73:31:46:5e:0c:f8:cd:6b:ae:91:be:9f:f1: ef:1a:89:48:59:7f:e0:0c:1b:f1:62:ff:19:b2:c3:f5:c4:79: 9a:8a:af:e0:74:9b:75:0e:33:5f:82:70:da:9e:eb:d6:b5:19: 4f:71:7a:5b:b4:97:36:16:1f:a3:c5:de:ff:a1:86:11:7c:96: bd:19:2d:da:8b:37:43:d6:53:5d:e2:f8:7b:da:2a:38:ac:b4: 5a:bc:c4:4c:38:12:3b:7a:e7:62:b8:25:91:9c:8f:a3:51:47: 13:e1:51:d5:b7:87:95:4b:c1:d3:31:ef:19:9b:ee:5b:60:11: 3a:bb:48:41:1d:b7:05:dc:83:aa:c0:fc:33:9a:c3:5f:5b:6a: 77:46:aa:53:9d:e7:fa:4d:2d:c9:fa:86:6c:46:d5:1d:7e:1e: 64:95:0f:46:e3:f1:e8:b6:fc:a6:6c:4f:af:40:36:4f:aa:39: 54:b4:0e:82:3d:ca:8a:e3:4a:4b:bd:70:cd:6e:5b:19:a6:7a: 7a:17:ab:b9:7a:5b:77:c5:9a:47:6c:f2:7b:fa:99:fb:02:c4: 25:df:5a:63 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY4 MkEzQUMxMTQ1NTAzMDc0M0MwQTc0MzcxMUY4QTBEOEVCQUUyODAeFw0yNDA4MjYw NTI3NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcwNDc0MUNFRDU5MjQ4 OTlDNDQwMDQxQTFFMjY5QjlENkQ2OEZGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9Ag5C+G4+X9YYaa3R/vfRwRirYGM484h1jwhRx7QlgqqfiEh9 Q9NTfdwiEK2T9Y+w73cy4We/goIfc/IrIG7tZpTS/zVQ5Vzsqn+RZrkJEv3monTb fX5Un8nIwFqcj+lBNgGqt0JOQIz4K+yfNJRiQ3HRwBgLa8/33uSIJUQEG0OCP0IY oJhcJL7QIxSfTHeZXRfuxVUQ4zgFHont5VKH1yrw4+f13t2JA57ttWMbR0ATdXJ8 WC5qLgeI9G/TYz1AfaJAedGwO+2I+WcLtv1Q7F6y6efq2rp5a9BtPPm7pzqaG9Y+ dB5+fB2Nu3J8hueprhR9ifmoikJ3YwK8ugbnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUcEdBztWSSJnEQAQaHiabnW1o/yEwHwYDVR0jBBgwFoAUv4KjrBFFUDB0PAp0 NxH4oNjrrigwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3Y0 S2pyQkZGVURCMFBBcDBOeEg0b05qcnJpZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djRLanJCRkZVREIwUEFwME54SDRvTmpycmlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL2NFZEJ6dFdTU0puRVFBUWFIaWFiblcx b195RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn4+IwDQYJ KoZIhvcNAQELBQADggEBAMHpL/4dIq6tPqaz0Gz1W/tRsyAtqDABDMsaQSDfTfc6 wzuf0FxNPFWNczFGXgz4zWuukb6f8e8aiUhZf+AMG/Fi/xmyw/XEeZqKr+B0m3UO M1+CcNqe69a1GU9xelu0lzYWH6PF3v+hhhF8lr0ZLdqLN0PWU13i+HvaKjistFq8 xEw4Ejt652K4JZGcj6NRRxPhUdW3h5VLwdMx7xmb7ltgETq7SEEdtwXcg6rA/DOa w19bandGqlOd5/pNLcn6hmxG1R1+HmSVD0bj8ei2/KZsT69ANk+qOVS0DoI9yorj Sku9cM1uWxmmenoXq7l6W3fFmkds8nv6mfsCxCXfWmM= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org