$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/2gq7U2QRq2whgN1Nq7hTRX63A8A.roa File: 2gq7U2QRq2whgN1Nq7hTRX63A8A.roa (raw, json) Hash identifier: 2a1DSio7Pyn4Gk71rkGb0BJ4fWXJiySg29uqedURpKU= Subject key identifier: DA:0A:BB:53:64:11:AB:6C:21:80:DD:4D:AB:B8:53:45:7E:B7:03:C0 Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 11A4 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/2gq7U2QRq2whgN1Nq7hTRX63A8A.roa Signing time: Fri 01 Sep 2023 10:20:08 +0000 ROA not before: Fri 01 Sep 2023 10:20:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131636 IP address blocks: 103.130.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4516 (0x11a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Sep 1 10:20:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DA0ABB536411AB6C2180DD4DABB853457EB703C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:84:1f:5f:94:5d:e7:7f:98:01:79:31:ae: 65:ce:f8:17:23:53:83:92:f2:e1:29:c7:7f:32:c0: 96:83:20:89:45:df:73:65:d4:03:1a:20:84:7b:0a: 50:40:f5:0e:b4:91:de:0e:1f:a5:6f:26:93:33:0c: 71:b3:f7:63:17:d3:69:24:71:af:8c:ac:4b:3c:ad: 4e:84:92:63:cf:29:23:10:bb:2d:95:62:d4:ad:63: b4:48:26:4c:5b:00:6e:5b:bb:1b:1a:18:89:cc:24: e0:a4:fb:a2:0c:fb:5e:c6:0c:da:f1:ef:f4:3d:3f: 3a:88:47:20:cb:18:c2:6d:1a:a5:98:eb:c5:ee:8d: 43:84:b1:59:dc:9a:6d:a0:2d:93:f1:da:d2:db:46: 9a:3b:38:e1:79:ff:46:75:63:bd:0b:ed:8b:c5:a5: 6e:8e:3a:cf:04:b3:3d:86:6b:b2:e7:24:8a:9d:0d: 35:61:06:fd:c4:8c:24:96:5c:e6:9c:d6:15:42:89: ef:7a:a3:9c:d4:65:e0:da:01:90:9c:4d:cd:d4:e8: 9a:70:ca:06:32:5d:fd:42:89:3c:f8:e6:75:1b:40: 0e:8d:06:c5:11:87:6b:03:16:e7:fd:a8:6a:68:8c: da:92:b9:38:c6:e2:5a:7a:bd:67:d8:f9:15:9c:91: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0A:BB:53:64:11:AB:6C:21:80:DD:4D:AB:B8:53:45:7E:B7:03:C0 X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/2gq7U2QRq2whgN1Nq7hTRX63A8A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.125.0/24 Signature Algorithm: sha256WithRSAEncryption 21:a2:ef:e1:ef:60:a8:d4:4d:d6:97:ce:97:ce:ef:e4:4c:a8: 76:ff:ec:03:31:66:20:7b:19:73:c2:92:5a:e2:f1:d0:0e:2a: 08:e4:79:17:16:7c:28:be:c5:91:2a:a6:c8:a9:29:b8:33:82: 5a:5d:48:20:d2:85:33:4f:6e:c0:4f:2e:89:24:43:c5:18:aa: 5d:a5:62:4c:20:1d:50:7a:17:95:a9:72:29:3b:5e:f3:d9:4a: ce:d1:e9:3a:04:11:45:e4:f4:f4:54:7e:7c:98:72:72:42:fc: 94:b4:ca:cb:04:a3:ac:73:c1:48:67:cc:6b:fb:e8:20:fd:ab: 1c:a8:ee:55:f6:21:af:a3:4e:26:9e:f6:1e:a9:c3:49:e5:53: 3e:c3:9c:e0:80:69:50:4d:bd:9c:bb:bc:f8:f2:e1:aa:40:91: ee:8e:34:0e:ae:61:aa:99:5a:0c:9f:df:d9:35:1e:32:11:5d: d1:54:79:ba:4c:16:b4:4e:50:c5:60:7a:8c:d7:6b:31:84:51: cc:8d:42:15:26:a0:5d:3d:e3:45:37:50:6d:ef:3f:dc:33:fb: 43:02:5b:a6:7b:85:0e:f8:83:dd:55:39:c5:1c:70:e8:55:a4: c1:10:d0:9f:87:ca:2a:27:9d:22:0d:4c:42:94:79:dc:7e:14: a3:a4:84:56 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yMzA5MDEx MDIwMDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERBMEFCQjUzNjQxMUFC NkMyMTgwREQ0REFCQjg1MzQ1N0VCNzAzQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyQYQfX5Rd53+YAXkxrmXO+BcjU4OS8uEpx38ywJaDIIlF33Nl 1AMaIIR7ClBA9Q60kd4OH6VvJpMzDHGz92MX02kkca+MrEs8rU6EkmPPKSMQuy2V YtStY7RIJkxbAG5buxsaGInMJOCk+6IM+17GDNrx7/Q9PzqIRyDLGMJtGqWY68Xu jUOEsVncmm2gLZPx2tLbRpo7OOF5/0Z1Y70L7YvFpW6OOs8Esz2Ga7LnJIqdDTVh Bv3EjCSWXOac1hVCie96o5zUZeDaAZCcTc3U6JpwygYyXf1CiTz45nUbQA6NBsUR h2sDFuf9qGpojNqSuTjG4lp6vWfY+RWckch5AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU2gq7U2QRq2whgN1Nq7hTRX63A8AwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi8yZ3E3VTJRUnEyd2hnTjFOcTdo VFJYNjNBOEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4J9 MA0GCSqGSIb3DQEBCwUAA4IBAQAhou/h72Co1E3Wl86Xzu/kTKh2/+wDMWYgexlz wpJa4vHQDioI5HkXFnwovsWRKqbIqSm4M4JaXUgg0oUzT27ATy6JJEPFGKpdpWJM IB1QeheVqXIpO17z2UrO0ek6BBFF5PT0VH58mHJyQvyUtMrLBKOsc8FIZ8xr++gg /ascqO5V9iGvo04mnvYeqcNJ5VM+w5zggGlQTb2cu7z48uGqQJHujjQOrmGqmVoM n9/ZNR4yEV3RVHm6TBa0TlDFYHqM12sxhFHMjUIVJqBdPeNFN1Bt7z/cM/tDAlum e4UO+IPdVTnFHHDoVaTBENCfh8oqJ50iDUxClHncfhSjpIRW -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:50 2024 by rpki-client on console-fra.rpki-client.org