$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/m1-ylTLqUpS3OelxHUtEmYTlcmc.roa File: m1-ylTLqUpS3OelxHUtEmYTlcmc.roa (raw, json) Hash identifier: ZK5MTs7vqt/D7mHLWQdYucIlbxnXuGrvGn2hyxYq6VM= Subject key identifier: 9B:5F:B2:95:32:EA:52:94:B7:39:E9:71:1D:4B:44:99:84:E5:72:67 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E61 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/m1-ylTLqUpS3OelxHUtEmYTlcmc.roa Signing time: Mon 26 Aug 2024 05:27:23 +0000 ROA not before: Mon 26 Aug 2024 05:27:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131150 IP address blocks: 120.119.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3681 (0xe61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9B5FB29532EA5294B739E9711D4B449984E57267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:b9:5b:54:06:f4:3a:d3:f5:77:d4:ea:7a: 60:83:26:49:3a:09:a8:ff:43:a1:85:de:5b:1f:b8: 20:bd:76:c0:de:dc:b0:7b:a9:38:bd:60:1c:ee:d4: e3:90:b4:2b:ee:8b:4e:80:ca:33:28:83:3c:e6:07: e9:62:34:ed:7e:16:79:9d:77:18:cd:8d:82:b1:4a: ce:40:eb:09:68:ec:01:17:8b:de:1e:59:f9:d0:fc: 35:d2:93:f1:bc:8c:fe:5b:ec:8a:32:df:5d:5c:8d: 4c:ef:79:52:ff:9b:94:20:7c:24:70:43:ee:e1:74: f4:32:95:32:d2:7b:7a:aa:e6:51:c1:28:22:d5:8c: 5f:0d:f4:da:6c:a4:c9:da:27:9e:9f:bc:54:a7:c2: a3:20:fb:f1:39:c7:d0:89:f1:f0:ed:03:50:4f:d9: 02:3f:0e:13:62:69:6f:2a:1b:18:e7:97:b3:61:99: 54:97:b8:55:3c:2e:f4:2d:db:b5:3c:e3:ee:0f:31: 8b:4a:49:cd:6d:07:11:2e:fc:63:87:d5:21:73:27: a4:6a:1b:30:76:e3:16:52:de:3a:8c:c8:a1:57:a0: 26:dc:58:d8:0a:68:ca:ba:60:82:46:8a:b2:35:5a: 4b:16:b6:50:41:9d:a8:df:ef:4f:ec:51:12:20:18: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5F:B2:95:32:EA:52:94:B7:39:E9:71:1D:4B:44:99:84:E5:72:67 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/m1-ylTLqUpS3OelxHUtEmYTlcmc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.119.254.0/23 Signature Algorithm: sha256WithRSAEncryption 98:07:58:ec:8b:56:48:2d:91:b7:73:66:ff:f6:6c:ce:23:6c: a1:f9:67:96:1f:92:73:0b:a1:5c:28:a8:83:50:79:cd:55:34: 30:0f:3c:bc:fb:d7:16:31:83:0d:1c:60:2b:9e:63:cb:20:9c: 5d:25:9c:93:75:11:16:b4:df:fb:da:30:3e:70:13:a4:9d:3b: f0:36:bf:0c:66:8b:d9:10:f3:f4:60:3c:d6:7a:3f:5a:15:9c: da:21:0a:e6:b0:5d:f9:a0:39:19:dc:8d:b9:d3:ec:62:03:b2: d3:8c:24:99:d9:e5:f8:55:b3:5b:6e:87:c7:0d:e4:76:33:9e: ee:54:a8:ab:a6:95:8b:b3:d5:9e:4a:e8:2d:64:7e:86:b5:20: dd:2c:ed:76:75:0b:e7:f1:49:7f:32:c3:27:c6:0e:8d:59:1c: 8b:8c:5d:87:56:b6:d0:0d:2e:34:d2:93:47:d5:78:5d:f4:8a: 67:17:9e:50:b5:9c:57:f6:35:0c:02:62:fa:f2:19:cd:53:a1: 21:5c:90:cb:1a:a8:4b:0f:26:62:ce:b8:83:64:d1:5f:a2:13: c4:b5:f2:ae:2f:d3:97:cf:af:47:b9:e5:27:93:17:2f:49:0b: 71:b5:d3:5a:a9:4f:59:8c:0d:d2:84:fe:f2:b3:eb:cc:32:d8: b8:66:e6:f8 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCNUZCMjk1MzJFQTUy OTRCNzM5RTk3MTFENEI0NDk5ODRFNTcyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC307lbVAb0OtP1d9TqemCDJkk6Caj/Q6GF3lsfuCC9dsDe3LB7 qTi9YBzu1OOQtCvui06AyjMogzzmB+liNO1+FnmddxjNjYKxSs5A6wlo7AEXi94e WfnQ/DXSk/G8jP5b7Ioy311cjUzveVL/m5QgfCRwQ+7hdPQylTLSe3qq5lHBKCLV jF8N9NpspMnaJ56fvFSnwqMg+/E5x9CJ8fDtA1BP2QI/DhNiaW8qGxjnl7NhmVSX uFU8LvQt27U84+4PMYtKSc1tBxEu/GOH1SFzJ6RqGzB24xZS3jqMyKFXoCbcWNgK aMq6YIJGirI1WksWtlBBnajf70/sURIgGDGRAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUm1+ylTLqUpS3OelxHUtEmYTlcmcwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9tMS15bFRMcVVwUzNPZWx4SFV0 RW1ZVGxjbWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBeHf+ MA0GCSqGSIb3DQEBCwUAA4IBAQCYB1jsi1ZILZG3c2b/9mzOI2yh+WeWH5JzC6Fc KKiDUHnNVTQwDzy8+9cWMYMNHGArnmPLIJxdJZyTdREWtN/72jA+cBOknTvwNr8M ZovZEPP0YDzWej9aFZzaIQrmsF35oDkZ3I250+xiA7LTjCSZ2eX4VbNbbofHDeR2 M57uVKirppWLs9WeSugtZH6GtSDdLO12dQvn8Ul/MsMnxg6NWRyLjF2HVrbQDS40 0pNH1Xhd9IpnF55QtZxX9jUMAmL68hnNU6EhXJDLGqhLDyZizriDZNFfohPEtfKu L9OXz69HueUnkxcvSQtxtdNaqU9ZjA3ShP7ys+vMMti4Zub4 -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org