$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/9FNPUr4WNt6YN9OcEm-4WFXX5tI.roa File: 9FNPUr4WNt6YN9OcEm-4WFXX5tI.roa (raw, json) Hash identifier: hzONo88ViTqeoMoW89VenGy5/qbZocbHfS5V+cEc4Yo= Subject key identifier: F4:53:4F:52:BE:16:36:DE:98:37:D3:9C:12:6F:B8:58:55:D7:E6:D2 Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4 Certificate serial: 0C62 Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/9FNPUr4WNt6YN9OcEm-4WFXX5tI.roa Signing time: Wed 13 Nov 2024 05:45:41 +0000 ROA not before: Wed 13 Nov 2024 05:45:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 103.252.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4 Validity Not Before: Nov 13 05:45:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F4534F52BE1636DE9837D39C126FB85855D7E6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:61:98:cb:5a:35:55:78:f9:89:88:8f:93:63: d4:b1:3d:36:e3:92:f7:98:be:aa:ce:06:e6:b7:e4: 48:f1:2f:b5:ff:d1:e9:6e:62:b2:99:0a:fc:9a:62: 0f:f6:e2:99:ab:95:c9:19:c3:d5:2e:29:2e:4b:d1: a6:68:09:c3:f4:a4:04:a2:be:ff:e8:60:54:b7:08: 16:0f:7a:98:3b:bb:09:43:85:b0:c0:34:e9:23:0e: 89:e9:c0:1a:da:f8:35:2d:d5:e3:29:36:24:14:e7: 2f:d0:d7:ac:ba:81:22:4c:0f:77:08:be:f9:e4:32: db:e9:b6:58:5b:c3:4a:ed:bd:ff:91:76:fa:39:0c: 87:43:c9:0a:ce:04:c2:93:51:3c:d4:52:40:6c:15: d5:b6:13:16:e5:e9:9d:a9:1b:ee:a1:48:fa:57:16: 30:42:27:53:7d:d8:34:5e:c7:90:e7:61:16:f5:ff: c0:31:7d:de:c4:7a:56:be:73:a8:1d:c9:bc:42:43: ba:59:5f:b8:31:b5:da:e6:1d:20:8b:ee:0b:6e:3a: d9:5d:1c:8b:e7:12:59:47:e5:e7:61:4e:ce:54:98: 46:87:a9:09:71:60:42:23:cc:45:de:af:02:3e:1d: 50:89:82:57:cd:fc:fa:d9:c4:e9:45:03:df:d1:05: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:53:4F:52:BE:16:36:DE:98:37:D3:9C:12:6F:B8:58:55:D7:E6:D2 X509v3 Authority Key Identifier: keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/9FNPUr4WNt6YN9OcEm-4WFXX5tI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.252.128.0/22 Signature Algorithm: sha256WithRSAEncryption 48:de:e4:e3:2a:39:72:1e:d3:5d:e5:a6:b0:55:97:11:0a:ec: 81:37:8c:6d:aa:67:37:6c:65:f0:16:13:ef:5c:4d:a6:58:d0: 91:74:e5:eb:61:6e:ad:e4:84:90:1e:da:e2:16:ac:9a:6c:fb: 89:90:5f:89:af:74:98:1c:79:8c:34:3d:4f:96:70:18:24:5a: c5:1e:0f:2d:6e:d1:0f:68:07:f7:69:a9:c4:18:cd:5c:9c:cf: 59:56:86:cf:e7:19:cf:9c:97:92:53:6c:b1:6f:84:76:0b:10: bc:79:3e:40:a8:ff:15:d0:c0:16:41:3e:10:47:50:4c:d3:83: d7:58:a8:5f:43:bf:a7:c8:0f:93:91:94:5a:28:99:e7:b6:51: fd:68:51:87:64:9b:ce:47:6a:37:c2:9c:25:27:15:0a:8c:64: 7d:19:84:b4:dd:c7:33:af:13:6b:20:de:38:d6:d1:2d:07:a8: aa:ae:2e:32:8e:9d:bd:3e:f3:13:96:52:83:74:72:42:8c:df: 89:e0:d4:7e:52:c7:b7:4d:09:55:62:16:78:38:b4:04:a1:a3: 8e:3c:df:b8:31:e3:4e:fd:ef:08:c3:29:ed:65:ba:1a:c6:06: 48:44:11:95:ab:f9:42:c9:23:ac:c2:67:32:1a:0b:8e:a4:3c: 1b:81:df:0d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVB RTJEMzMxRjJDNDI4MEMxNkFBOEJBRkUxNkZERENDRTM3MTVCNDAeFw0yNDExMTMw NTQ1NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY0NTM0RjUyQkUxNjM2 REU5ODM3RDM5QzEyNkZCODU4NTVEN0U2RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpYZjLWjVVePmJiI+TY9SxPTbjkveYvqrOBua35EjxL7X/0elu YrKZCvyaYg/24pmrlckZw9UuKS5L0aZoCcP0pASivv/oYFS3CBYPepg7uwlDhbDA NOkjDonpwBra+DUt1eMpNiQU5y/Q16y6gSJMD3cIvvnkMtvptlhbw0rtvf+Rdvo5 DIdDyQrOBMKTUTzUUkBsFdW2Exbl6Z2pG+6hSPpXFjBCJ1N92DRex5DnYRb1/8Ax fd7Eela+c6gdybxCQ7pZX7gxtdrmHSCL7gtuOtldHIvnEllH5edhTs5UmEaHqQlx YEIjzEXerwI+HVCJglfN/PrZxOlFA9/RBYVVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU9FNPUr4WNt6YN9OcEm+4WFXX5tIwHwYDVR0jBBgwFoAUDq4tMx8sQoDBaqi6 /hb93M43FbQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBL0Rx NHRNeDhzUW9EQmFxaTZfaGI5M000M0ZiUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev RHE0dE14OHNRb0RCYXFpNl9oYjkzTTQzRmJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSFlBLzlGTlBVcjRXTnQ2WU45T2NFbS00V0ZY WDV0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn/IAwDQYJ KoZIhvcNAQELBQADggEBAEje5OMqOXIe013lprBVlxEK7IE3jG2qZzdsZfAWE+9c TaZY0JF05ethbq3khJAe2uIWrJps+4mQX4mvdJgceYw0PU+WcBgkWsUeDy1u0Q9o B/dpqcQYzVycz1lWhs/nGc+cl5JTbLFvhHYLELx5PkCo/xXQwBZBPhBHUEzTg9dY qF9Dv6fID5ORlFoomee2Uf1oUYdkm85HajfCnCUnFQqMZH0ZhLTdxzOvE2sg3jjW 0S0HqKquLjKOnb0+8xOWUoN0ckKM34ng1H5Sx7dNCVViFng4tASho44837gx4079 7wjDKe1luhrGBkhEEZWr+ULJI6zCZzIaC46kPBuB3w0= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org