$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/U0Qu32aFcYyVYsUTPYXp29mL1ls.roa File: U0Qu32aFcYyVYsUTPYXp29mL1ls.roa (raw, json) Hash identifier: habKPE5J7k/lWuqEvLFxHy8BHzVDA0I8eehAK1WPpz0= Subject key identifier: 53:44:2E:DF:66:85:71:8C:95:62:C5:13:3D:85:E9:DB:D9:8B:D6:5B Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0 Certificate serial: 0C3C Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/U0Qu32aFcYyVYsUTPYXp29mL1ls.roa Signing time: Mon 26 Aug 2024 05:21:22 +0000 ROA not before: Mon 26 Aug 2024 05:21:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7539 IP address blocks: 203.145.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0 Validity Not Before: Aug 26 05:21:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=53442EDF6685718C9562C5133D85E9DBD98BD65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:57:3e:82:b9:16:32:34:7b:bf:c8:84:fb:2a: d2:e1:6c:d0:e0:3e:b2:12:92:c9:97:49:59:87:33: c0:95:3c:d6:e3:68:cd:a9:e2:76:4c:a7:fe:36:d3: 3c:3b:66:ac:68:ff:5e:b7:c7:a7:a9:86:77:6c:3d: f2:33:db:0f:fd:09:ab:6f:91:9e:28:2e:3c:fa:b1: 03:76:a2:df:2b:99:68:e9:03:a5:77:ac:a3:a6:e9: 3b:52:a6:14:82:e2:0d:52:4f:6b:ef:65:48:af:fc: b7:95:b2:b4:cc:69:05:4f:ab:34:0a:98:8e:34:84: 29:3d:51:9d:5e:4c:85:3b:00:e3:54:43:e9:50:d7: 3f:09:bf:a7:bd:d4:97:83:f2:6b:c4:76:2b:49:9b: 00:02:60:f0:fd:59:0a:42:fc:a9:28:ee:a4:5f:f8: 9e:9c:04:46:e1:ae:47:c7:01:a8:de:cf:ad:59:91: 01:9f:c2:09:76:14:e6:79:fd:ad:e4:79:9f:d0:4f: 91:7d:2e:42:4a:c5:c5:0f:3d:88:5d:a8:3e:c8:49: 6e:fa:23:9d:9c:b6:70:00:1f:02:37:15:26:74:ca: e7:db:50:20:71:ea:8d:90:0e:b3:d2:f6:69:91:b3: e3:63:b4:69:e6:19:1e:da:e0:cd:a5:d0:98:be:14: d5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:44:2E:DF:66:85:71:8C:95:62:C5:13:3D:85:E9:DB:D9:8B:D6:5B X509v3 Authority Key Identifier: keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/U0Qu32aFcYyVYsUTPYXp29mL1ls.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.145.208.0/20 Signature Algorithm: sha256WithRSAEncryption a6:2a:39:b0:22:6c:86:87:12:39:fe:21:e9:f0:40:57:69:d5: bd:12:35:83:5a:ff:d9:99:1d:50:cb:20:e4:03:8d:ec:ff:b5: fe:fa:98:dd:dd:89:45:91:9f:69:76:a8:b3:fd:9f:48:67:75: ba:e8:d0:50:c9:5d:b0:da:5d:58:7e:20:79:08:a2:fa:f8:8f: f8:da:4a:65:9c:c0:8e:54:b6:71:36:7d:4c:d6:17:07:cd:a0: 46:46:64:b9:ee:de:00:f0:5b:2b:26:53:27:d6:cd:09:48:5d: db:93:13:d8:7d:a0:fe:4e:1d:a8:71:34:ad:c5:48:04:58:ec: 6f:b6:b4:05:3c:d4:46:6d:ec:78:db:76:74:05:35:bc:0c:08: 60:6b:f5:e2:26:01:3f:4a:c2:57:af:a9:e3:97:d7:56:c2:d8: 84:d5:a1:c8:a9:b4:5e:61:1d:31:95:3f:8a:05:a8:24:e8:07: 90:80:b4:f7:28:65:65:85:56:a9:d1:84:46:15:30:b2:cd:c6: 0b:eb:89:be:80:2c:1e:f3:78:fa:16:75:67:fc:0d:99:67:a9: 27:ef:95:09:15:da:94:90:e4:bc:ba:68:3b:be:23:f0:d8:49: 7e:31:5c:46:50:47:a5:fa:48:19:d6:d9:63:be:55:de:3f:7d: c3:64:81:a2 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDUx RUY5MzU5QTk4NEY2QTRDRjkxRkU5MDA0RUFFQjA4OUE5ODRDMDAeFw0yNDA4MjYw NTIxMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUzNDQyRURGNjY4NTcx OEM5NTYyQzUxMzNEODVFOURCRDk4QkQ2NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnVz6CuRYyNHu/yIT7KtLhbNDgPrISksmXSVmHM8CVPNbjaM2p 4nZMp/420zw7Zqxo/163x6ephndsPfIz2w/9CatvkZ4oLjz6sQN2ot8rmWjpA6V3 rKOm6TtSphSC4g1ST2vvZUiv/LeVsrTMaQVPqzQKmI40hCk9UZ1eTIU7AONUQ+lQ 1z8Jv6e91JeD8mvEditJmwACYPD9WQpC/Kko7qRf+J6cBEbhrkfHAajez61ZkQGf wgl2FOZ5/a3keZ/QT5F9LkJKxcUPPYhdqD7ISW76I52ctnAAHwI3FSZ0yufbUCBx 6o2QDrPS9mmRs+NjtGnmGR7a4M2l0Ji+FNV7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUU0Qu32aFcYyVYsUTPYXp29mL1lswHwYDVR0jBBgwFoAURR75NZqYT2pM+R/p AE6usImphMAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkFSTC9S Ujc1TlpxWVQycE0tUl9wQUU2dXNJbXBoTUEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1JSNzVOWnFZVDJwTS1SX3BBRTZ1c0ltcGhNQS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL05BUkwvVTBRdTMyYUZjWXlWWXNVVFBZWHAy OW1MMWxzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMuR0DAN BgkqhkiG9w0BAQsFAAOCAQEApio5sCJshocSOf4h6fBAV2nVvRI1g1r/2ZkdUMsg 5AON7P+1/vqY3d2JRZGfaXaos/2fSGd1uujQUMldsNpdWH4geQii+viP+NpKZZzA jlS2cTZ9TNYXB82gRkZkue7eAPBbKyZTJ9bNCUhd25MT2H2g/k4dqHE0rcVIBFjs b7a0BTzURm3seNt2dAU1vAwIYGv14iYBP0rCV6+p45fXVsLYhNWhyKm0XmEdMZU/ igWoJOgHkIC09yhlZYVWqdGERhUwss3GC+uJvoAsHvN4+hZ1Z/wNmWepJ++VCRXa lJDkvLpoO74j8NhJfjFcRlBHpfpIGdbZY75V3j99w2SBog== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org