$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Nz-XHA1LmTONPpFnSxlUaaL68Bk.roa File: Nz-XHA1LmTONPpFnSxlUaaL68Bk.roa (raw, json) Hash identifier: 1DC/tYL/VOnA8Qp9mhIG4NkTn8ItgglR1hqC59zohMU= Subject key identifier: 37:3F:97:1C:0D:4B:99:33:8D:3E:91:67:4B:19:54:69:A2:FA:F0:19 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0D8B Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Nz-XHA1LmTONPpFnSxlUaaL68Bk.roa Signing time: Mon 26 Aug 2024 05:35:03 +0000 ROA not before: Mon 26 Aug 2024 05:35:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24168 IP address blocks: 103.30.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3467 (0xd8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 26 05:35:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=373F971C0D4B99338D3E91674B195469A2FAF019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:c1:09:c7:57:e9:76:e9:99:da:1e:99:3a: 5d:e7:53:db:02:a4:85:1b:49:af:96:92:35:84:21: 4b:07:f8:e9:6b:42:56:c5:33:52:2d:32:b6:83:51: 63:e4:fa:12:aa:25:02:96:10:8f:5b:b4:d5:93:65: 14:7f:2c:54:08:3b:06:f3:7c:31:32:20:79:7b:07: 44:58:79:41:10:f1:1c:f5:6a:e1:91:25:8d:65:df: 4a:19:7c:8b:37:40:7a:db:ed:b6:68:63:30:af:20: 75:cb:55:b1:2c:9e:dc:32:7b:83:3c:72:db:5f:a3: 3a:5b:b7:d4:35:0b:5d:7e:a3:13:44:48:03:69:93: 62:77:87:03:3c:f3:6a:65:b6:35:06:43:3b:1e:cd: ee:56:df:2a:b2:97:22:5d:44:8b:14:fa:20:3f:11: 74:41:b5:30:b0:34:21:ae:68:dd:f4:bd:eb:39:06: bb:c9:12:ee:b4:f4:59:cf:b5:ee:05:65:6c:6d:c6: d2:67:8a:db:eb:6a:cc:e5:44:e1:55:34:5b:f3:db: 3f:bb:2a:1c:7a:12:40:84:04:a7:ed:ac:b6:c7:28: 75:db:43:a5:8c:7e:ee:50:8f:92:11:cb:01:51:61: ad:21:b3:a7:65:77:5c:56:ba:fb:cb:36:db:1a:dd: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3F:97:1C:0D:4B:99:33:8D:3E:91:67:4B:19:54:69:A2:FA:F0:19 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Nz-XHA1LmTONPpFnSxlUaaL68Bk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.30.46.0/24 Signature Algorithm: sha256WithRSAEncryption b8:ad:c5:50:60:10:ae:3a:f7:1f:2c:b5:3a:27:c5:f8:ad:ec: 73:fe:ba:17:90:24:13:12:50:ce:74:e3:b6:d1:94:41:24:d2: 24:d3:4f:e2:49:80:99:56:1f:8e:89:35:29:47:71:a6:5b:97: 08:85:5d:27:b3:b6:e1:e5:2f:5a:0b:42:e2:41:60:d8:35:c9: 8b:54:b8:68:db:68:21:dd:fa:4e:e2:06:79:2a:5c:e8:6a:67: 6c:1d:2b:26:b1:1b:69:53:dc:aa:fb:42:aa:0f:d3:77:e3:46: 8a:17:aa:94:a7:a1:8e:a7:32:27:4a:3e:2c:fb:96:9b:d4:a8: 9c:8c:7e:b1:8f:11:fa:30:e8:4d:6d:4c:61:0f:3b:5e:fc:70: 3a:7e:0c:b3:4c:d6:8b:68:b3:0b:df:f9:63:18:6b:8e:ae:e7: 10:19:e4:4e:8a:37:3f:54:49:bf:63:a5:6a:7d:31:6b:43:56: 18:00:ae:e0:e4:e2:4b:23:bf:f4:0c:af:69:a9:cf:71:5a:4d: 83:c7:80:01:70:4a:f2:83:c1:dc:80:27:3f:fe:69:ee:55:e7: 5b:fd:bc:fb:5a:92:fc:18:aa:4e:2d:ab:44:10:f4:09:1b:28: 20:d9:4d:a3:23:c4:15:9f:33:56:0d:c1:85:b3:da:b1:cf:f5: ad:2c:01:ac -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNDA4MjYw NTM1MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3M0Y5NzFDMEQ0Qjk5 MzM4RDNFOTE2NzRCMTk1NDY5QTJGQUYwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6ucEJx1fpdumZ2h6ZOl3nU9sCpIUbSa+WkjWEIUsH+OlrQlbF M1ItMraDUWPk+hKqJQKWEI9btNWTZRR/LFQIOwbzfDEyIHl7B0RYeUEQ8Rz1auGR JY1l30oZfIs3QHrb7bZoYzCvIHXLVbEsntwye4M8cttfozpbt9Q1C11+oxNESANp k2J3hwM882pltjUGQzseze5W3yqylyJdRIsU+iA/EXRBtTCwNCGuaN30ves5BrvJ Eu609FnPte4FZWxtxtJnitvraszlROFVNFvz2z+7Khx6EkCEBKftrLbHKHXbQ6WM fu5Qj5IRywFRYa0hs6dld1xWuvvLNtsa3SWDAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUNz+XHA1LmTONPpFnSxlUaaL68BkwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL056LVhIQTFMbVRP TlBwRm5TeGxVYWFMNjhCay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnHi4wDQYJKoZIhvcNAQELBQADggEBALitxVBgEK469x8stTonxfit7HP+ uheQJBMSUM5047bRlEEk0iTTT+JJgJlWH46JNSlHcaZblwiFXSeztuHlL1oLQuJB YNg1yYtUuGjbaCHd+k7iBnkqXOhqZ2wdKyaxG2lT3Kr7QqoP03fjRooXqpSnoY6n MidKPiz7lpvUqJyMfrGPEfow6E1tTGEPO178cDp+DLNM1otoswvf+WMYa46u5xAZ 5E6KNz9USb9jpWp9MWtDVhgAruDk4ksjv/QMr2mpz3FaTYPHgAFwSvKDwdyAJz/+ ae5V51v9vPtakvwYqk4tq0QQ9AkbKCDZTaMjxBWfM1YNwYWz2rHP9a0sAaw= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org