$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTT/OOnVwKMXkhEvV6tmL1mt6hfP3Co.roa File: OOnVwKMXkhEvV6tmL1mt6hfP3Co.roa (raw, json) Hash identifier: uLouZ9zsyvyP9C1ZcSy1UyDj2sVC4StoOnKq3nrMips= Subject key identifier: 38:E9:D5:C0:A3:17:92:11:2F:57:AB:66:2F:59:AD:EA:17:CF:DC:2A Certificate issuer: /CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A Certificate serial: 0C19 Authority key identifier: B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/OOnVwKMXkhEvV6tmL1mt6hfP3Co.roa Signing time: Mon 26 Aug 2024 05:17:22 +0000 ROA not before: Mon 26 Aug 2024 05:17:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 203.118.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3097 (0xc19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4EC61ED7E8C64F210317DCC7E808A9C192D884A Validity Not Before: Aug 26 05:17:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=38E9D5C0A31792112F57AB662F59ADEA17CFDC2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:86:b5:26:16:71:57:ce:71:0e:79:4f:60: 37:76:c4:e0:bf:59:0f:f2:97:15:3f:02:1d:3e:fe: ad:c0:dc:e1:5e:a0:22:57:2e:07:de:d6:ad:ed:6f: 3f:f1:0e:ea:f7:98:10:60:66:e5:84:c7:6a:d2:26: ce:ee:91:bf:6c:01:ff:ee:2a:46:72:d1:ec:85:91: b0:c9:18:15:99:da:ca:33:6b:53:e0:ae:ad:87:e2: 4b:ba:df:61:9a:5a:2a:5c:87:1f:0d:70:19:52:e3: 27:1a:d0:28:0c:5d:08:db:24:3c:9a:9f:01:13:aa: a9:6d:c6:2a:5b:ac:f6:ac:27:dd:57:4a:16:fe:a5: aa:46:66:f8:28:aa:34:76:54:7b:c3:11:0b:f3:ce: 7f:fa:ed:cb:e1:c2:f3:ba:d7:fc:12:16:2d:fb:40: 10:08:73:b2:81:97:68:cd:9d:3e:91:b3:f5:b0:50: a1:6c:30:f0:09:04:05:07:41:b9:02:f6:22:6d:28: d9:6a:2f:69:58:e2:0a:45:f7:e4:cb:de:e3:74:b4: 9f:d0:12:66:d5:d9:26:c0:c9:6f:7c:79:1e:0e:5d: fd:e3:f8:d3:33:f3:e6:b5:cc:f7:0f:8c:87:be:da: 38:44:5f:69:96:4a:06:a6:70:7a:c4:a9:09:88:7c: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E9:D5:C0:A3:17:92:11:2F:57:AB:66:2F:59:AD:EA:17:CF:DC:2A X509v3 Authority Key Identifier: keyid:B4:EC:61:ED:7E:8C:64:F2:10:31:7D:CC:7E:80:8A:9C:19:2D:88:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/tOxh7X6MZPIQMX3MfoCKnBktiEo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tOxh7X6MZPIQMX3MfoCKnBktiEo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTT/OOnVwKMXkhEvV6tmL1mt6hfP3Co.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.118.224.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:65:fb:e8:a5:ca:b6:42:b6:29:54:b4:a3:4b:cc:70:6d:99: a2:3d:aa:8d:63:37:09:cc:8c:90:70:d7:6e:70:41:e5:55:a0: 74:6f:a8:3d:dd:21:5c:6d:b0:8a:45:68:54:23:10:93:c5:24: 5e:23:26:93:66:2c:4d:af:b1:b4:f2:7a:db:bb:ff:4b:02:a1: 5f:99:88:ff:a0:cd:6b:45:08:4b:0d:d2:46:14:f3:a2:08:a8: c3:b9:53:dd:f2:c2:48:6f:b6:38:24:49:35:b6:9e:62:8e:e9: e8:de:af:39:54:7b:3f:7c:52:e5:3c:af:32:20:be:95:3b:13: 54:4d:87:5e:b2:db:42:6a:e5:6c:1a:88:d1:ab:bf:c7:ea:db: f9:4e:19:32:45:15:90:4a:0f:e5:84:7f:ac:be:f4:df:58:fb: ec:0f:f5:83:59:05:15:17:df:79:96:49:86:23:7e:48:a8:fd: b6:b7:a3:44:0d:08:70:5f:7d:d1:d9:86:7a:5b:59:cf:36:7c: af:bf:0a:3a:76:f6:c7:2c:57:b2:3a:ac:3f:74:bf:82:21:88: 14:ce:fc:7d:04:0a:70:e5:8e:91:33:54:29:12:50:62:df:ab: f4:0b:80:24:5c:70:11:6d:77:fe:36:24:86:32:4c:2b:da:0d: 04:dc:c2:20 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRF QzYxRUQ3RThDNjRGMjEwMzE3RENDN0U4MDhBOUMxOTJEODg0QTAeFw0yNDA4MjYw NTE3MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM4RTlENUMwQTMxNzky MTEyRjU3QUI2NjJGNTlBREVBMTdDRkRDMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/4Ya1JhZxV85xDnlPYDd2xOC/WQ/ylxU/Ah0+/q3A3OFeoCJX Lgfe1q3tbz/xDur3mBBgZuWEx2rSJs7ukb9sAf/uKkZy0eyFkbDJGBWZ2soza1Pg rq2H4ku632GaWipchx8NcBlS4yca0CgMXQjbJDyanwETqqltxipbrPasJ91XShb+ papGZvgoqjR2VHvDEQvzzn/67cvhwvO61/wSFi37QBAIc7KBl2jNnT6Rs/WwUKFs MPAJBAUHQbkC9iJtKNlqL2lY4gpF9+TL3uN0tJ/QEmbV2SbAyW98eR4OXf3j+NMz 8+a1zPcPjIe+2jhEX2mWSgamcHrEqQmIfIkJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUOOnVwKMXkhEvV6tmL1mt6hfP3CowHwYDVR0jBBgwFoAUtOxh7X6MZPIQMX3M foCKnBktiEowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1RUL3RP eGg3WDZNWlBJUU1YM01mb0NLbkJrdGlFby5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev dE94aDdYNk1aUElRTVgzTWZvQ0tuQmt0aUVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1RUL09PblZ3S01Ya2hFdlY2dG1MMW10Nmhm UDNDby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLduAwDQYJ KoZIhvcNAQELBQADggEBAC5l++ilyrZCtilUtKNLzHBtmaI9qo1jNwnMjJBw125w QeVVoHRvqD3dIVxtsIpFaFQjEJPFJF4jJpNmLE2vsbTyetu7/0sCoV+ZiP+gzWtF CEsN0kYU86IIqMO5U93ywkhvtjgkSTW2nmKO6ejerzlUez98UuU8rzIgvpU7E1RN h16y20Jq5WwaiNGrv8fq2/lOGTJFFZBKD+WEf6y+9N9Y++wP9YNZBRUX33mWSYYj fkio/ba3o0QNCHBffdHZhnpbWc82fK+/Cjp29scsV7I6rD90v4IhiBTO/H0ECnDl jpEzVCkSUGLfq/QLgCRccBFtd/42JIYyTCvaDQTcwiA= -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:48 2024 by rpki-client on console-ams.rpki-client.org