$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/1e9AxoJJys3BmhHoKqBu_jyfhNg.roa File: 1e9AxoJJys3BmhHoKqBu_jyfhNg.roa (raw, json) Hash identifier: SfaGxErSsnz1F2/3IjoiIdIjr+Ce1ZwiejIe8Hle1L8= Subject key identifier: D5:EF:40:C6:82:49:CA:CD:C1:9A:11:E8:2A:A0:6E:FE:3C:9F:84:D8 Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0 Certificate serial: 0B3F Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/1e9AxoJJys3BmhHoKqBu_jyfhNg.roa Signing time: Fri 01 Sep 2023 09:21:35 +0000 ROA not before: Fri 01 Sep 2023 09:21:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7539 IP address blocks: 203.145.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0 Validity Not Before: Sep 1 09:21:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D5EF40C68249CACDC19A11E82AA06EFE3C9F84D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7e:0b:66:ab:04:f4:24:8b:62:62:bb:2e:c5: 7f:66:dc:89:bd:fd:ed:5c:45:d8:a8:15:7d:26:32: df:bb:ea:46:02:02:d7:02:79:1b:54:35:52:06:3a: 25:bd:62:d3:80:e9:16:64:57:17:c9:3b:35:07:b1: f9:5e:c4:22:ab:1f:d2:4d:2c:20:27:b3:47:ae:d7: 18:71:f2:c6:c4:c9:0b:a0:30:dc:52:e0:0e:d3:3f: 81:01:86:33:6d:02:90:eb:c4:c8:3d:a4:cd:36:f6: 6a:6e:c3:8c:12:1c:e5:ba:d4:f1:c9:08:01:40:0b: 26:b5:d4:e2:ef:09:e7:29:aa:48:d8:c7:74:f7:89: 54:ec:dc:d3:5f:d3:1d:4a:ea:92:da:16:91:8f:7c: 54:61:af:15:8a:c8:a5:03:2c:de:3e:2e:85:60:94: 74:f3:85:ef:9d:4c:8e:8c:21:f5:fe:73:da:6f:e2: a3:7c:bc:70:28:02:a0:04:78:d7:05:ce:c7:b2:10: bc:15:29:74:b0:f1:ef:09:fc:22:cd:7a:a3:f1:27: de:d0:20:6e:65:7e:f2:db:05:1b:53:db:e8:47:36: 90:e1:f0:05:f4:c1:75:c4:f2:6c:76:c6:b2:a2:cd: 68:5b:cc:8e:b8:29:36:f6:69:5c:99:ad:c2:81:39: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EF:40:C6:82:49:CA:CD:C1:9A:11:E8:2A:A0:6E:FE:3C:9F:84:D8 X509v3 Authority Key Identifier: keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/1e9AxoJJys3BmhHoKqBu_jyfhNg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.145.208.0/20 Signature Algorithm: sha256WithRSAEncryption 22:1a:1d:65:e0:7c:0d:95:93:5e:5e:2c:42:da:2d:16:21:59: fb:8d:af:35:a7:e8:c4:ac:ae:06:b3:cb:9d:89:a3:d0:54:04: 4e:64:10:13:64:6a:ca:bb:d9:51:75:a4:b2:d3:08:47:e8:4e: be:99:33:92:89:6a:de:8d:46:d1:97:12:53:9f:83:87:f0:d5: 89:80:94:1c:28:9d:b5:97:9f:9c:a1:6e:39:78:b4:35:53:da: c8:50:36:c2:e7:82:cd:92:51:53:58:c1:7b:44:34:45:e3:7e: 5b:c1:ba:7b:0b:a6:ac:29:c3:d4:e5:a7:1f:f3:95:ad:00:f8: 4d:5d:55:44:56:75:92:01:cc:27:f6:1f:ba:ef:cc:23:7c:b2: 86:89:f1:16:1e:6f:a5:ee:6a:88:2c:94:ff:c9:0c:e2:b3:ca: 4d:ed:c2:35:02:1f:5f:76:9f:58:20:29:c5:fd:80:ed:fc:39: 53:31:bd:fb:76:22:7d:92:cb:68:8c:65:10:f1:8e:c0:00:f6: bb:6b:e8:cd:38:75:37:bf:e0:12:72:06:f4:42:77:e3:4d:c9: be:58:4d:3f:01:fa:6a:a8:a9:7a:3b:ec:eb:2d:63:52:00:a2: 1b:95:56:5e:6b:4e:7c:f0:bb:1f:25:7d:c0:58:a1:a8:d4:e8: 98:45:19:5e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDUx RUY5MzU5QTk4NEY2QTRDRjkxRkU5MDA0RUFFQjA4OUE5ODRDMDAeFw0yMzA5MDEw OTIxMzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ1RUY0MEM2ODI0OUNB Q0RDMTlBMTFFODJBQTA2RUZFM0M5Rjg0RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxfgtmqwT0JItiYrsuxX9m3Im9/e1cRdioFX0mMt+76kYCAtcC eRtUNVIGOiW9YtOA6RZkVxfJOzUHsflexCKrH9JNLCAns0eu1xhx8sbEyQugMNxS 4A7TP4EBhjNtApDrxMg9pM029mpuw4wSHOW61PHJCAFACya11OLvCecpqkjYx3T3 iVTs3NNf0x1K6pLaFpGPfFRhrxWKyKUDLN4+LoVglHTzhe+dTI6MIfX+c9pv4qN8 vHAoAqAEeNcFzseyELwVKXSw8e8J/CLNeqPxJ97QIG5lfvLbBRtT2+hHNpDh8AX0 wXXE8mx2xrKizWhbzI64KTb2aVyZrcKBOYBbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU1e9AxoJJys3BmhHoKqBu/jyfhNgwHwYDVR0jBBgwFoAURR75NZqYT2pM+R/p AE6usImphMAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkFSTC9S Ujc1TlpxWVQycE0tUl9wQUU2dXNJbXBoTUEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1JSNzVOWnFZVDJwTS1SX3BBRTZ1c0ltcGhNQS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05BUkwvMWU5QXhvSkp5czNCbWhIb0txQnVf anlmaE5nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMuR0DAN BgkqhkiG9w0BAQsFAAOCAQEAIhodZeB8DZWTXl4sQtotFiFZ+42vNafoxKyuBrPL nYmj0FQETmQQE2RqyrvZUXWkstMIR+hOvpkzkolq3o1G0ZcSU5+Dh/DViYCUHCid tZefnKFuOXi0NVPayFA2wueCzZJRU1jBe0Q0ReN+W8G6ewumrCnD1OWnH/OVrQD4 TV1VRFZ1kgHMJ/Yfuu/MI3yyhonxFh5vpe5qiCyU/8kM4rPKTe3CNQIfX3afWCAp xf2A7fw5UzG9+3YifZLLaIxlEPGOwAD2u2vozTh1N7/gEnIG9EJ3403JvlhNPwH6 aqipejvs6y1jUgCiG5VWXmtOfPC7HyV9wFihqNTomEUZXg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:47 2024 by rpki-client on console-ams.rpki-client.org