$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/5gDIYw1XVhkzXFJmoqRSbWoUX5g.roa File: 5gDIYw1XVhkzXFJmoqRSbWoUX5g.roa (raw, json) Hash identifier: csvRdZbbRRkFyo07usRqylmO9whixUXBYrayKomvKJU= Subject key identifier: E6:00:C8:63:0D:57:56:19:33:5C:52:66:A2:A4:52:6D:6A:14:5F:98 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E4C Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5gDIYw1XVhkzXFJmoqRSbWoUX5g.roa Signing time: Mon 26 Aug 2024 05:27:12 +0000 ROA not before: Mon 26 Aug 2024 05:27:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 163.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3660 (0xe4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E600C8630D575619335C5266A2A4526D6A145F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:89:93:d4:ec:99:67:e2:6e:ad:5e:fa:ce:68: 39:79:0a:60:5a:23:e2:a1:ba:e1:c3:43:c2:7c:87: 44:e8:b9:85:7d:7d:b3:a5:d8:5e:f9:f5:51:4a:ea: 0b:82:d2:93:83:0a:8f:51:68:19:16:11:b5:89:40: 81:ec:06:38:d7:4f:55:90:0e:80:c1:bc:16:27:37: 29:86:68:67:c7:d7:cc:c8:a2:3c:f6:dd:7d:e6:45: 8d:a9:79:7e:2a:28:51:97:bc:24:44:6e:a3:89:12: 15:36:1d:b7:aa:0b:52:bb:91:67:63:2c:a8:92:ed: 21:e7:90:ca:d9:5a:16:a1:db:82:bb:4e:b2:c0:96: 9e:03:2a:2c:07:aa:01:7b:af:75:65:dd:c8:13:cb: 58:42:10:56:31:5b:af:53:05:8c:b5:bb:e6:51:e9: d1:b3:3b:89:88:83:1d:d8:e5:b1:09:15:af:dc:d3: ee:9a:16:86:8c:08:e1:e7:2f:c9:70:e1:d2:d6:ff: bb:2b:10:a6:a6:d8:98:51:25:0a:d8:77:7d:e1:95: 50:5a:37:91:1e:74:0a:1d:da:d9:8f:6a:e8:e4:a6: dc:84:db:d3:70:f9:0e:9e:54:85:57:0e:c8:c9:85: 73:43:8f:03:5e:f9:9a:2a:ec:92:d4:19:c4:7b:ee: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:00:C8:63:0D:57:56:19:33:5C:52:66:A2:A4:52:6D:6A:14:5F:98 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/5gDIYw1XVhkzXFJmoqRSbWoUX5g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:8f:2c:85:c6:63:af:06:ff:2d:74:05:7d:06:cc:89:eb:ea: a0:17:52:61:92:a3:4b:77:c5:4c:15:cb:d8:44:3c:bb:cf:af: fc:c3:1f:03:74:8b:1c:07:db:bf:ea:ae:c2:55:8e:c1:e1:fb: 7c:b2:f4:ba:0b:0c:50:e8:33:a7:1a:f8:52:b7:d0:83:f3:35: 3a:33:7e:02:ef:9a:72:63:76:2c:00:0e:5d:3e:7a:ca:b2:ae: 49:c4:2d:aa:e9:f6:20:8e:ea:3f:f5:5e:ca:d8:d8:c5:12:de: d1:c4:ff:c8:dd:2c:93:02:4a:48:df:7b:4c:b9:35:26:99:e7: 56:cd:e5:4b:e1:e8:10:b4:b9:95:5e:df:ef:d0:d3:a3:9e:4d: 03:72:20:b4:a1:8d:b1:5d:a0:85:9e:d2:90:7c:ec:90:ee:0b: 70:18:09:57:a6:3b:fd:7d:50:a2:50:a5:71:4b:20:03:2c:d1: 11:a8:d9:67:5e:3a:26:8f:59:bc:ab:20:d4:69:39:ea:28:2c: 33:75:57:fe:fe:ed:8c:7d:7b:fa:8f:10:73:17:cf:f2:45:f9: 55:3c:4c:18:4c:24:5f:18:1c:46:5c:2a:30:61:ca:af:73:a0: aa:73:1f:37:d4:5d:29:5c:95:23:a0:cf:7f:42:ce:45:40:cc: 21:41:92:a5 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU2MDBDODYzMEQ1NzU2 MTkzMzVDNTI2NkEyQTQ1MjZENkExNDVGOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKiZPU7Jln4m6tXvrOaDl5CmBaI+KhuuHDQ8J8h0TouYV9fbOl 2F759VFK6guC0pODCo9RaBkWEbWJQIHsBjjXT1WQDoDBvBYnNymGaGfH18zIojz2 3X3mRY2peX4qKFGXvCREbqOJEhU2HbeqC1K7kWdjLKiS7SHnkMrZWhah24K7TrLA lp4DKiwHqgF7r3Vl3cgTy1hCEFYxW69TBYy1u+ZR6dGzO4mIgx3Y5bEJFa/c0+6a FoaMCOHnL8lw4dLW/7srEKam2JhRJQrYd33hlVBaN5EedAod2tmPaujkptyE29Nw +Q6eVIVXDsjJhXNDjwNe+Zoq7JLUGcR77iuVAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU5gDIYw1XVhkzXFJmoqRSbWoUX5gwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC81Z0RJWXcxWFZoa3pYRkptb3FS U2JXb1VYNWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoxww DQYJKoZIhvcNAQELBQADggEBAHSPLIXGY68G/y10BX0GzInr6qAXUmGSo0t3xUwV y9hEPLvPr/zDHwN0ixwH27/qrsJVjsHh+3yy9LoLDFDoM6ca+FK30IPzNTozfgLv mnJjdiwADl0+esqyrknELarp9iCO6j/1XsrY2MUS3tHE/8jdLJMCSkjfe0y5NSaZ 51bN5Uvh6BC0uZVe3+/Q06OeTQNyILShjbFdoIWe0pB87JDuC3AYCVemO/19UKJQ pXFLIAMs0RGo2WdeOiaPWbyrINRpOeooLDN1V/7+7Yx9e/qPEHMXz/JF+VU8TBhM JF8YHEZcKjBhyq9zoKpzHzfUXSlclSOgz39CzkVAzCFBkqU= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org