$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/UQADK2SNh1zoxZKMmai3oP-EUqI.roa File: UQADK2SNh1zoxZKMmai3oP-EUqI.roa (raw, json) Hash identifier: SdT3ZvdpGom8rPiYhaGWGXkoiFeSRRwdzyshysCiwcs= Subject key identifier: 51:00:03:2B:64:8D:87:5C:E8:C5:92:8C:99:A8:B7:A0:FF:84:52:A2 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DF6 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/UQADK2SNh1zoxZKMmai3oP-EUqI.roa Signing time: Mon 26 Aug 2024 05:27:26 +0000 ROA not before: Mon 26 Aug 2024 05:27:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38845 IP address blocks: 140.136.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 01:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3574 (0xdf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5100032B648D875CE8C5928C99A8B7A0FF8452A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:c4:fb:a2:d3:ee:a8:b0:04:9a:86:ba:da: 65:73:d8:e5:f2:a4:fe:b0:f5:6b:79:1b:12:24:61: bb:7f:0f:c1:12:cd:b3:e5:9e:2b:7c:55:37:97:67: 39:d0:0d:ef:1b:a0:5b:b8:23:41:75:cd:65:af:a3: 3f:77:96:1f:17:8c:bd:fb:4a:d8:14:ee:6b:d1:58: f1:5c:47:5b:19:44:92:21:92:83:a2:4c:72:11:05: c9:a7:fd:4e:ad:73:f7:79:f0:27:ce:fb:96:f9:e1: bb:b1:96:e7:83:0d:46:70:8b:eb:5f:0e:30:cd:28: 70:8b:3e:7d:dc:54:52:ec:b7:14:0b:73:f4:7d:7d: 56:4c:9e:37:04:8e:39:c8:a2:a7:4b:24:61:85:23: ad:51:ff:21:7e:1f:bf:b6:64:e6:b5:c3:9c:2c:d2: 55:a0:ab:16:03:2a:da:53:49:76:62:fe:df:2c:bf: 55:b0:bb:9c:4c:14:39:d3:2a:28:d1:9b:9a:c1:64: 8f:68:b2:2a:bc:f8:81:a1:1b:8b:59:13:9e:90:07: 59:13:df:21:d8:fd:5d:53:55:76:e8:75:2b:1d:4a: 09:fe:1b:a3:d0:07:a8:ff:97:8b:18:2d:0e:a4:20: 5e:47:e6:ef:06:0c:c7:2a:4e:b9:f5:d7:c2:24:b8: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:03:2B:64:8D:87:5C:E8:C5:92:8C:99:A8:B7:A0:FF:84:52:A2 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/UQADK2SNh1zoxZKMmai3oP-EUqI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.136.160.0/22 Signature Algorithm: sha256WithRSAEncryption 39:48:81:a2:64:88:1f:0a:18:6b:9f:20:5a:fa:a9:08:85:a9: a9:3e:ac:c6:7a:94:3a:4f:27:df:55:71:02:d9:19:9f:ca:68: 26:3d:8f:b6:f8:05:e2:8d:3b:67:3b:d7:b2:83:74:d1:9b:4b: 12:e2:bc:24:83:d8:04:e8:d2:9e:bf:93:a6:83:21:05:cb:c0: e2:16:98:34:9b:13:ac:ba:53:7c:da:5c:24:2c:e5:03:61:b8: fc:59:1f:4b:27:1a:89:60:06:a2:c6:14:98:2a:9d:61:50:ac: b8:25:c0:f2:55:43:33:1a:27:01:b2:55:ad:ce:49:90:bd:20: c9:a7:f6:c7:6f:74:fe:74:90:5c:fb:05:8d:53:1d:4d:64:84: da:fc:3d:e4:88:c3:e7:ed:e0:f5:90:e2:1b:ab:a0:be:3d:33: e4:f7:c6:e1:b1:f8:18:d8:b7:b9:bd:81:85:a5:e9:7d:a7:0f: e7:50:18:ea:0f:b9:bc:3f:67:05:cf:ac:64:16:b4:83:ee:f7: 33:cf:1b:cb:fc:f2:12:20:e5:74:26:f5:ce:9b:e5:16:a5:80: c3:50:ab:aa:4c:4d:13:8b:db:ab:3d:93:c0:99:48:4f:9f:db: 2e:2b:ee:21:f2:69:44:83:7e:91:87:71:8f:2f:95:3e:b3:e2: d7:6e:83:4f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUxMDAwMzJCNjQ4RDg3 NUNFOEM1OTI4Qzk5QThCN0EwRkY4NDUyQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDDMT7otPuqLAEmoa62mVz2OXypP6w9Wt5GxIkYbt/D8ESzbPl nit8VTeXZznQDe8boFu4I0F1zWWvoz93lh8XjL37StgU7mvRWPFcR1sZRJIhkoOi THIRBcmn/U6tc/d58CfO+5b54buxlueDDUZwi+tfDjDNKHCLPn3cVFLstxQLc/R9 fVZMnjcEjjnIoqdLJGGFI61R/yF+H7+2ZOa1w5ws0lWgqxYDKtpTSXZi/t8sv1Ww u5xMFDnTKijRm5rBZI9osiq8+IGhG4tZE56QB1kT3yHY/V1TVXbodSsdSgn+G6PQ B6j/l4sYLQ6kIF5H5u8GDMcqTrn118IkuJkHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUUQADK2SNh1zoxZKMmai3oP+EUqIwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9VUUFESzJTTmgxem94WktNbWFp M29QLUVVcUkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjIig MA0GCSqGSIb3DQEBCwUAA4IBAQA5SIGiZIgfChhrnyBa+qkIhampPqzGepQ6Tyff VXEC2RmfymgmPY+2+AXijTtnO9eyg3TRm0sS4rwkg9gE6NKev5OmgyEFy8DiFpg0 mxOsulN82lwkLOUDYbj8WR9LJxqJYAaixhSYKp1hUKy4JcDyVUMzGicBslWtzkmQ vSDJp/bHb3T+dJBc+wWNUx1NZITa/D3kiMPn7eD1kOIbq6C+PTPk98bhsfgY2Le5 vYGFpel9pw/nUBjqD7m8P2cFz6xkFrSD7vczzxvL/PISIOV0JvXOm+UWpYDDUKuq TE0Ti9urPZPAmUhPn9suK+4h8mlEg36Rh3GPL5U+s+LXboNP -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org