$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/4kdm3aoHb6XEMjV5wsqhkpBSxXg.roa File: 4kdm3aoHb6XEMjV5wsqhkpBSxXg.roa (raw, json) Hash identifier: lFfU3HOa847j4pIHh8R3O/nsA9GU6goYPdJuHZyCW3o= Subject key identifier: E2:47:66:DD:AA:07:6F:A5:C4:32:35:79:C2:CA:A1:92:90:52:C5:78 Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Certificate serial: 0C58 Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/4kdm3aoHb6XEMjV5wsqhkpBSxXg.roa Signing time: Mon 26 Aug 2024 05:26:49 +0000 ROA not before: Mon 26 Aug 2024 05:26:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4783 IP address blocks: 202.39.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC Validity Not Before: Aug 26 05:26:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E24766DDAA076FA5C4323579C2CAA1929052C578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:86:e9:8c:17:82:fe:25:7c:6f:82:9a:0b: a2:32:83:5e:9f:5a:22:a1:40:70:34:76:13:3f:b9: 83:77:1d:4e:4e:3d:5b:6d:79:91:74:fa:4c:84:e4: 96:b1:a2:d2:dd:e1:8b:a8:35:2b:03:e9:5b:ed:4b: d1:e2:06:2c:9d:5a:86:99:09:4c:4e:7f:19:ce:2b: 01:4c:a2:66:67:39:81:c7:fb:5f:29:61:89:03:b1: 1e:75:66:69:06:d7:13:16:4e:64:c5:21:9b:fa:23: da:f8:12:1d:41:36:48:a4:b9:35:82:fe:24:e6:18: f8:5c:94:e3:83:88:fd:96:86:ea:8c:95:de:a3:0c: 3b:98:6d:15:f7:4c:cc:c9:a3:59:18:fd:5d:40:68: ba:56:ba:7c:8e:00:5f:07:3a:15:80:ca:6c:57:69: c6:93:23:62:16:c4:12:7e:06:5d:66:ec:fb:5c:77: 92:d5:09:b5:94:4b:3c:1d:6d:09:4d:28:8a:ed:6c: 32:9c:cc:1a:98:98:29:6e:04:d7:1e:fb:e6:8d:4b: d6:cc:a2:aa:d4:c6:d9:ec:50:08:3d:45:8d:c4:4e: 05:6d:93:b6:61:79:6f:dc:76:75:d8:05:84:04:dc: b5:de:37:7e:a8:13:8b:e5:6b:86:79:a4:87:25:55: 45:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:47:66:DD:AA:07:6F:A5:C4:32:35:79:C2:CA:A1:92:90:52:C5:78 X509v3 Authority Key Identifier: keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/4kdm3aoHb6XEMjV5wsqhkpBSxXg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.39.96.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:13:d8:61:4e:48:13:28:c9:33:58:78:46:6f:f3:50:b5:f1: 02:97:18:51:a3:6d:32:47:c1:fe:dd:04:08:b1:14:ff:6c:c5: 67:6a:74:89:36:b5:3d:9d:42:f1:bb:73:8e:6d:61:ea:a7:97: 60:4b:d2:94:cc:4c:47:3c:12:83:ee:a3:1a:0a:63:d2:c7:95: af:9f:5e:61:54:cf:79:fd:90:5a:00:ab:a8:f0:5f:6c:62:93: f2:e7:fd:d5:5d:94:e7:aa:fa:79:48:6c:29:f4:5d:99:e2:f8: de:2d:1e:30:9d:d8:2a:4b:35:f2:0d:64:89:5e:2e:c0:a4:0b: cc:7f:35:93:c7:e6:3d:14:cf:6d:c5:3d:3d:df:35:15:93:bd: ba:b2:7c:f3:4e:55:1d:5f:66:f5:c4:0b:dd:53:0d:9e:b2:c3: 09:aa:37:56:6a:83:40:4c:3e:fb:de:f5:73:7d:66:5a:44:5c: 5a:62:55:65:7a:f5:26:3c:f1:de:19:f2:75:4b:97:90:1d:ce: a9:36:5c:c6:dd:6d:0b:73:78:bc:48:f4:2f:28:a5:af:c1:dd: 4d:90:05:91:3f:c1:a6:50:fe:76:b8:45:18:62:bc:8e:14:d7: d1:cb:26:ef:79:00:9d:95:4c:67:12:97:b4:e8:a6:9e:8b:70: b1:6b:f9:1e -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTZC Qjk0QjQ1N0Y5RDgyQTI5QjVCMkZEOUYzQTQ0MTg4OTlFNzFFQzAeFw0yNDA4MjYw NTI2NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyNDc2NkREQUEwNzZG QTVDNDMyMzU3OUMyQ0FBMTkyOTA1MkM1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVO4bpjBeC/iV8b4KaC6Iyg16fWiKhQHA0dhM/uYN3HU5OPVtt eZF0+kyE5JaxotLd4YuoNSsD6VvtS9HiBiydWoaZCUxOfxnOKwFMomZnOYHH+18p YYkDsR51ZmkG1xMWTmTFIZv6I9r4Eh1BNkikuTWC/iTmGPhclOODiP2WhuqMld6j DDuYbRX3TMzJo1kY/V1AaLpWunyOAF8HOhWAymxXacaTI2IWxBJ+Bl1m7Ptcd5LV CbWUSzwdbQlNKIrtbDKczBqYmCluBNce++aNS9bMoqrUxtnsUAg9RY3ETgVtk7Zh eW/cdnXYBYQE3LXeN36oE4vla4Z5pIclVUUTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4kdm3aoHb6XEMjV5wsqhkpBSxXgwHwYDVR0jBBgwFoAUlruUtFf52CoptbL9 nzpEGImecewwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVU L2xydVV0RmY1MkNvcHRiTDluenBFR0ltZWNldy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbHJ1VXRGZjUyQ29wdGJMOW56cEVHSW1lY2V3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lTTkVULzRrZG0zYW9IYjZYRU1qVjV3 c3Foa3BCU3hYZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATK J2AwDQYJKoZIhvcNAQELBQADggEBADsT2GFOSBMoyTNYeEZv81C18QKXGFGjbTJH wf7dBAixFP9sxWdqdIk2tT2dQvG7c45tYeqnl2BL0pTMTEc8EoPuoxoKY9LHla+f XmFUz3n9kFoAq6jwX2xik/Ln/dVdlOeq+nlIbCn0XZni+N4tHjCd2CpLNfINZIle LsCkC8x/NZPH5j0Uz23FPT3fNRWTvbqyfPNOVR1fZvXEC91TDZ6ywwmqN1Zqg0BM Pvve9XN9ZlpEXFpiVWV69SY88d4Z8nVLl5Adzqk2XMbdbQtzeLxI9C8opa/B3U2Q BZE/waZQ/na4RRhivI4U19HLJu95AJ2VTGcSl7Topp6LcLFr+R4= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org