$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/McWrn1P_AhEzX1qj_jddr-Y2BKg.roa File: McWrn1P_AhEzX1qj_jddr-Y2BKg.roa (raw, json) Hash identifier: qiWx8pf7qG0Ym3xCDWcYm+GgWAbQgiKFkar6Tge9N/E= Subject key identifier: 31:C5:AB:9F:53:FF:02:11:33:5F:5A:A3:FE:37:5D:AF:E6:36:04:A8 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0C81 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/McWrn1P_AhEzX1qj_jddr-Y2BKg.roa Signing time: Mon 26 Aug 2024 05:26:35 +0000 ROA not before: Mon 26 Aug 2024 05:26:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 39.1.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 26 05:26:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=31C5AB9F53FF0211335F5AA3FE375DAFE63604A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:88:c0:ed:41:11:9b:74:73:96:dc:49:64: e2:54:20:78:12:f8:b2:82:96:da:39:ff:4d:02:0a: 0a:88:22:e6:b8:f2:a4:de:29:d9:af:d9:23:31:e5: 08:9e:ec:eb:ca:6e:c6:a8:9c:1e:37:fa:66:c7:a1: 0e:7b:b0:ef:7d:01:12:82:c7:0b:bf:16:6c:25:b6: d4:2f:a6:a0:88:47:58:0a:c0:30:30:da:fa:85:86: c8:43:6f:b0:40:2c:77:c1:59:08:6f:1a:84:9c:40: 40:2d:0b:bc:51:d0:1e:a0:cb:9d:81:1e:d9:bd:2f: 70:3d:a2:9e:13:b6:19:19:79:b3:81:e9:a9:22:bb: 24:24:32:f5:78:c5:c2:e1:12:d5:32:3a:6e:24:07: 7a:a0:0e:69:6b:2d:62:e0:18:ee:96:da:c2:0a:2a: 16:43:6f:d6:16:f8:2c:f1:0d:4a:53:79:89:16:2b: 83:44:db:e9:60:4c:72:be:4f:23:f0:70:ad:c3:aa: e6:30:d9:a8:84:64:ff:11:5f:51:14:3e:eb:91:d2: 1b:1f:73:07:12:d3:f3:ec:f3:1b:bf:e1:11:e7:cd: eb:ac:e5:fa:66:41:b0:41:89:10:39:5b:b7:39:1d: 8b:32:86:ae:82:b9:07:9a:e1:e2:30:d7:b6:9d:d5: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C5:AB:9F:53:FF:02:11:33:5F:5A:A3:FE:37:5D:AF:E6:36:04:A8 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/McWrn1P_AhEzX1qj_jddr-Y2BKg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.16.0/20 Signature Algorithm: sha256WithRSAEncryption 7b:fe:ba:78:ca:e8:01:d0:8f:d2:c8:1e:a9:b3:5f:b0:8a:29: 64:32:4a:35:59:94:e2:0f:23:54:82:e2:5d:8a:f2:23:ea:71: 93:88:26:a9:24:e0:71:e3:fc:fd:d7:2e:f8:39:80:dd:10:c3: 3a:c5:37:39:06:3b:7e:ce:8a:57:99:53:75:3e:d3:95:f1:64: 5c:eb:33:c4:62:35:8f:b0:59:42:f4:8a:39:48:f1:78:a6:2c: 64:cd:bb:22:c0:c7:d0:12:4d:95:35:34:c7:0f:82:7f:9d:af: 35:73:fc:cf:fd:31:b7:36:db:53:60:43:e7:21:8e:29:be:9d: 26:77:87:73:c5:b3:18:1e:81:bd:7b:52:d5:b5:9f:90:94:f5: 98:eb:27:0e:4c:da:1e:68:dc:5c:db:f0:c1:c1:77:0e:1f:85: cf:8e:ce:9d:cf:1f:7b:e8:83:ac:e9:b1:d3:9d:89:12:e0:55: 4f:28:7f:3c:b1:b6:88:2a:42:11:e0:af:f4:29:f4:c5:53:9a: 8e:c4:31:3a:80:c1:80:2a:15:9a:00:48:7f:6a:9c:08:87:63: 42:c9:4d:83:59:56:31:8c:f6:c4:08:26:b9:5b:81:dd:d5:6f: eb:30:fe:2a:75:33:ba:4d:65:72:48:09:f4:4c:37:0b:93:b0: 61:2f:d2:80 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNDA4MjYw NTI2MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMxQzVBQjlGNTNGRjAy MTEzMzVGNUFBM0ZFMzc1REFGRTYzNjA0QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuEYjA7UERm3RzltxJZOJUIHgS+LKClto5/00CCgqIIua48qTe Kdmv2SMx5Qie7OvKbsaonB43+mbHoQ57sO99ARKCxwu/FmwlttQvpqCIR1gKwDAw 2vqFhshDb7BALHfBWQhvGoScQEAtC7xR0B6gy52BHtm9L3A9op4TthkZebOB6aki uyQkMvV4xcLhEtUyOm4kB3qgDmlrLWLgGO6W2sIKKhZDb9YW+CzxDUpTeYkWK4NE 2+lgTHK+TyPwcK3DquYw2aiEZP8RX1EUPuuR0hsfcwcS0/Ps8xu/4RHnzeus5fpm QbBBiRA5W7c5HYsyhq6CuQea4eIw17ad1aPhAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUMcWrn1P/AhEzX1qj/jddr+Y2BKgwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9NY1dybjFQX0FoRXpYMXFqX2pk ZHItWTJCS2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwEQ MA0GCSqGSIb3DQEBCwUAA4IBAQB7/rp4yugB0I/SyB6ps1+wiilkMko1WZTiDyNU guJdivIj6nGTiCapJOBx4/z91y74OYDdEMM6xTc5Bjt+zopXmVN1PtOV8WRc6zPE YjWPsFlC9Io5SPF4pixkzbsiwMfQEk2VNTTHD4J/na81c/zP/TG3NttTYEPnIY4p vp0md4dzxbMYHoG9e1LVtZ+QlPWY6ycOTNoeaNxc2/DBwXcOH4XPjs6dzx976IOs 6bHTnYkS4FVPKH88sbaIKkIR4K/0KfTFU5qOxDE6gMGAKhWaAEh/apwIh2NCyU2D WVYxjPbECCa5W4Hd1W/rMP4qdTO6TWVySAn0TDcLk7BhL9KA -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org