$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/9ETl0qf4dtBMGDPkw5TMdaBnoks.roa File: 9ETl0qf4dtBMGDPkw5TMdaBnoks.roa (raw, json) Hash identifier: xm9+e5ND+YURgppgI9azco0LnjXudQiPlMxZraQqM4I= Subject key identifier: F4:44:E5:D2:A7:F8:76:D0:4C:18:33:E4:C3:94:CC:75:A0:67:A2:4B Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Certificate serial: 0C46 Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/9ETl0qf4dtBMGDPkw5TMdaBnoks.roa Signing time: Mon 26 Aug 2024 05:09:42 +0000 ROA not before: Mon 26 Aug 2024 05:09:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9264 IP address blocks: 2403:c240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 09:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Validity Not Before: Aug 26 05:09:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F444E5D2A7F876D04C1833E4C394CC75A067A24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:a6:ae:56:e4:dd:69:3e:1d:b0:fb:bc:f7: 66:19:fb:67:ae:22:d5:4b:f2:69:80:9e:e8:b6:8e: aa:27:cd:8a:b5:d5:c7:b4:fd:e5:e9:09:af:ad:66: 7b:b4:4a:ca:ad:6b:1f:df:14:0a:b5:ae:e8:b8:3d: 1f:f3:01:02:47:0f:b6:91:a7:07:0a:57:a5:26:a0: 55:f0:98:1c:11:97:7d:e0:3e:77:d6:b8:81:f6:b4: 8e:a8:6f:25:42:01:ba:e6:ea:24:79:59:4e:fc:39: 1b:a4:7e:d2:69:36:c8:64:89:0a:6b:e8:9e:c8:7c: d6:21:c0:d9:c3:36:c2:d9:e3:28:84:ca:14:4f:7a: c7:d5:ef:fa:d9:52:83:24:8e:b5:4b:81:ec:e5:63: e8:03:47:06:ef:b1:76:9f:46:c0:35:b3:85:73:c0: cf:38:48:16:b9:8d:8f:d9:0c:5e:ca:8c:7e:80:73: b8:cd:b4:2a:7f:25:99:4e:43:34:7b:b4:e2:b8:9a: 02:3f:60:02:01:19:90:5d:f7:21:bc:ba:10:dd:75: 9c:de:9b:9a:dd:2b:d2:f7:10:72:f3:30:51:99:79: 5e:97:dc:63:a0:af:e9:ed:00:a9:24:1f:4c:79:7b: 36:2e:ef:ed:ab:ed:7c:a0:73:d5:43:4e:2d:92:99: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:E5:D2:A7:F8:76:D0:4C:18:33:E4:C3:94:CC:75:A0:67:A2:4B X509v3 Authority Key Identifier: keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/9ETl0qf4dtBMGDPkw5TMdaBnoks.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:c240::/32 Signature Algorithm: sha256WithRSAEncryption d8:9e:96:78:b0:e0:6f:58:ea:ae:72:59:5a:ac:a0:43:39:e9: 19:9b:8d:68:b4:c2:9b:76:22:18:57:99:46:39:2c:af:71:ed: b1:20:52:9b:0b:e7:38:8c:54:8f:e8:ad:65:2f:76:35:32:c4: fd:ed:40:84:59:19:e0:38:de:c4:ac:ff:e2:e5:44:75:ea:c8: 24:7c:6c:7a:c5:b4:42:99:30:b1:39:dc:e4:7b:f2:7e:86:23: 87:b6:ad:a6:18:aa:c7:a0:33:a7:46:76:fa:89:e4:d7:cf:c7: 1c:7b:48:d5:27:12:cb:59:e7:38:ae:58:f4:42:c5:6b:80:51: 19:89:84:e2:2c:24:91:2e:19:1d:a9:01:2d:41:4a:28:91:b9: 3c:a5:d8:31:e3:bf:94:a9:e0:c1:32:4a:d2:c8:00:37:e9:20: 33:65:a7:18:12:f9:8e:68:2e:3e:2e:88:c1:5d:c8:de:de:9a: 40:da:2a:20:34:7d:ba:27:10:63:dd:97:44:f8:23:1d:e5:ba: 72:c9:17:54:be:4f:64:00:23:4e:bf:46:f9:10:4f:e3:e2:e3: 0d:72:67:73:cc:d3:ef:0a:da:c1:04:b8:2f:96:b0:bb:cb:6f: 02:97:af:14:0b:04:e0:08:65:06:bf:36:6a:b4:2c:87:cb:b6: c0:97:ce:c2 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5 ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNDA4MjYw NTA5NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY0NDRFNUQyQTdGODc2 RDA0QzE4MzNFNEMzOTRDQzc1QTA2N0EyNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzj6auVuTdaT4dsPu892YZ+2euItVL8mmAnui2jqonzYq11ce0 /eXpCa+tZnu0Ssqtax/fFAq1rui4PR/zAQJHD7aRpwcKV6UmoFXwmBwRl33gPnfW uIH2tI6obyVCAbrm6iR5WU78ORukftJpNshkiQpr6J7IfNYhwNnDNsLZ4yiEyhRP esfV7/rZUoMkjrVLgezlY+gDRwbvsXafRsA1s4VzwM84SBa5jY/ZDF7KjH6Ac7jN tCp/JZlOQzR7tOK4mgI/YAIBGZBd9yG8uhDddZzem5rdK9L3EHLzMFGZeV6X3GOg r+ntAKkkH0x5ezYu7+2r7Xygc9VDTi2SmQu/AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU9ETl0qf4dtBMGDPkw5TMdaBnokswHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC85RVRsMHFmNGR0Qk1HRFBrdzVU TWRhQm5va3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAPC QDANBgkqhkiG9w0BAQsFAAOCAQEA2J6WeLDgb1jqrnJZWqygQznpGZuNaLTCm3Yi GFeZRjksr3HtsSBSmwvnOIxUj+itZS92NTLE/e1AhFkZ4DjexKz/4uVEderIJHxs esW0QpkwsTnc5HvyfoYjh7atphiqx6Azp0Z2+onk18/HHHtI1ScSy1nnOK5Y9ELF a4BRGYmE4iwkkS4ZHakBLUFKKJG5PKXYMeO/lKngwTJK0sgAN+kgM2WnGBL5jmgu Pi6IwV3I3t6aQNoqIDR9uicQY92XRPgjHeW6cskXVL5PZAAjTr9G+RBP4+LjDXJn c8zT7wrawQS4L5awu8tvApevFAsE4AhlBr82arQsh8u2wJfOwg== -----END CERTIFICATE-----Generated at Sat Sep 21 06:24:01 2024 by rpki-client on console-fra.rpki-client.org