$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/V9wrrnjwM547ensBnkRBLbZRmos.roa File: V9wrrnjwM547ensBnkRBLbZRmos.roa (raw, json) Hash identifier: bIij4wszmCHHDrH/4oH4NcUytqZQV7LpmQtAHxN8Jww= Subject key identifier: 57:DC:2B:AE:78:F0:33:9E:3B:7A:7B:01:9E:44:41:2D:B6:51:9A:8B Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E49 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/V9wrrnjwM547ensBnkRBLbZRmos.roa Signing time: Mon 26 Aug 2024 05:27:11 +0000 ROA not before: Mon 26 Aug 2024 05:27:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18047 IP address blocks: 120.127.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3657 (0xe49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=57DC2BAE78F0339E3B7A7B019E44412DB6519A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:be:ce:5f:a9:81:ad:d5:67:32:17:87:52:45: 69:2b:b0:b6:12:ea:28:aa:c9:43:1d:e9:60:f1:a9: d6:36:43:16:63:71:60:09:5d:cb:bf:f6:90:2c:e4: 99:59:52:27:e2:f8:33:67:55:24:d0:60:f3:02:1a: 35:6a:c2:f1:35:d8:36:b4:9f:09:df:c8:59:cb:a9: 58:ab:0b:00:00:77:ad:48:5e:7f:80:20:c2:ab:d2: 56:f1:44:a8:1e:b5:8e:82:6a:e5:89:0d:da:0b:18: 84:65:ba:58:68:fc:33:5a:98:2a:04:f8:44:55:e6: 29:1e:11:52:98:7e:86:de:55:82:da:31:39:97:ab: 1e:4d:24:d5:9e:6f:80:af:10:1e:9e:29:fe:aa:cd: ab:94:77:fe:df:a7:9f:2e:91:51:bf:dd:9c:70:2a: 63:32:b8:84:8b:25:d6:45:63:c0:52:46:97:5b:c4: 3f:1a:5c:ed:b8:3b:7f:b8:df:2f:53:8a:e3:29:6c: 0a:30:51:48:5f:a3:48:a8:dd:15:8c:79:5f:94:d8: b9:56:88:ab:22:75:e3:af:90:db:de:4d:cb:f3:07: ee:d1:48:27:ac:0b:f9:c1:c8:63:ff:46:2d:f5:b5: f6:12:f4:9e:24:4f:f3:ba:c3:f9:ad:fb:62:c3:94: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DC:2B:AE:78:F0:33:9E:3B:7A:7B:01:9E:44:41:2D:B6:51:9A:8B X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/V9wrrnjwM547ensBnkRBLbZRmos.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.127.160.0/19 Signature Algorithm: sha256WithRSAEncryption 99:6c:ae:10:d6:83:f5:a1:70:9b:bb:d5:0b:eb:47:04:d8:ca: 98:7d:5c:0e:12:62:70:56:a7:17:7a:ed:e4:12:55:c2:aa:fe: 22:c3:8d:c9:0d:d4:f7:81:9f:46:89:41:7c:b6:ed:20:d3:0a: 02:82:2e:2c:ac:4d:19:f0:7d:27:5c:42:85:5e:02:a3:e7:b6: 40:3d:0c:ac:12:6e:8b:19:e3:3e:d5:c9:84:40:87:77:63:d2: 2a:32:cd:9e:b0:d0:8d:ff:76:c3:44:62:f3:f3:35:ba:0f:ce: bf:24:65:71:3a:f0:15:f1:1e:a0:11:c5:71:27:77:01:11:4c: a7:20:08:56:03:34:d7:16:e6:3b:c5:dc:df:30:57:3f:f7:8b: 56:dd:73:95:fa:71:5a:e8:b2:dd:ab:a7:c7:30:bb:c0:55:d1: 61:5b:02:4d:79:c6:9c:87:bb:9a:25:5a:26:3f:fc:8b:71:4d: 08:18:da:ed:df:32:66:c0:76:8d:90:a9:2f:a0:f8:a5:b1:a2: 8b:b1:a6:fd:58:3d:57:bc:1d:a5:97:dc:1b:62:95:d3:cd:e8: 12:8b:7e:3f:cf:20:aa:76:41:7c:22:e3:c3:5f:3d:5e:a6:fc: ed:63:07:56:17:85:44:58:31:a0:1e:f1:88:1a:19:80:fe:6d: ae:2c:89:8c -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU3REMyQkFFNzhGMDMz OUUzQjdBN0IwMTlFNDQ0MTJEQjY1MTlBOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUvs5fqYGt1WcyF4dSRWkrsLYS6iiqyUMd6WDxqdY2QxZjcWAJ Xcu/9pAs5JlZUifi+DNnVSTQYPMCGjVqwvE12Da0nwnfyFnLqVirCwAAd61IXn+A IMKr0lbxRKgetY6CauWJDdoLGIRlulho/DNamCoE+ERV5ikeEVKYfobeVYLaMTmX qx5NJNWeb4CvEB6eKf6qzauUd/7fp58ukVG/3ZxwKmMyuISLJdZFY8BSRpdbxD8a XO24O3+43y9TiuMpbAowUUhfo0io3RWMeV+U2LlWiKsideOvkNveTcvzB+7RSCes C/nByGP/Ri31tfYS9J4kT/O6w/mt+2LDlOZrAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUV9wrrnjwM547ensBnkRBLbZRmoswHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9WOXdycm5qd001NDdlbnNCbmtS QkxiWlJtb3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeH+g MA0GCSqGSIb3DQEBCwUAA4IBAQCZbK4Q1oP1oXCbu9UL60cE2MqYfVwOEmJwVqcX eu3kElXCqv4iw43JDdT3gZ9GiUF8tu0g0woCgi4srE0Z8H0nXEKFXgKj57ZAPQys Em6LGeM+1cmEQId3Y9IqMs2esNCN/3bDRGLz8zW6D86/JGVxOvAV8R6gEcVxJ3cB EUynIAhWAzTXFuY7xdzfMFc/94tW3XOV+nFa6LLdq6fHMLvAVdFhWwJNecach7ua JVomP/yLcU0IGNrt3zJmwHaNkKkvoPilsaKLsab9WD1XvB2ll9wbYpXTzegSi34/ zyCqdkF8IuPDXz1epvztYwdWF4VEWDGgHvGIGhmA/m2uLImM -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org