$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/oxD735Zg1TEdUgxIYd3PrejG8fA.roa File: oxD735Zg1TEdUgxIYd3PrejG8fA.roa (raw, json) Hash identifier: Y3Qi0+dNLRFadqZy4510Hst6uHddIeDANm4Y8822/+4= Subject key identifier: A3:10:FB:DF:96:60:D5:31:1D:52:0C:48:61:DD:CF:AD:E8:C6:F1:F0 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DEE Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oxD735Zg1TEdUgxIYd3PrejG8fA.roa Signing time: Mon 26 Aug 2024 05:27:21 +0000 ROA not before: Mon 26 Aug 2024 05:27:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 134.208.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 01:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3566 (0xdee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:21 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A310FBDF9660D5311D520C4861DDCFADE8C6F1F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:1c:49:47:c3:2e:09:e1:5f:1a:a8:45:b5: ef:40:88:22:68:bc:e6:1a:a1:c9:83:34:df:ef:70: 20:60:78:6c:43:10:af:8b:2c:dc:cf:71:66:ee:2b: 52:cc:c2:fc:e4:0b:f7:b8:ee:e8:6b:85:ab:fe:ad: a5:ee:f8:18:5c:92:7b:7c:f8:37:c4:d9:7d:16:02: f7:f1:15:b3:fd:fc:8c:42:2e:a0:fc:ed:50:f0:b8: 0c:17:e4:51:3d:a8:cb:7d:3b:17:79:f3:ee:0f:ce: c5:1f:68:35:05:a5:54:a4:92:56:8a:e8:e0:7f:ed: 6a:02:02:61:25:c7:b2:c7:e8:2d:04:db:84:d0:cc: 15:22:f8:fa:94:f1:26:a2:90:01:12:65:91:5f:86: 0a:d6:02:f7:d2:60:76:83:77:a5:f1:82:5e:e9:1a: 72:96:d3:58:ef:63:f3:77:98:62:17:75:e2:85:46: 26:55:08:d8:a6:a9:26:e9:c2:c4:ab:72:83:f0:0f: 3b:5b:9a:fa:11:36:30:f5:40:cf:69:a9:61:5b:6a: 1e:b3:cf:ba:f4:a3:36:59:6c:e5:c6:e7:45:3d:87: 02:a8:c9:4a:eb:03:22:09:f9:0a:75:69:56:d4:5e: 0a:bb:0f:93:ef:1a:42:6f:0b:fd:cf:20:ce:d3:7a: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:10:FB:DF:96:60:D5:31:1D:52:0C:48:61:DD:CF:AD:E8:C6:F1:F0 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/oxD735Zg1TEdUgxIYd3PrejG8fA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 134.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:84:0d:a4:28:39:69:ee:f7:a8:92:50:24:1e:80:25:bb:dc: ad:3e:d4:ec:21:7f:d7:ef:98:4d:a1:d3:e4:63:b8:c0:3d:ef: a6:37:f8:49:7b:c3:10:c0:ba:84:67:86:d7:f0:53:42:16:c7: 82:11:08:a5:47:9e:e2:d8:62:fb:e1:99:bd:74:8d:78:ff:bc: c7:14:d6:22:c1:1b:04:06:f3:78:61:3c:be:ec:d4:8b:7e:70: 55:ab:3c:f2:19:83:cb:25:18:f7:c1:a1:ec:db:53:45:aa:e2: a4:38:96:7f:31:20:b0:ad:6a:c1:6b:67:f2:9d:7b:9a:36:66: 2b:28:3b:58:29:8f:59:f5:12:4d:74:d4:bb:83:ab:f7:ac:55: fa:ae:88:04:e2:31:ca:e6:5c:37:19:3c:93:bc:7b:8a:2b:bb: 6a:5e:34:dc:79:2e:ad:21:44:b1:b1:de:2b:01:30:e6:2c:8e: 61:30:47:1f:4b:47:5c:f3:8e:ac:6c:4f:26:d2:84:ec:3e:1c: 7a:fa:1d:7b:c7:07:88:db:ee:cb:a7:9c:f3:50:e4:cb:2c:17: 1c:2d:23:b3:da:15:29:35:95:c5:1b:69:42:60:1b:32:67:bf: 9f:5e:4e:0c:b8:79:6d:b4:c5:9f:35:d4:cd:cb:ba:92:8f:ea: f7:ef:5b:3c -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzMTBGQkRGOTY2MEQ1 MzExRDUyMEM0ODYxRERDRkFERThDNkYxRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuARxJR8MuCeFfGqhFte9AiCJovOYaocmDNN/vcCBgeGxDEK+L LNzPcWbuK1LMwvzkC/e47uhrhav+raXu+Bhcknt8+DfE2X0WAvfxFbP9/IxCLqD8 7VDwuAwX5FE9qMt9Oxd58+4PzsUfaDUFpVSkklaK6OB/7WoCAmElx7LH6C0E24TQ zBUi+PqU8SaikAESZZFfhgrWAvfSYHaDd6Xxgl7pGnKW01jvY/N3mGIXdeKFRiZV CNimqSbpwsSrcoPwDztbmvoRNjD1QM9pqWFbah6zz7r0ozZZbOXG50U9hwKoyUrr AyIJ+Qp1aVbUXgq7D5PvGkJvC/3PIM7Tei3PAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUoxD735Zg1TEdUgxIYd3PrejG8fAwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9veEQ3MzVaZzFURWRVZ3hJWWQz UHJlakc4ZkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhtAw DQYJKoZIhvcNAQELBQADggEBAFyEDaQoOWnu96iSUCQegCW73K0+1Owhf9fvmE2h 0+RjuMA976Y3+El7wxDAuoRnhtfwU0IWx4IRCKVHnuLYYvvhmb10jXj/vMcU1iLB GwQG83hhPL7s1It+cFWrPPIZg8slGPfBoezbU0Wq4qQ4ln8xILCtasFrZ/Kde5o2 ZisoO1gpj1n1Ek101LuDq/esVfquiATiMcrmXDcZPJO8e4oru2peNNx5Lq0hRLGx 3isBMOYsjmEwRx9LR1zzjqxsTybShOw+HHr6HXvHB4jb7sunnPNQ5MssFxwtI7Pa FSk1lcUbaUJgGzJnv59eTgy4eW20xZ811M3LupKP6vfvWzw= -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org