$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/_jfgeqZHPYWERFxj6xpB0WEKkqk.roa File: _jfgeqZHPYWERFxj6xpB0WEKkqk.roa (raw, json) Hash identifier: pBre5Wz4tf6vB+V4YZsVXidU2e/6JPFUB/Amw2UkO+s= Subject key identifier: FE:37:E0:7A:A6:47:3D:85:84:44:5C:63:EB:1A:41:D1:61:0A:92:A9 Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E Certificate serial: 0BB5 Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/_jfgeqZHPYWERFxj6xpB0WEKkqk.roa Signing time: Wed 31 Jan 2024 15:33:29 +0000 ROA not before: Wed 31 Jan 2024 15:33:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 5065 IP address blocks: 103.129.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 17:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2997 (0xbb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E Validity Not Before: Jan 31 15:33:29 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FE37E07AA6473D8584445C63EB1A41D1610A92A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:28:32:3a:d2:89:a4:bd:9c:7b:aa:1b:66: 75:6a:8a:2d:75:09:91:9d:97:24:fc:8b:a4:da:e5: 77:20:63:ec:e8:b7:3c:b2:3d:6d:b8:df:87:e3:19: 7e:b3:96:dc:8e:a4:1e:ca:d3:f0:64:c2:67:bf:24: 21:e7:b7:b3:a7:f4:48:4f:8a:52:ae:c1:b6:99:87: 98:9e:5e:39:25:ea:fd:63:2a:25:5a:16:9d:47:8d: bd:5b:f8:b3:8f:43:26:59:00:7e:31:4c:1f:12:57: ac:83:00:13:01:8b:12:b7:d4:23:6f:cf:7c:a9:a9: 45:16:00:71:b9:cf:96:ca:31:b6:8b:bc:11:6e:37: 2c:4b:47:ca:a4:ac:ee:7a:ac:3a:98:a9:23:ac:76: 22:bd:3f:9a:19:0b:43:6d:b9:0a:d9:03:4d:8c:9e: 79:29:64:89:6a:56:f9:3a:83:5d:85:17:85:da:72: 46:8b:90:e6:3d:2b:f6:37:d5:fb:21:28:27:f2:f4: 1d:78:c3:4d:ca:41:e3:83:bb:91:c7:cb:81:b7:70: 60:79:cc:b1:c1:fb:0a:77:74:b7:54:db:b2:1f:d2: 5c:48:fe:7b:ab:5a:29:e7:a9:78:0f:2a:23:ae:1d: d9:8f:9f:69:44:58:a2:e3:d5:18:1d:53:a3:8a:ed: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:37:E0:7A:A6:47:3D:85:84:44:5C:63:EB:1A:41:D1:61:0A:92:A9 X509v3 Authority Key Identifier: keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/_jfgeqZHPYWERFxj6xpB0WEKkqk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.144.0/24 Signature Algorithm: sha256WithRSAEncryption 20:f0:df:8d:87:21:38:4e:68:99:12:2e:bd:37:ad:65:d7:86: 20:c7:f7:ca:a8:39:92:b2:b0:b3:de:73:78:d8:4e:d5:8b:a1: 04:02:13:7c:3a:d4:0a:70:19:c6:98:3c:67:34:01:6b:55:43: 5b:7c:8f:88:e7:22:2f:2e:82:7d:6d:0d:5d:9f:40:d1:08:6c: db:d4:c4:73:81:d2:b4:9e:ef:6c:0a:35:28:77:90:88:23:ba: 8a:fa:6a:72:d3:f3:65:2c:cb:13:a0:b0:0c:2e:81:6a:78:17: 55:e9:66:0a:38:3e:99:40:f9:a7:bf:29:e6:e4:ef:23:85:07: cb:3d:76:41:fd:34:e8:0f:c7:cd:a6:9f:b4:df:8f:83:48:01: 89:03:4a:49:26:f1:cb:ac:d5:29:55:4b:5f:db:92:5d:ea:2b: 7b:9d:bf:68:b8:45:ae:df:1d:f8:d2:3c:5d:4d:3c:ae:9c:4b: 33:97:22:10:f6:ca:b5:de:49:bb:47:c4:51:b2:63:fc:57:85: e1:a5:ef:06:d3:04:16:5b:71:5f:70:78:fd:88:ad:1e:9d:13: 07:ce:73:27:ce:89:d4:80:86:d1:f2:34:20:6c:a4:87:6f:fc: 6d:10:4d:b8:bf:2e:31:eb:c8:9c:2c:8a:63:aa:3c:9d:7d:05: be:96:27:1f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICC7UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkQ3 MjA0NjE3MzU0RDcwNTIzQjZGNjVBMjcwNzEyQjZCMTlEODE1RTAeFw0yNDAxMzEx NTMzMjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFMzdFMDdBQTY0NzNE ODU4NDQ0NUM2M0VCMUE0MUQxNjEwQTkyQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBbigyOtKJpL2ce6obZnVqii11CZGdlyT8i6Ta5XcgY+zotzyy PW2434fjGX6zltyOpB7K0/Bkwme/JCHnt7On9EhPilKuwbaZh5ieXjkl6v1jKiVa Fp1Hjb1b+LOPQyZZAH4xTB8SV6yDABMBixK31CNvz3ypqUUWAHG5z5bKMbaLvBFu NyxLR8qkrO56rDqYqSOsdiK9P5oZC0NtuQrZA02MnnkpZIlqVvk6g12FF4XackaL kOY9K/Y31fshKCfy9B14w03KQeODu5HHy4G3cGB5zLHB+wp3dLdU27If0lxI/nur WinnqXgPKiOuHdmPn2lEWKLj1RgdU6OK7b2zAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU/jfgeqZHPYWERFxj6xpB0WEKkqkwHwYDVR0jBBgwFoAULXIEYXNU1wUjtvZa JwcStrGdgV4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL0xY SUVZWE5VMXdVanR2WmFKd2NTdHJHZGdWNC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TFhJRVlYTlUxd1VqdHZaYUp3Y1N0ckdkZ1Y0LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL19qZmdlcVpIUFlXRVJGeGo2eHBCMFdF S2txay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABngZAwDQYJ KoZIhvcNAQELBQADggEBACDw342HIThOaJkSLr03rWXXhiDH98qoOZKysLPec3jY TtWLoQQCE3w61ApwGcaYPGc0AWtVQ1t8j4jnIi8ugn1tDV2fQNEIbNvUxHOB0rSe 72wKNSh3kIgjuor6anLT82UsyxOgsAwugWp4F1XpZgo4PplA+ae/Kebk7yOFB8s9 dkH9NOgPx82mn7Tfj4NIAYkDSkkm8cus1SlVS1/bkl3qK3udv2i4Ra7fHfjSPF1N PK6cSzOXIhD2yrXeSbtHxFGyY/xXheGl7wbTBBZbcV9weP2IrR6dEwfOcyfOidSA htHyNCBspIdv/G0QTbi/LjHryJwsimOqPJ19Bb6WJx8= -----END CERTIFICATE-----Generated at Thu May 2 04:47:37 2024 by rpki-client on console-fra.rpki-client.org