$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/VAzBKal5G8fcU-ZLqYdSnnkvWjc.roa File: VAzBKal5G8fcU-ZLqYdSnnkvWjc.roa (raw, json) Hash identifier: hG4zuHbI2+a/dfqSZEE8dY24d160G1nHsUZag1g4tb8= Subject key identifier: 54:0C:C1:29:A9:79:1B:C7:DC:53:E6:4B:A9:87:52:9E:79:2F:5A:37 Certificate issuer: /CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Certificate serial: 05 Authority key identifier: EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/VAzBKal5G8fcU-ZLqYdSnnkvWjc.roa Signing time: Sat 17 Aug 2024 16:27:05 +0000 ROA not before: Sat 17 Aug 2024 16:27:05 +0000 ROA not after: Wed 13 Aug 2025 03:59:03 +0000 asID: 32595 IP address blocks: 160.30.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Validity Not Before: Aug 17 16:27:05 2024 GMT Not After : Aug 13 03:59:03 2025 GMT Subject: CN=540CC129A9791BC7DC53E64BA987529E792F5A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:3a:15:6a:61:38:69:67:9c:b4:46:d7:83: 45:2b:99:96:75:d2:9d:96:3d:bb:45:6d:0c:d9:9b: 76:4d:4e:00:cb:20:c3:b5:df:df:44:a4:e8:f9:25: 78:6f:d9:4a:73:b6:78:6a:35:8f:48:67:53:65:bf: 81:89:f0:70:21:8f:8f:0e:9c:fd:36:7b:8f:28:2d: ec:8b:5c:4b:b5:a1:d5:02:93:90:f6:80:45:fe:6d: 8d:fc:d5:4a:8d:16:7c:c7:d2:af:04:c3:f7:a4:72: 8d:51:d7:fb:40:5a:08:33:6c:bb:60:57:a3:2f:aa: 9b:7f:dd:bb:c0:5a:92:78:b4:9e:eb:af:62:d4:3d: f8:62:45:cb:ea:45:0c:4c:2e:0b:d1:0c:16:a5:36: 2a:5c:6d:e7:e2:89:6e:f1:69:d3:79:99:8f:8b:ab: 16:4d:fc:84:f3:c0:96:9e:5d:8f:36:01:d3:ec:25: c3:62:2e:69:2b:8d:4e:9c:29:d7:69:d4:c9:bf:02: 62:c2:af:94:0e:db:6e:d4:ef:ff:5c:74:9f:62:25: fa:7f:0b:d0:5c:2b:54:34:b5:48:2f:a1:7f:ed:59: 77:71:c4:39:2a:51:c7:6d:cd:d3:07:6c:94:72:19: 06:6f:d6:bd:bf:40:00:82:c9:42:93:ed:20:36:c4: 3a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0C:C1:29:A9:79:1B:C7:DC:53:E6:4B:A9:87:52:9E:79:2F:5A:37 X509v3 Authority Key Identifier: keyid:EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/VAzBKal5G8fcU-ZLqYdSnnkvWjc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.98.0/23 Signature Algorithm: sha256WithRSAEncryption 84:30:05:a0:04:ba:00:e9:c1:97:12:ef:40:04:8c:6d:d9:4f: 5d:85:ad:19:6e:4f:ca:98:0f:f4:fc:ba:aa:da:8f:53:34:0d: 7c:a1:7c:98:1a:19:2a:22:f2:54:29:7f:75:73:a5:36:0d:07: 05:42:c6:c8:34:da:d0:af:c5:99:ba:db:66:3e:72:2f:33:2d: 71:b7:75:42:c8:65:14:74:75:dc:fe:b1:ba:63:e4:04:4f:51: b3:d6:9e:93:17:a9:d0:8d:f2:f2:26:61:3e:d7:88:d5:1e:da: a8:55:29:e1:d3:d9:43:f7:d5:19:df:44:de:50:02:ca:ca:1c: f9:99:2e:e8:a8:d6:b6:03:1e:c6:31:1d:25:a8:e1:c7:25:a7: 49:ae:90:34:4e:c7:9c:e3:8b:51:1f:f1:e3:86:fc:c9:94:4b: 51:1e:bf:f0:a2:66:a2:b8:6d:62:c2:ce:b5:06:3d:33:eb:31: 3e:8f:05:70:a8:4b:52:79:84:c0:46:ed:04:48:7b:60:e0:fe: 16:0c:21:46:84:c8:88:3b:a0:56:68:7d:ef:9d:9c:d8:97:9c: 04:62:1c:49:05:95:85:6b:ed:45:f7:17:0a:7b:75:7f:be:c6: 76:6c:fa:e5:2e:bd:0a:9f:48:66:d7:df:40:4b:2c:38:71:09: 63:d8:55:1d -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTE5 NDFDMzdCRDFFMkNGMTI1MTJGOThBQjM2NkMyOURBNzlCNzE4MB4XDTI0MDgxNzE2 MjcwNVoXDTI1MDgxMzAzNTkwM1owMzExMC8GA1UEAxMoNTQwQ0MxMjlBOTc5MUJD N0RDNTNFNjRCQTk4NzUyOUU3OTJGNUEzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+4OhVqYThpZ5y0RteDRSuZlnXSnZY9u0VtDNmbdk1OAMsgw7Xf 30Sk6PkleG/ZSnO2eGo1j0hnU2W/gYnwcCGPjw6c/TZ7jygt7ItcS7Wh1QKTkPaA Rf5tjfzVSo0WfMfSrwTD96RyjVHX+0BaCDNsu2BXoy+qm3/du8Bakni0nuuvYtQ9 +GJFy+pFDEwuC9EMFqU2Klxt5+KJbvFp03mZj4urFk38hPPAlp5djzYB0+wlw2Iu aSuNTpwp12nUyb8CYsKvlA7bbtTv/1x0n2Il+n8L0FwrVDS1SC+hf+1Zd3HEOSpR x23N0wdslHIZBm/Wvb9AAILJQpPtIDbEOqcCAwEAAaOCAe4wggHqMB0GA1UdDgQW BBRUDMEpqXkbx9xT5kuph1KeeS9aNzAfBgNVHSMEGDAWgBTuGUHDe9HizxJRL5ir Nmwp2nm3GDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSU1QTEUv N2hsQnczdlI0czhTVVMtWXF6WnNLZHA1dHhnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS83aGxCdzN2UjRzOFNVUy1ZcXpac0tkcDV0eGcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSU1QTEUvVkF6QkthbDVHOGZjVS1aTHFZ ZFNubmt2V2pjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAe YjANBgkqhkiG9w0BAQsFAAOCAQEAhDAFoAS6AOnBlxLvQASMbdlPXYWtGW5PypgP 9Py6qtqPUzQNfKF8mBoZKiLyVCl/dXOlNg0HBULGyDTa0K/FmbrbZj5yLzMtcbd1 QshlFHR13P6xumPkBE9Rs9aekxep0I3y8iZhPteI1R7aqFUp4dPZQ/fVGd9E3lAC ysoc+Zku6KjWtgMexjEdJajhxyWnSa6QNE7HnOOLUR/x44b8yZRLUR6/8KJmorht YsLOtQY9M+sxPo8FcKhLUnmEwEbtBEh7YOD+FgwhRoTIiDugVmh9752c2JecBGIc SQWVhWvtRfcXCnt1f77Gdmz65S69Cp9IZtffQEssOHEJY9hVHQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org