$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/zEa4c7v01Frqxd9Xshi-ZeyreJc.roa File: zEa4c7v01Frqxd9Xshi-ZeyreJc.roa (raw, json) Hash identifier: k6zhzMQfY/W34Nfd/YVXCQIkex3EzsWGYflXKMxEkdI= Subject key identifier: CC:46:B8:73:BB:F4:D4:5A:EA:C5:DF:57:B2:18:BE:65:EC:AB:78:97 Certificate issuer: /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Certificate serial: 0C72 Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/zEa4c7v01Frqxd9Xshi-ZeyreJc.roa Signing time: Mon 26 Aug 2024 04:56:17 +0000 ROA not before: Mon 26 Aug 2024 04:56:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131149 IP address blocks: 43.254.16.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05 Validity Not Before: Aug 26 04:56:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CC46B873BBF4D45AEAC5DF57B218BE65ECAB7897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:a2:35:57:b3:33:86:c5:fd:7b:44:02:ca: 76:4f:d1:ea:6e:32:82:26:a1:f0:d3:e0:94:c3:bb: a7:56:0e:63:83:b7:68:b6:2d:15:e0:1f:f6:15:aa: 85:e9:8c:90:90:9b:9f:ad:e2:95:cd:92:34:96:d7: dc:54:f5:55:08:ed:35:d9:c8:7c:92:14:de:e8:bf: 36:0a:8b:f0:81:79:e0:1b:ee:16:01:cf:10:ae:93: f3:b6:3c:8a:bd:0d:aa:b9:c8:32:39:2f:c5:8b:08: a6:63:b2:25:df:ae:5c:e9:cf:cc:db:24:21:f6:b5: 5f:c0:e4:2c:d4:8d:e4:15:b5:47:6b:c1:26:56:b8: 36:d4:a1:2d:ff:71:76:a6:b4:75:36:df:c0:c8:d5: e1:00:21:21:4b:6c:b9:b3:e2:dd:89:16:6a:ee:cb: 42:3d:d0:a5:00:9e:96:77:25:86:df:96:30:c0:73: 05:21:e9:08:ab:20:a4:83:a0:0c:41:55:4d:32:da: 2a:22:82:d6:bf:3f:b5:7a:55:38:8d:3e:f4:91:b4: 38:57:4b:fd:45:f8:c9:c3:ba:9f:db:e0:cf:89:98: c6:ed:35:67:25:da:fe:76:7b:a9:e9:e1:30:03:fa: 8a:ce:86:a2:cc:64:7e:6f:de:77:f8:c6:2f:c8:99: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:B8:73:BB:F4:D4:5A:EA:C5:DF:57:B2:18:BE:65:EC:AB:78:97 X509v3 Authority Key Identifier: keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/zEa4c7v01Frqxd9Xshi-ZeyreJc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.254.16.0/22 Signature Algorithm: sha256WithRSAEncryption 16:f8:96:dd:97:cc:95:f9:ee:e5:1a:10:fc:c1:22:10:57:7f: 67:d2:c5:b0:bf:34:93:2b:35:e0:99:32:d8:c5:35:9a:38:1d: 48:fa:38:27:c5:4b:93:21:c7:55:d2:56:9e:25:57:4c:8b:61: d0:bd:3c:8a:95:6c:58:6d:c0:b0:ae:1a:88:2e:b5:d5:38:13: 36:45:56:19:6a:1c:5f:9e:89:9f:05:39:d3:3e:a7:8e:15:1c: 1c:b4:bc:8c:c2:b0:6e:2b:53:a7:e5:22:ae:c4:52:15:7f:0e: 07:6c:87:0c:8c:91:e2:f1:46:9a:0b:cf:d0:33:dd:8b:1e:04: 5c:6c:1e:f2:dc:22:09:5d:69:8d:70:db:49:83:79:66:a7:8e: bd:90:ce:d8:53:8f:13:13:d1:82:64:b7:fa:58:c5:80:af:9b: 39:31:b7:99:fa:c7:8b:3d:b0:c7:e8:f2:0c:5a:53:f4:9e:3e: 8d:fa:bb:d8:f7:41:25:ac:39:a0:92:b8:67:d6:8f:d1:1f:7e: d1:e1:05:b6:04:cb:8b:a5:19:6c:c6:b0:a1:88:37:7e:ed:73: d6:65:59:4a:d7:25:8d:65:3c:a2:5b:e1:39:8b:72:0d:50:12: 1e:e0:f8:5f:2d:68:0c:24:47:eb:a5:84:32:9e:74:d3:a6:e8: 64:50:7e:c5 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdB NEFGRDlFN0ZDMUZFRDRGOTU0NURFNDFDRTQ0MTNEQUNCMEUwNTAeFw0yNDA4MjYw NDU2MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDNDZCODczQkJGNEQ0 NUFFQUM1REY1N0IyMThCRTY1RUNBQjc4OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8EqI1V7MzhsX9e0QCynZP0epuMoImofDT4JTDu6dWDmODt2i2 LRXgH/YVqoXpjJCQm5+t4pXNkjSW19xU9VUI7TXZyHySFN7ovzYKi/CBeeAb7hYB zxCuk/O2PIq9Daq5yDI5L8WLCKZjsiXfrlzpz8zbJCH2tV/A5CzUjeQVtUdrwSZW uDbUoS3/cXamtHU238DI1eEAISFLbLmz4t2JFmruy0I90KUAnpZ3JYbfljDAcwUh 6QirIKSDoAxBVU0y2ioigta/P7V6VTiNPvSRtDhXS/1F+MnDup/b4M+JmMbtNWcl 2v52e6np4TAD+orOhqLMZH5v3nf4xi/ImZpPAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzEa4c7v01Frqxd9Xshi+ZeyreJcwHwYDVR0jBBgwFoAUh6Sv2ef8H+1PlUXe Qc5EE9rLDgUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWVVBTkpI RU4vaDZTdjJlZjhILTFQbFVYZVFjNUVFOXJMRGdVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9oNlN2MmVmOEgtMVBsVVhlUWM1RUU5ckxEZ1UuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ZVUFOSkhFTi96RWE0Yzd2MDFGcnF4 ZDlYc2hpLVpleXJlSmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCK/4QMA0GCSqGSIb3DQEBCwUAA4IBAQAW+Jbdl8yV+e7lGhD8wSIQV39n0sWw vzSTKzXgmTLYxTWaOB1I+jgnxUuTIcdV0laeJVdMi2HQvTyKlWxYbcCwrhqILrXV OBM2RVYZahxfnomfBTnTPqeOFRwctLyMwrBuK1On5SKuxFIVfw4HbIcMjJHi8Uaa C8/QM92LHgRcbB7y3CIJXWmNcNtJg3lmp469kM7YU48TE9GCZLf6WMWAr5s5MbeZ +seLPbDH6PIMWlP0nj6N+rvY90ElrDmgkrhn1o/RH37R4QW2BMuLpRlsxrChiDd+ 7XPWZVlK1yWNZTyiW+E5i3INUBIe4PhfLWgMJEfrpYQynnTTpuhkUH7F -----END CERTIFICATE-----Generated at Fri Sep 27 23:37:02 2024 by rpki-client on console-fra.rpki-client.org