$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/eJ6LnEqbcc1mOALZw2m2AOAQCvA.roa File: eJ6LnEqbcc1mOALZw2m2AOAQCvA.roa (raw, json) Hash identifier: eVHdxtDIH4ROFw4wJjcc4qbFBXav7HqIXaV7A0SwyM4= Subject key identifier: 78:9E:8B:9C:4A:9B:71:CD:66:38:02:D9:C3:69:B6:00:E0:10:0A:F0 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DE5 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/eJ6LnEqbcc1mOALZw2m2AOAQCvA.roa Signing time: Mon 26 Aug 2024 05:27:17 +0000 ROA not before: Mon 26 Aug 2024 05:27:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18217 IP address blocks: 140.109.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 06:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3557 (0xde5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=789E8B9C4A9B71CD663802D9C369B600E0100AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:46:65:d4:ef:45:d7:83:d5:34:3e:69:52: 45:26:ce:84:7a:33:33:80:89:97:bd:f1:46:f9:65: 8e:f2:1d:38:88:4d:a8:58:78:ea:dd:00:5c:5b:94: 1a:be:e5:d9:59:88:90:50:23:68:42:32:f8:64:bb: 63:8b:0c:86:da:46:f3:35:04:b1:a6:5f:c5:29:5c: 71:a3:4b:de:79:a4:73:ba:31:f4:26:95:e4:22:7a: e5:1d:f1:c6:fd:59:be:eb:fe:a1:a1:ad:60:31:61: 46:61:8f:c4:30:34:56:ad:03:ae:89:cc:24:9e:c2: fa:b5:6e:39:b6:ef:56:2f:06:6a:bd:75:6b:f8:b9: 92:20:63:b7:70:90:94:90:4e:63:65:36:43:ef:1b: 3d:d6:83:be:86:c8:28:9c:93:4d:8c:dd:40:28:b6: f7:4f:15:59:cd:08:fd:80:3f:0d:76:1e:cd:31:72: 6f:57:e1:4e:5f:d1:1a:98:8e:8a:bb:62:91:9d:77: be:c4:7d:8c:2b:08:bc:cf:6b:54:8c:d7:19:b5:e2: 0d:23:e9:6f:f8:cc:9e:e4:56:24:77:3e:34:df:e0: 81:f0:d0:fb:7d:71:40:72:fe:62:a1:b2:d2:d4:0b: 46:0e:b3:cf:c0:21:53:69:fc:39:2c:31:49:d6:de: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9E:8B:9C:4A:9B:71:CD:66:38:02:D9:C3:69:B6:00:E0:10:0A:F0 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/eJ6LnEqbcc1mOALZw2m2AOAQCvA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.109.224.0/23 Signature Algorithm: sha256WithRSAEncryption 84:42:8a:44:c4:5f:9a:1e:e0:4e:ba:e9:80:a3:10:1c:04:d7: 25:2b:78:a5:64:8b:04:16:06:ca:13:59:da:c4:26:f2:d0:b1: 03:4f:f6:6e:25:02:d9:9f:4d:11:49:35:cc:d1:48:1f:35:79: 4b:de:91:ca:b5:a5:55:a8:65:c8:02:09:a3:b0:71:fd:4d:96: 95:80:17:54:88:46:61:c4:a9:73:2e:e4:8a:63:b3:f1:f3:0b: 72:fe:ec:95:84:dc:ff:63:ed:f2:91:ae:c0:cd:94:90:0e:89: 78:e1:c5:93:ef:79:79:74:34:17:40:5e:12:65:7b:92:66:ed: 7d:2b:81:07:04:07:a0:ee:df:b2:e3:51:97:28:c1:f2:4a:11: a3:fd:0d:32:09:10:8d:2c:b9:53:6f:ef:56:3d:b9:36:2d:cf: b1:ee:7d:8e:e7:b9:a4:1a:78:67:71:0a:a6:70:c1:a9:92:bd: b3:c6:04:f7:22:b2:a9:c9:15:df:80:94:59:83:60:1c:c8:44: 54:dc:c3:99:02:d9:fd:57:35:47:18:c6:09:1d:6d:09:13:e4: 48:3d:87:b5:04:e5:9b:6b:b2:b9:52:d8:af:ef:55:f5:ab:02: a8:97:38:bb:bf:71:5e:3d:e8:66:48:37:e8:3b:16:7c:f7:cd: 5e:7b:b7:bd -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc4OUU4QjlDNEE5Qjcx Q0Q2NjM4MDJEOUMzNjlCNjAwRTAxMDBBRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+hUZl1O9F14PVND5pUkUmzoR6MzOAiZe98Ub5ZY7yHTiITahY eOrdAFxblBq+5dlZiJBQI2hCMvhku2OLDIbaRvM1BLGmX8UpXHGjS955pHO6MfQm leQieuUd8cb9Wb7r/qGhrWAxYUZhj8QwNFatA66JzCSewvq1bjm271YvBmq9dWv4 uZIgY7dwkJSQTmNlNkPvGz3Wg76GyCick02M3UAotvdPFVnNCP2APw12Hs0xcm9X 4U5f0RqYjoq7YpGdd77EfYwrCLzPa1SM1xm14g0j6W/4zJ7kViR3PjTf4IHw0Pt9 cUBy/mKhstLUC0YOs8/AIVNp/DksMUnW3i39AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUeJ6LnEqbcc1mOALZw2m2AOAQCvAwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9lSjZMbkVxYmNjMW1PQUxadzJt MkFPQVFDdkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjG3g MA0GCSqGSIb3DQEBCwUAA4IBAQCEQopExF+aHuBOuumAoxAcBNclK3ilZIsEFgbK E1naxCby0LEDT/ZuJQLZn00RSTXM0UgfNXlL3pHKtaVVqGXIAgmjsHH9TZaVgBdU iEZhxKlzLuSKY7Px8wty/uyVhNz/Y+3yka7AzZSQDol44cWT73l5dDQXQF4SZXuS Zu19K4EHBAeg7t+y41GXKMHyShGj/Q0yCRCNLLlTb+9WPbk2Lc+x7n2O57mkGnhn cQqmcMGpkr2zxgT3IrKpyRXfgJRZg2AcyERU3MOZAtn9VzVHGMYJHW0JE+RIPYe1 BOWba7K5Utiv71X1qwKolzi7v3FePehmSDfoOxZ8981ee7e9 -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org