$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Mq3WNMJ89mNoKiyALwC4QPK2avQ.roa File: Mq3WNMJ89mNoKiyALwC4QPK2avQ.roa (raw, json) Hash identifier: DLiZvneVCzM0GAM96mqEkh5Dv5wVblSvoXvxM0P6JFI= Subject key identifier: 32:AD:D6:34:C2:7C:F6:63:68:2A:2C:80:2F:00:B8:40:F2:B6:6A:F4 Certificate issuer: /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Certificate serial: 0C4A Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Mq3WNMJ89mNoKiyALwC4QPK2avQ.roa Signing time: Mon 26 Aug 2024 05:34:36 +0000 ROA not before: Mon 26 Aug 2024 05:34:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17408 IP address blocks: 103.123.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B Validity Not Before: Aug 26 05:34:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=32ADD634C27CF663682A2C802F00B840F2B66AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d4:9e:6d:b6:da:0e:ef:d0:85:7e:7e:d3:b3: 00:5d:72:1e:a1:f6:46:70:0b:3c:25:73:85:db:c8: d1:a9:6b:c6:8c:10:08:69:79:f7:93:eb:b5:98:a0: bc:a1:18:ef:05:50:7b:83:a9:fc:f6:8b:25:b8:03: 02:e4:96:9d:93:58:f4:80:b6:42:74:5b:58:ff:1d: 58:8f:a9:0d:f7:ec:34:10:93:6d:ba:c1:1f:c3:68: 88:f5:eb:03:d3:25:b1:b6:de:7a:70:ad:92:06:cc: 20:1a:70:86:8b:c7:5f:01:bd:85:e3:80:4e:15:d6: d2:80:02:11:8d:b0:66:fd:54:92:cd:63:dc:bc:cb: 45:7c:2c:68:df:e5:46:fd:a0:75:08:66:d8:a4:32: 83:5d:86:e4:0b:22:a6:1f:6c:b8:79:29:cf:98:0f: 08:1f:1c:b7:12:39:07:7e:78:8c:cb:06:7f:99:ef: 25:5c:c8:0b:dd:33:1b:c8:af:5c:3a:64:e6:a6:cb: e9:7f:66:94:26:4a:ea:d7:6d:95:91:ac:f8:ad:56: 93:d7:01:1e:c8:5d:fe:95:a2:1d:23:f1:96:07:03: d5:55:62:b1:00:a9:04:c3:f4:89:fb:e2:2a:d5:e9: 5c:c6:24:7c:68:f1:89:69:9d:0c:1b:3a:b2:11:6e: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AD:D6:34:C2:7C:F6:63:68:2A:2C:80:2F:00:B8:40:F2:B6:6A:F4 X509v3 Authority Key Identifier: keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Mq3WNMJ89mNoKiyALwC4QPK2avQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.140.0/22 Signature Algorithm: sha256WithRSAEncryption 59:71:32:54:16:4f:8f:b6:55:8a:af:84:20:be:3f:ac:2c:7b: 1d:8c:70:8b:eb:f9:27:3f:59:fc:ee:0f:cc:ef:5d:11:7e:ac: 0e:58:e3:9d:96:a2:df:b1:59:3d:9d:4c:53:76:f1:fc:1c:12: c6:de:3e:e6:95:23:b3:3c:f2:1d:fe:0d:a9:68:8b:50:b5:81: 7d:a9:b9:97:9b:3b:f4:73:78:5e:f7:68:81:59:55:10:e8:c1: c5:c1:fe:df:62:8b:98:b8:46:b5:a4:e7:e0:7e:19:b5:f9:f0: ee:fb:e5:b0:5a:e5:ed:90:f5:96:ee:17:26:67:8a:a8:f5:87: 50:8e:2d:37:9c:a5:e6:63:53:91:c1:4b:c4:c2:1c:d0:97:6e: 5d:e4:c4:8e:56:7a:5e:77:ba:81:82:97:59:2c:b7:be:c6:35: fd:48:72:e4:61:b7:f9:ed:a3:ee:48:e5:86:85:0b:d1:31:5e: 84:c5:c0:b1:ff:ba:08:92:2d:bd:64:38:e3:57:2c:75:16:8b: 96:86:67:f7:4a:d7:3d:1a:f0:9e:13:c9:50:17:5c:dd:50:6b: c2:c8:47:57:9b:1a:9c:72:18:65:12:fd:d9:ed:c2:6b:b4:68: 35:eb:86:ea:64:16:dc:5e:4a:82:20:05:70:3a:01:86:5b:c1: e1:f9:43:45 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzkw QTA0MTJGOEI1RUM0RjNGOUZEQkIzQTYxMjcwREJEMEVBOUU2QjAeFw0yNDA4MjYw NTM0MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyQURENjM0QzI3Q0Y2 NjM2ODJBMkM4MDJGMDBCODQwRjJCNjZBRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA1J5tttoO79CFfn7TswBdch6h9kZwCzwlc4XbyNGpa8aMEAhp efeT67WYoLyhGO8FUHuDqfz2iyW4AwLklp2TWPSAtkJ0W1j/HViPqQ337DQQk226 wR/DaIj16wPTJbG23npwrZIGzCAacIaLx18BvYXjgE4V1tKAAhGNsGb9VJLNY9y8 y0V8LGjf5Ub9oHUIZtikMoNdhuQLIqYfbLh5Kc+YDwgfHLcSOQd+eIzLBn+Z7yVc yAvdMxvIr1w6ZOamy+l/ZpQmSurXbZWRrPitVpPXAR7IXf6Voh0j8ZYHA9VVYrEA qQTD9In74irV6VzGJHxo8YlpnQwbOrIRbkdBAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUMq3WNMJ89mNoKiyALwC4QPK2avQwHwYDVR0jBBgwFoAUOQoEEvi17E8/n9uz phJw29DqnmswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVU5JR0FU RS9PUW9FRXZpMTdFOF9uOXV6cGhKdzI5RHFubXMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL09Rb0VFdmkxN0U4X245dXpwaEp3MjlEcW5tcy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1VOSUdBVEUvTXEzV05NSjg5bU5vS2l5 QUx3QzRRUEsyYXZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Amd7jDANBgkqhkiG9w0BAQsFAAOCAQEAWXEyVBZPj7ZViq+EIL4/rCx7HYxwi+v5 Jz9Z/O4PzO9dEX6sDljjnZai37FZPZ1MU3bx/BwSxt4+5pUjszzyHf4NqWiLULWB fam5l5s79HN4XvdogVlVEOjBxcH+32KLmLhGtaTn4H4Ztfnw7vvlsFrl7ZD1lu4X JmeKqPWHUI4tN5yl5mNTkcFLxMIc0JduXeTEjlZ6Xne6gYKXWSy3vsY1/Uhy5GG3 +e2j7kjlhoUL0TFehMXAsf+6CJItvWQ441csdRaLloZn90rXPRrwnhPJUBdc3VBr wshHV5sanHIYZRL92e3Ca7RoNeuG6mQW3F5KgiAFcDoBhlvB4flDRQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org