$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/1aeEECTOprUJZ6my6r6d3HuKwLs.roa File: 1aeEECTOprUJZ6my6r6d3HuKwLs.roa (raw, json) Hash identifier: C3nKMLYkqypgkiLAltwBxM0cT6EYjZrWsD3+qADzC5o= Subject key identifier: D5:A7:84:10:24:CE:A6:B5:09:67:A9:B2:EA:BE:9D:DC:7B:8A:C0:BB Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0CCE Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/1aeEECTOprUJZ6my6r6d3HuKwLs.roa Signing time: Mon 26 Aug 2024 05:26:15 +0000 ROA not before: Mon 26 Aug 2024 05:26:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 180.214.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3278 (0xcce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 26 05:26:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5A7841024CEA6B50967A9B2EABE9DDC7B8AC0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:51:e7:f3:7b:a8:58:82:af:8a:4f:68:d3:90: ef:d9:c5:e1:36:63:8f:be:47:7a:62:75:da:47:5c: 95:88:5a:9b:82:70:fc:fe:3c:51:59:cf:3c:f8:2c: 06:ab:5a:5e:2e:b9:5d:f1:1d:0b:39:4b:7f:80:c8: 55:05:c8:73:d3:0a:a8:fa:f3:86:e0:8d:45:8b:b8: 11:fd:e2:b0:ff:0f:e1:ac:19:70:bd:5c:88:80:51: db:fb:73:f3:b1:5a:6a:47:d1:d3:1a:1d:3f:4a:fd: 97:7c:51:51:50:20:c6:0b:44:23:0d:25:3e:55:d9: 88:56:17:2e:f8:3d:8e:71:8e:7f:c7:7b:82:6e:2d: a8:14:42:25:0a:5a:e9:c4:35:80:02:88:06:fc:7e: ad:b8:ed:b5:21:d8:61:8e:c6:b5:86:ee:da:09:de: 4f:46:d8:b3:76:99:a8:58:2c:85:e9:91:7b:57:47: 08:01:d8:b5:9b:53:78:ac:be:3f:bc:24:bd:3a:52: 66:19:32:d9:36:b4:cd:35:af:fe:0d:17:ec:a5:13: 13:2f:88:7f:17:0b:7c:80:8f:be:75:c2:cb:e2:d6: 3e:65:40:57:8a:53:69:be:18:c2:22:8e:b1:f3:04: 7c:10:ee:64:fc:28:a5:e1:a4:6e:02:4e:6e:e9:be: dc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:84:10:24:CE:A6:B5:09:67:A9:B2:EA:BE:9D:DC:7B:8A:C0:BB X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/1aeEECTOprUJZ6my6r6d3HuKwLs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 180.214.176.0/20 Signature Algorithm: sha256WithRSAEncryption bb:4a:6c:c1:74:5e:f7:48:40:65:f9:8c:34:61:d1:62:1e:61: 26:55:f9:08:4c:b0:44:48:06:73:1b:e5:a2:49:46:6a:7c:3f: 1d:91:55:b6:c3:d9:6e:60:db:e1:d8:fd:39:72:f0:5d:e9:58: be:50:74:0d:ad:94:2c:27:5d:af:20:a1:36:e4:2a:df:fb:f8: 7e:e7:31:f5:c2:89:c6:2a:92:0f:c0:e6:c9:bc:8c:5e:df:94: 85:88:e6:55:ce:ae:97:22:ec:85:fa:45:cc:05:39:35:1d:e9: 96:51:b2:62:c9:4b:29:3c:31:ac:75:31:cf:7c:a0:cd:c8:51: 59:40:0a:a5:9b:cd:50:e1:7c:4f:ca:c6:32:46:93:e8:83:81: 8e:f4:e5:97:a1:33:c7:e6:31:ab:29:d0:f1:8b:65:56:6c:fc: fd:f1:e6:68:49:77:9d:0d:f2:cd:a8:0e:52:d7:b8:5c:1b:31: bb:1e:c8:dc:9a:17:e8:d3:57:5e:b6:21:65:82:e3:7f:cf:13: 0f:ad:9f:e1:19:14:cc:fb:94:55:2f:20:1f:35:51:9b:63:fe: 91:62:e2:24:0a:22:c8:23:c6:02:be:d9:a3:be:b1:83:42:43: c9:19:1a:b7:7f:e8:e3:be:ae:e4:c4:2a:ac:60:4f:79:05:d5: f2:06:d9:a2 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNDA4MjYw NTI2MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1QTc4NDEwMjRDRUE2 QjUwOTY3QTlCMkVBQkU5RERDN0I4QUMwQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWUefze6hYgq+KT2jTkO/ZxeE2Y4++R3piddpHXJWIWpuCcPz+ PFFZzzz4LAarWl4uuV3xHQs5S3+AyFUFyHPTCqj684bgjUWLuBH94rD/D+GsGXC9 XIiAUdv7c/OxWmpH0dMaHT9K/Zd8UVFQIMYLRCMNJT5V2YhWFy74PY5xjn/He4Ju LagUQiUKWunENYACiAb8fq247bUh2GGOxrWG7toJ3k9G2LN2mahYLIXpkXtXRwgB 2LWbU3isvj+8JL06UmYZMtk2tM01r/4NF+ylExMviH8XC3yAj751wsvi1j5lQFeK U2m+GMIijrHzBHwQ7mT8KKXhpG4CTm7pvtxdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU1aeEECTOprUJZ6my6r6d3HuKwLswHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS8xYWVFRUNUT3ByVUpaNm15NnI2 ZDNIdUt3THMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEtNaw MA0GCSqGSIb3DQEBCwUAA4IBAQC7SmzBdF73SEBl+Yw0YdFiHmEmVfkITLBESAZz G+WiSUZqfD8dkVW2w9luYNvh2P05cvBd6Vi+UHQNrZQsJ12vIKE25Crf+/h+5zH1 wonGKpIPwObJvIxe35SFiOZVzq6XIuyF+kXMBTk1HemWUbJiyUspPDGsdTHPfKDN yFFZQAqlm81Q4XxPysYyRpPog4GO9OWXoTPH5jGrKdDxi2VWbPz98eZoSXedDfLN qA5S17hcGzG7Hsjcmhfo01detiFlguN/zxMPrZ/hGRTM+5RVLyAfNVGbY/6RYuIk CiLII8YCvtmjvrGDQkPJGRq3f+jjvq7kxCqsYE95BdXyBtmi -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:14 2024 by rpki-client on console-ams.rpki-client.org