$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ceUdLO5sNqwnmu94l1PNC4sxxoQ.roa File: ceUdLO5sNqwnmu94l1PNC4sxxoQ.roa (raw, json) Hash identifier: SHbpQeomUUN+WzrDhV0JEto4srap8jpyG2IUtOkyRs0= Subject key identifier: 71:E5:1D:2C:EE:6C:36:AC:27:9A:EF:78:97:53:CD:0B:8B:31:C6:84 Certificate issuer: /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97 Certificate serial: 0335 Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ceUdLO5sNqwnmu94l1PNC4sxxoQ.roa Signing time: Mon 26 Aug 2024 05:35:12 +0000 ROA not before: Mon 26 Aug 2024 05:35:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 138997 IP address blocks: 103.169.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97 Validity Not Before: Aug 26 05:35:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=71E51D2CEE6C36AC279AEF789753CD0B8B31C684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:89:d1:6b:76:99:f5:9a:be:ef:2b:ac:ad: 70:d8:88:ac:98:9f:ee:a5:82:b8:01:fa:b9:2c:a7: 09:e9:0b:0a:15:c0:5d:31:ea:60:25:4e:ec:57:74: ee:ca:d1:6a:f0:33:78:a4:64:95:54:0e:8f:d7:0f: 57:a0:66:1d:7b:49:72:a0:31:f7:d7:d6:cc:af:c8: 5e:0e:81:b1:b0:8d:d7:0c:5b:32:5a:01:40:fc:42: 78:18:e6:c0:b8:54:00:b9:dd:18:4e:bc:ba:76:33: ff:1d:b4:4b:f7:3a:78:0e:f8:f2:31:3f:61:6f:5d: 21:46:ad:14:a2:3e:e3:fa:df:09:d5:b3:c9:77:2f: 93:76:95:78:1a:0e:ec:b0:fd:54:7e:cd:1e:08:fe: 78:f3:e4:b6:af:63:38:98:c0:f5:9c:5b:31:33:83: 07:e5:f8:99:98:f5:9c:13:2c:ad:53:db:88:96:cb: 98:35:e5:e0:10:80:18:09:7a:aa:f9:40:a1:ab:7d: 00:cd:a6:dc:31:c7:81:28:c0:ee:cb:7a:62:3e:be: 70:0d:bf:08:46:3a:fe:07:a2:93:20:1b:06:44:4f: 3a:2e:b0:e6:bd:24:82:8a:3f:a3:0d:c7:57:77:06: 61:ea:9d:aa:5f:e1:ff:90:1a:3b:ef:17:65:be:10: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E5:1D:2C:EE:6C:36:AC:27:9A:EF:78:97:53:CD:0B:8B:31:C6:84 X509v3 Authority Key Identifier: keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ceUdLO5sNqwnmu94l1PNC4sxxoQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.169.126.0/23 Signature Algorithm: sha256WithRSAEncryption 03:01:52:0e:c4:88:b2:63:9d:f7:d8:40:06:5b:e4:d8:56:1c: 54:8e:64:24:b9:46:c8:da:d6:24:a6:19:f6:ad:b2:ef:44:3b: 85:08:79:e2:1f:5f:99:46:08:9e:41:d2:af:b9:8a:54:ca:c6: ae:ba:09:45:04:63:d2:57:b9:9f:df:92:70:7f:ca:7c:bb:f6: 1a:2d:7d:9e:48:3f:dd:5a:d6:98:7d:3c:12:41:6e:18:42:f9: ec:10:df:49:f6:e2:c2:44:1b:db:91:32:50:e1:c7:ff:86:8a: 56:a0:dd:99:36:5f:61:ec:1c:69:9f:8b:22:b9:09:4b:35:7c: f0:9d:71:22:04:8a:68:1d:91:42:5e:00:33:ca:ae:48:00:a5: 3d:46:14:71:7c:6f:54:fe:75:05:b6:81:86:a7:23:71:63:59: 91:77:33:4f:bd:20:89:5e:d4:89:7c:39:33:08:77:28:cb:d8: 6a:3e:8f:d7:bf:6f:00:ee:36:67:75:a8:b8:c4:90:6f:ec:83: 9b:10:36:e8:24:76:ce:e0:9d:e7:36:25:ad:ee:8a:20:2e:d8: a8:a5:e4:18:71:6f:4c:ff:96:cb:70:24:d7:70:1c:42:f2:66: 71:26:a2:e0:2b:18:85:b8:64:98:39:a9:6b:41:b8:a1:81:d9: 64:b5:37:ac -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNG QzExNkEzQ0NCMTA1QUI1MERBNDE3Njc5QjFGOUM3MEE0QkQ5NzAeFw0yNDA4MjYw NTM1MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcxRTUxRDJDRUU2QzM2 QUMyNzlBRUY3ODk3NTNDRDBCOEIzMUM2ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbV4nRa3aZ9Zq+7yusrXDYiKyYn+6lgrgB+rkspwnpCwoVwF0x 6mAlTuxXdO7K0WrwM3ikZJVUDo/XD1egZh17SXKgMffX1syvyF4OgbGwjdcMWzJa AUD8QngY5sC4VAC53RhOvLp2M/8dtEv3OngO+PIxP2FvXSFGrRSiPuP63wnVs8l3 L5N2lXgaDuyw/VR+zR4I/njz5LavYziYwPWcWzEzgwfl+JmY9ZwTLK1T24iWy5g1 5eAQgBgJeqr5QKGrfQDNptwxx4EowO7LemI+vnANvwhGOv4HopMgGwZETzousOa9 JIKKP6MNx1d3BmHqnapf4f+QGjvvF2W+EFmpAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUceUdLO5sNqwnmu94l1PNC4sxxoQwHwYDVR0jBBgwFoAUw/wRajzLEFq1DaQX Z5sfnHCkvZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV09MRk5F VC93X3dSYWp6TEVGcTFEYVFYWjVzZm5IQ2t2WmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3dfd1JhanpMRUZxMURhUVhaNXNmbkhDa3ZaYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1dPTEZORVQvY2VVZExPNXNOcXdubXU5 NGwxUE5DNHN4eG9RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWepfjANBgkqhkiG9w0BAQsFAAOCAQEAAwFSDsSIsmOd99hABlvk2FYcVI5kJLlG yNrWJKYZ9q2y70Q7hQh54h9fmUYInkHSr7mKVMrGrroJRQRj0le5n9+ScH/KfLv2 Gi19nkg/3VrWmH08EkFuGEL57BDfSfbiwkQb25EyUOHH/4aKVqDdmTZfYewcaZ+L IrkJSzV88J1xIgSKaB2RQl4AM8quSAClPUYUcXxvVP51BbaBhqcjcWNZkXczT70g iV7UiXw5Mwh3KMvYaj6P179vAO42Z3WouMSQb+yDmxA26CR2zuCd5zYlre6KIC7Y qKXkGHFvTP+Wy3Ak13AcQvJmcSai4CsYhbhkmDmpa0G4oYHZZLU3rA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org