$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/-YR6Vz-AhxBny-vhknXGHv_JmbQ.roa File: -YR6Vz-AhxBny-vhknXGHv_JmbQ.roa (raw, json) Hash identifier: wKXTzi7x/IZlZS5/zjWPUbdgn+VIQJz4wY6wjh4ebVE= Subject key identifier: F9:84:7A:57:3F:80:87:10:67:CB:EB:E1:92:75:C6:1E:FF:C9:99:B4 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DD7 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/-YR6Vz-AhxBny-vhknXGHv_JmbQ.roa Signing time: Mon 26 Aug 2024 05:27:10 +0000 ROA not before: Mon 26 Aug 2024 05:27:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 140.128.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 06:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3543 (0xdd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F9847A573F80871067CBEBE19275C61EFFC999B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:86:16:12:6d:bf:d5:71:3f:dc:a8:18:14: 3b:2c:29:62:b9:fd:e2:67:14:63:f4:9e:75:0f:3b: 51:12:8e:90:e8:85:9b:a9:b4:8c:30:89:9d:ef:eb: c1:6f:ce:b0:af:2d:d3:b0:f4:d3:62:d6:14:d9:69: da:4f:79:ab:a8:17:95:d1:98:94:fd:5d:7f:b2:8c: d3:98:f8:08:e5:71:79:df:05:9a:7b:96:24:db:ea: a4:b0:ef:b6:32:9c:78:d3:e8:cc:de:57:59:a7:b2: 4d:54:85:40:ba:6c:70:1d:bf:f5:ae:48:4c:ce:a2: 4b:ce:6c:1c:0d:22:38:ed:c3:a6:46:69:d0:fc:67: 8e:3b:0f:e3:5f:2c:e1:a6:b9:37:cd:69:ae:cb:24: 04:66:01:92:0c:5c:5a:dc:c2:10:1e:87:04:12:f2: d4:f3:0f:cb:29:a4:d5:81:ab:45:5a:48:4c:69:93: cb:a6:9e:f9:43:a2:af:ad:fb:70:14:17:46:8f:84: db:cd:b1:52:18:62:0d:b0:85:1b:75:ed:1a:4e:2a: 74:c9:13:75:66:3f:44:b5:3f:50:04:5a:0e:28:69: 89:3f:66:86:2d:02:e8:4d:3e:8f:5a:e8:27:96:d9: 83:b6:38:e5:99:ba:8c:7c:ca:c0:64:b6:4d:d3:8e: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:84:7A:57:3F:80:87:10:67:CB:EB:E1:92:75:C6:1E:FF:C9:99:B4 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/-YR6Vz-AhxBny-vhknXGHv_JmbQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.128.0.0/13 Signature Algorithm: sha256WithRSAEncryption 04:b9:4d:d5:6e:14:14:2f:10:f7:52:73:6e:a1:25:05:33:1f: 3a:77:c1:41:3b:3f:5d:bb:2c:f1:9a:35:29:51:50:59:fa:09: fa:e3:64:03:fb:35:69:86:dc:0b:96:16:b8:0d:4f:fb:22:31: ec:15:da:c5:d0:d6:4d:68:aa:23:c8:1c:00:c3:1c:5f:17:95: e1:ff:e4:b5:f9:9a:c0:ba:ae:9a:b1:c5:ad:be:4e:22:0d:21: 42:a6:dc:98:4f:d3:8c:a6:b7:2d:84:72:38:c5:eb:fd:98:08: 1f:69:0b:3d:a6:ce:31:4c:3a:5a:30:69:05:e3:da:e2:90:84: 6d:1a:8e:c5:aa:9e:b6:79:60:dc:33:bc:0a:26:76:86:ff:60: 27:4c:cb:dd:87:fd:c5:34:a2:1d:4c:44:68:95:ff:c7:d6:9b: 28:0c:44:cb:8e:55:0e:88:1f:b7:7c:85:3e:6c:2d:30:b1:b1: cb:f7:9d:53:83:00:a6:62:a4:6b:63:b0:7b:33:89:49:60:3c: 68:32:63:4d:7e:d0:05:94:45:61:f5:f8:b7:f2:19:34:9c:f0: 6a:0a:6d:da:4c:22:8c:8f:f9:8f:94:1c:49:cb:3e:aa:f1:30: a2:68:2c:2a:14:4e:0b:66:b7:a1:1d:8c:bb:c0:8b:d5:62:9d: 67:9b:fb:d5 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDdcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5ODQ3QTU3M0Y4MDg3 MTA2N0NCRUJFMTkyNzVDNjFFRkZDOTk5QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3y4YWEm2/1XE/3KgYFDssKWK5/eJnFGP0nnUPO1ESjpDohZup tIwwiZ3v68FvzrCvLdOw9NNi1hTZadpPeauoF5XRmJT9XX+yjNOY+AjlcXnfBZp7 liTb6qSw77YynHjT6MzeV1mnsk1UhUC6bHAdv/WuSEzOokvObBwNIjjtw6ZGadD8 Z447D+NfLOGmuTfNaa7LJARmAZIMXFrcwhAehwQS8tTzD8sppNWBq0VaSExpk8um nvlDoq+t+3AUF0aPhNvNsVIYYg2whRt17RpOKnTJE3VmP0S1P1AEWg4oaYk/ZoYt AuhNPo9a6CeW2YO2OOWZuox8ysBktk3TjjZNAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU+YR6Vz+AhxBny+vhknXGHv/JmbQwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8tWVI2VnotQWh4Qm55LXZoa25Y R0h2X0ptYlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDjIAw DQYJKoZIhvcNAQELBQADggEBAAS5TdVuFBQvEPdSc26hJQUzHzp3wUE7P127LPGa NSlRUFn6CfrjZAP7NWmG3AuWFrgNT/siMewV2sXQ1k1oqiPIHADDHF8XleH/5LX5 msC6rpqxxa2+TiINIUKm3JhP04ymty2EcjjF6/2YCB9pCz2mzjFMOlowaQXj2uKQ hG0ajsWqnrZ5YNwzvAomdob/YCdMy92H/cU0oh1MRGiV/8fWmygMRMuOVQ6IH7d8 hT5sLTCxscv3nVODAKZipGtjsHsziUlgPGgyY01+0AWURWH1+LfyGTSc8GoKbdpM IoyP+Y+UHEnLPqrxMKJoLCoUTgtmt6EdjLvAi9VinWeb+9U= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org