$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/KJz0NUJfu1efhPSK9CY4Wgo0fYs.roa File: KJz0NUJfu1efhPSK9CY4Wgo0fYs.roa (raw, json) Hash identifier: cMowveg4XfN8xJJUds0H3TXRBZJK8Kn2rF6GCN+EsBw= Subject key identifier: 28:9C:F4:35:42:5F:BB:57:9F:84:F4:8A:F4:26:38:5A:0A:34:7D:8B Certificate issuer: /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Certificate serial: 0C2F Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/KJz0NUJfu1efhPSK9CY4Wgo0fYs.roa Signing time: Mon 26 Aug 2024 05:34:43 +0000 ROA not before: Mon 26 Aug 2024 05:34:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 103.122.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B Validity Not Before: Aug 26 05:34:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=289CF435425FBB579F84F48AF426385A0A347D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:8b:11:7d:55:4d:99:bc:f5:56:e9:24:2b: fb:5d:d3:2a:e3:b4:62:74:69:4d:30:f4:0f:28:b4: 6f:17:39:69:a9:0d:d9:4e:84:f9:57:a7:78:07:1e: 2a:69:fc:a7:56:da:70:e8:98:80:ef:25:4e:ea:31: a4:eb:de:d9:14:12:cd:68:3f:31:76:7a:55:20:7d: c3:3c:8b:92:4f:7e:69:33:ed:9b:a3:4f:83:ff:32: cc:b0:71:5d:43:b8:13:fd:9b:39:1f:c7:58:c5:e1: 49:e0:b1:af:3c:8f:aa:ff:21:3a:a5:36:93:bf:9b: 83:fc:96:6c:95:68:bd:cd:45:bb:92:a8:3f:ea:83: c4:ec:e0:7f:c2:79:c6:cb:3a:7a:9b:ee:0a:73:8d: e3:d2:c6:2b:89:14:ea:5a:d8:e9:08:fc:cc:06:7a: ce:8d:a6:4b:65:83:bd:0d:8d:ef:11:11:dc:74:3e: d1:a2:86:22:7b:c1:22:07:29:48:8e:53:cf:4c:04: 3b:fc:3f:d7:55:ee:4f:c5:0c:81:ef:91:35:47:36: 0f:d1:50:70:d2:5c:61:f4:d8:dd:b9:b4:d0:d2:ce: 4e:41:84:d4:aa:bb:2a:0f:12:b7:57:99:b0:a8:7e: 02:8b:2c:59:22:36:f0:3c:3d:15:63:ee:aa:14:23: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9C:F4:35:42:5F:BB:57:9F:84:F4:8A:F4:26:38:5A:0A:34:7D:8B X509v3 Authority Key Identifier: keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/KJz0NUJfu1efhPSK9CY4Wgo0fYs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.224.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:d4:2c:a1:12:fa:6e:2c:53:ab:04:45:90:1a:72:e4:26:ca: 2c:b9:42:c2:9c:58:fb:d4:0c:b0:af:82:7c:01:8a:51:f8:31: c2:81:a6:9a:43:ad:75:a1:49:00:03:e1:1e:81:04:c2:d3:e4: f2:11:91:6e:3d:a5:05:b5:76:07:af:07:2d:4c:fe:bc:3c:1e: 25:eb:e5:80:06:95:22:0a:92:c8:6d:e9:96:58:79:9e:03:84: f0:a7:6b:3d:81:b9:c3:76:60:a7:30:6e:cb:a2:a8:81:0b:b3: 25:04:26:44:26:6c:c3:83:9c:c4:90:48:79:87:d3:8a:06:2c: ad:44:05:ca:5f:2a:3d:60:d7:d3:f3:69:cb:13:0f:fe:f4:33: b7:cf:7d:02:12:1c:09:2c:b7:f4:43:f7:8f:60:4d:8f:62:cf: 70:e8:1f:24:d8:15:f3:93:0b:ce:41:55:a5:44:ed:96:b1:fd: 24:7e:86:cd:02:40:97:0f:c3:1f:4d:cf:3f:cf:71:60:a3:bb: 8a:95:b6:1c:6b:59:66:ba:55:d3:75:30:28:4f:5c:99:8f:b0: 08:a0:b0:69:30:01:fe:f5:54:fe:a7:89:d3:85:d1:d1:e9:e6: 22:c6:00:73:68:26:0a:cc:0f:98:5a:b5:2b:86:48:d8:03:03: ee:d0:ec:09 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjM0 MDBBQTZFNkM2OEIxM0REREM5QzAwQjgyNTg2MTI0MjczRkE5QjAeFw0yNDA4MjYw NTM0NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI4OUNGNDM1NDI1RkJC NTc5Rjg0RjQ4QUY0MjYzODVBMEEzNDdEOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWaYsRfVVNmbz1VukkK/td0yrjtGJ0aU0w9A8otG8XOWmpDdlO hPlXp3gHHipp/KdW2nDomIDvJU7qMaTr3tkUEs1oPzF2elUgfcM8i5JPfmkz7Zuj T4P/MsywcV1DuBP9mzkfx1jF4Ungsa88j6r/ITqlNpO/m4P8lmyVaL3NRbuSqD/q g8Ts4H/CecbLOnqb7gpzjePSxiuJFOpa2OkI/MwGes6Npktlg70Nje8REdx0PtGi hiJ7wSIHKUiOU89MBDv8P9dV7k/FDIHvkTVHNg/RUHDSXGH02N25tNDSzk5BhNSq uyoPErdXmbCofgKLLFkiNvA8PRVj7qoUI0SlAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUKJz0NUJfu1efhPSK9CY4Wgo0fYswHwYDVR0jBBgwFoAUY0AKpubGixPd3JwA uCWGEkJz+pswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklTSU9O NFlFUy9ZMEFLcHViR2l4UGQzSndBdUNXR0VrSnotcHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1kwQUtwdWJHaXhQZDNKd0F1Q1dHRWtKei1wcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1ZJU0lPTjRZRVMvS0p6ME5VSmZ1 MWVmaFBTSzlDWTRXZ28wZllzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGd64DANBgkqhkiG9w0BAQsFAAOCAQEAHNQsoRL6bixTqwRFkBpy5CbK LLlCwpxY+9QMsK+CfAGKUfgxwoGmmkOtdaFJAAPhHoEEwtPk8hGRbj2lBbV2B68H LUz+vDweJevlgAaVIgqSyG3pllh5ngOE8KdrPYG5w3ZgpzBuy6KogQuzJQQmRCZs w4OcxJBIeYfTigYsrUQFyl8qPWDX0/NpyxMP/vQzt899AhIcCSy39EP3j2BNj2LP cOgfJNgV85MLzkFVpUTtlrH9JH6GzQJAlw/DH03PP89xYKO7ipW2HGtZZrpV03Uw KE9cmY+wCKCwaTAB/vVU/qeJ04XR0enmIsYAc2gmCswPmFq1K4ZI2AMD7tDsCQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:00 2024 by rpki-client on console-fra.rpki-client.org