$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4WnGkDTKzVoO7ZSw-H9XN1h7IQw.roa File: 4WnGkDTKzVoO7ZSw-H9XN1h7IQw.roa (raw, json) Hash identifier: 4BUelLSt0DwSXwDKurKb7OH8pi9lVxi5L4FZBSFbyh0= Subject key identifier: E1:69:C6:90:34:CA:CD:5A:0E:ED:94:B0:F8:7F:57:37:58:7B:21:0C Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DE1 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4WnGkDTKzVoO7ZSw-H9XN1h7IQw.roa Signing time: Mon 26 Aug 2024 05:27:16 +0000 ROA not before: Mon 26 Aug 2024 05:27:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9916 IP address blocks: 192.83.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 06:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3553 (0xde1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E169C69034CACD5A0EED94B0F87F5737587B210C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:55:40:70:9e:be:02:9c:9d:e5:6b:bf:d5: 83:dc:24:dd:11:ed:c5:56:e8:28:b2:e0:9d:7b:67: 0b:80:af:18:b5:71:45:2e:69:bb:2c:2d:08:dc:1b: f2:f2:e3:c9:07:54:18:0e:90:ec:b2:c3:0e:ff:42: 6c:28:17:55:13:6e:11:ce:79:7e:9e:f9:db:c5:a8: fb:f1:a2:bf:95:66:20:8d:ed:7b:b0:94:84:76:42: be:b4:5f:8f:3c:0d:d1:98:27:2b:4a:46:8b:69:07: 54:5a:23:b4:0d:a2:9e:8f:c8:a9:09:81:fe:37:00: 29:87:a5:cc:4d:5f:69:98:3f:49:7f:8b:8d:0d:4d: 7b:cd:62:34:83:51:3d:29:80:a5:ae:a1:86:b0:61: be:f1:d8:2f:04:a4:dc:9e:6c:25:be:21:78:ab:e0: c8:f9:82:e4:16:be:2f:15:24:42:ef:8b:d5:1e:94: 65:9f:ea:0f:5a:4b:e7:29:a0:58:5f:6b:3d:aa:75: 3c:07:8d:c1:e6:0f:f4:a1:66:37:02:01:64:0c:39: 52:12:e1:ad:ae:73:51:bc:80:dd:ba:6a:5f:5e:5e: c5:f7:28:1c:33:de:4d:30:6f:e8:a7:19:8e:81:35: 57:c2:38:e8:07:ab:80:1d:a2:4e:d8:24:81:20:ca: 17:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:69:C6:90:34:CA:CD:5A:0E:ED:94:B0:F8:7F:57:37:58:7B:21:0C X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4WnGkDTKzVoO7ZSw-H9XN1h7IQw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.83.180.0/24 Signature Algorithm: sha256WithRSAEncryption 92:3d:11:0b:9d:0a:cf:f9:9c:68:e0:61:c4:33:31:0f:3d:e9: e2:77:ed:bf:2a:88:90:4b:29:68:c1:2e:2f:69:6f:e1:51:b4: d3:42:9d:c4:39:08:ee:2b:30:e7:d1:bf:bb:e0:d8:15:95:e4: 0d:26:6c:03:b5:3a:0d:44:dd:5a:f8:17:86:51:4d:db:1b:90: d0:bc:b5:c7:e6:d9:ef:31:aa:e0:5b:d9:93:65:e5:23:71:c3: 1a:fd:e4:d0:74:16:e8:a7:ea:79:c6:df:ca:f9:ef:14:6c:b5: 37:16:87:e6:a0:5e:96:b2:30:35:29:12:78:73:4f:10:c5:d7: 35:35:bf:b3:45:1e:88:0b:11:75:ae:8d:94:6b:7f:ff:94:79: 22:42:40:a8:0d:76:df:2b:fe:6c:6c:46:55:fd:aa:fd:60:2d: cd:e4:b0:80:cd:15:88:18:17:e1:b1:99:bd:42:4a:ed:a0:59: 04:2a:83:ff:dd:f2:2c:cb:03:82:4f:8e:46:34:e5:9f:6d:97: 13:7d:34:54:1e:d6:d3:62:8c:ee:42:dc:61:64:ab:a7:cd:07: 8a:1d:53:43:3a:3e:8c:e7:0b:e2:46:45:90:49:08:40:6d:41: 1b:79:ee:3f:85:2f:28:da:ea:af:7c:ef:f8:f4:e1:e5:3d:9a: 45:08:4e:83 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxNjlDNjkwMzRDQUNE NUEwRUVEOTRCMEY4N0Y1NzM3NTg3QjIxMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0tFVAcJ6+Apyd5Wu/1YPcJN0R7cVW6Ciy4J17ZwuArxi1cUUu abssLQjcG/Ly48kHVBgOkOyyww7/QmwoF1UTbhHOeX6e+dvFqPvxor+VZiCN7Xuw lIR2Qr60X488DdGYJytKRotpB1RaI7QNop6PyKkJgf43ACmHpcxNX2mYP0l/i40N TXvNYjSDUT0pgKWuoYawYb7x2C8EpNyebCW+IXir4Mj5guQWvi8VJELvi9UelGWf 6g9aS+cpoFhfaz2qdTwHjcHmD/ShZjcCAWQMOVIS4a2uc1G8gN26al9eXsX3KBwz 3k0wb+inGY6BNVfCOOgHq4Adok7YJIEgyhebAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU4WnGkDTKzVoO7ZSw+H9XN1h7IQwwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC80V25Ha0RUS3pWb083WlN3LUg5 WE4xaDdJUXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFO0 MA0GCSqGSIb3DQEBCwUAA4IBAQCSPRELnQrP+Zxo4GHEMzEPPenid+2/KoiQSylo wS4vaW/hUbTTQp3EOQjuKzDn0b+74NgVleQNJmwDtToNRN1a+BeGUU3bG5DQvLXH 5tnvMargW9mTZeUjccMa/eTQdBbop+p5xt/K+e8UbLU3FofmoF6WsjA1KRJ4c08Q xdc1Nb+zRR6ICxF1ro2Ua3//lHkiQkCoDXbfK/5sbEZV/ar9YC3N5LCAzRWIGBfh sZm9QkrtoFkEKoP/3fIsywOCT45GNOWfbZcTfTRUHtbTYozuQtxhZKunzQeKHVND Oj6M5wviRkWQSQhAbUEbee4/hS8o2uqvfO/49OHlPZpFCE6D -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org