$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa File: WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa (raw, json) Hash identifier: IGMn8AtEOznJqwPynoAcLbfgkAi9OBzPq17IFOaWzJg= Subject key identifier: 5A:0B:C7:3A:D1:34:42:26:7E:B1:DE:04:A0:9E:C7:4C:C3:C7:80:93 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0CCC Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa Signing time: Mon 26 Aug 2024 05:27:33 +0000 ROA not before: Mon 26 Aug 2024 05:27:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 123.0.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3276 (0xccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 26 05:27:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5A0BC73AD13442267EB1DE04A09EC74CC3C78093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1b:8e:78:cf:0b:a8:3a:e7:a5:c9:7e:0d:a2: a1:f0:6d:8a:06:93:22:36:6a:db:11:c5:e0:bf:c1: 77:d7:86:40:03:86:c9:2c:b9:f2:a9:d8:1c:c3:f1: 4d:78:1e:e5:f0:23:10:9e:d0:7c:31:06:e0:0d:f7: 30:75:83:1a:2c:62:8c:e4:df:e4:6a:12:04:66:ea: 35:2f:86:19:a7:08:e8:5c:60:75:18:1d:e6:11:09: 6b:fd:1c:d1:0a:26:d9:e4:83:43:94:15:c9:6a:eb: 50:df:07:ca:52:40:e9:6c:28:df:a5:44:ab:bc:63: d6:4d:ab:ee:34:3a:14:f4:0f:9a:34:c4:b2:38:0a: a3:c3:0a:ac:45:e4:f6:5c:d0:09:b8:38:f7:92:93: 0c:9d:27:1f:2f:4f:48:f3:63:ae:37:45:e8:24:77: 19:4d:ba:14:af:87:6e:fd:23:41:82:2f:46:da:f1: dd:3b:8c:83:c2:1b:a0:de:ed:91:27:dc:30:62:4f: fb:15:20:19:eb:7b:15:86:81:d5:a5:a1:6d:f1:19: 3c:68:05:8e:5f:68:83:07:6f:c6:67:c6:c3:2e:75: 7d:f4:df:81:6f:84:30:2b:b3:29:1e:fd:51:52:eb: 96:8e:a2:48:ce:48:3f:f9:36:e6:01:b7:d3:52:f7: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0B:C7:3A:D1:34:42:26:7E:B1:DE:04:A0:9E:C7:4C:C3:C7:80:93 X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/WgvHOtE0QiZ-sd4EoJ7HTMPHgJM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.0.192.0/18 Signature Algorithm: sha256WithRSAEncryption 00:a5:46:9b:73:6d:7b:d1:4e:46:7b:db:f6:56:ed:01:f4:1f: 97:9a:c2:b1:88:26:04:ba:23:35:d6:1e:02:ce:d9:4f:df:b2: 6d:9a:56:73:c8:dd:05:a7:21:4e:67:13:c1:26:5c:9e:93:1d: d1:a1:3c:2c:75:0d:ec:1c:e2:d7:f5:41:a4:e2:f6:10:7c:fc: 2d:d9:1a:d5:15:64:5a:9d:a3:93:30:45:5c:12:cc:f3:77:3c: ae:f6:a1:0a:86:2c:fa:3a:43:f0:47:9a:16:be:75:3c:aa:65: bc:36:f2:26:c3:c1:f6:84:7d:8c:84:dc:7f:70:a5:ad:33:98: fa:4f:c7:01:30:06:af:1f:1f:e2:a1:42:af:ba:e5:8d:b5:32: bb:68:96:9c:2e:e0:c1:d4:f6:cf:20:8c:9f:1c:6c:04:24:66: fb:33:98:1e:a6:ba:a2:ef:13:ab:46:07:ce:cd:b4:3a:dc:18: 67:10:89:40:88:3c:af:ed:73:87:34:89:6f:2f:b4:e8:4d:33: bb:0c:c0:9c:8d:85:bb:d8:36:a5:70:3f:92:ee:6e:a1:34:05: 4b:66:2b:f4:25:a4:7b:9b:84:6d:e5:56:ef:c4:73:1e:5b:28: b8:dd:a8:20:48:b3:57:eb:b0:18:f2:76:5b:1a:ce:e8:78:03: 8f:fb:10:00 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA4MjYw NTI3MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBMEJDNzNBRDEzNDQy MjY3RUIxREUwNEEwOUVDNzRDQzNDNzgwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRG454zwuoOuelyX4NoqHwbYoGkyI2atsRxeC/wXfXhkADhsks ufKp2BzD8U14HuXwIxCe0HwxBuAN9zB1gxosYozk3+RqEgRm6jUvhhmnCOhcYHUY HeYRCWv9HNEKJtnkg0OUFclq61DfB8pSQOlsKN+lRKu8Y9ZNq+40OhT0D5o0xLI4 CqPDCqxF5PZc0Am4OPeSkwydJx8vT0jzY643RegkdxlNuhSvh279I0GCL0ba8d07 jIPCG6De7ZEn3DBiT/sVIBnrexWGgdWloW3xGTxoBY5faIMHb8ZnxsMudX3034Fv hDArsyke/VFS65aOokjOSD/5NuYBt9NS92S1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUWgvHOtE0QiZ+sd4EoJ7HTMPHgJMwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9XZ3ZIT3RFMFFpWi1zZDRFb0o3 SFRNUEhnSk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGewDA MA0GCSqGSIb3DQEBCwUAA4IBAQAApUabc2170U5Ge9v2Vu0B9B+XmsKxiCYEuiM1 1h4CztlP37JtmlZzyN0FpyFOZxPBJlyekx3RoTwsdQ3sHOLX9UGk4vYQfPwt2RrV FWRanaOTMEVcEszzdzyu9qEKhiz6OkPwR5oWvnU8qmW8NvImw8H2hH2MhNx/cKWt M5j6T8cBMAavHx/ioUKvuuWNtTK7aJacLuDB1PbPIIyfHGwEJGb7M5geprqi7xOr RgfOzbQ63BhnEIlAiDyv7XOHNIlvL7ToTTO7DMCcjYW72DalcD+S7m6hNAVLZiv0 JaR7m4Rt5VbvxHMeWyi43aggSLNX67AY8nZbGs7oeAOP+xAA -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:45 2024 by rpki-client on console-fra.rpki-client.org