$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/sc8v15c0TO83pfglST_EzqQXaVM.roa File: sc8v15c0TO83pfglST_EzqQXaVM.roa (raw, json) Hash identifier: 3c/KbiuDmJhv3wWSOxSZ+ueOZ3oE1u32D4oe6wdlQ3Y= Subject key identifier: B1:CF:2F:D7:97:34:4C:EF:37:A5:F8:25:49:3F:C4:CE:A4:17:69:53 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 12D7 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/sc8v15c0TO83pfglST_EzqQXaVM.roa Signing time: Mon 26 Aug 2024 05:32:36 +0000 ROA not before: Mon 26 Aug 2024 05:32:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131621 IP address blocks: 101.102.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4823 (0x12d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 26 05:32:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B1CF2FD797344CEF37A5F825493FC4CEA4176953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:92:b6:14:ad:e8:59:2f:55:c0:19:f3:a9: 6e:54:ce:c3:99:5c:d9:80:68:81:7e:a6:ad:04:32: 58:ca:c8:b8:3b:8d:c8:16:6b:8a:ec:1b:78:32:c5: 93:13:47:b5:cd:b8:f1:38:75:22:45:fb:c9:26:de: 9b:19:8b:c7:bd:a9:6a:44:54:73:d3:17:a8:8d:24: 91:94:d9:c6:aa:d6:94:4d:db:7e:4e:ac:6d:ef:42: a4:06:62:a2:b8:ae:99:47:d2:78:88:2b:0e:0d:6f: 2e:61:2c:d3:a9:61:59:41:57:c9:7d:1f:28:1d:57: 49:26:01:b6:57:57:46:70:7e:0f:09:c8:e3:c8:db: f4:c4:50:8b:60:7d:4f:da:00:e8:ff:c4:61:b5:d0: 42:eb:a6:da:24:85:88:5a:6f:de:8e:49:34:32:ce: 86:d5:36:c7:56:1e:48:a9:6f:d4:2a:24:e3:ca:b3: f6:21:25:f5:3d:a2:a6:42:2f:9c:6c:4f:04:5c:e9: f3:e1:05:f5:69:52:74:66:d4:80:a9:a0:46:e1:b2: eb:e8:e6:2b:eb:5c:a9:64:56:cf:7f:2c:07:e9:f6: 4b:97:1e:d8:59:ec:15:9f:a2:bd:0e:8c:3c:8e:ef: ae:5d:13:c0:f6:5b:4f:5d:48:70:24:f1:cc:e9:40: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CF:2F:D7:97:34:4C:EF:37:A5:F8:25:49:3F:C4:CE:A4:17:69:53 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/sc8v15c0TO83pfglST_EzqQXaVM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.102.103.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:40:03:3d:20:b5:8b:b2:d1:c0:75:6e:8b:57:d3:cf:7f:cc: 85:ce:10:c5:d5:59:df:73:2f:f4:0c:ec:22:89:7e:62:8d:05: 1c:0c:b4:81:b1:43:1a:a4:d2:13:96:44:96:b6:67:51:20:15: cb:10:1a:9b:09:f0:a8:04:b8:cc:af:da:e4:29:8f:6f:21:88: 7a:98:04:d7:1b:c3:ae:26:2a:c2:6d:20:b7:aa:87:61:cf:ba: b3:ff:ea:62:99:09:33:0a:1d:04:ce:66:93:d4:b5:0a:c5:73: cb:a9:f8:a9:23:43:fd:d6:1f:5a:9e:f0:8e:e1:7b:c1:12:d3: 2c:3b:5a:bc:04:84:33:e8:44:a1:de:cd:d1:f8:96:e5:6e:82: ee:61:46:4c:03:e4:7c:53:d5:06:3c:ec:97:1c:4f:96:49:79: a8:a1:3d:9f:ba:81:21:28:b0:e9:ad:6e:f0:e3:3f:01:7d:10: df:f9:49:4f:ed:f7:eb:9b:62:bc:17:31:56:13:0f:32:64:9b: d7:ff:b9:5b:3e:a9:94:09:b1:d4:ea:93:31:2d:9b:ae:b8:49: 86:7d:0e:47:cf:6d:92:dc:ac:ab:e3:d0:99:86:35:c2:d7:44: 29:b6:fd:1f:85:05:73:b0:d5:05:ad:eb:bb:d9:5a:e1:d8:81: 92:f2:2d:53 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNDA4MjYw NTMyMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxQ0YyRkQ3OTczNDRD RUYzN0E1RjgyNTQ5M0ZDNENFQTQxNzY5NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxd5K2FK3oWS9VwBnzqW5UzsOZXNmAaIF+pq0EMljKyLg7jcgW a4rsG3gyxZMTR7XNuPE4dSJF+8km3psZi8e9qWpEVHPTF6iNJJGU2caq1pRN235O rG3vQqQGYqK4rplH0niIKw4Nby5hLNOpYVlBV8l9HygdV0kmAbZXV0Zwfg8JyOPI 2/TEUItgfU/aAOj/xGG10ELrptokhYhab96OSTQyzobVNsdWHkipb9QqJOPKs/Yh JfU9oqZCL5xsTwRc6fPhBfVpUnRm1ICpoEbhsuvo5ivrXKlkVs9/LAfp9kuXHthZ 7BWfor0OjDyO765dE8D2W09dSHAk8czpQM9tAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUsc8v15c0TO83pfglST/EzqQXaVMwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9zYzh2MTVjMFRPODNwZmdsU1Rf RXpxUVhhVk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZWZn MA0GCSqGSIb3DQEBCwUAA4IBAQB6QAM9ILWLstHAdW6LV9PPf8yFzhDF1Vnfcy/0 DOwiiX5ijQUcDLSBsUMapNITlkSWtmdRIBXLEBqbCfCoBLjMr9rkKY9vIYh6mATX G8OuJirCbSC3qodhz7qz/+pimQkzCh0EzmaT1LUKxXPLqfipI0P91h9anvCO4XvB EtMsO1q8BIQz6ESh3s3R+JblboLuYUZMA+R8U9UGPOyXHE+WSXmooT2fuoEhKLDp rW7w4z8BfRDf+UlP7ffrm2K8FzFWEw8yZJvX/7lbPqmUCbHU6pMxLZuuuEmGfQ5H z22S3Kyr49CZhjXC10Qptv0fhQVzsNUFreu72Vrh2IGS8i1T -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:40 2024 by rpki-client on console-ams.rpki-client.org