$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/_Bu-XLonE6EcinKV1Epg05bhlBA.roa File: _Bu-XLonE6EcinKV1Epg05bhlBA.roa (raw, json) Hash identifier: RBQ6tYsjZ1bE28j6TRlRCUkyc/UPfp6g/psg4UYIcS4= Subject key identifier: FC:1B:BE:5C:BA:27:13:A1:1C:8A:72:95:D4:4A:60:D3:96:E1:94:10 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0CA4 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/_Bu-XLonE6EcinKV1Epg05bhlBA.roa Signing time: Tue 24 Sep 2024 10:59:20 +0000 ROA not before: Tue 24 Sep 2024 10:59:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 39.1.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Sep 24 10:59:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FC1BBE5CBA2713A11C8A7295D44A60D396E19410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:66:88:7a:91:20:83:94:2c:0a:b1:d4:66:4c: c5:52:6c:3e:d9:cb:16:65:76:28:4e:24:be:c8:96: 91:53:cf:e4:5b:e1:c0:fe:f3:fa:26:26:32:39:1d: 93:23:c0:b7:1b:f9:98:81:89:88:8c:de:57:24:b0: e5:d9:f1:37:9c:4c:7b:ef:17:90:07:86:95:30:9e: 6c:97:ea:6b:4e:60:82:b2:65:5d:f9:60:ba:ae:72: a2:99:6e:c1:c5:8f:2d:19:2e:db:6b:50:76:6e:15: 55:55:bb:8e:ef:fa:bb:25:3a:ce:f7:bf:13:27:28: d0:a4:c9:ff:40:8c:0b:4b:fa:d6:79:07:15:f9:38: f0:7c:09:4b:98:82:14:96:d6:a8:d6:90:bc:49:fe: 89:93:eb:f0:ff:9e:f5:ee:01:09:b2:85:10:b0:7d: 70:4f:d0:94:c5:f4:a9:d2:62:94:fb:31:5b:a7:04: af:46:a5:f2:a8:12:7a:0e:4c:06:a3:75:62:f9:ea: 6e:7e:55:8c:ce:f2:92:66:43:7c:0f:58:82:3b:53: 8a:79:c1:8d:39:91:e0:78:12:4d:25:d0:7d:65:e3: 5c:7f:73:79:05:a6:74:86:04:29:cf:3d:c8:aa:b2: 5d:0a:63:2a:82:29:06:48:62:42:cb:28:6b:d5:93: e8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1B:BE:5C:BA:27:13:A1:1C:8A:72:95:D4:4A:60:D3:96:E1:94:10 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/_Bu-XLonE6EcinKV1Epg05bhlBA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.48.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:1e:0b:a0:01:fe:af:05:25:49:c4:ea:2a:98:7f:c9:78:7d: c9:89:bd:9f:4d:56:36:6f:49:06:af:e0:a7:1e:13:b1:de:84: 75:a8:f2:4e:d6:ab:99:9d:eb:d8:95:67:2c:73:76:6b:1c:96: 45:43:4f:10:32:51:7b:86:9f:86:71:d9:54:e4:bb:dc:58:07: c6:72:78:18:a0:1e:a5:6d:4a:28:5e:08:e3:da:f3:ad:48:d9: d5:4c:3e:fd:4c:f5:34:5f:4f:0f:14:60:d0:28:30:d0:32:28: 00:06:8e:a5:a3:95:70:47:98:df:86:9f:bb:b1:da:16:c2:05: 8d:d4:61:99:48:a3:bc:fc:e0:36:5c:50:dc:f0:cf:57:14:f7: 9a:bd:47:e2:b1:81:1c:4f:a4:fa:62:83:37:4b:1b:99:cd:a1: a2:1f:ff:46:61:45:91:d8:2e:43:be:8c:d5:a0:a7:9e:1c:81: 94:1e:e8:0d:8f:ae:d5:0c:dc:07:3e:2e:fe:5b:20:88:b0:aa: b2:8a:e8:97:9d:05:b4:76:a3:77:a9:53:91:47:a2:0c:64:bc: 01:52:33:fb:38:20:42:71:46:55:c8:24:d4:c5:4c:f6:ea:e9: fb:41:7a:87:4b:7f:58:5b:f7:ec:0f:14:53:90:27:32:95:1e: 5c:a4:bd:f6 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNDA5MjQx MDU5MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZDMUJCRTVDQkEyNzEz QTExQzhBNzI5NUQ0NEE2MEQzOTZFMTk0MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDnZoh6kSCDlCwKsdRmTMVSbD7ZyxZldihOJL7IlpFTz+Rb4cD+ 8/omJjI5HZMjwLcb+ZiBiYiM3lcksOXZ8TecTHvvF5AHhpUwnmyX6mtOYIKyZV35 YLqucqKZbsHFjy0ZLttrUHZuFVVVu47v+rslOs73vxMnKNCkyf9AjAtL+tZ5BxX5 OPB8CUuYghSW1qjWkLxJ/omT6/D/nvXuAQmyhRCwfXBP0JTF9KnSYpT7MVunBK9G pfKoEnoOTAajdWL56m5+VYzO8pJmQ3wPWII7U4p5wY05keB4Ek0l0H1l41x/c3kF pnSGBCnPPciqsl0KYyqCKQZIYkLLKGvVk+gVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU/Bu+XLonE6EcinKV1Epg05bhlBAwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9fQnUtWExvbkU2RWNpbktWMUVw ZzA1YmhsQkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwEw MA0GCSqGSIb3DQEBCwUAA4IBAQA8HgugAf6vBSVJxOoqmH/JeH3Jib2fTVY2b0kG r+CnHhOx3oR1qPJO1quZnevYlWcsc3ZrHJZFQ08QMlF7hp+GcdlU5LvcWAfGcngY oB6lbUooXgjj2vOtSNnVTD79TPU0X08PFGDQKDDQMigABo6lo5VwR5jfhp+7sdoW wgWN1GGZSKO8/OA2XFDc8M9XFPeavUfisYEcT6T6YoM3SxuZzaGiH/9GYUWR2C5D vozVoKeeHIGUHugNj67VDNwHPi7+WyCIsKqyiuiXnQW0dqN3qVORR6IMZLwBUjP7 OCBCcUZVyCTUxUz26un7QXqHS39YW/fsDxRTkCcylR5cpL32 -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:14 2024 by rpki-client on console-ams.rpki-client.org