$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/XuAEk7ccPfKGbG0pii_rmDn-1mk.roa File: XuAEk7ccPfKGbG0pii_rmDn-1mk.roa (raw, json) Hash identifier: z7NY5CLnow6dVjDWYuft/2GjFA/6RQig7rGfAc64sWQ= Subject key identifier: 5E:E0:04:93:B7:1C:3D:F2:86:6C:6D:29:8A:2F:EB:98:39:FE:D6:69 Certificate issuer: /CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D Certificate serial: 0102 Authority key identifier: 44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/XuAEk7ccPfKGbG0pii_rmDn-1mk.roa Signing time: Fri 27 Sep 2024 03:46:22 +0000 ROA not before: Fri 27 Sep 2024 03:46:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10133 IP address blocks: 160.30.78.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44F8DCF66B25B719056D1ED65C16EA9257E5553D Validity Not Before: Sep 27 03:46:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5EE00493B71C3DF2866C6D298A2FEB9839FED669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:a3:74:88:5c:7b:0c:aa:ee:22:b5:01:30: 4c:44:eb:2c:04:9b:a5:77:69:da:9c:61:e0:20:3c: 92:99:e6:28:d9:11:33:f5:d8:91:0e:8b:26:71:de: fe:d1:9a:85:ca:9b:70:4f:d2:85:85:eb:8a:0d:fd: 4a:a8:65:65:0d:87:db:be:81:12:9d:80:75:66:22: 12:bd:3b:9f:ed:90:a2:59:72:b1:d0:be:19:25:51: d3:19:85:18:ab:22:58:ae:10:41:7f:86:5b:55:50: ca:24:13:66:68:57:8c:91:05:de:ba:12:fb:23:4b: ca:de:8d:e9:7f:50:73:36:f4:1f:84:5e:37:2b:13: e8:70:c7:75:0a:21:12:a5:85:8b:10:4d:e3:67:d7: b9:32:22:9d:8b:46:14:ff:bb:f8:03:7a:98:42:91: 53:0b:ca:d6:51:b5:f6:e8:b8:34:e0:68:e7:92:6e: b5:8a:93:9c:af:05:8d:86:0a:60:a5:c5:06:74:d3: f7:0c:1b:0f:ea:07:6f:ef:fb:3e:56:d2:58:3e:f2: 07:ad:9c:41:a7:5a:77:f2:48:b4:f8:3a:6e:77:3f: a3:c8:8a:27:65:8a:1d:8b:2e:ce:c1:eb:25:da:33: 9a:ae:b2:8e:10:04:84:97:3b:9b:33:d7:72:43:1a: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E0:04:93:B7:1C:3D:F2:86:6C:6D:29:8A:2F:EB:98:39:FE:D6:69 X509v3 Authority Key Identifier: keyid:44:F8:DC:F6:6B:25:B7:19:05:6D:1E:D6:5C:16:EA:92:57:E5:55:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/RPjc9msltxkFbR7WXBbqklflVT0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RPjc9msltxkFbR7WXBbqklflVT0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEIDOU/XuAEk7ccPfKGbG0pii_rmDn-1mk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.78.0/23 Signature Algorithm: sha256WithRSAEncryption 85:0e:7a:7f:dc:aa:80:f5:37:4f:63:21:fa:16:e0:d8:2a:c2: 24:ce:bf:a8:47:62:93:a2:83:bf:b4:17:82:27:bc:b8:50:3c: 69:95:b6:3f:c0:c4:60:db:d9:53:8c:db:24:62:c9:d7:ba:19: ac:1c:e3:cf:f0:79:2e:36:bd:a6:82:67:10:71:4b:82:d9:d6: 59:2d:93:fc:84:6e:dd:b3:f3:1d:9f:95:23:03:61:88:67:3f: 10:f5:9c:2c:b7:f1:ba:7e:de:09:3a:81:02:5b:47:dd:99:40: e4:87:cd:c3:c6:29:77:27:13:62:cc:c3:0c:a1:19:14:c9:eb: 26:c5:5d:06:22:45:83:7b:51:1c:91:fc:3f:f7:79:62:c4:5f: 2c:21:ee:1e:9a:fa:ce:bf:a7:64:2f:32:23:6a:69:77:75:3e: df:9e:19:95:73:c1:57:a9:1b:01:1c:cb:b1:6f:71:46:3a:2c: d8:27:fc:02:f0:3f:76:ff:a6:7f:44:30:51:99:88:49:4f:ef: d6:b4:f1:cb:0c:93:6f:fe:5c:15:e3:b9:c1:66:7a:e1:40:d9: 15:d7:84:04:fc:5e:f3:af:85:0e:9e:22:fc:7c:15:19:4b:df: a2:88:53:19:d9:a1:a2:cf:92:56:95:02:c7:36:49:af:fb:5d: dd:91:77:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDRG OERDRjY2QjI1QjcxOTA1NkQxRUQ2NUMxNkVBOTI1N0U1NTUzRDAeFw0yNDA5Mjcw MzQ2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVFRTAwNDkzQjcxQzNE RjI4NjZDNkQyOThBMkZFQjk4MzlGRUQ2NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2uqN0iFx7DKruIrUBMExE6ywEm6V3adqcYeAgPJKZ5ijZETP1 2JEOiyZx3v7RmoXKm3BP0oWF64oN/UqoZWUNh9u+gRKdgHVmIhK9O5/tkKJZcrHQ vhklUdMZhRirIliuEEF/hltVUMokE2ZoV4yRBd66EvsjS8rejel/UHM29B+EXjcr E+hwx3UKIRKlhYsQTeNn17kyIp2LRhT/u/gDephCkVMLytZRtfbouDTgaOeSbrWK k5yvBY2GCmClxQZ00/cMGw/qB2/v+z5W0lg+8getnEGnWnfySLT4Om53P6PIiidl ih2LLs7B6yXaM5quso4QBISXO5sz13JDGo2rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXuAEk7ccPfKGbG0pii/rmDn+1mkwHwYDVR0jBBgwFoAURPjc9msltxkFbR7W XBbqklflVT0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9V L1JQamM5bXNsdHhrRmJSN1dYQmJxa2xmbFZUMC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvUlBqYzltc2x0eGtGYlI3V1hCYnFrbGZsVlQwLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQkVJRE9VL1h1QUVrN2NjUGZLR2JHMHBp aV9ybURuLTFtay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg Hk4wDQYJKoZIhvcNAQELBQADggEBAIUOen/cqoD1N09jIfoW4NgqwiTOv6hHYpOi g7+0F4InvLhQPGmVtj/AxGDb2VOM2yRiyde6Gawc48/weS42vaaCZxBxS4LZ1lkt k/yEbt2z8x2flSMDYYhnPxD1nCy38bp+3gk6gQJbR92ZQOSHzcPGKXcnE2LMwwyh GRTJ6ybFXQYiRYN7URyR/D/3eWLEXywh7h6a+s6/p2QvMiNqaXd1Pt+eGZVzwVep GwEcy7FvcUY6LNgn/ALwP3b/pn9EMFGZiElP79a08csMk2/+XBXjucFmeuFA2RXX hAT8XvOvhQ6eIvx8FRlL36KIUxnZoaLPklaVAsc2Sa/7Xd2Rd+I= -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:41 2024 by rpki-client on console-fra.rpki-client.org