$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/SpEiR5xSuqRYIO0hiQ-clebM8mo.roa File: SpEiR5xSuqRYIO0hiQ-clebM8mo.roa (raw, json) Hash identifier: IBADF5pDP86XDQ685N2mq2HKF/LGmReHXYHZYc9s/lg= Subject key identifier: 4A:91:22:47:9C:52:BA:A4:58:20:ED:21:89:0F:9C:95:E6:CC:F2:6A Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0CA1 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/SpEiR5xSuqRYIO0hiQ-clebM8mo.roa Signing time: Mon 26 Aug 2024 05:26:54 +0000 ROA not before: Mon 26 Aug 2024 05:26:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131607 IP address blocks: 101.3.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Aug 26 05:26:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4A9122479C52BAA45820ED21890F9C95E6CCF26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1e:1f:b9:e7:80:d7:21:be:2b:3f:2d:4a:e5: 0e:6c:fe:83:55:10:b4:be:5a:53:9d:7c:69:6d:d2: 41:f2:7b:8c:17:70:2f:4e:b2:51:69:e8:74:2d:1f: 86:1e:04:1b:e1:13:55:48:a5:ef:4a:3e:12:df:e1: 6e:38:ba:a4:33:bc:d2:5e:ca:69:e7:84:77:04:c7: f4:4a:68:67:c1:5b:0a:e4:75:6e:7b:b6:ab:bf:2a: ed:e1:18:db:d4:98:81:36:48:60:ed:79:26:33:d4: d0:3e:42:d2:c5:b7:bc:b7:7b:06:26:c1:e0:df:87: 86:c2:57:12:b3:fa:a3:93:ac:99:f5:5d:fb:32:0c: ac:09:ed:58:bd:95:57:5b:ab:09:35:6e:45:a0:c1: b2:35:b3:19:3d:e4:58:6f:9f:d5:a8:c0:7d:b6:a4: 05:01:37:aa:67:bb:69:fb:3f:f3:c6:7a:97:ae:0d: ec:70:07:e1:79:55:fd:73:3d:df:67:ad:8e:10:6f: e2:3e:33:f9:69:2a:3a:3b:e1:97:05:ca:7d:55:49: 1b:c7:ed:95:52:01:af:0d:b4:de:98:9e:cc:20:4c: 4f:14:0f:2e:e8:b1:fd:8b:00:b5:4a:e2:33:c3:bc: b0:05:86:3d:fb:5b:1a:28:55:4e:f4:87:90:57:21: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:91:22:47:9C:52:BA:A4:58:20:ED:21:89:0F:9C:95:E6:CC:F2:6A X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/SpEiR5xSuqRYIO0hiQ-clebM8mo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.188.0/22 Signature Algorithm: sha256WithRSAEncryption a8:a3:9b:42:38:90:2a:ee:e9:a8:26:8b:89:9e:49:ee:2a:8b: b0:50:3d:f2:18:5c:09:78:8a:cf:8d:4e:86:d4:fb:02:51:c9: cb:93:bc:46:67:f0:28:96:04:6f:ae:8c:f7:66:ea:0b:42:c0: e8:30:86:54:5f:e3:0e:d4:3d:ca:d9:59:4b:4a:14:4a:3f:6d: 00:bf:0e:b7:3d:29:7c:0d:96:1a:b8:a2:0d:33:96:df:db:d7: 91:5f:a5:92:ff:33:d6:f8:c7:5a:b7:83:c2:34:98:60:99:89: 76:d7:27:c9:a7:37:39:14:e7:9d:93:3d:07:e5:e4:74:be:bc: a0:3f:ba:28:ef:4a:3f:53:1c:c7:38:9c:a6:ef:00:3c:27:a2: c3:bf:a9:bf:f1:45:31:ea:d2:ac:37:b7:69:19:b0:7e:c8:f4: 2b:c2:ab:e0:68:31:12:33:74:df:aa:9a:2b:d2:db:e3:48:8f: 7f:1f:2b:16:ee:26:42:f9:14:87:e2:59:d9:f5:15:ca:65:9d: ca:56:b5:1f:27:e3:82:9d:6a:78:83:b7:ca:1e:15:94:c0:42: 22:91:f1:6f:11:54:08:eb:9c:da:07:29:2c:c3:cb:1b:71:a5: b2:6f:15:39:6b:e5:2a:2f:ed:aa:50:38:a6:3f:41:63:f7:a5: 70:bb:ff:92 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNDA4MjYw NTI2NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBOTEyMjQ3OUM1MkJB QTQ1ODIwRUQyMTg5MEY5Qzk1RTZDQ0YyNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrHh+554DXIb4rPy1K5Q5s/oNVELS+WlOdfGlt0kHye4wXcC9O slFp6HQtH4YeBBvhE1VIpe9KPhLf4W44uqQzvNJeymnnhHcEx/RKaGfBWwrkdW57 tqu/Ku3hGNvUmIE2SGDteSYz1NA+QtLFt7y3ewYmweDfh4bCVxKz+qOTrJn1Xfsy DKwJ7Vi9lVdbqwk1bkWgwbI1sxk95Fhvn9WowH22pAUBN6pnu2n7P/PGepeuDexw B+F5Vf1zPd9nrY4Qb+I+M/lpKjo74ZcFyn1VSRvH7ZVSAa8NtN6YnswgTE8UDy7o sf2LALVK4jPDvLAFhj37WxooVU70h5BXId8DAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUSpEiR5xSuqRYIO0hiQ+clebM8mowHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L1NwRWlSNXhTdXFS WUlPMGhpUS1jbGViTThtby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJlA7wwDQYJKoZIhvcNAQELBQADggEBAKijm0I4kCru6agmi4meSe4qi7BQ PfIYXAl4is+NTobU+wJRycuTvEZn8CiWBG+ujPdm6gtCwOgwhlRf4w7UPcrZWUtK FEo/bQC/Drc9KXwNlhq4og0zlt/b15FfpZL/M9b4x1q3g8I0mGCZiXbXJ8mnNzkU 552TPQfl5HS+vKA/uijvSj9THMc4nKbvADwnosO/qb/xRTHq0qw3t2kZsH7I9CvC q+BoMRIzdN+qmivS2+NIj38fKxbuJkL5FIfiWdn1FcplncpWtR8n44KdaniDt8oe FZTAQiKR8W8RVAjrnNoHKSzDyxtxpbJvFTlr5Sov7apQOKY/QWP3pXC7/5I= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:15 2024 by rpki-client on console-ams.rpki-client.org