$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/M8Qn_L2198uW14WeOqGRIttc07A.roa File: M8Qn_L2198uW14WeOqGRIttc07A.roa (raw, json) Hash identifier: ++cGpOkKQ+pTaFF0Sm3oH8p/6SW4BJCn8QV+EeadBKI= Subject key identifier: 33:C4:27:FC:BD:B5:F7:CB:96:D7:85:9E:3A:A1:91:22:DB:5C:D3:B0 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DE0 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/M8Qn_L2198uW14WeOqGRIttc07A.roa Signing time: Mon 26 Aug 2024 05:27:16 +0000 ROA not before: Mon 26 Aug 2024 05:27:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17716 IP address blocks: 140.112.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 06:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3552 (0xde0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=33C427FCBDB5F7CB96D7859E3AA19122DB5CD3B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:7a:22:ce:eb:a5:9d:77:5a:39:00:06:82: 9b:ba:22:a5:bf:b4:93:d2:5e:59:25:38:5f:ba:2d: 3d:46:02:cb:f3:04:25:19:e1:3b:98:a9:fd:a1:58: 57:8e:73:e8:6b:0f:59:bc:be:1f:33:a6:63:59:a8: 1e:ad:ee:e1:90:ad:1b:af:44:82:75:ca:3d:cf:f8: 15:51:8d:20:c1:be:d9:15:fd:a1:12:c8:0d:b1:23: 00:a7:fe:63:e1:47:47:92:0a:8d:15:6d:e4:90:77: 38:16:62:b7:fd:5a:b3:bc:51:fb:59:c3:50:28:65: a8:fa:19:d6:3f:4c:04:66:3a:3a:d0:c6:c5:86:3a: 49:c6:ed:1a:58:53:a9:b1:bc:b8:6c:77:89:2e:12: 62:4f:e9:11:52:9d:a1:1c:57:4e:2b:4f:f2:b8:8b: de:54:06:31:5e:db:5c:d5:df:c6:ae:09:d9:3f:28: a7:8a:6c:1e:83:d3:8e:01:d8:61:e1:cc:00:51:8c: 96:c9:63:ad:fb:29:ae:53:33:0d:33:77:af:24:42: 02:29:e4:4f:bd:b3:21:2d:e0:df:2f:85:23:cc:b1: 33:34:4f:e5:d6:4d:78:da:dd:7f:00:76:52:58:b9: 68:b8:2a:b0:af:a1:7c:16:b8:5c:8f:4f:2d:17:b0: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C4:27:FC:BD:B5:F7:CB:96:D7:85:9E:3A:A1:91:22:DB:5C:D3:B0 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/M8Qn_L2198uW14WeOqGRIttc07A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.112.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:7c:c5:5e:11:fe:48:2d:aa:43:62:83:18:9a:c8:5e:b5:f7: c0:d3:ad:d4:a8:03:8a:68:dd:b7:48:f1:62:0d:8c:11:83:69: 92:b1:80:84:71:a6:b2:40:e9:8f:13:f7:71:f1:f2:5a:5f:64: 1a:3b:59:a7:e9:bd:12:f0:7a:42:f3:59:92:e0:33:c6:dd:91: f1:bf:80:7a:b6:a8:d0:04:01:58:a7:b2:04:39:20:ad:56:84: 8b:44:93:44:4e:3b:1d:66:3c:45:76:82:95:a9:2e:be:17:ca: b3:7e:98:4b:84:ed:70:75:30:8a:6f:b9:9a:ee:14:7e:78:ba: 47:6a:c8:c0:3d:f9:5b:72:ed:e2:17:ef:07:83:5d:47:90:2f: 3b:5a:f4:c3:f2:46:60:8e:41:60:d0:28:c7:16:4e:23:f7:c9: d0:65:64:a8:25:c0:8f:d7:0d:cb:2b:de:ec:a1:83:93:2a:83: 73:82:65:cb:47:fa:d7:f9:75:21:79:ed:4f:1c:3d:cb:57:c5: 45:21:c1:0c:35:7b:3c:60:28:74:96:ea:1c:96:b7:95:bd:ba: 7f:a7:2d:05:cb:a7:33:9c:88:00:55:8d:40:00:da:fe:ce:b8: f9:09:47:60:16:fa:46:f3:06:f9:f1:d7:6b:7c:c1:06:44:12: 0c:c9:45:9d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzQzQyN0ZDQkRCNUY3 Q0I5NkQ3ODU5RTNBQTE5MTIyREI1Q0QzQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAvnoizuulnXdaOQAGgpu6IqW/tJPSXlklOF+6LT1GAsvzBCUZ 4TuYqf2hWFeOc+hrD1m8vh8zpmNZqB6t7uGQrRuvRIJ1yj3P+BVRjSDBvtkV/aES yA2xIwCn/mPhR0eSCo0VbeSQdzgWYrf9WrO8UftZw1AoZaj6GdY/TARmOjrQxsWG OknG7RpYU6mxvLhsd4kuEmJP6RFSnaEcV04rT/K4i95UBjFe21zV38auCdk/KKeK bB6D044B2GHhzABRjJbJY637Ka5TMw0zd68kQgIp5E+9syEt4N8vhSPMsTM0T+XW TXja3X8AdlJYuWi4KrCvoXwWuFyPTy0XsFIFAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUM8Qn/L2198uW14WeOqGRIttc07AwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9NOFFuX0wyMTk4dVcxNFdlT3FH Ukl0dGMwN0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjHAw DQYJKoZIhvcNAQELBQADggEBADx8xV4R/kgtqkNigxiayF6198DTrdSoA4po3bdI 8WINjBGDaZKxgIRxprJA6Y8T93Hx8lpfZBo7WafpvRLwekLzWZLgM8bdkfG/gHq2 qNAEAVinsgQ5IK1WhItEk0ROOx1mPEV2gpWpLr4XyrN+mEuE7XB1MIpvuZruFH54 ukdqyMA9+Vty7eIX7weDXUeQLzta9MPyRmCOQWDQKMcWTiP3ydBlZKglwI/XDcsr 3uyhg5Mqg3OCZctH+tf5dSF57U8cPctXxUUhwQw1ezxgKHSW6hyWt5W9un+nLQXL pzOciABVjUAA2v7OuPkJR2AW+kbzBvnx12t8wQZEEgzJRZ0= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org