$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/H3VGRCeXshLI4YAhbqgXQ8GgRNI.roa File: H3VGRCeXshLI4YAhbqgXQ8GgRNI.roa (raw, json) Hash identifier: aoCDTFiYNR3OadszEHwNXEo8Nrpk2+XAPCCqIzgNHSM= Subject key identifier: 1F:75:46:44:27:97:B2:12:C8:E1:80:21:6E:A8:17:43:C1:A0:44:D2 Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Certificate serial: 3C Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/H3VGRCeXshLI4YAhbqgXQ8GgRNI.roa Signing time: Mon 29 Jul 2024 02:46:05 +0000 ROA not before: Mon 29 Jul 2024 02:46:05 +0000 ROA not after: Thu 17 Jul 2025 15:30:26 +0000 asID: 16509 IP address blocks: 160.25.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Sep 2024 00:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Validity Not Before: Jul 29 02:46:05 2024 GMT Not After : Jul 17 15:30:26 2025 GMT Subject: CN=1F7546442797B212C8E180216EA81743C1A044D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:25:bf:d0:b9:ac:1f:b5:2e:20:c8:76:88: 0a:ea:1d:93:49:36:4c:ce:1c:4c:e0:61:79:61:c5: a5:52:dd:d2:75:52:ee:bd:15:82:bc:78:05:e5:d1: 76:09:c9:c7:56:4b:b8:9e:4c:82:25:f1:ea:a2:db: 28:17:ee:bd:5e:5a:8b:22:a6:46:aa:e9:dd:b2:56: ab:e7:fe:52:5e:cb:82:47:8a:23:e8:60:46:f9:15: 38:1d:3e:dd:5a:4a:20:db:48:46:a5:6c:aa:41:42: 17:a4:23:16:4f:68:3f:11:e4:2e:10:8b:69:cf:69: d9:f4:79:56:f2:4c:22:15:9a:ec:ce:81:d7:f1:46: ae:8b:d7:0a:d6:58:cc:0c:1d:b6:9d:02:d9:69:62: 50:8c:4a:74:c7:4a:34:59:1c:fa:f9:50:50:8c:a4: 10:b9:83:a6:53:0a:6e:bf:e4:5b:3f:e9:f9:bd:cd: 9c:67:77:f1:41:0a:b5:be:49:76:14:c9:99:83:a7: 42:b9:09:97:c0:90:4e:9a:ec:f1:5a:f1:0f:44:4f: 09:69:4d:f7:f2:4b:f1:06:8d:8b:74:4a:02:32:eb: df:b0:d9:2e:d5:42:72:a0:cb:8a:be:f8:23:f5:e1: 30:b9:60:b2:e7:2b:49:42:90:46:6a:4a:93:92:30: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:75:46:44:27:97:B2:12:C8:E1:80:21:6E:A8:17:43:C1:A0:44:D2 X509v3 Authority Key Identifier: keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/H3VGRCeXshLI4YAhbqgXQ8GgRNI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.220.0/24 Signature Algorithm: sha256WithRSAEncryption a0:2b:d1:e1:00:07:a7:f8:06:e8:6d:e5:10:db:b8:29:5a:78: a0:3f:bc:49:6d:7f:e4:c5:cb:2b:6a:5a:a0:ca:b3:9a:66:36: 57:47:04:df:6e:6a:e1:08:37:2e:59:da:3f:cf:92:10:ee:17: 02:b2:c1:6d:b4:f5:2f:15:91:3d:1d:c1:fa:29:b4:e0:d4:4d: d9:64:e9:38:00:44:7c:7c:c0:37:93:af:a3:fe:41:d5:35:ee: 44:f9:0c:44:20:bd:75:d0:3e:c6:14:18:48:fb:6a:bf:56:8f: 91:99:d2:c1:ed:00:93:c1:4d:86:69:37:93:cb:d7:e6:5d:02: 28:31:f5:31:a7:a3:43:d8:5c:c1:2e:c9:4a:29:0f:d5:e8:b6: 46:a2:75:21:c8:0c:16:9f:f6:e4:74:1b:82:8f:0d:4b:8b:4d: 1b:0e:47:3c:38:f1:f2:0c:f9:2f:21:8c:1e:64:28:b9:52:44: 40:02:18:12:c0:b0:32:09:08:90:5e:f7:89:bb:1a:16:c6:12: a2:9f:42:26:1f:22:fc:c9:4d:d9:15:0a:42:5b:38:0a:8b:8e: cc:d3:d8:6c:ad:e4:e6:9a:ed:bf:1a:17:69:a5:79:8c:4a:97: 6c:09:21:76:2f:e6:e4:c0:15:a6:6d:9a:94:cd:bf:96:35:bd: 86:29:e6:59 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MjJF N0M5NUQ4N0RFOUFFRUIyMTJBMEM0Q0NCMDE3NEU2NUNBNUQwMB4XDTI0MDcyOTAy NDYwNVoXDTI1MDcxNzE1MzAyNlowMzExMC8GA1UEAxMoMUY3NTQ2NDQyNzk3QjIx MkM4RTE4MDIxNkVBODE3NDNDMUEwNDREMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKDyJb/QuawftS4gyHaICuodk0k2TM4cTOBheWHFpVLd0nVS7r0V grx4BeXRdgnJx1ZLuJ5MgiXx6qLbKBfuvV5aiyKmRqrp3bJWq+f+Ul7LgkeKI+hg RvkVOB0+3VpKINtIRqVsqkFCF6QjFk9oPxHkLhCLac9p2fR5VvJMIhWa7M6B1/FG rovXCtZYzAwdtp0C2WliUIxKdMdKNFkc+vlQUIykELmDplMKbr/kWz/p+b3NnGd3 8UEKtb5JdhTJmYOnQrkJl8CQTprs8VrxD0RPCWlN9/JL8QaNi3RKAjLr37DZLtVC cqDLir74I/XhMLlgsucrSUKQRmpKk5IwbRsCAwEAAaOCAfIwggHuMB0GA1UdDgQW BBQfdUZEJ5eyEsjhgCFuqBdDwaBE0jAfBgNVHSMEGDAWgBRCLnyV2H3prushKgxM ywF05lyl0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GA1UdHwRXMFUwU6BR oE+GTXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVD SC9RaTU4bGRoOTZhN3JJU29NVE1zQmRPWmNwZEEuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1FpNThsZGg5NmE3cklTb01UTXNCZE9aY3BkQS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGeBggrBgEFBQcBCwSBkTCBjjBZBggrBgEFBQcwC4ZNcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NLSVBURUNIL0gzVkdSQ2VYc2hMSTRZ QWhicWdYUThHZ1JOSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25p Yy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGdwwDQYJKoZIhvcNAQELBQADggEBAKAr0eEAB6f4Buht5RDbuClaeKA/vElt f+TFyytqWqDKs5pmNldHBN9uauEINy5Z2j/PkhDuFwKywW209S8VkT0dwfoptODU Tdlk6TgARHx8wDeTr6P+QdU17kT5DEQgvXXQPsYUGEj7ar9Wj5GZ0sHtAJPBTYZp N5PL1+ZdAigx9TGno0PYXMEuyUopD9XotkaidSHIDBaf9uR0G4KPDUuLTRsORzw4 8fIM+S8hjB5kKLlSREACGBLAsDIJCJBe94m7GhbGEqKfQiYfIvzJTdkVCkJbOAqL jszT2Gyt5Oaa7b8aF2mleYxKl2wJIXYv5uTAFaZtmpTNv5Y1vYYp5lk= -----END CERTIFICATE-----Generated at Wed Sep 18 23:45:48 2024 by rpki-client on console-ams.rpki-client.org