$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WDKING/irzIyXN8z3_ORbSYtbHKXUBN7Tc.roa File: irzIyXN8z3_ORbSYtbHKXUBN7Tc.roa (raw, json) Hash identifier: qvzjSBDoNiYPcU0J0zXLKta9MxSUM5BNOitcquxqX7c= Subject key identifier: 8A:BC:C8:C9:73:7C:CF:7F:CE:45:B4:98:B5:B1:CA:5D:40:4D:ED:37 Certificate issuer: /CN=5CED7FEDF0EC0C7545594CF6E15D9BDEE79651B9 Certificate serial: E2 Authority key identifier: 5C:ED:7F:ED:F0:EC:0C:75:45:59:4C:F6:E1:5D:9B:DE:E7:96:51:B9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XO1_7fDsDHVFWUz24V2b3ueWUbk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WDKING/irzIyXN8z3_ORbSYtbHKXUBN7Tc.roa Signing time: Sat 05 Oct 2024 15:53:09 +0000 ROA not before: Sat 05 Oct 2024 15:53:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 150754 IP address blocks: 103.67.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WDKING/XO1_7fDsDHVFWUz24V2b3ueWUbk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WDKING/XO1_7fDsDHVFWUz24V2b3ueWUbk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XO1_7fDsDHVFWUz24V2b3ueWUbk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CED7FEDF0EC0C7545594CF6E15D9BDEE79651B9 Validity Not Before: Oct 5 15:53:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8ABCC8C9737CCF7FCE45B498B5B1CA5D404DED37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:4d:df:2f:58:d9:27:ee:6f:15:05:53:b5: 6d:4c:5b:77:da:79:68:2f:5a:06:ac:44:fe:d2:92: 2d:48:a8:03:03:d0:57:c1:a7:3e:01:f4:51:df:fd: a4:b2:e9:52:a8:81:b2:1d:a2:a5:e3:99:aa:26:e9: 6c:31:49:41:07:1e:0f:16:f6:48:d6:bc:d8:bb:5e: cc:8c:e8:fe:b5:0b:9d:c0:fc:af:23:68:d7:eb:91: 06:66:b7:d4:7a:f5:ba:16:3d:f3:c1:42:ab:76:c4: ec:ce:ad:4a:44:87:34:ff:3e:f4:af:70:11:2e:43: 40:ef:fa:e5:00:0a:98:63:c9:20:0d:cc:34:ef:de: 03:90:03:a0:ff:d7:ae:a7:fc:e9:cb:4a:79:8a:a9: a7:a3:c6:f0:b3:72:51:a6:66:41:4f:4c:5c:e9:d2: 84:cf:d6:b9:54:f7:d1:7b:48:10:ff:7c:05:bc:32: cc:a4:fb:dd:c9:8f:78:47:18:75:fb:07:26:d9:2a: d5:5b:3b:d9:b9:14:93:91:d7:82:93:1f:9a:d6:e7: 16:5c:62:ca:06:e8:f2:b6:dd:fe:bd:9f:b8:52:be: 3b:d0:bc:3e:f3:11:6b:20:81:5e:e0:a5:aa:e8:6c: 8e:53:1e:d8:33:dd:ab:4b:9b:e5:dc:51:62:67:a5: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:C8:C9:73:7C:CF:7F:CE:45:B4:98:B5:B1:CA:5D:40:4D:ED:37 X509v3 Authority Key Identifier: keyid:5C:ED:7F:ED:F0:EC:0C:75:45:59:4C:F6:E1:5D:9B:DE:E7:96:51:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WDKING/XO1_7fDsDHVFWUz24V2b3ueWUbk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XO1_7fDsDHVFWUz24V2b3ueWUbk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WDKING/irzIyXN8z3_ORbSYtbHKXUBN7Tc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.72.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:29:91:63:00:33:81:a0:7f:89:4c:8a:d1:52:b0:7b:c4:26: 78:c5:16:76:93:c0:a4:96:3c:19:76:d4:28:51:3d:c2:69:6d: 56:19:83:46:af:30:8e:dd:f7:0c:fc:e0:30:56:e7:fe:6a:a6: 6f:42:2b:22:c7:c1:5d:d1:73:6f:50:47:d2:e2:20:c5:56:bf: 4c:61:58:13:24:ed:d0:31:6c:de:5b:ac:20:2b:91:e0:d1:14: fe:66:e0:4c:ea:82:eb:48:1d:87:fe:bd:08:0b:25:5b:34:0c: f4:c8:04:4c:9c:51:4d:bc:e0:31:fd:95:06:7f:3e:90:bc:ce: 98:96:2a:72:98:76:6f:a1:9b:f7:33:6a:2a:92:55:d1:2b:ef: ac:de:79:71:9e:17:38:8b:ff:45:72:36:31:a0:fb:6c:3e:5b: 3c:cf:07:1a:4f:15:f4:73:c4:27:f2:bc:cf:60:ea:4e:7d:e2: 34:fc:86:6b:e3:ca:a1:0c:6a:f5:c5:ee:8f:7b:d0:13:14:69: 3e:39:2e:05:25:0e:9d:5c:f9:d9:2b:74:46:aa:92:04:9e:fb: 2e:f1:67:71:b9:c3:8f:04:c5:28:82:a4:9e:b7:05:01:bf:7b: 34:7d:93:03:11:ad:70:be:24:bd:22:cd:54:59:52:93:2a:84: bf:d4:b8:60 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNF RDdGRURGMEVDMEM3NTQ1NTk0Q0Y2RTE1RDlCREVFNzk2NTFCOTAeFw0yNDEwMDUx NTUzMDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhBQkNDOEM5NzM3Q0NG N0ZDRTQ1QjQ5OEI1QjFDQTVENDA0REVEMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4xk3fL1jZJ+5vFQVTtW1MW3faeWgvWgasRP7Ski1IqAMD0FfB pz4B9FHf/aSy6VKogbIdoqXjmaom6WwxSUEHHg8W9kjWvNi7XsyM6P61C53A/K8j aNfrkQZmt9R69boWPfPBQqt2xOzOrUpEhzT/PvSvcBEuQ0Dv+uUACphjySANzDTv 3gOQA6D/166n/OnLSnmKqaejxvCzclGmZkFPTFzp0oTP1rlU99F7SBD/fAW8Msyk +93Jj3hHGHX7BybZKtVbO9m5FJOR14KTH5rW5xZcYsoG6PK23f69n7hSvjvQvD7z EWsggV7gparobI5THtgz3atLm+XcUWJnpRi1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUirzIyXN8z3/ORbSYtbHKXUBN7TcwHwYDVR0jBBgwFoAUXO1/7fDsDHVFWUz2 4V2b3ueWUbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0RLSU5H L1hPMV83ZkRzREhWRldVejI0VjJiM3VlV1Viay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvWE8xXzdmRHNESFZGV1V6MjRWMmIzdWVXVWJrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0RLSU5HL2lyekl5WE44ejNfT1JiU1l0 YkhLWFVCTjdUYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn Q0gwDQYJKoZIhvcNAQELBQADggEBAD0pkWMAM4Ggf4lMitFSsHvEJnjFFnaTwKSW PBl21ChRPcJpbVYZg0avMI7d9wz84DBW5/5qpm9CKyLHwV3Rc29QR9LiIMVWv0xh WBMk7dAxbN5brCArkeDRFP5m4EzqgutIHYf+vQgLJVs0DPTIBEycUU284DH9lQZ/ PpC8zpiWKnKYdm+hm/czaiqSVdEr76zeeXGeFziL/0VyNjGg+2w+WzzPBxpPFfRz xCfyvM9g6k594jT8hmvjyqEMavXF7o970BMUaT45LgUlDp1c+dkrdEaqkgSe+y7x Z3G5w48ExSiCpJ63BQG/ezR9kwMRrXC+JL0izVRZUpMqhL/UuGA= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org