$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/IHrDal9t6MTSF2G_fg_5T_Reoag.roa File: IHrDal9t6MTSF2G_fg_5T_Reoag.roa (raw, json) Hash identifier: YFM5ybvyixKGgH2oVE0FjLC7qD9tF7j6R6W0NnrUhxI= Subject key identifier: 20:7A:C3:6A:5F:6D:E8:C4:D2:17:61:BF:7E:0F:F9:4F:F4:5E:A1:A8 Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0CD2 Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/IHrDal9t6MTSF2G_fg_5T_Reoag.roa Signing time: Mon 26 Aug 2024 05:26:16 +0000 ROA not before: Mon 26 Aug 2024 05:26:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 203.121.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 26 05:26:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=207AC36A5F6DE8C4D21761BF7E0FF94FF45EA1A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:aa:6b:8c:d5:48:b3:6a:4f:a9:67:4c:9f: 6c:13:ab:e9:24:eb:1b:84:4c:f2:76:f0:38:f1:99: 39:9d:e5:6f:32:27:d7:09:8f:0a:0b:c6:03:65:4d: 95:e3:69:f8:19:dd:b0:d6:5e:a7:09:07:a1:42:3f: ce:11:d9:81:09:24:53:ab:5d:41:23:04:44:15:6b: 22:b6:3e:2e:c9:61:82:91:74:68:6e:04:6a:55:3a: 3f:b0:c0:e1:0e:52:97:07:53:85:cb:55:e9:29:13: 9a:94:06:8e:83:7c:6b:d0:13:e9:30:20:c2:a9:1f: 0f:f5:1e:3f:3b:24:c6:90:1c:f7:20:2d:73:db:bf: 5b:97:3b:5d:cc:91:b5:5b:d1:7f:94:60:32:7f:43: 16:8b:cc:a2:a4:73:c9:94:3c:bf:b4:c0:96:56:bc: 18:6c:eb:4d:e4:e4:34:49:ec:52:d7:95:39:7e:12: 86:8c:8c:99:b1:78:b1:82:4a:b9:0a:ef:a6:6a:2f: 78:a1:1f:ce:26:53:0b:f4:be:26:11:28:b6:e8:22: df:89:c2:ea:f6:e5:01:54:7c:3a:c9:cd:60:38:6f: 68:05:7a:9c:4e:d5:d5:fb:c0:13:d4:52:76:29:28: df:0d:5e:cf:2c:9f:63:e9:0c:6e:ff:36:8a:e2:55: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:C3:6A:5F:6D:E8:C4:D2:17:61:BF:7E:0F:F9:4F:F4:5E:A1:A8 X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/IHrDal9t6MTSF2G_fg_5T_Reoag.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.121.240.0/20 Signature Algorithm: sha256WithRSAEncryption 19:14:d9:bb:da:4e:0b:96:cb:f1:18:10:05:75:fa:12:25:ea: 78:cc:f9:02:04:fa:49:3c:cf:40:d3:7e:43:2c:5e:08:8e:6b: f4:41:fa:74:e4:35:ab:92:11:b0:9a:8c:53:bf:4d:63:b4:a9: 0f:5b:7c:0f:3b:68:57:2c:15:d2:6d:81:e9:99:1f:b6:23:88: f5:d9:02:98:d9:b8:b1:c8:eb:32:bd:d6:e3:d7:4c:32:d1:65: fd:a1:ad:ec:36:ca:9f:6f:c3:58:0b:0b:e4:7e:c8:a5:f4:b3: 01:89:da:d3:08:15:fc:2f:71:9f:ab:8e:ea:16:7f:f4:57:b7: 06:f5:73:b4:78:29:b3:78:34:3e:57:eb:70:f4:8e:f9:35:ad: 06:3e:b4:93:81:c3:8c:24:df:29:47:88:36:09:ac:60:7c:44: a8:39:61:d4:cd:47:5c:ba:74:c5:4b:33:33:02:5a:72:5e:56: ae:53:6a:ef:26:20:9e:d3:2d:3d:e4:e2:3f:17:db:b5:9c:56: cd:c3:c0:da:1d:91:20:72:e7:87:e4:09:18:ea:bc:71:f8:05: a8:ee:e6:da:28:d9:18:c3:b9:4a:c6:57:4b:44:0c:0c:18:f6: 21:70:d9:9b:b8:b3:a8:34:a3:52:48:6c:08:f3:5b:f7:03:5b: 80:6e:12:c0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNDA4MjYw NTI2MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwN0FDMzZBNUY2REU4 QzREMjE3NjFCRjdFMEZGOTRGRjQ1RUExQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS7KprjNVIs2pPqWdMn2wTq+kk6xuETPJ28DjxmTmd5W8yJ9cJ jwoLxgNlTZXjafgZ3bDWXqcJB6FCP84R2YEJJFOrXUEjBEQVayK2Pi7JYYKRdGhu BGpVOj+wwOEOUpcHU4XLVekpE5qUBo6DfGvQE+kwIMKpHw/1Hj87JMaQHPcgLXPb v1uXO13MkbVb0X+UYDJ/QxaLzKKkc8mUPL+0wJZWvBhs603k5DRJ7FLXlTl+EoaM jJmxeLGCSrkK76ZqL3ihH84mUwv0viYRKLboIt+Jwur25QFUfDrJzWA4b2gFepxO 1dX7wBPUUnYpKN8NXs8sn2PpDG7/NoriVR75AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUIHrDal9t6MTSF2G/fg/5T/ReoagwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9JSHJEYWw5dDZNVFNGMkdfZmdf NVRfUmVvYWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy3nw MA0GCSqGSIb3DQEBCwUAA4IBAQAZFNm72k4LlsvxGBAFdfoSJep4zPkCBPpJPM9A 035DLF4Ijmv0Qfp05DWrkhGwmoxTv01jtKkPW3wPO2hXLBXSbYHpmR+2I4j12QKY 2bixyOsyvdbj10wy0WX9oa3sNsqfb8NYCwvkfsil9LMBidrTCBX8L3Gfq47qFn/0 V7cG9XO0eCmzeDQ+V+tw9I75Na0GPrSTgcOMJN8pR4g2CaxgfESoOWHUzUdcunTF SzMzAlpyXlauU2rvJiCe0y095OI/F9u1nFbNw8DaHZEgcueH5AkY6rxx+AWo7uba KNkYw7lKxldLRAwMGPYhcNmbuLOoNKNSSGwI81v3A1uAbhLA -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org