$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/aMRBPCzVvabO3TTBLpOctFxr5s0.roa File: aMRBPCzVvabO3TTBLpOctFxr5s0.roa (raw, json) Hash identifier: FFcEYx667HjKNh44hrDWBuQW0yJUexU5D24hlN5oYsM= Subject key identifier: 68:C4:41:3C:2C:D5:BD:A6:CE:DD:34:C1:2E:93:9C:B4:5C:6B:E6:CD Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 12A1 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/aMRBPCzVvabO3TTBLpOctFxr5s0.roa Signing time: Mon 26 Aug 2024 05:34:52 +0000 ROA not before: Mon 26 Aug 2024 05:34:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131636 IP address blocks: 103.130.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4769 (0x12a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Aug 26 05:34:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=68C4413C2CD5BDA6CEDD34C12E939CB45C6BE6CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:12:6d:62:33:7f:4f:ad:7f:f3:eb:c6:d6: a7:61:f1:00:5f:5a:bb:79:c2:2c:31:2a:b7:de:64: 5f:9b:3e:90:51:19:50:a8:34:a8:05:06:ce:39:5e: ec:a3:8e:05:8c:fa:c6:e6:8e:04:a2:f6:df:33:86: 9e:c5:6f:7d:96:1a:97:c8:2f:19:f1:29:de:6d:6e: b3:a3:56:48:81:e9:3e:8b:a2:db:96:9e:0b:30:a6: 4b:aa:55:0d:6e:8b:8d:e4:e5:1e:64:ab:85:b7:19: 0c:39:d4:a0:e1:1d:4d:27:96:2c:19:e6:b2:35:d7: 35:e9:87:08:fd:6b:41:b7:33:db:5e:0e:7d:92:f3: 06:92:96:d5:c9:86:ef:6a:70:cb:5f:cc:03:d4:99: 8a:7c:b7:1e:96:16:8d:e7:d7:9c:f2:5f:94:96:62: 99:36:b0:54:2c:94:69:f4:09:8f:97:d9:2d:5d:a2: 73:8f:0e:99:a2:28:5d:0d:8e:bb:a9:45:a7:5d:fc: 43:05:38:c2:63:e6:75:ab:0b:64:54:19:6c:f6:77: 59:20:3d:c8:e5:1f:b3:37:3b:d5:35:82:35:29:d1: 12:d7:12:3a:95:0f:8d:0e:1e:41:26:48:19:67:f8: 8f:6c:20:38:16:2e:8c:0e:40:da:29:d2:4a:0a:bd: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C4:41:3C:2C:D5:BD:A6:CE:DD:34:C1:2E:93:9C:B4:5C:6B:E6:CD X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/aMRBPCzVvabO3TTBLpOctFxr5s0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.124.0/24 Signature Algorithm: sha256WithRSAEncryption 03:75:e3:76:76:b7:8c:1f:60:b5:b0:55:b6:d6:f4:bb:c9:07: b0:02:26:ce:0e:12:42:8b:af:6c:33:6b:bd:a4:00:da:b2:b0: 71:a6:2b:62:92:de:a9:0a:d3:40:61:ff:ba:f0:36:19:a9:9c: 92:e2:3a:f5:a1:ad:b5:0e:0f:a5:23:20:5f:97:ca:8e:0a:a3: fa:f2:b1:da:97:d0:4c:90:87:28:c4:b9:40:96:c8:f7:4c:b4: 07:56:32:a0:8c:db:ed:97:fa:d0:c1:cf:ef:fd:31:c6:3e:92: 5c:8f:40:e1:c5:d2:95:49:77:ce:fc:d4:a0:fa:34:34:b9:fa: a4:3f:8a:4c:94:ba:05:6a:39:a2:1d:f6:a3:db:9a:85:43:7e: f9:69:c4:42:96:1f:90:d6:30:8c:52:ce:09:3d:07:0a:73:79: ad:81:d9:c2:b8:fb:cb:17:a6:d8:3d:3b:8d:31:9f:ea:9f:ec: 4d:2f:89:81:a1:2a:c2:da:47:2b:23:a4:d0:09:70:ab:70:29: 52:f9:52:09:66:cc:7c:1d:0b:d4:69:89:29:2d:5f:2f:ee:7e: 41:8f:4f:62:d6:b5:5f:1c:f9:26:de:44:50:1a:b6:f3:48:35: d6:7b:d5:da:05:4d:75:68:62:ca:26:fb:03:77:2c:4c:68:4d: 5f:4b:01:8b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNDA4MjYw NTM0NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY4QzQ0MTNDMkNENUJE QTZDRUREMzRDMTJFOTM5Q0I0NUM2QkU2Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTihJtYjN/T61/8+vG1qdh8QBfWrt5wiwxKrfeZF+bPpBRGVCo NKgFBs45XuyjjgWM+sbmjgSi9t8zhp7Fb32WGpfILxnxKd5tbrOjVkiB6T6LotuW ngswpkuqVQ1ui43k5R5kq4W3GQw51KDhHU0nliwZ5rI11zXphwj9a0G3M9teDn2S 8waSltXJhu9qcMtfzAPUmYp8tx6WFo3n15zyX5SWYpk2sFQslGn0CY+X2S1donOP DpmiKF0NjrupRadd/EMFOMJj5nWrC2RUGWz2d1kgPcjlH7M3O9U1gjUp0RLXEjqV D40OHkEmSBln+I9sIDgWLowOQNop0koKvbKpAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUaMRBPCzVvabO3TTBLpOctFxr5s0wHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi9hTVJCUEN6VnZhYk8zVFRCTHBP Y3RGeHI1czAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4J8 MA0GCSqGSIb3DQEBCwUAA4IBAQADdeN2dreMH2C1sFW21vS7yQewAibODhJCi69s M2u9pADasrBxpitikt6pCtNAYf+68DYZqZyS4jr1oa21Dg+lIyBfl8qOCqP68rHa l9BMkIcoxLlAlsj3TLQHVjKgjNvtl/rQwc/v/THGPpJcj0DhxdKVSXfO/NSg+jQ0 ufqkP4pMlLoFajmiHfaj25qFQ375acRClh+Q1jCMUs4JPQcKc3mtgdnCuPvLF6bY PTuNMZ/qn+xNL4mBoSrC2kcrI6TQCXCrcClS+VIJZsx8HQvUaYkpLV8v7n5Bj09i 1rVfHPkm3kRQGrbzSDXWe9XaBU11aGLKJvsDdyxMaE1fSwGL -----END CERTIFICATE-----Generated at Fri Nov 22 15:07:14 2024 by rpki-client on console-ams.rpki-client.org