$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/syAdLS95C-sQIDXSfThwoFhBoSo.roa File: syAdLS95C-sQIDXSfThwoFhBoSo.roa (raw, json) Hash identifier: goDfRauY9Z+vuk3LiHl9dk/535ICeRCGNI0AQgSDBQ8= Subject key identifier: B3:20:1D:2D:2F:79:0B:EB:10:20:35:D2:7D:38:70:A0:58:41:A1:2A Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0DDD Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/syAdLS95C-sQIDXSfThwoFhBoSo.roa Signing time: Mon 26 Aug 2024 05:27:14 +0000 ROA not before: Mon 26 Aug 2024 05:27:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9916 IP address blocks: 140.129.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 06:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3549 (0xddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 26 05:27:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B3201D2D2F790BEB102035D27D3870A05841A12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:2a:1c:3f:83:99:71:02:7b:81:e4:65:54: dd:73:e4:9e:84:4d:30:dd:a4:de:e9:50:8e:46:79: a6:50:79:d5:6a:b0:a7:87:39:65:bb:8b:88:d1:c4: 42:42:4a:43:b0:7c:d5:35:3c:02:4d:0e:8e:a0:28: 6d:27:54:0a:ac:49:80:9b:7e:e1:c5:9b:c1:29:af: 1e:8b:ac:54:81:db:e9:20:25:fe:2e:8b:59:04:85: 7e:0c:40:6f:d5:4a:73:01:fe:70:87:43:de:e6:eb: 85:d4:6d:48:bf:7b:08:e9:83:98:9c:00:48:9c:e9: b5:e8:bd:ac:12:eb:71:c8:ca:c5:95:b3:e8:38:b3: 55:24:26:98:26:b2:8d:0b:e1:b1:ec:e5:86:e7:d8: 64:20:07:d9:e7:1e:0d:5c:cd:f6:b1:6f:3f:bf:e6: f5:6e:34:4b:79:3a:03:01:27:e1:7a:87:90:84:f8: 13:8b:92:86:13:cb:41:fc:14:dd:dd:cc:1a:28:6f: f3:a2:90:ad:93:02:c4:02:65:93:ea:f0:b4:4d:86: e6:4b:eb:8c:39:f6:f7:54:fd:31:ad:14:c3:bc:c5: dd:bd:2a:64:23:10:d1:49:c6:63:2d:11:fc:7c:c1: 69:10:41:c5:1a:54:5b:5b:7b:23:6b:9d:25:2b:c7: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:20:1D:2D:2F:79:0B:EB:10:20:35:D2:7D:38:70:A0:58:41:A1:2A X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/syAdLS95C-sQIDXSfThwoFhBoSo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.129.80.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:f9:26:56:5b:76:d7:89:83:1d:b1:7f:09:03:43:ea:7e:a9: 4a:b9:76:7e:77:a8:dd:56:c2:e2:98:52:b2:e9:03:f6:85:07: e4:6e:ba:e9:b0:d7:a8:a2:6b:9a:a2:ef:29:93:0d:1e:7f:a2: 7c:64:d2:d5:69:64:68:52:e9:cd:51:91:9c:82:5f:5c:33:3e: 9d:19:63:ce:6e:f1:f9:55:08:03:03:fa:59:84:15:fc:2c:87: 44:7c:c0:25:b2:9a:78:88:ce:9a:70:de:91:4d:81:e7:1c:f2: d7:04:f2:d8:ed:22:17:cf:ce:a6:f6:52:39:fa:05:21:37:aa: b9:b7:c7:4b:d5:10:f3:5f:dd:33:43:70:92:b0:df:6d:a3:a4: 24:61:c9:88:1e:5b:1b:11:bf:5f:b7:d9:70:07:79:3f:a7:33: 2d:3c:a0:88:ea:63:10:59:9d:fe:48:aa:40:16:1d:6b:f8:7c: 11:49:69:9a:cb:82:26:d2:7c:5e:fa:86:21:86:80:46:7e:19: 94:e4:ba:58:b8:1b:0b:56:9f:05:f0:f2:b9:f1:29:58:37:35: e9:f2:60:27:2c:68:d6:20:5c:f8:eb:19:5b:d1:53:91:f3:81: b7:2d:81:53:ff:46:ba:ff:39:60:ed:4f:20:61:e9:2d:f5:17: 72:93:dd:c9 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDd0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNDA4MjYw NTI3MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzMjAxRDJEMkY3OTBC RUIxMDIwMzVEMjdEMzg3MEEwNTg0MUExMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+DSocP4OZcQJ7geRlVN1z5J6ETTDdpN7pUI5GeaZQedVqsKeH OWW7i4jRxEJCSkOwfNU1PAJNDo6gKG0nVAqsSYCbfuHFm8Eprx6LrFSB2+kgJf4u i1kEhX4MQG/VSnMB/nCHQ97m64XUbUi/ewjpg5icAEic6bXovawS63HIysWVs+g4 s1UkJpgmso0L4bHs5Ybn2GQgB9nnHg1czfaxbz+/5vVuNEt5OgMBJ+F6h5CE+BOL koYTy0H8FN3dzBoob/OikK2TAsQCZZPq8LRNhuZL64w59vdU/TGtFMO8xd29KmQj ENFJxmMtEfx8wWkQQcUaVFtbeyNrnSUrxxGzAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUsyAdLS95C+sQIDXSfThwoFhBoSowHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9zeUFkTFM5NUMtc1FJRFhTZlRo d29GaEJvU28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjIFQ MA0GCSqGSIb3DQEBCwUAA4IBAQCc+SZWW3bXiYMdsX8JA0PqfqlKuXZ+d6jdVsLi mFKy6QP2hQfkbrrpsNeoomuaou8pkw0ef6J8ZNLVaWRoUunNUZGcgl9cMz6dGWPO bvH5VQgDA/pZhBX8LIdEfMAlspp4iM6acN6RTYHnHPLXBPLY7SIXz86m9lI5+gUh N6q5t8dL1RDzX90zQ3CSsN9to6QkYcmIHlsbEb9ft9lwB3k/pzMtPKCI6mMQWZ3+ SKpAFh1r+HwRSWmay4Im0nxe+oYhhoBGfhmU5LpYuBsLVp8F8PK58SlYNzXp8mAn LGjWIFz46xlb0VOR84G3LYFT/0a6/zlg7U8gYekt9Rdyk93J -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org