$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Cmg9Z0xpZ7mzMhuCz8iRuwONX3c.roa File: Cmg9Z0xpZ7mzMhuCz8iRuwONX3c.roa (raw, json) Hash identifier: 6wozyNsHB5BGez1DRcn46FZdxqwnCNxnuAxSvF6LoMA= Subject key identifier: 0A:68:3D:67:4C:69:67:B9:B3:32:1B:82:CF:C8:91:BB:03:8D:5F:77 Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Certificate serial: 03 Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Cmg9Z0xpZ7mzMhuCz8iRuwONX3c.roa Signing time: Thu 17 Oct 2024 06:20:03 +0000 ROA not before: Thu 17 Oct 2024 06:20:03 +0000 ROA not after: Wed 15 Oct 2025 15:30:20 +0000 asID: 150766 IP address blocks: 160.191.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 12:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Validity Not Before: Oct 17 06:20:03 2024 GMT Not After : Oct 15 15:30:20 2025 GMT Subject: CN=0A683D674C6967B9B3321B82CFC891BB038D5F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:21:01:a5:fa:e0:9f:f4:1c:98:1b:5b:f2: b3:2c:6e:91:0f:48:85:24:f9:de:3b:62:b3:1f:55: d6:34:87:11:4e:8d:21:39:c6:13:65:b4:ed:aa:78: 25:43:42:79:86:5b:29:9f:dd:97:76:64:20:d6:da: 01:3d:14:7d:58:72:e2:d6:27:c6:f1:e0:a4:04:99: bf:54:18:00:1c:a2:1c:dd:b2:23:3c:d4:04:3b:03: fc:ce:10:27:ac:ac:c1:da:7b:c5:98:c9:bc:50:2b: 3b:4c:91:f7:c4:ce:3d:51:c2:a8:7e:a3:c1:bb:82: 72:cf:01:60:2f:68:c3:cf:2f:f5:e8:d2:c5:8b:e8: 0b:90:84:d5:29:28:d4:39:00:94:3a:b3:e4:8c:4a: 2b:d8:f0:7d:84:cf:10:2d:ec:f3:b7:c8:c3:4f:75: f7:95:1f:6f:d1:79:a9:7a:04:b6:b1:0e:1a:ae:2d: 3c:49:ea:da:4d:99:02:d5:f6:72:78:88:57:a1:86: 7d:5a:32:46:c8:f0:24:d0:70:54:ba:66:e2:9f:08: 62:99:f2:25:c8:41:a3:59:00:f0:f1:37:3b:46:4e: fa:77:81:ea:25:f7:d7:d0:e4:3a:de:21:51:f5:97: 27:93:9d:5e:c4:f2:85:7a:95:67:3c:98:a9:4d:20: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:68:3D:67:4C:69:67:B9:B3:32:1B:82:CF:C8:91:BB:03:8D:5F:77 X509v3 Authority Key Identifier: keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Cmg9Z0xpZ7mzMhuCz8iRuwONX3c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.8.0/24 Signature Algorithm: sha256WithRSAEncryption 38:48:25:20:ee:aa:47:68:b7:3e:2d:45:b5:bb:66:a0:a5:5c: 44:89:cd:53:50:3f:f5:87:94:e3:84:ad:c8:cb:b9:09:46:27: de:e0:ae:ee:a7:dd:58:fd:71:54:02:7f:f9:83:c6:02:df:27: 16:ce:0b:5e:32:42:9d:2c:e0:56:85:1a:bf:79:2f:13:f2:12: 6e:a9:e2:27:e3:bf:5e:1f:f0:1f:4c:d1:f5:a6:18:2b:e6:76: 94:1f:b6:b2:da:85:24:78:0e:c5:c8:c3:da:23:31:b6:a6:bb: e3:13:b4:b4:fe:25:9c:9a:05:cf:75:55:76:02:87:4f:92:10: e6:0a:ee:9a:a3:c1:74:e5:8a:31:a8:1b:24:6d:30:dc:4f:be: d8:87:20:8d:0e:79:5a:93:d8:34:75:8d:62:d5:7b:f1:53:61: d4:51:a0:df:75:19:47:dc:89:90:0f:ef:c4:f5:41:e2:8e:e1: bd:91:ac:19:93:d1:3a:a3:2e:9c:06:d9:c3:fe:5f:cb:fc:9d: 91:51:37:3d:e3:4d:33:cd:24:b7:64:e1:70:d9:b7:e7:09:0c: d9:43:bd:7d:47:10:b4:e0:7b:14:d4:f4:46:94:df:48:ed:a8: 1e:65:b2:40:c0:7d:48:69:47:a1:b5:d7:f2:c0:ae:32:54:0b: 65:ee:bb:e6 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMEFD Q0E4NzE4NTAwMzczQUZGNzdCNDE0QjIzREM2QTVGMTQ3NEVFMB4XDTI0MTAxNzA2 MjAwM1oXDTI1MTAxNTE1MzAyMFowMzExMC8GA1UEAxMoMEE2ODNENjc0QzY5NjdC OUIzMzIxQjgyQ0ZDODkxQkIwMzhENUY3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALl/IQGl+uCf9ByYG1vysyxukQ9IhST53jtisx9V1jSHEU6NITnG E2W07ap4JUNCeYZbKZ/dl3ZkINbaAT0UfVhy4tYnxvHgpASZv1QYAByiHN2yIzzU BDsD/M4QJ6yswdp7xZjJvFArO0yR98TOPVHCqH6jwbuCcs8BYC9ow88v9ejSxYvo C5CE1Sko1DkAlDqz5IxKK9jwfYTPEC3s87fIw09195Ufb9F5qXoEtrEOGq4tPEnq 2k2ZAtX2cniIV6GGfVoyRsjwJNBwVLpm4p8IYpnyJchBo1kA8PE3O0ZO+neB6iX3 19DkOt4hUfWXJ5OdXsTyhXqVZzyYqU0gpIsCAwEAAaOCAe4wggHqMB0GA1UdDgQW BBQKaD1nTGlnubMyG4LPyJG7A41fdzAfBgNVHSMEGDAWgBQgrMqHGFADc6/3e0FL I9xqXxR07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DQVRIREQv SUt6S2h4aFFBM092OTN0QlN5UGNhbDhVZE80LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9JS3pLaHhoUUEzT3Y5M3RCU3lQY2FsOFVkTzQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DQVRIREQvQ21nOVoweHBaN216TWh1Q3o4 aVJ1d09OWDNjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKC/ CDANBgkqhkiG9w0BAQsFAAOCAQEAOEglIO6qR2i3Pi1FtbtmoKVcRInNU1A/9YeU 44StyMu5CUYn3uCu7qfdWP1xVAJ/+YPGAt8nFs4LXjJCnSzgVoUav3kvE/ISbqni J+O/Xh/wH0zR9aYYK+Z2lB+2stqFJHgOxcjD2iMxtqa74xO0tP4lnJoFz3VVdgKH T5IQ5grumqPBdOWKMagbJG0w3E++2IcgjQ55WpPYNHWNYtV78VNh1FGg33UZR9yJ kA/vxPVB4o7hvZGsGZPROqMunAbZw/5fy/ydkVE3PeNNM80kt2ThcNm35wkM2UO9 fUcQtOB7FNT0RpTfSO2oHmWyQMB9SGlHobXX8sCuMlQLZe675g== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:29 2024 by rpki-client on console-ams.rpki-client.org