$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa File: QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa (raw, json) Hash identifier: KCctCGNzXlTR5QK8ztN6GaHds7YbMpQiGxsbfkvZax8= Subject key identifier: 42:E6:11:E3:1F:66:AC:C9:C7:C0:BD:27:D1:43:8A:17:AA:22:30:F5 Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Certificate serial: 038D Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa Signing time: Fri 01 Sep 2023 10:16:41 +0000 ROA not before: Fri 01 Sep 2023 10:16:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131642 IP address blocks: 103.157.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 909 (0x38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Validity Not Before: Sep 1 10:16:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=42E611E31F66ACC9C7C0BD27D1438A17AA2230F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:1b:d0:af:1a:e4:6d:6c:66:22:3d:65:a9: 76:03:4e:8b:d3:5b:f6:2d:19:9a:db:55:10:52:99: 3f:59:80:df:03:b4:c9:b2:9d:a6:9a:df:f5:b9:e4: ad:bc:68:c9:90:f7:26:15:ec:d9:05:74:a6:75:e7: e8:f2:9a:d4:43:a7:7b:da:10:d3:e6:dc:00:81:29: 68:57:97:d8:a3:50:20:7e:46:2c:d3:48:86:20:1a: 42:4a:8f:4f:fb:33:54:dd:5c:41:d3:78:16:ad:8c: f9:22:ac:72:95:5c:19:ba:88:63:d1:2a:9d:72:64: a4:9d:b2:e7:b8:65:44:d6:e6:99:c4:fd:71:dc:3b: 5e:e9:d9:f6:60:af:ba:b2:e9:b7:2c:71:3e:74:9b: 81:16:7a:f6:9c:32:4b:41:e6:17:50:b0:e8:69:15: b5:23:f7:92:76:d4:68:94:55:66:64:a8:89:57:e3: 91:9f:a9:b5:38:31:a6:34:42:2a:94:d3:89:47:88: 2e:03:29:95:b9:bd:f9:1a:ab:8d:d4:68:2a:6f:47: dd:19:b4:e1:f2:ca:dc:da:73:a1:34:fe:76:03:91: a5:27:b5:fa:6e:d5:94:ef:1e:3f:57:bc:1d:26:5b: ec:a1:66:c5:eb:98:3b:b8:9a:f5:75:fd:94:ea:e5: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E6:11:E3:1F:66:AC:C9:C7:C0:BD:27:D1:43:8A:17:AA:22:30:F5 X509v3 Authority Key Identifier: keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/QuYR4x9mrMnHwL0n0UOKF6oiMPU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.157.42.0/23 Signature Algorithm: sha256WithRSAEncryption 47:10:f5:fe:db:5d:a9:10:a6:c0:ef:fe:74:e2:ea:70:c0:68: 13:42:d6:5a:90:6f:be:1a:dd:d7:51:37:d1:13:ad:b1:e6:00: e7:18:ae:8e:92:ae:7f:cf:e1:04:24:59:67:05:66:c8:18:dc: 56:c7:90:01:24:71:fe:20:dc:eb:9d:90:d6:9b:f6:43:6e:ad: 77:41:08:d4:6b:c6:86:d7:52:e8:1b:dd:7e:f8:03:76:17:9f: d1:6e:7c:26:f2:ad:0f:2b:12:40:a6:96:ef:27:a3:04:9f:ef: 02:b5:40:14:09:4f:fd:2d:77:db:66:74:20:9e:05:a9:fa:92: 4c:62:d6:90:9e:43:49:c8:38:e5:34:9a:8b:31:cb:dc:06:90: 4a:03:5a:67:32:95:95:70:ea:f4:1f:6e:d8:d1:47:a8:f6:e9: 06:e3:98:2c:7b:87:3d:eb:ae:4e:55:5c:6f:1f:d9:d2:ee:27: 9d:d4:d9:09:9a:09:72:da:bc:6a:7e:a1:8d:4c:d8:9c:90:66: fe:13:84:d6:51:7c:f7:a6:8e:4b:28:e7:06:b4:24:41:22:d1: aa:58:1e:e1:c2:44:00:14:0e:de:13:d3:c9:65:df:bd:93:25: e2:f3:f6:a6:0b:da:c9:0e:0a:cb:43:cb:3e:6c:48:6d:c2:4a: 25:79:74:20 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICA40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZC QjdGN0I1QzU4MzIzNDkwODc1ODQ5QjhFRERBNDk1RUYxN0IxQjAeFw0yMzA5MDEx MDE2NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQyRTYxMUUzMUY2NkFD QzlDN0MwQkQyN0QxNDM4QTE3QUEyMjMwRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTCBvQrxrkbWxmIj1lqXYDTovTW/YtGZrbVRBSmT9ZgN8DtMmy naaa3/W55K28aMmQ9yYV7NkFdKZ15+jymtRDp3vaENPm3ACBKWhXl9ijUCB+RizT SIYgGkJKj0/7M1TdXEHTeBatjPkirHKVXBm6iGPRKp1yZKSdsue4ZUTW5pnE/XHc O17p2fZgr7qy6bcscT50m4EWevacMktB5hdQsOhpFbUj95J21GiUVWZkqIlX45Gf qbU4MaY0QiqU04lHiC4DKZW5vfkaq43UaCpvR90ZtOHyytzac6E0/nYDkaUntfpu 1ZTvHj9XvB0mW+yhZsXrmDu4mvV1/ZTq5bbXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUQuYR4x9mrMnHwL0n0UOKF6oiMPUwHwYDVR0jBBgwFoAUv7t/e1xYMjSQh1hJ uO3aSV7xexswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3 dF9lMXhZTWpTUWgxaEp1TzNhU1Y3eGV4cy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djd0X2UxeFlNalNRaDFoSnVPM2FTVjd4ZXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL1F1WVI0eDltck1uSHdMMG4wVU9LRjZv aU1QVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnSowDQYJ KoZIhvcNAQELBQADggEBAEcQ9f7bXakQpsDv/nTi6nDAaBNC1lqQb74a3ddRN9ET rbHmAOcYro6Srn/P4QQkWWcFZsgY3FbHkAEkcf4g3OudkNab9kNurXdBCNRrxobX Uugb3X74A3YXn9FufCbyrQ8rEkCmlu8nowSf7wK1QBQJT/0td9tmdCCeBan6kkxi 1pCeQ0nIOOU0mosxy9wGkEoDWmcylZVw6vQfbtjRR6j26QbjmCx7hz3rrk5VXG8f 2dLuJ53U2QmaCXLavGp+oY1M2JyQZv4ThNZRfPemjkso5wa0JEEi0apYHuHCRAAU Dt4T08ll372TJeLz9qYL2skOCstDyz5sSG3CSiV5dCA= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org