$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/0yH6gMacB1tXPfgZCoUIS7Z49vA.roa File: 0yH6gMacB1tXPfgZCoUIS7Z49vA.roa (raw, json) Hash identifier: HkCYqhGR9QQmcL+c+93wG+FxcVDsJqI9gh0hQAvVgEk= Subject key identifier: D3:21:FA:80:C6:9C:07:5B:57:3D:F8:19:0A:85:08:4B:B6:78:F6:F0 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E4F Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/0yH6gMacB1tXPfgZCoUIS7Z49vA.roa Signing time: Mon 26 Aug 2024 05:27:13 +0000 ROA not before: Mon 26 Aug 2024 05:27:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 163.16.0.0/13 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3663 (0xe4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D321FA80C69C075B573DF8190A85084BB678F6F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:b4:fa:92:e5:70:7d:87:4a:5a:1b:43:bc: b8:9a:4c:a3:6f:de:47:25:d6:df:ba:39:28:bd:a5: 0e:23:e9:bc:52:b8:88:51:4b:96:83:d4:70:32:cd: 19:92:60:7b:de:94:3c:c0:96:08:ff:8b:bd:05:36: db:68:0d:29:61:dc:12:cd:6e:0e:cf:c6:f7:7b:b6: 73:87:92:dd:59:63:38:b2:1a:e0:65:83:29:a6:6e: 51:cc:e8:1b:5b:59:8e:70:42:35:6d:0c:f2:e5:f1: ef:d6:6f:79:87:0b:17:56:4b:78:45:4a:81:77:3c: a0:6a:5f:11:82:9a:db:ce:d9:09:d7:3c:72:a9:c4: cd:85:55:ea:f8:f7:9c:e9:99:33:b4:3e:f9:d9:75: df:28:e8:e3:60:48:bd:11:ed:1d:de:18:f2:b8:7d: 87:99:45:35:18:95:fc:db:f1:4f:69:ee:0d:9d:01: 04:c9:a7:60:82:59:d9:d1:f2:50:6c:5b:f5:e8:a2: 8e:79:0e:6f:90:41:30:fe:57:87:d8:a1:e5:6a:b0: 01:b8:fd:b4:96:2f:c1:13:38:f0:ff:6b:09:3f:07: b7:9b:fa:e7:5f:88:5a:9f:ed:cb:ff:05:30:64:60: 6a:d1:30:16:2a:ef:ed:01:d7:35:ec:c1:95:23:e6: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:21:FA:80:C6:9C:07:5B:57:3D:F8:19:0A:85:08:4B:B6:78:F6:F0 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/0yH6gMacB1tXPfgZCoUIS7Z49vA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.16.0.0/13 Signature Algorithm: sha256WithRSAEncryption a9:bc:f2:91:02:ac:a4:89:97:51:73:f4:3c:7f:b3:82:9c:3f: 67:84:1e:8d:19:ce:2c:d4:00:01:ee:f1:eb:ea:ee:30:df:af: 70:66:e4:41:cd:a1:45:a2:9a:84:7a:6d:8e:08:1a:c0:5c:4b: ae:fd:b3:19:52:1c:41:5e:43:d7:5a:db:d0:54:9c:27:3c:37: 44:b9:eb:35:ca:55:c2:14:03:e2:81:62:68:ff:c8:1e:c1:6a: a7:9d:ca:3f:11:97:ad:15:4f:b0:9a:4c:47:d2:5c:7a:2e:6d: 0c:37:8a:14:37:24:50:f6:9d:a0:57:6c:2e:66:ac:9a:7a:22: 17:09:5f:18:ca:55:ad:bd:23:56:63:da:d8:f0:68:be:57:8d: 16:6f:fa:98:78:a8:0d:52:95:7b:85:41:64:56:4b:e8:bf:d4: 16:14:da:b5:18:9d:8f:e6:1c:38:88:fa:fd:3b:29:00:d2:a7: 6d:d6:55:af:b2:45:03:0d:a0:87:11:87:52:7b:c9:92:d4:51: bd:86:f9:bf:40:15:36:10:19:2d:38:e5:8d:31:60:4a:8e:2f: 67:b4:b4:71:6d:8d:97:27:43:da:88:8f:2d:9b:9f:49:e4:a6: d0:8d:34:c6:6b:cb:9f:da:cf:bd:fc:89:b7:01:46:2b:78:44: d1:53:76:49 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQzMjFGQTgwQzY5QzA3 NUI1NzNERjgxOTBBODUwODRCQjY3OEY2RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6e7T6kuVwfYdKWhtDvLiaTKNv3kcl1t+6OSi9pQ4j6bxSuIhR S5aD1HAyzRmSYHvelDzAlgj/i70FNttoDSlh3BLNbg7Pxvd7tnOHkt1ZYziyGuBl gymmblHM6BtbWY5wQjVtDPLl8e/Wb3mHCxdWS3hFSoF3PKBqXxGCmtvO2QnXPHKp xM2FVer495zpmTO0PvnZdd8o6ONgSL0R7R3eGPK4fYeZRTUYlfzb8U9p7g2dAQTJ p2CCWdnR8lBsW/Xooo55Dm+QQTD+V4fYoeVqsAG4/bSWL8ETOPD/awk/B7eb+udf iFqf7cv/BTBkYGrRMBYq7+0B1zXswZUj5pH9AgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU0yH6gMacB1tXPfgZCoUIS7Z49vAwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8weUg2Z01hY0IxdFhQZmdaQ29V SVM3WjQ5dkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDoxAw DQYJKoZIhvcNAQELBQADggEBAKm88pECrKSJl1Fz9Dx/s4KcP2eEHo0ZzizUAAHu 8evq7jDfr3Bm5EHNoUWimoR6bY4IGsBcS679sxlSHEFeQ9da29BUnCc8N0S56zXK VcIUA+KBYmj/yB7Baqedyj8Rl60VT7CaTEfSXHoubQw3ihQ3JFD2naBXbC5mrJp6 IhcJXxjKVa29I1Zj2tjwaL5XjRZv+ph4qA1SlXuFQWRWS+i/1BYU2rUYnY/mHDiI +v07KQDSp23WVa+yRQMNoIcRh1J7yZLUUb2G+b9AFTYQGS045Y0xYEqOL2e0tHFt jZcnQ9qIjy2bn0nkptCNNMZry5/az738ibcBRit4RNFTdkk= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org