$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/T-3Y9-NjAINOK_Ze2SDL6jVr3dU.roa File: T-3Y9-NjAINOK_Ze2SDL6jVr3dU.roa (raw, json) Hash identifier: MZcIqkjjiB/VzKx1U4iU2Tw3gaCidvQcZoNkwMAOChQ= Subject key identifier: 4F:ED:D8:F7:E3:63:00:83:4E:2B:F6:5E:D9:20:CB:EA:35:6B:DD:D5 Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C Certificate serial: 0C79 Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/T-3Y9-NjAINOK_Ze2SDL6jVr3dU.roa Signing time: Mon 26 Aug 2024 05:11:23 +0000 ROA not before: Mon 26 Aug 2024 05:11:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 121.50.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C Validity Not Before: Aug 26 05:11:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4FEDD8F7E36300834E2BF65ED920CBEA356BDDD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a4:d1:8c:d3:df:2f:92:c9:52:43:ed:a9:12: f1:10:07:32:7d:ca:bc:fe:5b:f4:e0:67:a0:72:fa: 54:37:e1:b0:e9:24:3e:ad:56:33:da:2f:40:a8:d4: 7d:5a:db:1f:18:44:61:18:d5:5a:3a:b6:6c:bc:e8: e9:be:f1:0a:97:35:7e:d4:0e:e3:2c:c1:60:db:bf: c5:d0:01:80:2a:c4:12:45:e9:13:05:81:72:2a:be: 89:90:c5:43:c9:ef:1e:2e:de:ca:ff:47:6f:39:b6: 3d:02:69:e4:7b:fe:17:40:ee:1c:77:77:e1:e8:8c: 68:cc:21:8b:3f:7b:e2:0b:17:6e:9a:6e:8a:0e:31: 4b:25:50:fe:f2:da:52:a2:b6:e8:e8:e9:e9:6a:bb: 87:34:c4:87:05:37:ed:12:9b:9f:69:cc:ad:45:b3: 50:41:fd:0d:56:4c:82:84:ac:8c:ab:70:8d:b7:f5: 87:67:5c:32:19:c0:5b:2a:d8:12:1c:fd:8f:d2:d1: a9:ad:bb:aa:4f:a8:d8:4e:7a:e0:0a:1b:69:fa:ff: 2d:ca:8e:e4:62:1b:8f:a1:04:6a:cc:f0:6e:63:6f: 9c:64:5f:31:83:14:86:05:94:79:6e:8e:11:00:fb: 8f:4e:06:61:1e:75:e2:a5:a8:30:52:1b:1f:60:a9: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:ED:D8:F7:E3:63:00:83:4E:2B:F6:5E:D9:20:CB:EA:35:6B:DD:D5 X509v3 Authority Key Identifier: keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/T-3Y9-NjAINOK_Ze2SDL6jVr3dU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.176.0/20 Signature Algorithm: sha256WithRSAEncryption 67:ca:09:2b:5b:5c:40:36:49:32:98:e1:9f:e1:1d:64:9e:51: af:0b:29:a2:36:40:96:aa:68:f1:aa:81:08:86:cf:56:c0:be: 19:49:0c:db:d6:eb:98:29:7e:9e:04:95:af:f0:66:25:a2:c1: f3:2c:14:62:74:ad:a3:51:9b:56:be:24:01:14:ae:8a:58:38: c8:2b:44:8f:fc:c9:63:bf:e8:59:c3:62:a1:dd:f6:d3:a5:1d: 01:0b:02:5d:f5:8f:13:ae:b3:ee:f8:b4:48:6d:67:d8:e1:f7: 7e:cf:d0:e9:dd:e4:3e:f0:7a:c8:79:c5:e7:9e:cd:d1:ec:e8: 5c:50:15:24:8b:5d:54:38:5b:26:39:55:b1:12:79:12:57:28: 2d:81:0b:e2:c8:4f:9c:28:e9:00:90:96:b4:a1:8d:56:7a:2c: 4e:7b:cc:c1:ac:77:b6:e8:a5:c2:c2:7a:1d:f2:ff:af:50:29: 64:8f:66:97:d5:d8:35:87:c2:3d:43:88:8d:b3:4d:a5:1f:39: 25:fe:0a:50:55:f2:e9:10:e3:47:11:09:43:05:f3:54:db:8d: 0b:84:ac:9a:77:94:89:18:21:ed:f1:d2:9c:5d:3c:cc:f9:04: 40:e1:2f:bc:11:a4:7b:36:63:ff:a7:ec:0d:5d:8e:65:ec:43: 89:10:10:c8 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1 NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yNDA4MjYw NTExMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRGRUREOEY3RTM2MzAw ODM0RTJCRjY1RUQ5MjBDQkVBMzU2QkRERDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwpNGM098vkslSQ+2pEvEQBzJ9yrz+W/TgZ6By+lQ34bDpJD6t VjPaL0Co1H1a2x8YRGEY1Vo6tmy86Om+8QqXNX7UDuMswWDbv8XQAYAqxBJF6RMF gXIqvomQxUPJ7x4u3sr/R285tj0CaeR7/hdA7hx3d+HojGjMIYs/e+ILF26abooO MUslUP7y2lKitujo6elqu4c0xIcFN+0Sm59pzK1Fs1BB/Q1WTIKErIyrcI239Ydn XDIZwFsq2BIc/Y/S0amtu6pPqNhOeuAKG2n6/y3KjuRiG4+hBGrM8G5jb5xkXzGD FIYFlHlujhEA+49OBmEedeKlqDBSGx9gqYx9AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUT+3Y9+NjAINOK/Ze2SDL6jVr3dUwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vVC0zWTktTmpB SU5PS19aZTJTREw2alZyM2RVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBHkysDANBgkqhkiG9w0BAQsFAAOCAQEAZ8oJK1tcQDZJMpjhn+EdZJ5R rwspojZAlqpo8aqBCIbPVsC+GUkM29brmCl+ngSVr/BmJaLB8ywUYnSto1GbVr4k ARSuilg4yCtEj/zJY7/oWcNiod3206UdAQsCXfWPE66z7vi0SG1n2OH3fs/Q6d3k PvB6yHnF557N0ezoXFAVJItdVDhbJjlVsRJ5ElcoLYEL4shPnCjpAJCWtKGNVnos TnvMwax3tuilwsJ6HfL/r1ApZI9ml9XYNYfCPUOIjbNNpR85Jf4KUFXy6RDjRxEJ QwXzVNuNC4SsmneUiRgh7fHSnF08zPkEQOEvvBGkezZj/6fsDV2OZexDiRAQyA== -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:25 2024 by rpki-client on console-ams.rpki-client.org