$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/PG8AhQUP2cKdaD4TBBc8IVVUV5A.roa File: PG8AhQUP2cKdaD4TBBc8IVVUV5A.roa (raw, json) Hash identifier: m7aaqk4lz1Bv2egeGWvuAwQZOtvlM5iC4vEirjtYk5c= Subject key identifier: 3C:6F:00:85:05:0F:D9:C2:9D:68:3E:13:04:17:3C:21:55:54:57:90 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DF5 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/PG8AhQUP2cKdaD4TBBc8IVVUV5A.roa Signing time: Mon 26 Aug 2024 05:27:26 +0000 ROA not before: Mon 26 Aug 2024 05:27:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 140.128.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 01:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3573 (0xdf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3C6F0085050FD9C29D683E1304173C2155545790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:a9:0b:2e:8a:2d:ee:29:1d:1d:ff:68:9d: 8e:0b:a6:9c:b5:58:bf:54:1e:28:52:f0:b7:b3:22: ae:33:76:ad:52:00:15:dd:2b:43:ed:29:42:56:ef: 2f:7f:59:7f:a3:fa:9c:5e:43:67:e9:c5:40:a7:0e: 06:f6:0e:3c:f9:fd:df:ac:61:55:9a:88:ad:d4:58: d6:7c:e8:b0:59:57:57:17:e2:5e:61:56:17:39:0b: 19:2d:09:1a:ee:c9:5b:3e:99:64:f0:e3:9c:8b:23: d2:62:20:7c:41:67:0e:6b:27:87:63:21:44:03:bc: 0f:f1:02:7e:d6:cd:b7:f1:ea:63:e9:14:b3:50:4c: 02:10:3c:dc:23:5b:67:cd:04:1d:99:6f:f1:35:5c: 42:2b:0b:21:ae:e3:1e:6a:28:6c:b1:58:b3:2e:7f: a9:39:a8:f2:da:b2:14:ff:38:bf:92:18:c4:72:35: c6:07:59:6c:db:a5:33:c6:39:9b:46:cd:c5:5e:38: 1f:92:d5:6c:5a:cb:a3:c6:27:74:ac:05:97:c9:75: 75:23:0a:03:5a:fb:c1:16:fb:de:6f:99:52:6a:16: 92:21:ab:a3:c4:70:5a:4b:a7:58:d8:22:dc:67:d9: 8b:68:60:7d:45:b6:74:54:c0:38:62:56:13:b0:c0: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6F:00:85:05:0F:D9:C2:9D:68:3E:13:04:17:3C:21:55:54:57:90 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/PG8AhQUP2cKdaD4TBBc8IVVUV5A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.128.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:5e:73:a3:ae:9b:eb:3a:4a:a5:a2:8d:2b:1e:ea:03:a0:cc: 98:89:a2:94:4f:e0:86:c1:e1:1c:fe:b3:38:08:c8:73:f7:a5: b8:01:2c:28:0f:35:b6:f2:eb:91:ed:34:39:00:91:1e:c9:df: e0:12:45:b2:c8:5f:2c:f7:89:d0:30:45:66:3c:cf:f3:9a:15: 84:3c:36:55:12:4f:80:07:e9:bc:fd:37:0b:4d:30:01:f0:99: b3:56:3b:b1:4e:26:31:9a:60:c4:57:cd:09:18:5e:cc:c6:f8: 6d:8f:85:6c:ed:4b:63:23:fd:27:5b:ce:3d:c7:72:92:11:4a: ca:2c:f4:ce:a6:41:ac:42:ca:24:3c:c6:43:43:c0:3a:1d:f0: 64:2b:c8:1b:a9:e6:4d:93:ee:c4:11:0e:2c:6e:6a:ce:54:73: 37:67:8f:d7:39:d0:38:20:68:f1:cb:ff:9e:d4:4b:82:8e:79: 55:0b:99:22:cc:e5:18:aa:f0:66:33:c1:11:1d:5e:77:2e:83: 3d:77:7f:4a:fc:1d:ff:aa:e5:fa:0b:d8:02:db:89:ca:94:db: 1b:e2:6e:5b:4b:05:90:1f:db:94:e3:e3:bc:32:bb:f9:76:65: 8b:b3:67:47:34:8c:8f:13:2e:5d:27:dd:7d:e3:07:39:e4:60: b3:14:4a:07 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDfUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDNkYwMDg1MDUwRkQ5 QzI5RDY4M0UxMzA0MTczQzIxNTU1NDU3OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmc6kLLoot7ikdHf9onY4Lppy1WL9UHihS8LezIq4zdq1SABXd K0PtKUJW7y9/WX+j+pxeQ2fpxUCnDgb2Djz5/d+sYVWaiK3UWNZ86LBZV1cX4l5h Vhc5CxktCRruyVs+mWTw45yLI9JiIHxBZw5rJ4djIUQDvA/xAn7Wzbfx6mPpFLNQ TAIQPNwjW2fNBB2Zb/E1XEIrCyGu4x5qKGyxWLMuf6k5qPLashT/OL+SGMRyNcYH WWzbpTPGOZtGzcVeOB+S1Wxay6PGJ3SsBZfJdXUjCgNa+8EW+95vmVJqFpIhq6PE cFpLp1jYItxn2YtoYH1FtnRUwDhiVhOwwBINAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUPG8AhQUP2cKdaD4TBBc8IVVUV5AwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9QRzhBaFFVUDJjS2RhRDRUQkJj OElWVlVWNUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjIAw DQYJKoZIhvcNAQELBQADggEBAAxec6Oum+s6SqWijSse6gOgzJiJopRP4IbB4Rz+ szgIyHP3pbgBLCgPNbby65HtNDkAkR7J3+ASRbLIXyz3idAwRWY8z/OaFYQ8NlUS T4AH6bz9NwtNMAHwmbNWO7FOJjGaYMRXzQkYXszG+G2PhWztS2Mj/Sdbzj3HcpIR Ssos9M6mQaxCyiQ8xkNDwDod8GQryBup5k2T7sQRDixuas5Uczdnj9c50DggaPHL /57US4KOeVULmSLM5Riq8GYzwREdXncugz13f0r8Hf+q5foL2ALbicqU2xvibltL BZAf25Tj47wyu/l2ZYuzZ0c0jI8TLl0n3X3jBznkYLMUSgc= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org