$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/rAfjhvsaULG8ClHVEKmHM5Ry-jg.roa File: rAfjhvsaULG8ClHVEKmHM5Ry-jg.roa (raw, json) Hash identifier: UfofaNSax+/0Ooi6iGUonR535Kq9LiGbjHtlCjVvNVQ= Subject key identifier: AC:07:E3:86:FB:1A:50:B1:BC:0A:51:D5:10:A9:87:33:94:72:FA:38 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E5C Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rAfjhvsaULG8ClHVEKmHM5Ry-jg.roa Signing time: Mon 26 Aug 2024 05:27:19 +0000 ROA not before: Mon 26 Aug 2024 05:27:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18185 IP address blocks: 120.117.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3676 (0xe5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AC07E386FB1A50B1BC0A51D510A987339472FA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:55:f6:80:a0:eb:85:5e:93:3d:77:a7:5b: c4:76:4c:2c:06:7a:75:c2:c6:58:9c:bb:e4:d0:94: 56:9c:27:e7:61:ec:dd:c4:ae:96:ee:5c:a2:6d:a2: 8f:0c:40:ad:02:b0:56:a8:cd:88:14:31:41:5e:4a: 0a:41:45:d3:9f:37:d5:c3:53:c9:88:30:a9:b0:5c: 82:1e:83:0f:d9:d4:db:cf:cb:a1:6f:aa:86:f9:42: 86:2c:6e:2a:75:cf:93:51:4c:af:8c:45:0b:15:91: 75:76:92:48:bc:e6:8f:89:22:0a:d6:69:1b:a6:7e: a2:98:d7:47:f0:6a:4a:c4:5d:26:5c:1c:3c:45:a7: 46:f2:f3:d5:42:a4:ec:35:8a:40:12:f8:0a:e0:46: d0:84:f2:3e:db:1d:8f:52:1e:c6:3c:5d:43:e8:49: 5e:81:81:b5:25:e5:f5:18:89:d8:43:75:34:63:f5: 8a:60:5f:83:fc:73:a6:00:9c:e2:84:f3:5e:91:ad: 24:45:9c:c6:4d:59:b2:5d:b5:3c:be:87:a5:6f:18: 5c:e0:c7:37:9c:b0:a3:73:54:f5:c3:13:c6:6c:d4: 15:40:6d:cb:24:61:31:f0:ff:3f:de:58:21:7f:b5: 0a:e0:d3:56:2b:53:5f:ff:36:51:da:c9:5a:84:63: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:07:E3:86:FB:1A:50:B1:BC:0A:51:D5:10:A9:87:33:94:72:FA:38 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/rAfjhvsaULG8ClHVEKmHM5Ry-jg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 120.117.2.0/24 Signature Algorithm: sha256WithRSAEncryption ae:32:6f:c4:c3:41:fd:16:75:86:a7:64:5a:08:47:f1:62:5f: ed:10:03:a0:0e:8b:59:60:c0:e5:06:3b:db:a9:05:ac:d2:99: a6:07:17:56:22:80:10:6e:66:7d:af:a5:e1:67:3e:ae:36:4a: 03:a8:ce:f9:fd:7b:de:bd:c9:56:c8:67:bc:cc:14:da:ae:4e: 0b:aa:d2:4f:f2:32:01:36:e1:7c:09:e3:79:53:7b:b2:b4:70: 69:96:34:60:3a:ea:ba:2b:c7:51:89:b8:06:90:e5:eb:c4:5e: 04:20:65:1c:06:46:64:16:08:d0:b1:fb:0a:64:cc:18:d4:c2: 24:3a:35:00:14:3a:5d:d4:27:e7:97:b7:97:1a:e4:c2:f2:65: 37:f1:d4:1a:39:2b:96:e4:7d:2b:ac:6a:95:4d:1a:0d:e4:93: 8e:dc:61:5b:19:00:bc:67:ac:50:d3:4a:b8:67:66:86:c1:f2: 74:34:db:bb:ec:ae:7a:18:f7:1f:f5:82:64:39:be:8d:b1:62: 08:83:86:4b:a8:d2:30:77:43:aa:94:16:ef:52:a3:d9:40:c8: fd:3f:30:c0:8a:6a:b2:86:26:e4:6e:08:94:d4:04:0a:4e:4b: 72:42:07:ce:73:2f:52:5c:ed:ad:23:fd:2c:21:2a:ad:d7:05: 6a:32:c1:1e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDlwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDMDdFMzg2RkIxQTUw QjFCQzBBNTFENTEwQTk4NzMzOTQ3MkZBMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDawFX2gKDrhV6TPXenW8R2TCwGenXCxlicu+TQlFacJ+dh7N3E rpbuXKJtoo8MQK0CsFaozYgUMUFeSgpBRdOfN9XDU8mIMKmwXIIegw/Z1NvPy6Fv qob5QoYsbip1z5NRTK+MRQsVkXV2kki85o+JIgrWaRumfqKY10fwakrEXSZcHDxF p0by89VCpOw1ikAS+ArgRtCE8j7bHY9SHsY8XUPoSV6BgbUl5fUYidhDdTRj9Ypg X4P8c6YAnOKE816RrSRFnMZNWbJdtTy+h6VvGFzgxzecsKNzVPXDE8Zs1BVAbcsk YTHw/z/eWCF/tQrg01YrU1//NlHayVqEY6irAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUrAfjhvsaULG8ClHVEKmHM5Ry+jgwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9yQWZqaHZzYVVMRzhDbEhWRUtt SE01Unktamcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeHUC MA0GCSqGSIb3DQEBCwUAA4IBAQCuMm/Ew0H9FnWGp2RaCEfxYl/tEAOgDotZYMDl BjvbqQWs0pmmBxdWIoAQbmZ9r6XhZz6uNkoDqM75/XvevclWyGe8zBTark4LqtJP 8jIBNuF8CeN5U3uytHBpljRgOuq6K8dRibgGkOXrxF4EIGUcBkZkFgjQsfsKZMwY 1MIkOjUAFDpd1Cfnl7eXGuTC8mU38dQaOSuW5H0rrGqVTRoN5JOO3GFbGQC8Z6xQ 00q4Z2aGwfJ0NNu77K56GPcf9YJkOb6NsWIIg4ZLqNIwd0OqlBbvUqPZQMj9PzDA imqyhibkbgiU1AQKTktyQgfOcy9SXO2tI/0sISqt1wVqMsEe -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org