$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/w6a8w_s5dytSyGEJ7KQkqhryLn8.roa File: w6a8w_s5dytSyGEJ7KQkqhryLn8.roa (raw, json) Hash identifier: A8LcOP51wkMUYYXBGzSsWHSiCVujf+vZZYiDwylx/Dw= Subject key identifier: C3:A6:BC:C3:FB:39:77:2B:52:C8:61:09:EC:A4:24:AA:1A:F2:2E:7F Certificate issuer: /CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Certificate serial: 09 Authority key identifier: 20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/w6a8w_s5dytSyGEJ7KQkqhryLn8.roa Signing time: Thu 17 Oct 2024 06:20:53 +0000 ROA not before: Thu 17 Oct 2024 06:20:53 +0000 ROA not after: Wed 15 Oct 2025 15:30:20 +0000 asID: 150766 IP address blocks: 160.191.9.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ACCA8718500373AFF77B414B23DC6A5F1474EE Validity Not Before: Oct 17 06:20:53 2024 GMT Not After : Oct 15 15:30:20 2025 GMT Subject: CN=C3A6BCC3FB39772B52C86109ECA424AA1AF22E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:91:05:37:65:79:6d:92:1d:16:b0:5d:b4: d7:cc:d6:7e:0e:07:15:e4:89:a0:f0:e4:f9:ba:8d: 33:01:2f:f9:f5:79:4d:ea:04:e5:51:38:11:c1:c7: 21:20:6d:b8:5f:0b:e6:52:76:42:4a:c5:48:a3:5c: e7:65:69:d0:1c:6b:89:3a:1f:a8:0a:dd:da:61:e6: 1a:ce:96:50:18:bf:44:85:ee:1f:33:9a:04:04:9e: e1:ad:b5:77:e0:6c:9c:1b:ea:c7:01:a7:ec:63:6e: 1c:c0:a9:23:d0:7e:d0:f1:0a:9e:bb:a0:4b:da:e5: c3:25:9c:0c:9c:1e:01:ce:36:45:3c:53:24:6c:48: 1f:73:6d:11:0f:4e:b6:26:ab:5f:33:8e:3e:f0:cd: 80:e8:9d:ed:41:6f:5b:8c:b8:08:a2:a8:d0:04:16: fc:b5:63:37:ae:ed:d4:3f:de:d0:e0:cc:62:2f:3c: 6a:f0:98:eb:11:b5:f7:13:bd:ba:c5:f9:96:d7:74: 7f:99:0c:22:51:a4:85:a6:32:b8:dd:ff:f7:50:9b: 1d:97:c3:8e:af:4d:50:00:6f:a4:35:fc:bc:73:6f: b4:ba:69:8f:8b:1b:c3:57:b3:f5:9f:f1:1e:4e:73: a7:b9:29:c1:a5:0f:fa:cf:6b:d1:e9:c3:ad:51:e0: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A6:BC:C3:FB:39:77:2B:52:C8:61:09:EC:A4:24:AA:1A:F2:2E:7F X509v3 Authority Key Identifier: keyid:20:AC:CA:87:18:50:03:73:AF:F7:7B:41:4B:23:DC:6A:5F:14:74:EE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/IKzKhxhQA3Ov93tBSyPcal8UdO4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IKzKhxhQA3Ov93tBSyPcal8UdO4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/w6a8w_s5dytSyGEJ7KQkqhryLn8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.191.9.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:fc:99:3f:b8:ca:54:6e:eb:99:40:ad:9a:2d:c2:47:6c:e9: c9:b8:b5:91:9a:48:ca:6e:da:8b:47:9f:cc:f3:9a:15:a0:5e: a1:9f:42:e2:3e:04:f6:cc:3f:82:01:8f:39:ad:2a:e7:27:c8: 25:6e:28:8d:03:f3:71:15:1e:08:9f:0c:72:1c:f3:4e:c9:54: 86:ec:d2:34:cd:f1:59:c0:0d:c7:03:9f:ff:a2:88:07:97:a7: 41:90:83:e0:41:4a:60:6e:2a:0d:14:01:8d:fa:8b:64:5a:13: b8:2e:e8:25:a9:78:60:a8:52:d0:dd:89:89:38:6e:46:3a:a7: de:c1:13:7f:b9:cd:62:0c:3a:70:3a:03:00:3b:12:f8:63:f1: 4d:bb:ea:cc:ea:92:70:8c:08:b4:12:02:80:24:c2:bb:dd:bc: bc:ca:27:ae:fa:b8:d6:f7:50:d4:e6:ff:9b:dc:17:b8:f5:d9: 5f:a8:f1:23:63:54:20:2a:48:a5:6d:ee:27:d4:1c:01:d7:ab: 96:06:6f:44:31:b7:2a:f2:4a:c9:37:6c:a0:ed:2c:f6:b3:33: 6d:ea:63:ed:95:9b:dc:fe:fc:d1:02:98:5d:f8:97:e8:f6:dc: 44:f2:fe:a9:19:ff:16:d1:eb:c7:b7:5a:3b:8f:f5:c4:d7:cd: 9b:4a:63:73 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMEFD Q0E4NzE4NTAwMzczQUZGNzdCNDE0QjIzREM2QTVGMTQ3NEVFMB4XDTI0MTAxNzA2 MjA1M1oXDTI1MTAxNTE1MzAyMFowMzExMC8GA1UEAxMoQzNBNkJDQzNGQjM5Nzcy QjUyQzg2MTA5RUNBNDI0QUExQUYyMkU3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL/lkQU3ZXltkh0WsF2018zWfg4HFeSJoPDk+bqNMwEv+fV5TeoE 5VE4EcHHISBtuF8L5lJ2QkrFSKNc52Vp0BxriTofqArd2mHmGs6WUBi/RIXuHzOa BASe4a21d+BsnBvqxwGn7GNuHMCpI9B+0PEKnrugS9rlwyWcDJweAc42RTxTJGxI H3NtEQ9OtiarXzOOPvDNgOid7UFvW4y4CKKo0AQW/LVjN67t1D/e0ODMYi88avCY 6xG19xO9usX5ltd0f5kMIlGkhaYyuN3/91CbHZfDjq9NUABvpDX8vHNvtLppj4sb w1ez9Z/xHk5zp7kpwaUP+s9r0enDrVHgc2MCAwEAAaOCAe4wggHqMB0GA1UdDgQW BBTDprzD+zl3K1LIYQnspCSqGvIufzAfBgNVHSMEGDAWgBQgrMqHGFADc6/3e0FL I9xqXxR07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DQVRIREQv SUt6S2h4aFFBM092OTN0QlN5UGNhbDhVZE80LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9JS3pLaHhoUUEzT3Y5M3RCU3lQY2FsOFVkTzQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DQVRIREQvdzZhOHdfczVkeXRTeUdFSjdL UWtxaHJ5TG44LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKC/ CTANBgkqhkiG9w0BAQsFAAOCAQEAbPyZP7jKVG7rmUCtmi3CR2zpybi1kZpIym7a i0efzPOaFaBeoZ9C4j4E9sw/ggGPOa0q5yfIJW4ojQPzcRUeCJ8MchzzTslUhuzS NM3xWcANxwOf/6KIB5enQZCD4EFKYG4qDRQBjfqLZFoTuC7oJal4YKhS0N2JiThu Rjqn3sETf7nNYgw6cDoDADsS+GPxTbvqzOqScIwItBICgCTCu928vMonrvq41vdQ 1Ob/m9wXuPXZX6jxI2NUICpIpW3uJ9QcAderlgZvRDG3KvJKyTdsoO0s9rMzbepj 7ZWb3P780QKYXfiX6PbcRPL+qRn/FtHrx7daO4/1xNfNm0pjcw== -----END CERTIFICATE-----Generated at Mon Nov 25 18:39:33 2024 by rpki-client on console-fra.rpki-client.org