$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/hRz6dnwZww2VMorKssEh6JvMLWo.roa File: hRz6dnwZww2VMorKssEh6JvMLWo.roa (raw, json) Hash identifier: +WSOF+mgwN5eFtDlecU3FGdmSCJV7vMDzKf5MBRkqnU= Subject key identifier: 85:1C:FA:76:7C:19:C3:0D:95:32:8A:CA:B2:C1:21:E8:9B:CC:2D:6A Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Certificate serial: 12A0 Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/hRz6dnwZww2VMorKssEh6JvMLWo.roa Signing time: Mon 26 Aug 2024 05:34:52 +0000 ROA not before: Mon 26 Aug 2024 05:34:52 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131636 IP address blocks: 103.130.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 19:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4768 (0x12a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D Validity Not Before: Aug 26 05:34:52 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=851CFA767C19C30D95328ACAB2C121E89BCC2D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:0b:5a:e6:0c:d3:f6:b3:85:ef:67:c8:06: 9a:2f:b5:24:3b:35:53:e6:b1:b3:60:39:0a:d7:90: 6d:f4:ca:e8:06:8b:81:9e:b6:51:ef:51:96:50:5f: f5:12:23:68:9c:48:64:8f:ff:bd:84:d5:ff:e5:68: bf:7a:83:93:61:52:5e:e9:73:b8:84:4a:97:3e:e0: 4f:bb:21:cb:15:a9:7f:c3:a9:67:43:16:22:03:f2: 94:10:84:f0:4c:8a:03:63:f2:f4:1b:dd:c4:b0:f8: 93:7c:88:a9:43:73:e4:13:9b:d5:fc:62:23:70:a3: 15:47:0c:17:6d:d6:b7:80:a6:a2:29:28:5f:cc:42: 9a:6d:33:fa:b8:0e:ef:c9:61:58:4a:2b:1a:99:1f: ae:f1:0c:66:d1:dd:32:75:c1:b0:9c:cf:1d:38:d3: a7:d8:92:77:13:a4:f3:11:81:46:39:20:3c:a4:f1: 18:62:98:25:7e:98:db:75:99:b9:60:41:be:bc:4b: 46:d8:91:29:3e:03:c8:f4:a7:07:17:cc:61:cc:5f: 98:62:79:e5:a9:b2:92:67:79:e2:41:fc:aa:e4:a9: 44:0b:9f:11:56:43:6b:ae:ee:14:e6:ff:e0:04:42: be:ec:19:79:68:5f:92:84:35:5f:e8:89:80:8d:1b: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1C:FA:76:7C:19:C3:0D:95:32:8A:CA:B2:C1:21:E8:9B:CC:2D:6A X509v3 Authority Key Identifier: keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/hRz6dnwZww2VMorKssEh6JvMLWo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.126.0/24 Signature Algorithm: sha256WithRSAEncryption 96:ed:48:54:e4:70:b5:ca:93:3c:5a:dc:48:14:0a:ad:d9:e2: 07:87:9d:3a:a0:93:91:23:02:51:b9:29:1d:b5:78:28:47:de: d6:90:81:2e:1a:3a:9a:64:58:19:17:5f:9a:02:3d:b7:59:78: 9b:c9:1f:bd:eb:4e:27:7b:43:50:06:2f:a0:84:73:b9:c0:ab: 7f:56:5a:96:c2:a1:71:26:9c:39:56:d0:d9:dd:1b:4a:b5:fb: 86:93:d3:a1:9e:3c:bb:b9:9c:1a:de:a6:e9:70:a3:16:85:19: ba:0b:18:b3:78:d8:36:8a:02:38:cc:a7:12:ab:f7:51:2b:02: c9:e8:20:09:5b:83:7a:09:87:6d:54:b7:7f:2c:46:e7:98:ba: 6b:8a:c4:49:b9:bd:38:2a:d1:a4:d3:46:9d:9b:ab:b7:0f:88: 1a:12:3a:5e:ef:e2:28:32:a8:c8:96:e2:53:ee:23:e6:4e:73: 71:f9:21:f3:33:d2:0d:53:36:97:41:bc:9f:a4:e5:7d:18:1b: 30:90:9c:0e:b2:b2:dc:df:dd:1e:c8:61:70:0e:17:b7:ad:41: 8a:53:66:4a:82:6a:45:a3:e0:1d:60:5f:04:94:47:6b:ad:7f: e7:bd:cf:33:16:e5:b2:9c:b6:7e:75:eb:4d:02:4b:73:4f:3c: 43:b4:d9:5b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICEqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNDA4MjYw NTM0NTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg1MUNGQTc2N0MxOUMz MEQ5NTMyOEFDQUIyQzEyMUU4OUJDQzJENkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6AQta5gzT9rOF72fIBpovtSQ7NVPmsbNgOQrXkG30yugGi4Ge tlHvUZZQX/USI2icSGSP/72E1f/laL96g5NhUl7pc7iESpc+4E+7IcsVqX/DqWdD FiID8pQQhPBMigNj8vQb3cSw+JN8iKlDc+QTm9X8YiNwoxVHDBdt1reApqIpKF/M QpptM/q4Du/JYVhKKxqZH67xDGbR3TJ1wbCczx0406fYkncTpPMRgUY5IDyk8Rhi mCV+mNt1mblgQb68S0bYkSk+A8j0pwcXzGHMX5hieeWpspJneeJB/KrkqUQLnxFW Q2uu7hTm/+AEQr7sGXloX5KENV/oiYCNG8yZAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUhRz6dnwZww2VMorKssEh6JvMLWowHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1 CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi9oUno2ZG53Wnd3MlZNb3JLc3NF aDZKdk1MV28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4J+ MA0GCSqGSIb3DQEBCwUAA4IBAQCW7UhU5HC1ypM8WtxIFAqt2eIHh506oJORIwJR uSkdtXgoR97WkIEuGjqaZFgZF1+aAj23WXibyR+9604ne0NQBi+ghHO5wKt/VlqW wqFxJpw5VtDZ3RtKtfuGk9Ohnjy7uZwa3qbpcKMWhRm6CxizeNg2igI4zKcSq/dR KwLJ6CAJW4N6CYdtVLd/LEbnmLprisRJub04KtGk00adm6u3D4gaEjpe7+IoMqjI luJT7iPmTnNx+SHzM9INUzaXQbyfpOV9GBswkJwOsrLc390eyGFwDhe3rUGKU2ZK gmpFo+AdYF8ElEdrrX/nvc8zFuWynLZ+detNAktzTzxDtNlb -----END CERTIFICATE-----Generated at Fri Nov 22 18:33:34 2024 by rpki-client on console-fra.rpki-client.org