$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/edwsgkPkNrjrFq9kAIUOr50FNFI.roa File: edwsgkPkNrjrFq9kAIUOr50FNFI.roa (raw, json) Hash identifier: R6DjQY/owxwWAdgTrgv61922YAQwd+pqhbJoV+PqlmU= Subject key identifier: 79:DC:2C:82:43:E4:36:B8:EB:16:AF:64:00:85:0E:AF:9D:05:34:52 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DF7 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/edwsgkPkNrjrFq9kAIUOr50FNFI.roa Signing time: Mon 26 Aug 2024 05:27:27 +0000 ROA not before: Mon 26 Aug 2024 05:27:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 192.83.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 01:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=79DC2C8243E436B8EB16AF6400850EAF9D053452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:6b:0a:9f:0e:bb:aa:47:c7:2b:20:89:ee: e7:9d:13:51:1e:b3:4a:d8:fe:21:3f:35:9e:b6:d3: 75:fb:9f:fb:b4:6a:28:03:fd:37:f6:59:be:9a:67: c0:27:da:da:9a:2f:80:c2:9c:3f:45:c8:f7:df:f1: 17:b1:21:2c:3d:35:de:ec:9a:34:b1:7c:b2:74:e2: 8c:ee:3e:eb:27:96:ca:cd:02:85:bf:ea:68:03:58: 9b:20:0b:97:72:c9:1b:07:4c:10:74:29:4b:03:03: 19:ad:2b:b8:1a:c7:64:0e:2a:e7:62:88:01:0e:84: 5a:33:b7:54:86:eb:f8:8c:9e:c5:52:d4:75:6e:ed: 80:9d:ef:7b:81:2d:30:76:22:9a:1d:c9:5f:5b:dd: f0:45:e7:a7:66:fb:48:3f:72:08:8e:30:ca:1e:c9: 12:e1:61:78:95:ed:66:29:15:c2:96:5f:bb:8e:f1: b8:3f:8f:33:cd:29:9f:53:6d:1a:b1:d8:6a:cd:25: be:f0:90:ed:16:a2:f3:58:bc:af:0e:c7:af:15:97: 12:e0:6d:18:c4:20:75:be:0b:17:e9:1e:d2:4a:63: 68:8d:44:2b:52:22:4f:80:7a:ef:ba:dc:aa:3e:ef: 71:0f:50:29:65:bb:56:90:8b:2e:61:37:5f:3f:9d: b9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DC:2C:82:43:E4:36:B8:EB:16:AF:64:00:85:0E:AF:9D:05:34:52 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/edwsgkPkNrjrFq9kAIUOr50FNFI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 192.83.176.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:2d:35:00:0f:61:cb:d6:d9:e4:59:35:85:81:c5:81:6b:9c: 32:ca:cc:6e:56:1f:6b:bb:b1:49:c0:2c:78:5b:0a:17:a9:e0: 05:60:43:b0:f0:5b:71:59:f0:de:81:a1:c9:aa:9e:bb:89:c0: 29:7b:ac:4a:3b:45:d3:ab:83:2d:fb:75:ac:fb:2e:8c:d7:a4: 42:82:82:f0:95:75:69:a7:9f:cd:46:28:f9:03:53:fe:20:db: 59:47:62:6c:e9:c5:91:76:03:94:90:8d:4e:a6:f3:5c:25:5f: 4a:d1:ba:12:07:65:75:ed:7b:e8:b4:b9:96:60:65:d2:34:84: ea:be:d9:40:45:e7:de:ad:33:2c:90:c4:7e:b7:41:0c:dd:be: 28:65:74:76:68:ce:6d:e6:9b:cb:3d:2a:36:67:d3:ca:82:6e: 65:fa:7e:f2:84:8c:5f:53:e7:10:b9:c8:0f:99:b1:67:c3:0a: ac:88:fa:6f:c6:2a:01:44:b9:32:de:33:6f:6e:ad:03:55:0c: a4:ad:5c:78:7a:60:6f:9f:db:84:07:9b:fa:4d:3a:f2:22:8e: 3a:dc:e9:74:8f:86:4b:ad:22:9b:f0:0e:ca:86:4b:c2:b1:c7: bb:cf:65:7c:39:8c:5c:db:5d:ee:54:8e:79:9b:37:b1:ad:a0: 8e:08:56:22 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc5REMyQzgyNDNFNDM2 QjhFQjE2QUY2NDAwODUwRUFGOUQwNTM0NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoHGsKnw67qkfHKyCJ7uedE1Ees0rY/iE/NZ6203X7n/u0aigD /Tf2Wb6aZ8An2tqaL4DCnD9FyPff8RexISw9Nd7smjSxfLJ04ozuPusnlsrNAoW/ 6mgDWJsgC5dyyRsHTBB0KUsDAxmtK7gax2QOKudiiAEOhFozt1SG6/iMnsVS1HVu 7YCd73uBLTB2IpodyV9b3fBF56dm+0g/cgiOMMoeyRLhYXiV7WYpFcKWX7uO8bg/ jzPNKZ9TbRqx2GrNJb7wkO0WovNYvK8Ox68VlxLgbRjEIHW+CxfpHtJKY2iNRCtS Ik+Aeu+63Ko+73EPUCllu1aQiy5hN18/nbkrAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUedwsgkPkNrjrFq9kAIUOr50FNFIwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9lZHdzZ2tQa05yanJGcTlrQUlV T3I1MEZORkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwFOw MA0GCSqGSIb3DQEBCwUAA4IBAQAbLTUAD2HL1tnkWTWFgcWBa5wyysxuVh9ru7FJ wCx4WwoXqeAFYEOw8FtxWfDegaHJqp67icApe6xKO0XTq4Mt+3Ws+y6M16RCgoLw lXVpp5/NRij5A1P+INtZR2Js6cWRdgOUkI1OpvNcJV9K0boSB2V17XvotLmWYGXS NITqvtlAReferTMskMR+t0EM3b4oZXR2aM5t5pvLPSo2Z9PKgm5l+n7yhIxfU+cQ ucgPmbFnwwqsiPpvxioBRLky3jNvbq0DVQykrVx4emBvn9uEB5v6TTryIo463Ol0 j4ZLrSKb8A7KhkvCsce7z2V8OYxc213uVI55mzexraCOCFYi -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org