$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/c89wOLeo561i81lqelyttf7sNTk.roa File: c89wOLeo561i81lqelyttf7sNTk.roa (raw, json) Hash identifier: JxQU3Gdd76M54Q1fJCigVza1GtqAmg8gkXoZUOniKiU= Subject key identifier: 73:CF:70:38:B7:A8:E7:AD:62:F3:59:6A:7A:5C:AD:B5:FE:EC:35:39 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DE2 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/c89wOLeo561i81lqelyttf7sNTk.roa Signing time: Mon 26 Aug 2024 05:27:16 +0000 ROA not before: Mon 26 Aug 2024 05:27:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 140.136.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 01:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=73CF7038B7A8E7AD62F3596A7A5CADB5FEEC3539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:ed:24:b3:89:b2:1c:f3:cd:96:96:1b:38: 96:7d:e1:43:53:00:9f:30:00:b1:f4:d2:e9:2a:25: da:90:a5:0c:e9:ef:eb:9e:a5:39:02:3e:9d:1a:11: da:1d:14:81:7e:8f:82:1f:ad:d9:84:f5:b0:a5:bd: 09:e9:19:9e:47:42:bb:80:cf:19:db:ca:5d:5b:31: 55:43:2e:2a:30:13:4f:17:98:5a:53:c2:04:cc:72: e3:41:9e:9c:ee:52:8f:0a:ca:3c:ef:8e:c3:80:25: f4:c0:d6:84:f9:4d:b0:59:ec:b4:82:b1:19:90:07: 86:e3:a6:1d:e3:9e:6a:88:08:19:c8:8e:0e:cf:71: a2:00:ba:97:ce:08:17:68:63:98:e7:c6:5f:03:50: 0b:27:8a:ec:13:b3:6e:07:63:a0:f4:3a:4f:a7:8a: 3e:ff:da:17:6c:76:e4:64:8a:4e:fa:15:77:85:de: 9c:d0:1a:67:bd:1c:9e:e0:e0:91:a4:97:78:3d:77: 73:99:69:72:56:6a:b8:eb:97:fe:0c:f5:e2:75:7f: b1:c6:04:b5:dd:57:ba:83:23:1c:01:49:87:76:60: 83:45:42:b9:42:61:f0:19:9b:6d:5d:83:dc:d9:be: 14:c4:17:28:4d:2a:48:3a:58:51:d3:6e:72:ec:a9: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CF:70:38:B7:A8:E7:AD:62:F3:59:6A:7A:5C:AD:B5:FE:EC:35:39 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/c89wOLeo561i81lqelyttf7sNTk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.136.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2c:f7:b0:b9:98:20:c6:ca:01:76:8c:2f:e4:27:8f:25:d8:1f: 7f:0f:05:0e:4b:e0:94:d6:10:1d:fa:8f:2c:19:cb:35:2e:dd: 22:b1:e1:a8:20:64:93:98:7e:ef:f0:4e:5a:d7:8d:48:c3:de: 7f:16:a6:91:74:9a:4a:17:44:b5:13:72:6e:6e:18:f6:6f:2b: d9:f6:f9:0d:8d:fa:10:1c:62:68:f9:7e:26:75:58:ca:56:69: e0:dd:22:57:b2:22:c0:cd:19:b0:ed:c1:2f:a2:09:2b:e7:af: dc:48:03:50:03:11:55:e7:6f:d8:c9:91:8b:d8:a1:9d:25:42: 5e:29:7f:b8:ab:18:92:12:88:38:8b:75:f1:5e:8c:a8:49:83: b4:6c:8f:05:ac:c2:87:bf:d8:3f:3f:b3:1e:94:45:3a:fd:ec: 05:f9:32:ab:30:9a:32:42:07:5f:b1:d6:00:0e:9f:97:1e:ba: 83:1c:17:87:dc:03:61:23:37:a0:f6:6a:e9:93:6b:3c:cb:e7: 61:6c:06:31:bb:61:45:8f:1a:79:74:88:db:7f:1e:af:95:ae: 6f:7a:f0:ce:c1:84:cb:f2:16:45:8c:c9:ea:2e:78:e8:aa:fa: fb:4f:da:f9:89:3f:ca:28:d3:2f:6d:50:c0:7b:61:bb:f9:ff: b0:97:70:86 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDczQ0Y3MDM4QjdBOEU3 QUQ2MkYzNTk2QTdBNUNBREI1RkVFQzM1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz1O0ks4myHPPNlpYbOJZ94UNTAJ8wALH00ukqJdqQpQzp7+ue pTkCPp0aEdodFIF+j4IfrdmE9bClvQnpGZ5HQruAzxnbyl1bMVVDLiowE08XmFpT wgTMcuNBnpzuUo8KyjzvjsOAJfTA1oT5TbBZ7LSCsRmQB4bjph3jnmqICBnIjg7P caIAupfOCBdoY5jnxl8DUAsniuwTs24HY6D0Ok+nij7/2hdsduRkik76FXeF3pzQ Gme9HJ7g4JGkl3g9d3OZaXJWarjrl/4M9eJ1f7HGBLXdV7qDIxwBSYd2YINFQrlC YfAZm21dg9zZvhTEFyhNKkg6WFHTbnLsqQOjAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUc89wOLeo561i81lqelyttf7sNTkwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9jODl3T0xlbzU2MWk4MWxxZWx5 dHRmN3NOVGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBjIgw DQYJKoZIhvcNAQELBQADggEBACz3sLmYIMbKAXaML+QnjyXYH38PBQ5L4JTWEB36 jywZyzUu3SKx4aggZJOYfu/wTlrXjUjD3n8WppF0mkoXRLUTcm5uGPZvK9n2+Q2N +hAcYmj5fiZ1WMpWaeDdIleyIsDNGbDtwS+iCSvnr9xIA1ADEVXnb9jJkYvYoZ0l Ql4pf7irGJISiDiLdfFejKhJg7RsjwWswoe/2D8/sx6URTr97AX5MqswmjJCB1+x 1gAOn5ceuoMcF4fcA2EjN6D2aumTazzL52FsBjG7YUWPGnl0iNt/Hq+Vrm968M7B hMvyFkWMyeoueOiq+vtP2vmJP8oo0y9tUMB7Ybv5/7CXcIY= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org