$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAELW/bdZqr9bNbyN1GWHZaBMNFiBhFho.roa File: bdZqr9bNbyN1GWHZaBMNFiBhFho.roa (raw, json) Hash identifier: mT9vDpTLDrLx6q/n6Z9qgX6Bi5eAnbdszLmZUKhmfS8= Subject key identifier: 6D:D6:6A:AF:D6:CD:6F:23:75:19:61:D9:68:13:0D:16:20:61:16:1A Certificate issuer: /CN=43EBD39FB518B55DA00742AEEC7B0DA6AABA61F7 Certificate serial: 03 Authority key identifier: 43:EB:D3:9F:B5:18:B5:5D:A0:07:42:AE:EC:7B:0D:A6:AA:BA:61:F7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/bdZqr9bNbyN1GWHZaBMNFiBhFho.roa Signing time: Wed 12 Jun 2024 06:28:46 +0000 ROA not before: Wed 12 Jun 2024 06:28:46 +0000 ROA not after: Wed 14 May 2025 15:30:25 +0000 asID: 152610 IP address blocks: 160.19.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Sep 2024 03:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43EBD39FB518B55DA00742AEEC7B0DA6AABA61F7 Validity Not Before: Jun 12 06:28:46 2024 GMT Not After : May 14 15:30:25 2025 GMT Subject: CN=6DD66AAFD6CD6F23751961D968130D162061161A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:3f:f7:6b:de:a9:00:0e:16:e0:63:76:7b: 86:c8:d7:11:fe:d2:5f:84:3d:1f:db:04:46:01:de: 33:3d:20:8a:5d:ff:b4:e7:32:2a:69:99:69:75:89: 4e:e4:23:bb:1f:be:4d:a9:76:7e:d2:cf:c2:73:e5: f8:63:bd:82:e4:63:1c:af:6b:55:07:3b:10:c3:c0: 73:f0:5f:a3:2e:6d:80:04:d5:d0:27:8e:97:32:d8: df:78:0c:bc:6c:aa:3b:65:c8:a7:cc:3b:ce:b5:52: 25:ab:a3:59:f6:3d:75:46:f1:52:6f:d1:43:34:3b: 0f:9b:56:a4:f5:9f:13:28:c5:2c:ae:36:85:50:c2: 80:8f:48:15:59:a0:83:3d:b2:ea:f9:8c:11:cc:00: 78:2a:0b:b8:4f:bd:63:f1:d4:de:1e:b0:c7:ac:c5: 98:a6:b6:70:c9:d3:91:fe:da:ff:cf:fa:3c:04:3d: 5b:e9:7e:78:54:e1:41:e0:00:e3:ec:49:13:6a:ec: 24:c8:c8:57:7d:7f:ec:dd:12:a0:6b:8d:fd:c4:78: d4:ad:51:82:35:b7:3e:fd:55:6c:f2:93:5a:76:41: 1d:be:66:ab:45:7d:07:49:d0:e2:b8:10:01:14:49: 1d:be:7f:d2:c3:37:15:43:c4:80:80:b2:9f:c5:4c: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D6:6A:AF:D6:CD:6F:23:75:19:61:D9:68:13:0D:16:20:61:16:1A X509v3 Authority Key Identifier: keyid:43:EB:D3:9F:B5:18:B5:5D:A0:07:42:AE:EC:7B:0D:A6:AA:BA:61:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/bdZqr9bNbyN1GWHZaBMNFiBhFho.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.19.90.0/24 Signature Algorithm: sha256WithRSAEncryption 92:0a:32:78:ea:5b:10:30:58:90:37:db:41:dc:43:09:58:67: 1d:2f:b0:9b:32:39:50:ed:f5:17:05:72:d7:26:36:87:ae:34: 94:3c:1a:e3:bf:e6:1e:b7:4a:75:99:fa:f6:4a:34:21:ce:e0: 73:6d:58:64:96:8e:14:67:03:57:ea:87:de:27:3c:ff:1e:9d: f1:ca:ac:6e:26:59:d6:49:b2:54:b3:d9:dd:14:ba:b9:c4:ab: b2:13:32:68:95:5b:3f:9e:26:35:42:4a:5a:96:ba:29:c5:1f: 91:2b:8e:38:c6:b7:44:7c:51:3a:2a:8b:f3:cd:4b:52:ff:66: 01:7d:78:46:9c:4f:34:e5:8f:dd:98:a1:52:71:c4:3f:f1:e6: d0:22:02:03:cd:62:ca:41:68:6b:63:1e:4a:66:da:39:45:1f: 65:a8:22:75:0f:26:45:be:70:01:33:e5:02:2d:ba:86:fb:e9: c0:35:6b:32:14:45:7b:5e:0e:73:ac:fe:d9:9a:11:8f:e6:76: 9f:c8:3a:8e:b2:33:5c:e3:cb:5d:10:c9:04:36:2d:08:91:47: ca:20:97:f0:70:7b:49:0d:f0:ff:9c:e3:04:68:e2:68:a6:38: 51:b3:f9:67:30:0e:92:3c:13:5e:9d:18:cb:e7:cf:7a:08:a9: 1b:10:e2:8c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0M0VC RDM5RkI1MThCNTVEQTAwNzQyQUVFQzdCMERBNkFBQkE2MUY3MB4XDTI0MDYxMjA2 Mjg0NloXDTI1MDUxNDE1MzAyNVowMzExMC8GA1UEAxMoNkRENjZBQUZENkNENkYy Mzc1MTk2MUQ5NjgxMzBEMTYyMDYxMTYxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKeDP/dr3qkADhbgY3Z7hsjXEf7SX4Q9H9sERgHeMz0gil3/tOcy KmmZaXWJTuQjux++Tal2ftLPwnPl+GO9guRjHK9rVQc7EMPAc/Bfoy5tgATV0CeO lzLY33gMvGyqO2XIp8w7zrVSJaujWfY9dUbxUm/RQzQ7D5tWpPWfEyjFLK42hVDC gI9IFVmggz2y6vmMEcwAeCoLuE+9Y/HU3h6wx6zFmKa2cMnTkf7a/8/6PAQ9W+l+ eFThQeAA4+xJE2rsJMjIV31/7N0SoGuN/cR41K1RgjW3Pv1VbPKTWnZBHb5mq0V9 B0nQ4rgQARRJHb5/0sM3FUPEgICyn8VMa/0CAwEAAaOCAewwggHoMB0GA1UdDgQW BBRt1mqv1s1vI3UZYdloEw0WIGEWGjAfBgNVHSMEGDAWgBRD69OftRi1XaAHQq7s ew2mqrph9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQUVMVy9R LXZUbjdVWXRWMmdCMEt1N0hzTnBxcTZZZmMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L1EtdlRuN1VZdFYyZ0IwS3U3SHNOcHFxNllmYy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1NBRUxXL2JkWnFyOWJOYnlOMUdXSFphQk1O RmlCaEZoby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgE1ow DQYJKoZIhvcNAQELBQADggEBAJIKMnjqWxAwWJA320HcQwlYZx0vsJsyOVDt9RcF ctcmNoeuNJQ8GuO/5h63SnWZ+vZKNCHO4HNtWGSWjhRnA1fqh94nPP8enfHKrG4m WdZJslSz2d0UurnEq7ITMmiVWz+eJjVCSlqWuinFH5ErjjjGt0R8UToqi/PNS1L/ ZgF9eEacTzTlj92YoVJxxD/x5tAiAgPNYspBaGtjHkpm2jlFH2WoInUPJkW+cAEz 5QItuob76cA1azIURXteDnOs/tmaEY/mdp/IOo6yM1zjy10QyQQ2LQiRR8ogl/Bw e0kN8P+c4wRo4mimOFGz+WcwDpI8E16dGMvnz3oIqRsQ4ow= -----END CERTIFICATE-----Generated at Wed Sep 18 23:45:48 2024 by rpki-client on console-ams.rpki-client.org