$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/LhTCEV95vs4MwVEarUVQUNr3PYI.roa File: LhTCEV95vs4MwVEarUVQUNr3PYI.roa (raw, json) Hash identifier: lckN1Tw/kN3J5c31V2XJ/Q1SdsWQl1jYUe/9SPgatac= Subject key identifier: 2E:14:C2:11:5F:79:BE:CE:0C:C1:51:1A:AD:45:50:50:DA:F7:3D:82 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DDA Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LhTCEV95vs4MwVEarUVQUNr3PYI.roa Signing time: Mon 26 Aug 2024 05:27:12 +0000 ROA not before: Mon 26 Aug 2024 05:27:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 192.83.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 01:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3546 (0xdda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2E14C2115F79BECE0CC1511AAD455050DAF73D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:21:93:4a:6d:3c:05:c1:03:e1:a5:18:0b:4d: 2a:cc:dd:84:e6:f0:f3:69:96:64:f3:6f:f3:69:80: 9d:63:cf:be:20:c5:15:70:f3:2f:8a:45:ef:f7:b7: f2:c8:93:cf:27:a1:de:5c:38:9b:f7:3d:b0:e8:f7: 55:79:6e:8e:59:78:a6:2d:64:76:4d:ac:aa:ac:1b: 3f:f8:1a:26:85:f6:16:ba:2c:26:58:26:76:3c:d9: 74:b7:8c:6a:b0:62:77:8b:7e:58:9a:9a:82:d2:66: 9a:0f:d6:7c:82:ed:ed:55:53:76:d9:36:bf:02:fc: fe:ec:11:48:80:42:6a:c6:c1:ad:0f:d5:fd:b2:5b: 04:38:ac:50:6a:0b:33:22:ea:29:81:34:d8:7e:95: 83:fd:63:a1:a5:e0:77:fe:90:6d:29:36:97:3f:56: b6:1e:f2:bf:c5:93:a7:8e:8e:27:5e:31:4c:d9:f1: 10:65:fd:a5:9b:90:7c:7d:ed:07:87:5a:19:7d:b1: 3f:e2:78:ab:82:6a:56:f5:1d:37:87:e8:59:55:25: d6:d1:54:2d:1f:71:01:3d:85:4b:96:04:20:35:18: 38:1b:38:dc:a6:33:af:62:ec:e2:70:59:1e:a5:c4: 5c:a1:7b:05:47:95:f3:e1:a6:6e:c1:d9:a3:58:51: a9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:14:C2:11:5F:79:BE:CE:0C:C1:51:1A:AD:45:50:50:DA:F7:3D:82 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/LhTCEV95vs4MwVEarUVQUNr3PYI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.83.196.0/24 Signature Algorithm: sha256WithRSAEncryption 28:81:37:6c:d5:92:ee:39:0a:ea:c7:96:33:18:6e:9f:a8:0a: 5b:1a:9a:15:7c:8a:52:45:51:f1:0c:dc:78:27:1f:4a:0b:75: 70:08:1e:72:ea:3e:8a:da:a7:05:d4:83:d4:71:7d:2b:bf:81: 37:04:00:64:7e:3e:5f:da:ae:b0:b0:51:ab:09:47:72:cf:af: ef:56:f8:09:fc:51:95:e7:7d:24:3e:2b:dd:44:05:64:c0:bc: d4:e0:02:be:a1:28:40:57:cf:10:37:3b:37:a5:01:e5:cd:13: 27:4c:90:59:f0:e7:cb:b0:18:cf:cc:22:59:a7:56:15:83:be: 12:1b:1f:a7:dd:af:68:d5:ad:f8:75:8d:ed:89:12:46:85:cd: a4:3f:6b:14:2a:82:11:1a:9d:ce:2e:40:89:4c:0c:41:ef:98: 16:45:ff:7c:f1:be:d7:b9:e5:20:2c:2c:3c:03:3f:03:7e:bc: a8:d7:ea:f0:a1:d5:b5:5e:12:8a:03:74:5b:eb:ac:b1:cd:11: df:7b:7f:e8:c2:c6:46:df:bd:88:2f:e8:7f:64:7a:c8:0e:cd: 6d:aa:cc:fc:bc:57:74:29:e4:94:e4:49:9c:3b:6a:f4:5c:ab: c9:88:a8:37:1f:21:e1:6f:7b:51:18:1d:65:b2:44:17:ab:3e: 42:f8:ad:0b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJFMTRDMjExNUY3OUJF Q0UwQ0MxNTExQUFENDU1MDUwREFGNzNEODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoIZNKbTwFwQPhpRgLTSrM3YTm8PNplmTzb/NpgJ1jz74gxRVw 8y+KRe/3t/LIk88nod5cOJv3PbDo91V5bo5ZeKYtZHZNrKqsGz/4GiaF9ha6LCZY JnY82XS3jGqwYneLfliamoLSZpoP1nyC7e1VU3bZNr8C/P7sEUiAQmrGwa0P1f2y WwQ4rFBqCzMi6imBNNh+lYP9Y6Gl4Hf+kG0pNpc/VrYe8r/Fk6eOjideMUzZ8RBl /aWbkHx97QeHWhl9sT/ieKuCalb1HTeH6FlVJdbRVC0fcQE9hUuWBCA1GDgbONym M69i7OJwWR6lxFyhewVHlfPhpm7B2aNYUalvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQULhTCEV95vs4MwVEarUVQUNr3PYIwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9MaFRDRVY5NXZzNE13VkVhclVW UVVOcjNQWUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFPE MA0GCSqGSIb3DQEBCwUAA4IBAQAogTds1ZLuOQrqx5YzGG6fqApbGpoVfIpSRVHx DNx4Jx9KC3VwCB5y6j6K2qcF1IPUcX0rv4E3BABkfj5f2q6wsFGrCUdyz6/vVvgJ /FGV530kPivdRAVkwLzU4AK+oShAV88QNzs3pQHlzRMnTJBZ8OfLsBjPzCJZp1YV g74SGx+n3a9o1a34dY3tiRJGhc2kP2sUKoIRGp3OLkCJTAxB75gWRf988b7XueUg LCw8Az8Dfryo1+rwodW1XhKKA3Rb66yxzRHfe3/owsZG372IL+h/ZHrIDs1tqsz8 vFd0KeSU5EmcO2r0XKvJiKg3HyHhb3tRGB1lskQXqz5C+K0L -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org