$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/bAQvEtfkjgTFnOgfat0l0YIMDEw.roa File: bAQvEtfkjgTFnOgfat0l0YIMDEw.roa (raw, json) Hash identifier: cNXHv45V5upB+sb7jUrYJGoyk2R0sSpHjmLW4cl2eh8= Subject key identifier: 6C:04:2F:12:D7:E4:8E:04:C5:9C:E8:1F:6A:DD:25:D1:82:0C:0C:4C Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Certificate serial: 0C74 Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/bAQvEtfkjgTFnOgfat0l0YIMDEw.roa Signing time: Mon 26 Aug 2024 04:56:18 +0000 ROA not before: Mon 26 Aug 2024 04:56:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 62610 IP address blocks: 103.123.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Validity Not Before: Aug 26 04:56:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6C042F12D7E48E04C59CE81F6ADD25D1820C0C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:04:e3:15:62:e6:77:61:da:84:1c:33:06: 98:32:47:3d:32:d1:32:81:d0:74:9e:74:de:7f:89: 70:08:5d:f3:92:da:e4:1e:95:1b:99:2c:6d:03:27: d8:21:8b:a5:f7:f4:1b:68:eb:c0:85:54:bc:92:30: ea:69:94:b7:18:ed:6a:5f:02:89:1d:54:b1:9a:9b: ed:75:02:9a:33:8d:ae:a7:ea:62:46:83:87:96:02: de:f8:bc:e2:ae:91:6b:fa:81:2c:f5:3d:93:10:a2: eb:8e:9c:6a:0a:c4:8a:65:fc:e7:61:44:99:13:ec: 6a:08:65:49:df:e8:d1:46:7d:f0:b2:07:2c:33:9e: 94:95:4f:b7:09:85:f6:24:8d:f7:e4:34:5c:df:1d: 9e:83:d6:40:c2:cf:0c:98:fb:72:6d:8a:ea:24:11: 36:9a:36:4b:4d:1a:b4:9f:91:96:c3:09:7f:f0:3e: fb:41:3b:ed:52:8f:fe:42:06:61:33:2f:ce:a9:fa: b0:ec:bf:88:81:90:c4:35:f2:1d:fd:92:e7:f0:00: 68:aa:2a:1b:f2:db:70:62:00:eb:d4:44:a5:92:70: 40:bd:98:a9:bc:2f:86:1d:a8:03:cf:14:d6:f9:07: ad:ad:e3:f7:d7:b8:81:73:e1:13:9d:b5:58:78:31: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:2F:12:D7:E4:8E:04:C5:9C:E8:1F:6A:DD:25:D1:82:0C:0C:4C X509v3 Authority Key Identifier: keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/bAQvEtfkjgTFnOgfat0l0YIMDEw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.123.242.0/23 Signature Algorithm: sha256WithRSAEncryption 63:c3:55:0a:87:8e:cd:e1:46:9c:9f:5e:57:20:e3:fe:12:54: 7c:4b:0b:09:61:b8:17:f6:e1:59:99:f7:5d:68:44:99:af:79: c4:bb:bc:48:d8:83:7f:f8:da:26:48:af:ab:0d:86:fc:1e:3f: 76:26:ef:9f:94:34:91:f7:93:82:6e:9f:72:dc:90:ed:e7:38: 68:8d:8a:d0:61:ed:5c:49:02:aa:60:1d:b1:8d:57:e7:5a:11: 11:cf:2d:c2:4b:fd:3c:92:4e:91:a5:43:bf:a8:81:1d:2c:96: 3e:45:fd:c3:5d:00:38:4e:24:4f:1a:20:61:bc:5b:af:c3:06: ab:1a:1c:67:fc:e2:cf:63:02:85:bb:a3:58:e3:54:e4:e4:31: a8:c5:a3:fe:15:04:ab:bc:71:0c:90:88:ea:08:e6:58:fb:aa: fa:7f:2b:1f:de:10:99:7c:e1:75:aa:b6:62:9c:41:d2:18:e7: 4f:46:17:a5:0e:c9:a9:05:cc:fd:12:ea:f6:01:5c:17:c2:7b: fa:3e:f5:20:08:9d:5a:53:2a:e1:ab:3d:bf:60:cf:f3:0d:88: 6a:c2:07:e3:55:66:05:de:89:99:00:9c:ee:b8:98:31:b5:30: 7b:b6:e8:f5:26:e9:d7:1d:79:0d:53:d2:6c:0c:81:9c:d4:69: e7:c6:bb:2b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdB NEFGRDlFN0ZDMUZFRDRGOTU0NURFNDFDRTQ0MTNEQUNCMEUwNTAeFw0yNDA4MjYw NDU2MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZDMDQyRjEyRDdFNDhF MDRDNTlDRTgxRjZBREQyNUQxODIwQzBDNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDElQTjFWLmd2HahBwzBpgyRz0y0TKB0HSedN5/iXAIXfOS2uQe lRuZLG0DJ9ghi6X39Bto68CFVLySMOpplLcY7WpfAokdVLGam+11Apozja6n6mJG g4eWAt74vOKukWv6gSz1PZMQouuOnGoKxIpl/OdhRJkT7GoIZUnf6NFGffCyBywz npSVT7cJhfYkjffkNFzfHZ6D1kDCzwyY+3JtiuokETaaNktNGrSfkZbDCX/wPvtB O+1Sj/5CBmEzL86p+rDsv4iBkMQ18h39kufwAGiqKhvy23BiAOvURKWScEC9mKm8 L4YdqAPPFNb5B62t4/fXuIFz4ROdtVh4Md+dAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUbAQvEtfkjgTFnOgfat0l0YIMDEwwHwYDVR0jBBgwFoAUh6Sv2ef8H+1PlUXe Qc5EE9rLDgUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVBTkpI RU4vaDZTdjJlZjhILTFQbFVYZVFjNUVFOXJMRGdVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9oNlN2MmVmOEgtMVBsVVhlUWM1RUU5ckxEZ1UuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUFOSkhFTi9iQVF2RXRma2pnVEZu T2dmYXQwbDBZSU1ERXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ3vyMA0GCSqGSIb3DQEBCwUAA4IBAQBjw1UKh47N4Uacn15XIOP+ElR8SwsJ YbgX9uFZmfddaESZr3nEu7xI2IN/+NomSK+rDYb8Hj92Ju+flDSR95OCbp9y3JDt 5zhojYrQYe1cSQKqYB2xjVfnWhERzy3CS/08kk6RpUO/qIEdLJY+Rf3DXQA4TiRP GiBhvFuvwwarGhxn/OLPYwKFu6NY41Tk5DGoxaP+FQSrvHEMkIjqCOZY+6r6fysf 3hCZfOF1qrZinEHSGOdPRhelDsmpBcz9Eur2AVwXwnv6PvUgCJ1aUyrhqz2/YM/z DYhqwgfjVWYF3omZAJzuuJgxtTB7tuj1JunXHXkNU9JsDIGc1Gnnxrsr -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org