$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/2tuaRxapsElzRsWgrzb6aqAmCsw.roa File: 2tuaRxapsElzRsWgrzb6aqAmCsw.roa (raw, json) Hash identifier: QTXsPgrUlq/5zOAh9So7pczx0Yl8zLITL7kAO3n6YoE= Subject key identifier: DA:DB:9A:47:16:A9:B0:49:73:46:C5:A0:AF:36:FA:6A:A0:26:0A:CC Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Certificate serial: 04A7 Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/2tuaRxapsElzRsWgrzb6aqAmCsw.roa Signing time: Sun 22 Sep 2024 17:55:43 +0000 ROA not before: Sun 22 Sep 2024 17:55:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.157.42.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Validity Not Before: Sep 22 17:55:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DADB9A4716A9B0497346C5A0AF36FA6AA0260ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:47:06:3f:95:94:18:5f:73:03:e9:0e:f2: af:16:d7:a3:d0:a0:f6:84:9a:d6:90:91:52:62:2a: 56:9b:0f:83:b0:62:61:fd:29:19:0a:21:fa:b0:23: 43:0d:6b:15:51:a1:d4:89:9e:4f:6e:08:02:bc:9b: c0:e4:80:53:6f:01:fa:c0:2e:b9:01:9c:93:41:95: a3:f1:56:4d:22:6f:81:52:7a:08:6c:d8:00:8c:2f: de:43:a6:f5:f6:37:7b:44:17:12:d0:0a:6a:42:14: 58:3f:f3:4d:e6:e8:fb:55:a7:0d:c6:52:dc:36:de: ad:fe:71:01:d6:64:ed:4a:ea:ae:ca:09:5f:0e:45: 02:63:c3:67:14:e2:76:6c:9c:04:75:66:f6:32:ff: 3b:aa:63:d3:e2:f8:8a:fa:01:19:cd:60:ab:ac:a4: 35:e7:c5:4f:cf:c2:84:43:84:f0:b9:18:77:d3:16: e5:6b:d9:ba:29:9f:bb:6c:08:7b:1d:93:85:9a:1a: ff:df:86:84:1a:aa:0e:ad:36:07:1a:70:84:b2:ab: 33:78:dc:ae:9a:f3:56:31:09:56:eb:4d:35:02:25: d6:49:ff:d2:8f:ed:a6:14:4a:9f:61:8e:14:2a:72: 60:1f:f4:3e:05:52:b6:69:df:0e:bb:a9:49:73:f8: d8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DB:9A:47:16:A9:B0:49:73:46:C5:A0:AF:36:FA:6A:A0:26:0A:CC X509v3 Authority Key Identifier: keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/2tuaRxapsElzRsWgrzb6aqAmCsw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.157.42.0/23 Signature Algorithm: sha256WithRSAEncryption ca:10:84:1f:15:b4:f8:da:8e:cd:d0:e0:36:be:90:bb:e0:88: 9f:27:53:93:69:9f:60:08:cf:b2:90:9e:c7:47:66:b4:ac:cd: 80:ac:c8:33:2e:1c:c7:35:da:c3:32:49:df:3d:50:e9:d0:66: 0c:66:b9:32:58:c1:05:3c:7e:6f:71:52:41:92:47:d4:63:6a: 09:55:90:92:c9:ce:a8:09:b3:2c:36:f2:e5:9a:05:3b:f1:8f: 36:3a:53:9d:ed:b2:16:ff:9c:e5:76:c2:30:a6:bb:d6:a5:7a: 0e:3a:d5:06:82:9c:79:1e:38:3d:12:97:8a:33:98:aa:39:e5: b1:ac:50:2d:73:ca:65:fc:b8:51:d0:0f:95:d1:f1:2a:b5:06: f2:00:78:20:7a:87:d3:60:d7:87:43:a3:5a:e0:f6:7a:35:74: 33:fe:58:60:19:38:8c:cd:bc:4a:ee:c1:f0:73:cd:8d:24:fe: d3:03:38:ec:1b:8f:b0:e5:78:d5:73:3d:18:64:8d:ba:17:d0: d2:99:eb:81:d5:24:a9:49:0f:48:4b:56:0d:12:5b:93:5f:bc: 7f:5a:e1:50:d5:f5:97:85:25:30:f4:4f:85:01:c0:9b:ec:51: 25:67:b3:63:8c:61:14:6c:04:e8:4a:c5:8c:55:d2:ae:b1:86: b1:80:45:5c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZC QjdGN0I1QzU4MzIzNDkwODc1ODQ5QjhFRERBNDk1RUYxN0IxQjAeFw0yNDA5MjIx NzU1NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERBREI5QTQ3MTZBOUIw NDk3MzQ2QzVBMEFGMzZGQTZBQTAyNjBBQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+D0cGP5WUGF9zA+kO8q8W16PQoPaEmtaQkVJiKlabD4OwYmH9 KRkKIfqwI0MNaxVRodSJnk9uCAK8m8DkgFNvAfrALrkBnJNBlaPxVk0ib4FSeghs 2ACML95DpvX2N3tEFxLQCmpCFFg/803m6PtVpw3GUtw23q3+cQHWZO1K6q7KCV8O RQJjw2cU4nZsnAR1ZvYy/zuqY9Pi+Ir6ARnNYKuspDXnxU/PwoRDhPC5GHfTFuVr 2bopn7tsCHsdk4WaGv/fhoQaqg6tNgcacISyqzN43K6a81YxCVbrTTUCJdZJ/9KP 7aYUSp9hjhQqcmAf9D4FUrZp3w67qUlz+NixAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU2tuaRxapsElzRsWgrzb6aqAmCswwHwYDVR0jBBgwFoAUv7t/e1xYMjSQh1hJ uO3aSV7xexswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3 dF9lMXhZTWpTUWgxaEp1TzNhU1Y3eGV4cy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djd0X2UxeFlNalNRaDFoSnVPM2FTVjd4ZXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDLzJ0dWFSeGFwc0VselJzV2dyemI2YXFB bUNzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnSowDQYJ KoZIhvcNAQELBQADggEBAMoQhB8VtPjajs3Q4Da+kLvgiJ8nU5Npn2AIz7KQnsdH ZrSszYCsyDMuHMc12sMySd89UOnQZgxmuTJYwQU8fm9xUkGSR9RjaglVkJLJzqgJ syw28uWaBTvxjzY6U53tshb/nOV2wjCmu9aleg461QaCnHkeOD0Sl4ozmKo55bGs UC1zymX8uFHQD5XR8Sq1BvIAeCB6h9Ng14dDo1rg9no1dDP+WGAZOIzNvEruwfBz zY0k/tMDOOwbj7DleNVzPRhkjboX0NKZ64HVJKlJD0hLVg0SW5NfvH9a4VDV9ZeF JTD0T4UBwJvsUSVns2OMYRRsBOhKxYxV0q6xhrGARVw= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org