$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/3tj7DrdlnZXPYsAg5DG0S-mjDN4.roa File: 3tj7DrdlnZXPYsAg5DG0S-mjDN4.roa (raw, json) Hash identifier: piCinX8xxuGtdBZjpIEUsS0WUduUBD+4ceEl2YGje50= Subject key identifier: DE:D8:FB:0E:B7:65:9D:95:CF:62:C0:20:E4:31:B4:4B:E9:A3:0C:DE Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E55 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3tj7DrdlnZXPYsAg5DG0S-mjDN4.roa Signing time: Mon 26 Aug 2024 05:27:15 +0000 ROA not before: Mon 26 Aug 2024 05:27:15 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18185 IP address blocks: 120.117.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3669 (0xe55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:15 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DED8FB0EB7659D95CF62C020E431B44BE9A30CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d5:d8:7d:3d:e6:c2:2a:3c:70:5a:eb:3a:2a: df:25:44:4b:43:d8:2b:2c:d8:9c:a3:3f:91:f8:16: 4f:61:56:8c:89:24:51:cc:bc:9b:71:7f:d0:5c:c4: 38:0f:ee:f7:06:5e:65:43:1b:1c:8a:48:06:6b:19: fb:72:94:35:77:7e:f7:ca:95:6c:71:a9:1f:3d:46: 5d:36:fc:74:de:96:d1:2b:4d:fa:ba:09:90:9e:43: 2a:f1:bc:e0:c7:04:4e:90:38:10:e1:09:2f:f1:73: 39:dd:df:2a:69:d6:4e:61:30:98:c6:d0:87:5a:49: bd:db:64:78:8e:62:22:52:5e:bc:c4:1f:0f:9b:6a: 00:ac:6d:70:56:eb:42:7c:82:ed:44:a1:b7:78:28: 0e:16:13:bc:12:2c:f6:a2:56:36:0d:32:78:27:53: ae:33:57:a8:f3:5f:58:be:18:0b:94:01:ce:e2:1e: 69:2c:ac:da:32:bf:f6:49:e7:ae:41:14:62:74:aa: 4f:a3:d6:e7:d1:32:1b:90:0a:e1:d1:26:a0:ff:57: 7d:f2:f7:9a:a4:85:f6:89:da:df:7d:3e:71:8b:71: 9e:bd:a8:dd:76:b3:2c:20:23:12:ef:ee:f5:29:80: b2:ae:84:5d:96:1a:7b:2d:92:1f:78:33:04:19:73: 3a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:FB:0E:B7:65:9D:95:CF:62:C0:20:E4:31:B4:4B:E9:A3:0C:DE X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/3tj7DrdlnZXPYsAg5DG0S-mjDN4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.117.3.0/24 Signature Algorithm: sha256WithRSAEncryption 86:eb:9e:63:78:e6:41:d3:aa:d4:aa:60:16:5f:53:c2:51:2c: 1c:23:6f:ff:84:77:33:79:a6:d1:d8:b9:47:9f:4f:1c:2d:73: 96:4c:1f:57:45:cb:db:9f:ce:a3:e4:65:c3:f9:33:42:88:b1: 21:27:b0:9c:e0:a6:27:b8:76:07:b1:c3:f7:13:50:51:29:47: aa:5e:46:dc:e0:61:01:d8:77:e0:d1:99:49:45:a9:70:c5:cc: 5c:81:6d:e2:0e:c3:5e:6e:de:0c:b9:cb:b9:f1:85:f8:44:ab: be:59:90:19:94:22:11:55:2b:6c:ea:22:9a:91:84:f2:c8:84: 52:fa:e9:6d:c2:32:e2:bf:07:c0:ac:7f:7c:fb:c2:4a:02:82: 4d:a3:79:59:9c:a1:43:ac:f8:a7:41:8e:44:d6:53:b9:32:33: 46:b8:42:4b:c9:e5:b1:65:8d:02:d1:ba:e3:dc:9b:7e:e7:a9: c8:50:b8:a8:08:71:80:15:85:f2:33:3d:3f:84:a3:7f:08:f8: de:72:cb:09:6d:3d:03:fa:47:c0:62:04:d0:0c:8e:e2:90:8c: 59:b1:1f:5f:ad:08:8d:24:90:c0:c9:19:4f:c9:c6:b8:58:77: a5:8f:f4:76:83:09:40:ff:6b:f4:40:5c:07:23:65:23:92:d1: 9d:20:2c:ea -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERFRDhGQjBFQjc2NTlE OTVDRjYyQzAyMEU0MzFCNDRCRTlBMzBDREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDt1dh9PebCKjxwWus6Kt8lREtD2Css2JyjP5H4Fk9hVoyJJFHM vJtxf9BcxDgP7vcGXmVDGxyKSAZrGftylDV3fvfKlWxxqR89Rl02/HTeltErTfq6 CZCeQyrxvODHBE6QOBDhCS/xcznd3ypp1k5hMJjG0IdaSb3bZHiOYiJSXrzEHw+b agCsbXBW60J8gu1Eobd4KA4WE7wSLPaiVjYNMngnU64zV6jzX1i+GAuUAc7iHmks rNoyv/ZJ565BFGJ0qk+j1ufRMhuQCuHRJqD/V33y95qkhfaJ2t99PnGLcZ69qN12 sywgIxLv7vUpgLKuhF2WGnstkh94MwQZczp/AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU3tj7DrdlnZXPYsAg5DG0S+mjDN4wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC8zdGo3RHJkbG5aWFBZc0FnNURH MFMtbWpETjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeHUD MA0GCSqGSIb3DQEBCwUAA4IBAQCG655jeOZB06rUqmAWX1PCUSwcI2//hHczeabR 2LlHn08cLXOWTB9XRcvbn86j5GXD+TNCiLEhJ7Cc4KYnuHYHscP3E1BRKUeqXkbc 4GEB2Hfg0ZlJRalwxcxcgW3iDsNebt4Mucu58YX4RKu+WZAZlCIRVSts6iKakYTy yIRS+ultwjLivwfArH98+8JKAoJNo3lZnKFDrPinQY5E1lO5MjNGuEJLyeWxZY0C 0brj3Jt+56nIULioCHGAFYXyMz0/hKN/CPjecssJbT0D+kfAYgTQDI7ikIxZsR9f rQiNJJDAyRlPyca4WHelj/R2gwlA/2v0QFwHI2UjktGdICzq -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org