$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/h6IgVOZ3XTyWcWiaGmdC4k51uQU.roa File: h6IgVOZ3XTyWcWiaGmdC4k51uQU.roa (raw, json) Hash identifier: GQFKfxP/eryx68umBJsQbI3z9H/2CgjeSIWbdagXadE= Subject key identifier: 87:A2:20:54:E6:77:5D:3C:96:71:68:9A:1A:67:42:E2:4E:75:B9:05 Certificate issuer: /CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Certificate serial: 086E Authority key identifier: CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/h6IgVOZ3XTyWcWiaGmdC4k51uQU.roa Signing time: Mon 26 Aug 2024 05:32:18 +0000 ROA not before: Mon 26 Aug 2024 05:32:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9678 IP address blocks: 103.150.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAD527022C8CD07568EC9FC82A1CE0DDE5B2C4AC Validity Not Before: Aug 26 05:32:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=87A22054E6775D3C9671689A1A6742E24E75B905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:5a:58:19:ba:8d:62:d8:93:1e:2d:f2:e3: 9a:fa:6c:95:19:b0:da:26:c1:e5:a7:2b:00:00:b9: cf:f9:b3:67:b9:34:8f:ff:05:26:ba:1c:78:ac:58: 1e:6e:05:4b:0f:7d:ab:f8:99:b0:d1:ac:b8:34:fb: ca:7c:97:cc:9c:e2:3c:d3:34:90:78:93:34:f3:f9: 0e:4f:77:76:cb:ef:6d:02:99:01:82:e6:b5:22:eb: cd:77:c7:37:7b:41:27:98:71:4e:47:b5:04:a7:4a: b4:f8:1e:af:97:82:6d:07:2e:c2:a1:ca:84:ee:1c: 60:e3:89:d7:75:9c:eb:54:5e:54:5a:01:82:0b:f1: 38:05:64:e8:35:33:8b:03:1a:c7:f4:46:d5:15:99: fc:3c:54:91:1a:eb:8a:13:8e:15:c8:b3:1f:e9:f7: 7e:c4:8e:4f:fa:af:16:59:98:b4:57:ec:2b:b9:d6: b5:4f:ba:4a:a3:88:51:ee:d4:60:96:7a:db:a7:78: 05:e0:c6:6e:6f:34:5f:41:7b:3f:48:76:ec:c9:1a: 25:c7:37:9f:28:4b:90:ff:e1:f7:7c:c9:6a:9a:03: a5:1e:4e:90:c8:ac:f9:63:1c:56:9f:4a:b9:ef:23: 87:58:63:c4:e5:05:cf:6c:3d:e4:0f:a5:11:ed:e6: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A2:20:54:E6:77:5D:3C:96:71:68:9A:1A:67:42:E2:4E:75:B9:05 X509v3 Authority Key Identifier: keyid:CA:D5:27:02:2C:8C:D0:75:68:EC:9F:C8:2A:1C:E0:DD:E5:B2:C4:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/ytUnAiyM0HVo7J_IKhzg3eWyxKw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ytUnAiyM0HVo7J_IKhzg3eWyxKw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWBESTWARE/h6IgVOZ3XTyWcWiaGmdC4k51uQU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.150.37.0/24 Signature Algorithm: sha256WithRSAEncryption bf:6e:bb:d8:23:c3:0b:39:b2:d1:9e:a9:2e:4f:d0:a1:4e:43: 3c:04:60:8f:82:7c:c6:b0:c6:e3:96:4f:fa:74:bd:b2:d5:a2: 26:40:f4:88:0c:48:f8:a2:11:4b:df:96:7f:4b:35:e0:31:ed: a2:71:3e:b9:18:bf:b6:bf:8b:e0:b3:db:4f:fe:4c:b7:9f:ee: 9f:dc:ba:70:84:ed:18:cc:3c:6e:4b:98:a1:44:9b:81:34:c7: b9:e3:52:20:7c:d7:e5:b0:cb:ff:fe:ba:18:16:95:9d:ed:27: 63:6f:e4:e6:5c:ec:1c:b7:04:0c:a8:54:07:95:93:68:a2:81: c1:ff:2b:fe:ba:63:68:81:09:60:f6:4a:23:3c:12:d9:2e:ad: de:26:1f:9b:d6:48:21:76:c1:52:48:2f:b8:e7:54:f9:c1:c9: d0:da:28:67:e2:37:4a:63:c0:57:41:ad:06:26:a1:cc:59:3c: 05:7f:bc:8a:b5:0e:0f:26:ab:f9:e3:d6:72:b6:93:d3:5f:e0: 61:8e:57:9c:77:88:6f:93:d4:10:56:ab:1d:fa:4b:8c:68:ba: 4e:c1:0f:6f:e0:76:12:ba:12:e8:e4:e6:a5:31:6e:32:34:49: 0d:98:b7:cc:f4:cf:6a:8e:40:70:1a:20:5a:a3:a6:3e:01:4d: ae:45:87:23 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FE NTI3MDIyQzhDRDA3NTY4RUM5RkM4MkExQ0UwRERFNUIyQzRBQzAeFw0yNDA4MjYw NTMyMThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg3QTIyMDU0RTY3NzVE M0M5NjcxNjg5QTFBNjc0MkUyNEU3NUI5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvOlpYGbqNYtiTHi3y45r6bJUZsNomweWnKwAAuc/5s2e5NI// BSa6HHisWB5uBUsPfav4mbDRrLg0+8p8l8yc4jzTNJB4kzTz+Q5Pd3bL720CmQGC 5rUi6813xzd7QSeYcU5HtQSnSrT4Hq+Xgm0HLsKhyoTuHGDjidd1nOtUXlRaAYIL 8TgFZOg1M4sDGsf0RtUVmfw8VJEa64oTjhXIsx/p937Ejk/6rxZZmLRX7Cu51rVP ukqjiFHu1GCWetuneAXgxm5vNF9Bez9IduzJGiXHN58oS5D/4fd8yWqaA6UeTpDI rPljHFafSrnvI4dYY8TlBc9sPeQPpRHt5v/1AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUh6IgVOZ3XTyWcWiaGmdC4k51uQUwHwYDVR0jBBgwFoAUytUnAiyM0HVo7J/I Khzg3eWyxKwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdCRVNU V0FSRS95dFVuQWl5TTBIVm83Sl9JS2h6ZzNlV3l4S3cuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3l0VW5BaXlNMEhWbzdKX0lLaHpnM2VXeXhLdy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RXQkVTVFdBUkUvaDZJZ1ZPWjNY VHlXY1dpYUdtZEM0azUxdVFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGeWJTANBgkqhkiG9w0BAQsFAAOCAQEAv2672CPDCzmy0Z6pLk/QoU5D PARgj4J8xrDG45ZP+nS9stWiJkD0iAxI+KIRS9+Wf0s14DHtonE+uRi/tr+L4LPb T/5Mt5/un9y6cITtGMw8bkuYoUSbgTTHueNSIHzX5bDL//66GBaVne0nY2/k5lzs HLcEDKhUB5WTaKKBwf8r/rpjaIEJYPZKIzwS2S6t3iYfm9ZIIXbBUkgvuOdU+cHJ 0NooZ+I3SmPAV0GtBiahzFk8BX+8irUODyar+ePWcraT01/gYY5XnHeIb5PUEFar HfpLjGi6TsEPb+B2EroS6OTmpTFuMjRJDZi3zPTPao5AcBogWqOmPgFNrkWHIw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:40 2024 by rpki-client on console-ams.rpki-client.org