$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/8fTBnM4CCTHTdc8GX4SgxlBaxrc.roa File: 8fTBnM4CCTHTdc8GX4SgxlBaxrc.roa (raw, json) Hash identifier: ond9W0u35DCyJDo+8uYZMAJi4Y43qr+J53xDwuDP8yM= Subject key identifier: F1:F4:C1:9C:CE:02:09:31:D3:75:CF:06:5F:84:A0:C6:50:5A:C6:B7 Certificate issuer: /CN=646D69C88D096F7D39220D288688914729045EF8 Certificate serial: 058F Authority key identifier: 64:6D:69:C8:8D:09:6F:7D:39:22:0D:28:86:88:91:47:29:04:5E:F8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZG1pyI0Jb305Ig0ohoiRRykEXvg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/8fTBnM4CCTHTdc8GX4SgxlBaxrc.roa Signing time: Fri 01 Sep 2023 07:48:42 +0000 ROA not before: Fri 01 Sep 2023 07:48:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17420 IP address blocks: 211.79.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/ZG1pyI0Jb305Ig0ohoiRRykEXvg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/ZG1pyI0Jb305Ig0ohoiRRykEXvg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ZG1pyI0Jb305Ig0ohoiRRykEXvg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646D69C88D096F7D39220D288688914729045EF8 Validity Not Before: Sep 1 07:48:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F1F4C19CCE020931D375CF065F84A0C6505AC6B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:05:e4:d6:cc:9b:fa:ab:ad:96:46:f3:56: 43:af:9a:86:49:a2:60:ef:f1:9b:b4:49:44:9c:e4: 34:67:c2:9c:a0:58:96:e2:e9:94:ae:28:f1:e7:33: b1:79:9c:18:65:bb:80:39:d2:62:c6:a8:0b:f4:ee: fd:62:57:3a:ce:5a:8e:d5:09:21:56:a8:0e:f1:4f: 9a:25:0c:25:b2:7b:1d:22:50:ec:93:ab:56:78:50: 1d:04:d8:c6:c3:fa:75:63:6e:3d:40:fa:5b:91:4e: 9f:9e:21:1d:0f:55:f7:e5:a1:5f:1c:e3:8b:dc:f5: 4a:cd:b1:06:13:d7:09:ef:ae:fa:ef:83:1b:58:d8: eb:21:9f:93:58:c4:06:2c:b6:85:dd:3a:13:b3:84: 91:ef:77:8f:58:34:bd:0a:16:7c:5d:e0:1f:21:58: 5b:1a:51:b0:95:73:8a:8c:21:c3:4e:d1:80:2b:99: 6e:c0:b3:76:70:a3:a7:5f:a2:a2:48:01:39:b9:92: 7b:30:41:4b:87:95:aa:75:75:b7:2d:06:0f:53:e0: f3:75:92:a6:0a:b6:bc:63:88:06:9e:ce:cf:10:6b: 83:a7:75:86:85:ba:c1:a0:1f:ff:9b:37:a7:ea:ea: 6e:b3:08:1a:6f:21:53:2e:84:62:88:9a:3e:f7:7f: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:C1:9C:CE:02:09:31:D3:75:CF:06:5F:84:A0:C6:50:5A:C6:B7 X509v3 Authority Key Identifier: keyid:64:6D:69:C8:8D:09:6F:7D:39:22:0D:28:86:88:91:47:29:04:5E:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/ZG1pyI0Jb305Ig0ohoiRRykEXvg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZG1pyI0Jb305Ig0ohoiRRykEXvg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ACEREDC/8fTBnM4CCTHTdc8GX4SgxlBaxrc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.79.192.0/20 Signature Algorithm: sha256WithRSAEncryption 90:7b:00:43:bc:36:df:f6:b9:28:dd:31:ae:b2:34:5e:fe:c8: 6f:11:c0:02:05:cc:15:8c:fb:04:7a:42:b0:91:2a:1f:1e:67: dc:bb:c2:4b:2b:d3:e0:f0:2a:f6:59:56:d3:b5:ea:a3:9a:c0: 82:16:49:e4:68:9d:3e:26:09:ec:cd:d3:01:bf:44:2b:46:07: 10:22:f7:87:d8:fd:ca:af:f4:00:79:5a:73:b8:b3:cf:8c:1a: bc:f1:99:db:b6:58:23:91:d9:60:dd:8f:cd:2b:d7:96:95:ad: 0b:6f:37:70:21:ac:c2:0e:4a:1d:62:c4:5b:6b:b5:2c:a8:bd: 64:be:ec:4b:22:a3:5a:9e:d7:f3:03:f0:74:99:df:bf:01:e4: c5:29:37:b3:dc:9c:80:c6:fa:b6:f6:e9:67:22:58:45:2f:90: 38:89:2b:50:d8:05:83:fe:cd:1a:6a:16:95:f2:6c:52:c3:13: ea:23:6c:bc:1d:a1:c6:53:62:5a:fb:fa:a0:f6:94:06:c3:da: fc:21:9a:48:c5:e2:a9:3b:5b:ef:15:6c:0d:a2:f3:ac:5d:2e: 7d:d8:1d:b2:27:6c:e6:36:58:d9:7b:b1:9b:fc:c6:0c:7d:ea: 5b:7b:af:9e:85:d2:1f:6b:17:10:29:f4:0e:36:5d:a8:72:0a: d0:44:ec:2b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjQ2 RDY5Qzg4RDA5NkY3RDM5MjIwRDI4ODY4ODkxNDcyOTA0NUVGODAeFw0yMzA5MDEw NzQ4NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYxRjRDMTlDQ0UwMjA5 MzFEMzc1Q0YwNjVGODRBMEM2NTA1QUM2QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPQgXk1syb+qutlkbzVkOvmoZJomDv8Zu0SUSc5DRnwpygWJbi 6ZSuKPHnM7F5nBhlu4A50mLGqAv07v1iVzrOWo7VCSFWqA7xT5olDCWyex0iUOyT q1Z4UB0E2MbD+nVjbj1A+luRTp+eIR0PVffloV8c44vc9UrNsQYT1wnvrvrvgxtY 2Oshn5NYxAYstoXdOhOzhJHvd49YNL0KFnxd4B8hWFsaUbCVc4qMIcNO0YArmW7A s3Zwo6dfoqJIATm5knswQUuHlap1dbctBg9T4PN1kqYKtrxjiAaezs8Qa4OndYaF usGgH/+bN6fq6m6zCBpvIVMuhGKImj73f/t5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU8fTBnM4CCTHTdc8GX4SgxlBaxrcwHwYDVR0jBBgwFoAUZG1pyI0Jb305Ig0o hoiRRykEXvgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUNFUkVE Qy9aRzFweUkwSmIzMDVJZzBvaG9pUlJ5a0VYdmcuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1pHMXB5STBKYjMwNUlnMG9ob2lSUnlrRVh2Zy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FDRVJFREMvOGZUQm5NNENDVEhUZGM4 R1g0U2d4bEJheHJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BNNPwDANBgkqhkiG9w0BAQsFAAOCAQEAkHsAQ7w23/a5KN0xrrI0Xv7IbxHAAgXM FYz7BHpCsJEqHx5n3LvCSyvT4PAq9llW07Xqo5rAghZJ5GidPiYJ7M3TAb9EK0YH ECL3h9j9yq/0AHlac7izz4wavPGZ27ZYI5HZYN2PzSvXlpWtC283cCGswg5KHWLE W2u1LKi9ZL7sSyKjWp7X8wPwdJnfvwHkxSk3s9ycgMb6tvbpZyJYRS+QOIkrUNgF g/7NGmoWlfJsUsMT6iNsvB2hxlNiWvv6oPaUBsPa/CGaSMXiqTtb7xVsDaLzrF0u fdgdsids5jZY2Xuxm/zGDH3qW3uvnoXSH2sXECn0DjZdqHIK0ETsKw== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:40 2024 by rpki-client on console-ams.rpki-client.org