$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/SNAy4gLfsKtJS7rP77ssjQVEOAI.roa File: SNAy4gLfsKtJS7rP77ssjQVEOAI.roa (raw, json) Hash identifier: RXee/TOl93YJ3rqekHWefEErkIiGx/B8sm6BwQYr3+Y= Subject key identifier: 48:D0:32:E2:02:DF:B0:AB:49:4B:BA:CF:EF:BB:2C:8D:05:44:38:02 Certificate issuer: /CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9 Certificate serial: D8 Authority key identifier: F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/SNAy4gLfsKtJS7rP77ssjQVEOAI.roa Signing time: Sun 22 Sep 2024 18:19:02 +0000 ROA not before: Sun 22 Sep 2024 18:19:02 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 202.47.172.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9 Validity Not Before: Sep 22 18:19:02 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=48D032E202DFB0AB494BBACFEFBB2C8D05443802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:09:96:84:77:f4:a4:7d:2b:71:92:e6:13: ec:60:64:83:14:dd:88:88:1e:77:be:fd:ca:3e:c2: 0a:0c:71:d7:e8:8f:26:cb:67:68:b2:07:c3:48:9a: fe:dc:ec:7e:1d:c6:33:db:53:48:4f:2c:c4:c7:e2: 5f:41:e0:97:80:3f:5f:ed:a0:40:b9:42:b5:2e:7c: 30:a9:20:4e:72:78:1f:26:6f:98:eb:1e:ee:b5:40: 0a:6f:43:26:f6:c9:19:db:c1:fe:ea:28:4d:5b:45: 7a:fb:25:2b:a5:29:22:1a:57:6b:09:52:d7:d8:cf: d5:eb:af:44:ea:0d:6a:6c:00:5f:2e:18:a0:7e:da: d5:10:4c:a9:e3:8f:47:dc:1b:3c:03:55:a4:79:33: d4:3c:41:df:40:eb:49:f3:5c:7a:ac:06:1c:c0:f9: 65:9e:8a:de:04:80:f4:a2:33:9d:02:21:db:32:5b: 58:8d:7d:e4:c6:00:4f:c7:26:5d:57:d0:cf:1f:11: e8:8d:ab:d2:f2:ff:43:7b:6b:6d:a6:f2:b0:eb:3e: ff:01:1d:59:67:97:f9:02:09:2d:79:7e:d0:c8:4c: 39:58:3f:42:53:82:8b:0e:37:8c:49:28:f1:90:35: 9b:80:cb:bc:69:8a:0d:a6:30:94:6c:66:4e:ac:47: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D0:32:E2:02:DF:B0:AB:49:4B:BA:CF:EF:BB:2C:8D:05:44:38:02 X509v3 Authority Key Identifier: keyid:F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/SNAy4gLfsKtJS7rP77ssjQVEOAI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.47.172.0/23 Signature Algorithm: sha256WithRSAEncryption 91:ee:2a:41:88:64:39:58:26:84:38:a4:0e:42:7c:16:6f:1c: c7:ff:44:33:6a:59:cf:28:0b:d5:6d:83:10:0b:13:17:6d:52: 72:3c:9e:b0:d7:20:1b:55:0f:d8:f2:88:ce:63:dc:9f:1b:47: 13:45:52:30:41:71:38:87:85:24:ae:68:78:83:6d:91:d3:a5: 95:ff:25:68:86:3f:1f:70:88:cb:4a:01:cc:0f:c4:4c:69:5d: 8b:97:00:07:70:3a:2d:17:30:e4:12:d4:37:b7:04:67:40:5c: 02:0e:49:13:b9:66:da:45:26:39:d0:4e:d1:85:eb:d5:13:ef: f1:0e:58:08:72:57:e9:2c:53:2c:6c:44:b7:90:33:45:b6:09: 22:24:30:3d:00:d8:8a:f3:7b:02:02:6b:79:3a:24:c4:e9:1a: a6:3a:06:a6:73:2e:e7:67:33:10:d1:16:40:48:61:81:c5:2b: bc:43:1c:17:8a:00:80:9f:0a:56:7b:53:05:d4:c7:68:1c:70: 2c:01:df:47:f0:2a:29:13:86:70:83:8d:6f:30:9b:4b:66:8f: 15:60:16:96:8f:5d:8c:f8:7e:7c:aa:36:27:11:af:c2:ef:94: 7b:44:8f:9f:fe:96:02:34:e5:0b:4c:72:70:b7:51:b2:b7:4e: 79:07:20:7b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjk1 RjBBQTRFRUUzNDZGMDc3QTBDRUVDOEQwNkNDNDk4RjlCMUFCOTAeFw0yNDA5MjIx ODE5MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ4RDAzMkUyMDJERkIw QUI0OTRCQkFDRkVGQkIyQzhEMDU0NDM4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdAAmWhHf0pH0rcZLmE+xgZIMU3YiIHne+/co+wgoMcdfojybL Z2iyB8NImv7c7H4dxjPbU0hPLMTH4l9B4JeAP1/toEC5QrUufDCpIE5yeB8mb5jr Hu61QApvQyb2yRnbwf7qKE1bRXr7JSulKSIaV2sJUtfYz9Xrr0TqDWpsAF8uGKB+ 2tUQTKnjj0fcGzwDVaR5M9Q8Qd9A60nzXHqsBhzA+WWeit4EgPSiM50CIdsyW1iN feTGAE/HJl1X0M8fEeiNq9Ly/0N7a22m8rDrPv8BHVlnl/kCCS15ftDITDlYP0JT gosON4xJKPGQNZuAy7xpig2mMJRsZk6sR0SfAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUSNAy4gLfsKtJS7rP77ssjQVEOAIwHwYDVR0jBBgwFoAU+V8KpO7jRvB3oM7s jQbMSY+bGrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FJV0VJ Ly1WOEtwTzdqUnZCM29NN3NqUWJNU1ktYkdyay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvLVY4S3BPN2pSdkIzb003c2pRYk1TWS1iR3JrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FJV0VJL1NOQXk0Z0xmc0t0SlM3clA3 N3NzalFWRU9BSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHK L6wwDQYJKoZIhvcNAQELBQADggEBAJHuKkGIZDlYJoQ4pA5CfBZvHMf/RDNqWc8o C9VtgxALExdtUnI8nrDXIBtVD9jyiM5j3J8bRxNFUjBBcTiHhSSuaHiDbZHTpZX/ JWiGPx9wiMtKAcwPxExpXYuXAAdwOi0XMOQS1De3BGdAXAIOSRO5ZtpFJjnQTtGF 69UT7/EOWAhyV+ksUyxsRLeQM0W2CSIkMD0A2IrzewICa3k6JMTpGqY6BqZzLudn MxDRFkBIYYHFK7xDHBeKAICfClZ7UwXUx2gccCwB30fwKikThnCDjW8wm0tmjxVg FpaPXYz4fnyqNicRr8LvlHtEj5/+lgI05QtMcnC3UbK3TnkHIHs= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org