$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4HMlLYuJ-hy2pNzvofRLmXuYKQ8.roa File: 4HMlLYuJ-hy2pNzvofRLmXuYKQ8.roa (raw, json) Hash identifier: WUdoN6yWCaDh2+P6kqKkJz7VpKzt04MxOU6OO1lFEnQ= Subject key identifier: E0:73:25:2D:8B:89:FA:1C:B6:A4:DC:EF:A1:F4:4B:99:7B:98:29:0F Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E6F Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4HMlLYuJ-hy2pNzvofRLmXuYKQ8.roa Signing time: Mon 26 Aug 2024 05:27:28 +0000 ROA not before: Mon 26 Aug 2024 05:27:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 163.14.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3695 (0xe6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E073252D8B89FA1CB6A4DCEFA1F44B997B98290F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:af:d8:ed:d0:41:8b:aa:3e:6a:8d:2e:02: 03:3e:e2:13:ef:0f:2e:d8:d0:31:d0:70:bb:26:f5: af:46:cf:dd:d9:43:6b:a2:5d:ec:18:88:62:aa:f2: cd:bd:0e:f2:6f:c8:ab:69:c5:f5:6d:fa:3b:11:f4: b7:74:98:0a:e2:82:29:67:20:71:fe:18:7c:ee:52: 19:f2:e7:38:74:94:23:00:75:02:88:90:4b:79:e8: d4:ed:04:b4:95:5c:76:cb:87:97:45:d3:71:1a:af: 07:b7:67:ab:0b:a9:8e:e3:0b:8b:e8:76:6e:1f:30: c2:ff:0c:ff:69:f0:0b:ac:86:e6:71:49:86:df:8f: 7e:ea:cd:eb:0d:05:fa:18:51:d9:42:b3:bd:91:00: 8a:de:56:50:ba:d8:8f:22:19:83:b1:32:73:56:96: 52:b7:76:64:91:0f:a6:6c:9f:e9:85:7d:6c:91:ef: d9:55:c6:f7:de:5c:0b:c2:22:25:8d:dc:06:70:a8: fc:81:98:e4:49:6a:17:8b:56:23:8d:8a:f9:ac:a5: 58:79:7d:4e:25:ee:22:4e:a6:71:99:8c:f8:85:8f: 08:f6:95:6a:a3:4c:32:e1:bc:9b:52:19:1b:3c:f9: f3:c2:32:08:61:1f:ef:7c:bb:b9:25:79:69:67:19: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:73:25:2D:8B:89:FA:1C:B6:A4:DC:EF:A1:F4:4B:99:7B:98:29:0F X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4HMlLYuJ-hy2pNzvofRLmXuYKQ8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.14.0.0/15 Signature Algorithm: sha256WithRSAEncryption 9c:7f:89:a2:61:5d:98:0e:e1:e6:cc:4b:fe:a3:09:22:24:41: 7a:24:db:b6:78:22:85:97:ef:b9:55:f6:18:9c:9c:b9:3b:ac: 1f:82:5e:45:b4:b3:f0:82:09:ae:68:2d:64:f3:be:fe:12:0c: 25:7b:78:47:93:70:5d:46:74:ff:82:bc:a5:08:f0:85:88:ee: 4f:d7:b4:11:9e:42:ad:f4:16:1c:7a:51:39:04:42:2a:31:a5: 1e:cc:6d:ac:c5:eb:37:84:d9:2a:58:e7:d6:33:bf:08:e1:d7: 00:35:08:3c:91:88:17:e7:44:fd:41:db:ea:f0:03:68:e1:b1: 48:62:c7:ab:f7:a7:4f:a4:14:55:a6:80:92:c8:4d:34:9f:d3: 69:f1:08:4d:7b:cf:ce:54:6d:0b:db:e1:b5:51:74:b8:52:01: b8:81:61:00:08:46:06:09:66:f1:5b:0d:ca:7f:d3:ff:9e:16: fc:b5:f1:91:cf:85:6c:11:e3:43:b8:a6:7e:f4:94:eb:ae:da: e1:87:bd:8a:ca:83:d0:60:76:f2:94:95:ec:0a:bc:3e:74:29: db:4b:8a:32:87:72:0e:66:9c:90:1a:66:fb:ad:eb:af:6a:66: ba:fd:13:f1:e5:13:c1:6a:52:4b:b8:5e:50:af:82:53:f2:f9: 7b:15:62:c0 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUwNzMyNTJEOEI4OUZB MUNCNkE0RENFRkExRjQ0Qjk5N0I5ODI5MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDelK/Y7dBBi6o+ao0uAgM+4hPvDy7Y0DHQcLsm9a9Gz93ZQ2ui XewYiGKq8s29DvJvyKtpxfVt+jsR9Ld0mArigilnIHH+GHzuUhny5zh0lCMAdQKI kEt56NTtBLSVXHbLh5dF03Earwe3Z6sLqY7jC4vodm4fMML/DP9p8AushuZxSYbf j37qzesNBfoYUdlCs72RAIreVlC62I8iGYOxMnNWllK3dmSRD6Zsn+mFfWyR79lV xvfeXAvCIiWN3AZwqPyBmORJaheLViONivmspVh5fU4l7iJOpnGZjPiFjwj2lWqj TDLhvJtSGRs8+fPCMghhH+98u7kleWlnGYNnAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU4HMlLYuJ+hy2pNzvofRLmXuYKQ8wHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC80SE1sTFl1Si1oeTJwTnp2b2ZS TG1YdVlLUTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBow4w DQYJKoZIhvcNAQELBQADggEBAJx/iaJhXZgO4ebMS/6jCSIkQXok27Z4IoWX77lV 9hicnLk7rB+CXkW0s/CCCa5oLWTzvv4SDCV7eEeTcF1GdP+CvKUI8IWI7k/XtBGe Qq30Fhx6UTkEQioxpR7MbazF6zeE2SpY59Yzvwjh1wA1CDyRiBfnRP1B2+rwA2jh sUhix6v3p0+kFFWmgJLITTSf02nxCE17z85UbQvb4bVRdLhSAbiBYQAIRgYJZvFb Dcp/0/+eFvy18ZHPhWwR40O4pn70lOuu2uGHvYrKg9BgdvKUlewKvD50KdtLijKH cg5mnJAaZvut669qZrr9E/HlE8FqUku4XlCvglPy+XsVYsA= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org