$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa File: qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa (raw, json) Hash identifier: Ckg8mFQpR9Q5JmJgnWpeHspgpRNmMikubm5MDwhvX4c= Subject key identifier: AB:0F:C9:16:80:0E:F8:6C:13:B7:9C:FF:36:4E:CE:61:0F:0D:63:33 Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5 Certificate serial: 010D Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa Signing time: Mon 26 Aug 2024 05:25:37 +0000 ROA not before: Mon 26 Aug 2024 05:25:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 202.153.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5 Validity Not Before: Aug 26 05:25:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AB0FC916800EF86C13B79CFF364ECE610F0D6333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:9f:03:43:6e:71:7b:94:87:ab:b9:e8:ba: fa:3d:d9:20:f7:66:e0:d0:ed:74:92:d1:c6:5a:96: 97:d5:8d:ef:df:39:5c:90:c8:7a:78:83:25:f3:f3: 50:c0:be:22:55:26:b4:e9:0a:f3:b5:54:d5:b5:06: ab:3c:6c:9d:6e:6a:a1:0c:a1:37:79:40:df:ea:e6: 62:0f:d1:ef:97:a7:40:2b:ad:ef:48:dc:11:94:a6: 7f:ce:4b:5e:e1:19:f1:54:71:b8:38:9d:ce:9f:d5: dd:e3:da:73:a3:bc:20:7e:e8:fc:ce:a0:20:eb:f3: f7:6d:ca:b5:01:6e:9f:fe:88:b6:c5:e7:9f:a4:26: 5a:96:1c:8e:6c:0e:8b:a5:06:0e:2c:b5:a6:91:f3: 26:e9:41:b7:9c:46:0a:3d:b8:92:30:ca:38:5e:7c: 89:1e:05:8e:f2:97:5f:88:a1:9a:23:5a:c8:25:2d: 62:5c:4c:84:f5:05:47:35:fa:d6:02:dd:6f:a1:60: 83:74:a8:0e:87:fe:77:65:78:e9:85:c4:f3:80:c2: f7:46:1a:b4:ac:11:0a:23:ed:6e:22:1e:f3:b7:51: 1e:70:7d:44:dc:63:64:a5:aa:aa:cc:7b:ee:56:a8: ac:a3:aa:c3:46:54:fd:26:51:52:d4:f9:85:18:ee: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0F:C9:16:80:0E:F8:6C:13:B7:9C:FF:36:4E:CE:61:0F:0D:63:33 X509v3 Authority Key Identifier: keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/qw_JFoAO-GwTt5z_Nk7OYQ8NYzM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.153.4.0/23 Signature Algorithm: sha256WithRSAEncryption a9:b0:e3:22:53:76:15:f1:09:04:4b:cd:d1:f3:ae:db:c8:4d: ec:bc:fe:92:0b:4d:ac:4a:e3:e1:8b:ef:38:c4:b6:21:16:1e: 2f:d6:d4:a5:3f:56:9b:09:04:c7:81:9a:a3:43:ae:0a:57:ad: a4:48:75:88:10:87:44:91:a5:fd:3b:7b:af:d4:fa:77:44:3a: 19:b4:bb:46:a2:38:9f:86:ca:05:17:89:7c:6e:b9:2d:bd:b5: 57:6c:5e:2d:4d:ac:d8:8b:f1:97:43:cd:f3:1c:6d:95:58:20: 5a:f4:12:e7:10:00:df:05:6f:c0:66:b2:ac:89:0d:b7:84:c6: 73:61:3a:3b:42:37:9b:d9:37:2e:17:7b:10:25:4d:a3:68:d4: f3:0f:d8:94:b7:c3:c7:ea:e2:08:a7:34:3c:76:11:d4:26:1a: 56:03:63:1f:54:9b:67:17:5c:40:b1:cd:dd:bb:ad:1d:69:57: 0e:83:05:41:7a:5a:8d:e5:32:12:b0:ce:8d:13:05:fe:cb:6b: dd:80:31:e0:12:09:05:63:d2:79:00:19:9d:69:78:7c:0b:62: 0a:ef:4a:ab:35:ea:fa:dd:42:73:7d:d5:b7:83:5d:ce:bd:0d: 54:79:a4:fc:27:43:f0:8a:a9:41:08:e9:bf:79:8d:8d:64:c0: cf:f5:28:61 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDI2 NEE0MUE3NDFFNUYwMEFFRDJCRDdFNEE3QTQyRjVCMUQ3NThENTAeFw0yNDA4MjYw NTI1MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCMEZDOTE2ODAwRUY4 NkMxM0I3OUNGRjM2NEVDRTYxMEYwRDYzMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChDJ8DQ25xe5SHq7nouvo92SD3ZuDQ7XSS0cZalpfVje/fOVyQ yHp4gyXz81DAviJVJrTpCvO1VNW1Bqs8bJ1uaqEMoTd5QN/q5mIP0e+Xp0Arre9I 3BGUpn/OS17hGfFUcbg4nc6f1d3j2nOjvCB+6PzOoCDr8/dtyrUBbp/+iLbF55+k JlqWHI5sDoulBg4staaR8ybpQbecRgo9uJIwyjhefIkeBY7yl1+IoZojWsglLWJc TIT1BUc1+tYC3W+hYIN0qA6H/ndleOmFxPOAwvdGGrSsEQoj7W4iHvO3UR5wfUTc Y2SlqqrMe+5WqKyjqsNGVP0mUVLU+YUY7v1rAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUqw/JFoAO+GwTt5z/Nk7OYQ8NYzMwHwYDVR0jBBgwFoAUAmSkGnQeXwCu0r1+ SnpC9bHXWNUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0RDTC1U Vy9BbVNrR25RZVh3Q3UwcjEtU25wQzliSFhXTlUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0FtU2tHblFlWHdDdTByMS1TbnBDOWJIWFdOVS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NEQ0wtVFcvcXdfSkZvQU8tR3dUdDV6 X05rN09ZUThOWXpNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AcqZBDANBgkqhkiG9w0BAQsFAAOCAQEAqbDjIlN2FfEJBEvN0fOu28hN7Lz+kgtN rErj4YvvOMS2IRYeL9bUpT9WmwkEx4Gao0OuCletpEh1iBCHRJGl/Tt7r9T6d0Q6 GbS7RqI4n4bKBReJfG65Lb21V2xeLU2s2Ivxl0PN8xxtlVggWvQS5xAA3wVvwGay rIkNt4TGc2E6O0I3m9k3Lhd7ECVNo2jU8w/YlLfDx+riCKc0PHYR1CYaVgNjH1Sb ZxdcQLHN3butHWlXDoMFQXpajeUyErDOjRMF/str3YAx4BIJBWPSeQAZnWl4fAti Cu9KqzXq+t1Cc33Vt4Ndzr0NVHmk/CdD8IqpQQjpv3mNjWTAz/UoYQ== -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:31 2024 by rpki-client on console-fra.rpki-client.org