$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/wfDmLZNzKc3BpqRQK2GSG9ev8bg.roa File: wfDmLZNzKc3BpqRQK2GSG9ev8bg.roa (raw, json) Hash identifier: 0Xbp8UmmkY707PAXUTC01OqsmlPZH0bUHncwvAdHras= Subject key identifier: C1:F0:E6:2D:93:73:29:CD:C1:A6:A4:50:2B:61:92:1B:D7:AF:F1:B8 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 0D Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/wfDmLZNzKc3BpqRQK2GSG9ev8bg.roa Signing time: Mon 25 Mar 2024 15:28:31 +0000 ROA not before: Mon 25 Mar 2024 15:28:31 +0000 ROA not after: Fri 21 Mar 2025 15:30:27 +0000 asID: 152609 IP address blocks: 157.20.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: Mar 25 15:28:31 2024 GMT Not After : Mar 21 15:30:27 2025 GMT Subject: CN=C1F0E62D937329CDC1A6A4502B61921BD7AFF1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:ad:4d:62:1a:d7:e6:63:86:c6:9a:d6:b5: f1:00:c3:dd:e2:92:14:32:e6:c0:5d:3f:45:69:52: b6:81:40:4a:57:53:fe:26:7e:32:24:46:77:7f:c6: a4:14:f4:1f:06:97:95:8a:be:58:a5:e3:c7:39:6e: 8b:88:f7:0c:d7:5e:3d:4b:4c:24:6a:5d:58:3f:ac: bb:67:40:43:83:c9:be:34:2a:81:dc:86:e6:91:75: 20:3e:19:c9:b8:9a:e1:e2:38:64:3a:1d:87:b4:68: 69:2e:4d:6f:a2:7f:c2:54:ab:63:21:d6:3a:65:bc: cf:67:ce:41:c7:2b:4a:a0:b5:24:5e:3e:a9:2e:cb: b4:0f:ce:65:32:71:71:5d:87:ec:34:f6:3f:ea:02: a5:fd:62:32:18:6c:77:60:ab:fb:88:f9:f9:91:7c: 85:94:a9:b8:a8:80:68:51:bd:63:bf:f2:b7:cf:e5: 30:ec:ca:a5:cd:52:d2:85:7d:e8:1a:7a:45:f6:47: 96:8b:1a:e1:e2:15:fe:53:c6:fb:ea:3e:d3:5b:d5: ff:a5:2f:ec:75:e0:68:2d:ad:52:5d:c9:30:cc:f2: b9:6e:55:a4:9c:b8:6d:35:e7:86:b1:79:f6:80:d5: ae:71:8a:43:c2:5d:27:4c:57:d2:08:b9:e9:30:1c: 39:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F0:E6:2D:93:73:29:CD:C1:A6:A4:50:2B:61:92:1B:D7:AF:F1:B8 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/wfDmLZNzKc3BpqRQK2GSG9ev8bg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.249.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:50:a7:50:f4:93:f1:fe:68:16:27:ce:da:57:58:ac:3b:d5: 02:e5:40:49:ef:ee:b9:80:a9:c9:22:33:18:9d:e5:2f:2d:46: 4c:01:fe:2c:4b:0a:9f:32:44:8d:f9:03:b5:61:02:5b:6f:b6: 85:68:f3:1d:e5:8a:ae:3c:20:c1:24:c2:ee:7c:b7:2d:67:13: 11:45:d8:8f:71:51:7e:5b:08:ac:44:29:e6:64:68:cd:77:e3: d5:3a:ed:6f:91:f1:87:f1:4d:1d:8b:94:2d:5b:52:ff:b7:28: ab:cf:8e:93:9e:59:9d:d8:23:c0:88:7a:83:d2:e5:06:7a:33: 52:c1:ba:e8:a4:33:03:43:80:7b:20:cd:94:fe:c8:d7:3b:33: 0c:b9:06:cf:18:e4:c9:7c:63:42:a8:21:1b:89:c8:78:b0:18: 34:ec:ae:c8:27:52:a3:26:55:b7:98:f5:58:ed:5c:7f:56:b5: f1:91:be:d2:b0:b0:2b:57:72:a6:aa:9b:03:cb:8c:6a:22:62: bd:f7:9d:06:13:1e:9b:df:73:90:15:ad:ed:68:0e:b9:a0:f0: c1:31:46:c3:3d:80:cb:01:18:93:ff:bf:f5:91:ce:b7:fe:2c: b3:e3:12:77:d4:fb:40:fe:4a:4f:cc:55:45:57:24:9f:f3:b1: 86:a6:da:67 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMzNB NzJBQUY3OTgxMDVCQjI3N0YwOTQ0NThFNDY0QjQ2NTlGODAzMB4XDTI0MDMyNTE1 MjgzMVoXDTI1MDMyMTE1MzAyN1owMzExMC8GA1UEAxMoQzFGMEU2MkQ5MzczMjlD REMxQTZBNDUwMkI2MTkyMUJEN0FGRjFCODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALAMrU1iGtfmY4bGmta18QDD3eKSFDLmwF0/RWlStoFASldT/iZ+ MiRGd3/GpBT0HwaXlYq+WKXjxzlui4j3DNdePUtMJGpdWD+su2dAQ4PJvjQqgdyG 5pF1ID4Zybia4eI4ZDodh7RoaS5Nb6J/wlSrYyHWOmW8z2fOQccrSqC1JF4+qS7L tA/OZTJxcV2H7DT2P+oCpf1iMhhsd2Cr+4j5+ZF8hZSpuKiAaFG9Y7/yt8/lMOzK pc1S0oV96Bp6RfZHlosa4eIV/lPG++o+01vV/6Uv7HXgaC2tUl3JMMzyuW5VpJy4 bTXnhrF59oDVrnGKQ8JdJ0xX0gi56TAcOTkCAwEAAaOCAeowggHmMB0GA1UdDgQW BBTB8OYtk3MpzcGmpFArYZIb16/xuDAfBgNVHSMEGDAWgBTzOnKq95gQW7J38JRF jkZLRln4AzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGA1UdHwRTMFEwT6BN oEuGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JQU1ULzh6 cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev OHpweXF2ZVlFRnV5ZF9DVVJZNUdTMFpaLUFNLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZoGCCsGAQUFBwELBIGNMIGKMFUGCCsGAQUFBzALhklyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC93ZkRtTFpOektjM0JwcVJRSzJHU0c5 ZXY4Ymcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcvcnJk cC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRT5MA0G CSqGSIb3DQEBCwUAA4IBAQAOUKdQ9JPx/mgWJ87aV1isO9UC5UBJ7+65gKnJIjMY neUvLUZMAf4sSwqfMkSN+QO1YQJbb7aFaPMd5YquPCDBJMLufLctZxMRRdiPcVF+ WwisRCnmZGjNd+PVOu1vkfGH8U0di5QtW1L/tyirz46Tnlmd2CPAiHqD0uUGejNS wbropDMDQ4B7IM2U/sjXOzMMuQbPGOTJfGNCqCEbich4sBg07K7IJ1KjJlW3mPVY 7Vx/VrXxkb7SsLArV3KmqpsDy4xqImK9950GEx6b33OQFa3taA65oPDBMUbDPYDL ARiT/7/1kc63/iyz4xJ31PtA/kpPzFVFVySf87GGptpn -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:09 2024 by rpki-client on console-fra.rpki-client.org