$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/nXSsaM57cnaXcnZYSjgRVHt4SvQ.roa File: nXSsaM57cnaXcnZYSjgRVHt4SvQ.roa (raw, json) Hash identifier: pL2VG5b44eqC6gkPMEW6zMeSsi/lEsjtvaNbemEHfMI= Subject key identifier: 9D:74:AC:68:CE:7B:72:76:97:72:76:58:4A:38:11:54:7B:78:4A:F4 Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Certificate serial: A5 Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/nXSsaM57cnaXcnZYSjgRVHt4SvQ.roa Signing time: Wed 29 May 2024 08:54:26 +0000 ROA not before: Wed 29 May 2024 08:54:26 +0000 ROA not after: Fri 04 Oct 2024 07:31:42 +0000 asID: 139076 IP address blocks: 202.160.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 22:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A Validity Not Before: May 29 08:54:26 2024 GMT Not After : Oct 4 07:31:42 2024 GMT Subject: CN=9D74AC68CE7B7276977276584A3811547B784AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:87:1c:35:ec:1a:ae:68:9c:23:f4:6f:a9: 28:a0:86:fd:f0:0c:97:7f:f3:4a:37:72:7e:50:2b: eb:6b:e0:65:1c:d2:0c:2a:60:3c:1b:0c:1d:9d:0b: 28:f9:e0:1d:89:89:94:ab:64:10:f8:c0:ba:09:f4: c8:02:63:db:1c:8c:e7:06:f9:15:03:16:5a:63:92: 31:c7:c4:9b:06:7a:fe:96:b7:e9:97:aa:64:03:49: 6c:90:e3:b0:c5:7b:f5:1d:01:3e:7d:69:a6:c8:13: 3c:48:78:38:ca:12:f5:c5:c2:c5:ec:f9:28:29:f7: 50:e0:61:0f:05:0a:4b:d3:b1:e6:4c:0a:3c:2a:54: 54:ad:24:2c:1a:08:33:d7:42:68:c0:eb:c0:85:3e: 83:a3:44:af:cc:0a:54:d6:4d:1a:b0:d6:8d:5b:26: c2:e3:3f:98:e8:bb:b8:a8:ef:07:6c:53:6a:8a:2f: ed:92:79:98:f2:a6:2a:a3:20:b0:7f:0d:f0:db:75: c9:97:5f:67:81:9b:88:38:b7:b5:6f:c6:60:1f:ec: b3:52:b9:24:23:18:c7:a9:3e:1d:d3:ae:40:cb:9e: aa:ff:a6:f3:b0:b7:8f:29:82:f8:9f:88:2a:b7:29: 30:4d:da:12:95:bc:39:42:83:11:37:9c:53:4f:56: 20:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:74:AC:68:CE:7B:72:76:97:72:76:58:4A:38:11:54:7B:78:4A:F4 X509v3 Authority Key Identifier: keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/nXSsaM57cnaXcnZYSjgRVHt4SvQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.160.64.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:01:03:80:29:b0:5e:96:a1:56:1b:45:4b:a5:5b:92:e2:12: db:c2:bc:44:fb:64:19:f5:c6:c7:3c:58:1d:47:48:db:1d:8e: 65:e0:2d:5f:aa:d1:a3:8c:32:7d:fc:81:4a:4e:85:ea:53:d1: d6:51:96:50:ee:e9:a0:6a:3b:7e:de:d4:47:66:d0:55:2c:38: 01:ec:3f:5a:cf:1f:84:aa:0d:24:12:c7:d2:0c:36:87:98:ea: 6f:df:81:b1:7f:63:0a:5c:44:58:9a:be:45:3f:b0:fd:69:55: de:44:d5:8b:e6:aa:c5:6d:2c:74:18:60:39:d3:74:ad:76:b8: ce:d7:70:30:0c:a3:c3:7e:33:2a:45:ac:ef:07:6e:c2:3d:8c: a3:c2:ea:f8:26:69:9b:57:ad:71:c7:d2:c1:95:d6:cd:e8:99: ac:f3:80:7d:14:67:4f:52:c5:c3:18:58:8a:14:25:11:0f:8e: eb:08:ed:15:32:00:ab:8f:a8:1f:f0:c5:f1:6e:40:30:cd:38: 3f:61:d1:20:b6:bf:3e:9f:68:b3:54:9f:9d:b8:75:10:3e:8a: 8e:4f:a0:5a:3e:07:8c:e2:31:ba:2f:45:f5:42:c4:26:39:2f: bc:60:ed:bc:74:1b:74:b2:bf:6e:59:7b:e5:2f:10:e1:ae:64: 0d:b6:c5:98 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNDA1Mjkw ODU0MjZaFw0yNDEwMDQwNzMxNDJaMDMxMTAvBgNVBAMTKDlENzRBQzY4Q0U3Qjcy NzY5NzcyNzY1ODRBMzgxMTU0N0I3ODRBRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDY4ccNewarmicI/RvqSighv3wDJd/80o3cn5QK+tr4GUc0gwq YDwbDB2dCyj54B2JiZSrZBD4wLoJ9MgCY9scjOcG+RUDFlpjkjHHxJsGev6Wt+mX qmQDSWyQ47DFe/UdAT59aabIEzxIeDjKEvXFwsXs+Sgp91DgYQ8FCkvTseZMCjwq VFStJCwaCDPXQmjA68CFPoOjRK/MClTWTRqw1o1bJsLjP5jou7io7wdsU2qKL+2S eZjypiqjILB/DfDbdcmXX2eBm4g4t7VvxmAf7LNSuSQjGMepPh3TrkDLnqr/pvOw t48pgvifiCq3KTBN2hKVvDlCgxE3nFNPViDzAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUnXSsaM57cnaXcnZYSjgRVHt4SvQwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9 HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL25YU3NhTTU3Y25h WGNuWllTamdSVkh0NFN2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAXKoEAwDQYJKoZIhvcNAQELBQADggEBAIwBA4ApsF6WoVYbRUulW5LiEtvC vET7ZBn1xsc8WB1HSNsdjmXgLV+q0aOMMn38gUpOhepT0dZRllDu6aBqO37e1Edm 0FUsOAHsP1rPH4SqDSQSx9IMNoeY6m/fgbF/YwpcRFiavkU/sP1pVd5E1YvmqsVt LHQYYDnTdK12uM7XcDAMo8N+MypFrO8HbsI9jKPC6vgmaZtXrXHH0sGV1s3omazz gH0UZ09SxcMYWIoUJREPjusI7RUyAKuPqB/wxfFuQDDNOD9h0SC2vz6faLNUn524 dRA+io5PoFo+B4ziMbovRfVCxCY5L7xg7bx0G3Syv25Ze+UvEOGuZA22xZg= -----END CERTIFICATE-----Generated at Sat Jun 22 23:13:33 2024 by rpki-client on console-ams.rpki-client.org