$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/en010qInKUrBsZfoP4lBiQ2MMH8.roa File: en010qInKUrBsZfoP4lBiQ2MMH8.roa (raw, json) Hash identifier: 5aQJ3wYL9pXSnvRSuHmb0mtiPB3Sbjn6nMMmaHLhKvk= Subject key identifier: 7A:7D:35:D2:A2:27:29:4A:C1:B1:97:E8:3F:89:41:89:0D:8C:30:7F Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 12A3 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/en010qInKUrBsZfoP4lBiQ2MMH8.roa Signing time: Mon 26 Aug 2024 05:34:53 +0000 ROA not before: Mon 26 Aug 2024 05:34:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131636 IP address blocks: 103.130.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4771 (0x12a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Aug 26 05:34:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7A7D35D2A227294AC1B197E83F8941890D8C307F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:7f:ba:19:1d:1e:6e:e0:61:8b:d7:d5:73: 34:69:6b:d5:cf:41:d1:e0:0f:4f:ea:99:65:90:b3: e7:3b:9f:1d:58:e7:e1:e9:fc:5b:a4:78:8a:3f:fa: e9:d7:71:a6:25:59:9e:fa:11:9e:8b:49:27:04:b8: 38:f3:b4:9f:94:3b:01:5c:b2:17:f1:e1:09:3e:87: 76:72:32:8e:0e:a9:d1:31:c3:5b:2a:4e:5d:c2:6f: c9:80:4e:f7:ff:14:57:a4:f2:04:06:60:ea:b4:e9: f2:18:54:5f:3d:0d:00:d1:76:37:42:0f:c8:14:7f: 70:e4:7f:6f:b0:b9:99:03:6f:86:be:ea:e9:a9:b8: 17:5f:57:1b:5f:d0:38:50:3f:d1:48:86:33:57:2d: c3:fa:c9:55:02:33:b6:5c:ef:79:06:be:9c:2a:57: bd:f1:58:19:06:b6:e8:e0:72:cf:90:1a:ac:4d:21: 73:05:ab:f1:63:73:b0:2e:53:e7:0f:35:c9:9b:f2: 07:65:4f:ed:05:39:55:5f:64:ab:06:86:1e:96:45: 42:27:24:0c:6a:ea:bc:75:45:bb:c0:e3:8a:f3:6d: 8a:9c:83:03:a1:8f:8b:e5:31:d4:ed:f1:6c:5e:41: 37:7f:e3:40:b2:b3:52:5e:e8:d2:3a:19:3f:32:6e: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7D:35:D2:A2:27:29:4A:C1:B1:97:E8:3F:89:41:89:0D:8C:30:7F X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/en010qInKUrBsZfoP4lBiQ2MMH8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.124.0/22 Signature Algorithm: sha256WithRSAEncryption 82:d8:3b:c8:15:3d:2f:46:b6:81:dd:57:f7:b2:48:71:da:a9: 7b:cf:1d:20:c6:b6:1d:e8:c5:cf:e6:32:03:7d:74:79:03:e5: 78:82:ad:44:ad:28:d8:ad:24:a1:54:ac:7d:a2:db:83:1e:b3: af:eb:cb:55:31:3b:19:c4:66:71:2c:c5:b8:32:81:27:92:72: 50:e1:5c:c7:b0:f2:bd:fc:36:d4:a4:0f:df:b6:cd:1b:44:06: b1:19:5f:d7:de:a3:38:a3:0d:2c:01:46:96:a1:b9:ac:f4:fc: f0:52:f5:24:8f:1f:b4:56:5f:aa:63:46:0b:52:d8:83:62:00: 22:21:ee:b7:1a:af:25:2d:63:53:1e:24:d2:a7:86:49:ad:de: bc:53:d8:5e:f4:26:e7:df:5c:65:10:48:0c:4f:49:83:1b:cf: 82:3f:d8:5a:fe:82:7a:60:c4:49:d5:31:53:0a:45:40:8d:53: 7d:61:eb:8e:fe:6c:88:a0:47:e5:ac:e0:b8:2a:f1:50:c2:48: cf:df:18:38:9f:cf:96:ee:fd:a2:9a:d9:88:b7:10:17:37:76: 88:e8:cd:3c:ef:af:6e:d6:db:08:a9:56:31:01:ee:1a:ab:53: 54:67:a3:4d:fb:1c:91:88:ac:d3:b8:3c:aa:7b:ec:8d:a1:25: 2a:e0:ed:2c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNDA4MjYw NTM0NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdBN0QzNUQyQTIyNzI5 NEFDMUIxOTdFODNGODk0MTg5MEQ4QzMwN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAsH+6GR0ebuBhi9fVczRpa9XPQdHgD0/qmWWQs+c7nx1Y5+Hp /FukeIo/+unXcaYlWZ76EZ6LSScEuDjztJ+UOwFcshfx4Qk+h3ZyMo4OqdExw1sq Tl3Cb8mATvf/FFek8gQGYOq06fIYVF89DQDRdjdCD8gUf3Dkf2+wuZkDb4a+6ump uBdfVxtf0DhQP9FIhjNXLcP6yVUCM7Zc73kGvpwqV73xWBkGtujgcs+QGqxNIXMF q/Fjc7AuU+cPNcmb8gdlT+0FOVVfZKsGhh6WRUInJAxq6rx1RbvA44rzbYqcgwOh j4vlMdTt8WxeQTd/40Cys1Je6NI6GT8ybp8nAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUen010qInKUrBsZfoP4lBiQ2MMH8wHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi9lbjAxMHFJbktVckJzWmZvUDRs QmlRMk1NSDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4J8 MA0GCSqGSIb3DQEBCwUAA4IBAQCC2DvIFT0vRraB3Vf3skhx2ql7zx0gxrYd6MXP 5jIDfXR5A+V4gq1ErSjYrSShVKx9otuDHrOv68tVMTsZxGZxLMW4MoEnknJQ4VzH sPK9/DbUpA/fts0bRAaxGV/X3qM4ow0sAUaWobms9PzwUvUkjx+0Vl+qY0YLUtiD YgAiIe63Gq8lLWNTHiTSp4ZJrd68U9he9Cbn31xlEEgMT0mDG8+CP9ha/oJ6YMRJ 1TFTCkVAjVN9YeuO/myIoEflrOC4KvFQwkjP3xg4n8+W7v2imtmItxAXN3aI6M08 769u1tsIqVYxAe4aq1NUZ6NN+xyRiKzTuDyqe+yNoSUq4O0s -----END CERTIFICATE-----Generated at Fri Nov 22 18:33:34 2024 by rpki-client on console-fra.rpki-client.org