$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/AFu7Vkk0Eq1WN6U2CukKS3KkmQU.roa File: AFu7Vkk0Eq1WN6U2CukKS3KkmQU.roa (raw, json) Hash identifier: T2uL6prVj/pUWYI3MNSiG7FZmrwo8GCKdLknmVM7Nf8= Subject key identifier: 00:5B:BB:56:49:34:12:AD:56:37:A5:36:0A:E9:0A:4B:72:A4:99:05 Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E Certificate serial: 0B4A Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/AFu7Vkk0Eq1WN6U2CukKS3KkmQU.roa Signing time: Fri 01 Sep 2023 10:00:51 +0000 ROA not before: Fri 01 Sep 2023 10:00:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 57401 IP address blocks: 103.129.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 17:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2890 (0xb4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E Validity Not Before: Sep 1 10:00:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=005BBB56493412AD5637A5360AE90A4B72A49905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:f8:61:f4:48:78:16:95:7c:15:4b:cd:05: b9:50:7b:e1:58:8e:8f:78:5d:73:9a:f2:a0:c0:15: c9:0f:9e:52:ee:4c:80:37:60:d4:44:e6:82:e3:89: 56:46:5c:b1:ba:c5:af:5f:17:81:89:25:c3:31:51: 11:16:52:d8:e7:0f:04:3f:14:c6:88:61:6e:8b:59: ec:0b:0d:12:09:b5:9f:a4:01:31:c5:a3:12:9f:ff: 91:c8:b0:99:1f:64:d3:1d:39:08:78:a5:8c:62:c2: f7:6d:52:c7:3d:d9:50:f1:8d:13:f7:37:78:ad:0e: c1:c9:9d:98:63:6e:7f:5c:06:a0:8f:15:76:2f:9b: ed:51:80:fa:89:72:94:25:76:a5:9b:80:c1:43:57: 13:e2:55:bc:65:a6:78:5a:e9:db:14:e1:43:e5:bc: fb:99:7e:28:c9:65:d4:1d:0a:7d:95:3f:1a:ed:e8: 73:3e:d3:d1:3f:b3:a9:6e:e6:08:c4:a5:b9:dd:06: 86:14:c0:51:91:46:a8:a4:04:fa:37:dc:b8:ef:69: 39:21:3f:c8:a4:e6:75:5c:bf:c4:6e:6d:13:cd:04: e2:35:91:29:ab:8d:d9:54:0e:5a:f9:4a:61:ad:06: 28:65:58:cc:68:76:df:79:65:24:2d:32:02:37:24: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5B:BB:56:49:34:12:AD:56:37:A5:36:0A:E9:0A:4B:72:A4:99:05 X509v3 Authority Key Identifier: keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/AFu7Vkk0Eq1WN6U2CukKS3KkmQU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.145.0/24 Signature Algorithm: sha256WithRSAEncryption 50:61:24:34:ec:66:30:52:ac:52:38:f2:0b:cf:81:3f:0a:15: 02:dc:8e:5b:07:86:b8:7d:2b:d6:04:fa:4d:4a:6b:27:9b:f2: c6:25:41:0c:d5:7b:10:fa:05:e7:76:fe:70:df:34:17:5c:09: b9:73:c9:5c:a7:bd:5a:ed:d1:50:c1:d7:27:3f:60:4b:48:9d: 59:6d:45:ba:df:fa:77:4e:42:e2:63:3a:b3:f3:a8:7b:4f:02: 1a:02:56:b7:f4:38:b0:33:a0:37:54:9f:54:27:61:1e:20:06: ed:1a:74:60:86:49:a6:a9:16:13:09:53:a0:6f:6e:f1:9e:1c: 74:34:ea:e7:47:62:54:87:42:0b:3b:ae:ec:42:d6:43:99:d1: 69:17:3c:36:13:8d:32:dc:1c:4d:3e:e1:64:b4:ef:64:c0:84: f4:7a:17:c5:ee:9b:1f:17:79:91:63:1f:f5:2a:e0:fc:fd:19: ca:96:0d:43:5c:4f:45:d7:cc:3b:9f:ec:e5:72:0f:9b:a0:0f: c3:97:ef:8e:fc:ae:1d:7c:92:e1:5e:56:7f:85:50:9a:1e:ac: 7b:bc:cc:36:3d:fe:0e:fd:7f:40:36:8d:3c:bf:f2:a8:12:28: 2a:38:2d:fc:04:df:d4:92:66:48:50:cf:7d:b9:09:32:84:a7: 64:02:28:38 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICC0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkQ3 MjA0NjE3MzU0RDcwNTIzQjZGNjVBMjcwNzEyQjZCMTlEODE1RTAeFw0yMzA5MDEx MDAwNTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwNUJCQjU2NDkzNDEy QUQ1NjM3QTUzNjBBRTkwQTRCNzJBNDk5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIKvhh9Eh4FpV8FUvNBblQe+FYjo94XXOa8qDAFckPnlLuTIA3 YNRE5oLjiVZGXLG6xa9fF4GJJcMxUREWUtjnDwQ/FMaIYW6LWewLDRIJtZ+kATHF oxKf/5HIsJkfZNMdOQh4pYxiwvdtUsc92VDxjRP3N3itDsHJnZhjbn9cBqCPFXYv m+1RgPqJcpQldqWbgMFDVxPiVbxlpnha6dsU4UPlvPuZfijJZdQdCn2VPxrt6HM+ 09E/s6lu5gjEpbndBoYUwFGRRqikBPo33LjvaTkhP8ik5nVcv8RubRPNBOI1kSmr jdlUDlr5SmGtBihlWMxodt95ZSQtMgI3JBa5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUAFu7Vkk0Eq1WN6U2CukKS3KkmQUwHwYDVR0jBBgwFoAULXIEYXNU1wUjtvZa JwcStrGdgV4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL0xY SUVZWE5VMXdVanR2WmFKd2NTdHJHZGdWNC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TFhJRVlYTlUxd1VqdHZaYUp3Y1N0ckdkZ1Y0LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL0FGdTdWa2swRXExV042VTJDdWtLUzNL a21RVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABngZEwDQYJ KoZIhvcNAQELBQADggEBAFBhJDTsZjBSrFI48gvPgT8KFQLcjlsHhrh9K9YE+k1K ayeb8sYlQQzVexD6Bed2/nDfNBdcCblzyVynvVrt0VDB1yc/YEtInVltRbrf+ndO QuJjOrPzqHtPAhoCVrf0OLAzoDdUn1QnYR4gBu0adGCGSaapFhMJU6BvbvGeHHQ0 6udHYlSHQgs7ruxC1kOZ0WkXPDYTjTLcHE0+4WS072TAhPR6F8Xumx8XeZFjH/Uq 4Pz9GcqWDUNcT0XXzDuf7OVyD5ugD8OX7478rh18kuFeVn+FUJoerHu8zDY9/g79 f0A2jTy/8qgSKCo4LfwE39SSZkhQz325CTKEp2QCKDg= -----END CERTIFICATE-----Generated at Thu May 2 04:47:37 2024 by rpki-client on console-fra.rpki-client.org