$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/HbUDUtOLt0XROQVcbsGNn77SCVs.roa File: HbUDUtOLt0XROQVcbsGNn77SCVs.roa (raw, json) Hash identifier: PgInUXvuBsmtl2+ThDnnLAzgtQ36MpIlqyz9M6s05to= Subject key identifier: 1D:B5:03:52:D3:8B:B7:45:D1:39:05:5C:6E:C1:8D:9F:BE:D2:09:5B Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Certificate serial: 0292 Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/HbUDUtOLt0XROQVcbsGNn77SCVs.roa Signing time: Mon 26 Aug 2024 05:27:51 +0000 ROA not before: Mon 26 Aug 2024 05:27:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18178 IP address blocks: 103.180.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 15:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Validity Not Before: Aug 26 05:27:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1DB50352D38BB745D139055C6EC18D9FBED2095B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:4b:a9:14:ba:07:04:59:c9:f3:65:3c:ad: 7f:02:ed:1a:b3:59:e0:93:e4:4a:90:a6:c6:0f:a8: 44:b5:82:ba:fc:05:04:e7:62:9b:2e:d4:ea:9c:e8: a5:ba:ab:a6:10:b2:8d:f6:b5:41:8e:16:e1:6f:ab: 61:88:d7:f7:02:fb:13:8c:92:d3:ac:e7:27:d6:02: e1:55:02:13:25:af:ce:ca:9b:1d:b0:ff:d2:f1:f8: 17:54:3b:7e:45:7d:55:db:71:6a:f6:e9:d7:d6:a5: 12:48:89:49:b7:94:2a:ce:d8:69:39:27:f4:8b:99: ae:e1:19:35:2b:8d:6b:43:6b:d7:de:6a:a7:7e:18: 22:29:4b:0d:5e:ba:a3:f7:17:87:6a:fc:72:cd:85: c4:c0:dd:7d:f7:b1:bb:28:7a:af:8c:1c:37:0b:cf: 4c:af:f6:df:d3:92:e8:15:b5:72:8c:ad:35:92:1f: ea:d6:ec:9c:a0:39:b5:03:10:aa:5d:be:f6:40:8f: 3c:89:1a:b9:00:ef:fb:2c:64:55:27:38:ef:e0:1c: 6b:35:3e:e6:22:96:fd:81:15:d2:30:ca:ce:5c:a6: 7d:34:f1:68:ef:4c:38:51:55:19:b5:e4:33:b2:16: be:03:72:6b:cd:0f:43:91:cc:f9:b9:c1:19:b6:d3: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B5:03:52:D3:8B:B7:45:D1:39:05:5C:6E:C1:8D:9F:BE:D2:09:5B X509v3 Authority Key Identifier: keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/HbUDUtOLt0XROQVcbsGNn77SCVs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.180.20.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:9a:8c:57:8d:9d:bd:22:68:dd:0f:d1:4a:b1:b5:00:04:fb: a6:e1:52:f9:d4:14:c0:37:44:d3:70:b2:60:76:71:db:67:a6: 8e:cb:84:cb:fa:df:85:bc:4c:9e:14:ac:07:27:02:be:e2:7a: e6:1f:3b:f3:20:ec:02:30:a3:1c:8c:47:71:32:ca:fc:e7:9b: 61:19:ae:4d:6a:7a:d5:fc:5f:c7:3a:f4:e1:9e:25:57:d6:81: 0c:a0:8e:4a:ce:75:f4:c5:f3:22:7e:09:20:12:21:0b:c5:a6: fb:b2:95:77:35:22:13:57:fe:9f:8c:14:cc:cb:cf:c8:25:80: df:89:bd:01:2c:e1:a3:0a:70:f2:50:1b:59:d0:cb:cb:ae:0b: b4:81:6a:10:b1:fe:bb:dc:e0:30:5a:81:04:b4:c8:4e:5c:32: e2:de:f6:ce:a3:a5:01:cb:c5:15:be:95:c1:dd:37:75:3a:4a: 76:a6:3c:6d:8b:f3:ca:c8:ff:d7:d3:67:a1:4f:8a:91:0a:b6: ff:20:3b:da:9c:dd:82:8f:6a:ae:b6:39:bd:7d:9a:b6:ef:c9: e1:2f:36:3a:78:7b:79:38:13:1d:03:f0:87:f0:16:00:b8:43: 35:5d:b2:8c:c5:35:2f:25:b0:d6:5b:6b:da:75:96:2d:98:b9: cd:3e:7a:9d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUI2 MDY5NkQ2ODc3M0FFMkU1MzJGMENENUQxMEZEQzBDODI3M0VBNTAeFw0yNDA4MjYw NTI3NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFEQjUwMzUyRDM4QkI3 NDVEMTM5MDU1QzZFQzE4RDlGQkVEMjA5NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCh7EupFLoHBFnJ82U8rX8C7RqzWeCT5EqQpsYPqES1grr8BQTn Ypsu1Oqc6KW6q6YQso32tUGOFuFvq2GI1/cC+xOMktOs5yfWAuFVAhMlr87Kmx2w /9Lx+BdUO35FfVXbcWr26dfWpRJIiUm3lCrO2Gk5J/SLma7hGTUrjWtDa9feaqd+ GCIpSw1euqP3F4dq/HLNhcTA3X33sbsoeq+MHDcLz0yv9t/TkugVtXKMrTWSH+rW 7JygObUDEKpdvvZAjzyJGrkA7/ssZFUnOO/gHGs1PuYilv2BFdIwys5cpn008Wjv TDhRVRm15DOyFr4DcmvND0ORzPm5wRm205g9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUHbUDUtOLt0XROQVcbsGNn77SCVswHwYDVR0jBBgwFoAUm2BpbWh3OuLlMvDN XRD9wMgnPqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL20y QnBiV2gzT3VMbE12RE5YUkQ5d01nblBxVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bTJCcGJXaDNPdUxsTXZETlhSRDl3TWduUHFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL0hiVURVdE9MdDBYUk9RVmNic0dObjc3 U0NWcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntBQwDQYJ KoZIhvcNAQELBQADggEBAGyajFeNnb0iaN0P0UqxtQAE+6bhUvnUFMA3RNNwsmB2 cdtnpo7LhMv634W8TJ4UrAcnAr7ieuYfO/Mg7AIwoxyMR3Eyyvznm2EZrk1qetX8 X8c69OGeJVfWgQygjkrOdfTF8yJ+CSASIQvFpvuylXc1IhNX/p+MFMzLz8glgN+J vQEs4aMKcPJQG1nQy8uuC7SBahCx/rvc4DBagQS0yE5cMuLe9s6jpQHLxRW+lcHd N3U6SnamPG2L88rI/9fTZ6FPipEKtv8gO9qc3YKPaq62Ob19mrbvyeEvNjp4e3k4 Ex0D8IfwFgC4QzVdsozFNS8lsNZba9p1li2Yuc0+ep0= -----END CERTIFICATE-----Generated at Fri Sep 20 12:50:32 2024 by rpki-client on console-fra.rpki-client.org