$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hKqzF_IYxpPK4ROHuKYsKIESl-U.roa File: hKqzF_IYxpPK4ROHuKYsKIESl-U.roa (raw, json) Hash identifier: DE4TlaaCoKRmfWsLzRXQhcfdZV15LjGiosv+aIsvyEo= Subject key identifier: 84:AA:B3:17:F2:18:C6:93:CA:E1:13:87:B8:A6:2C:28:81:12:97:E5 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0CE0 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hKqzF_IYxpPK4ROHuKYsKIESl-U.roa Signing time: Mon 26 Aug 2024 05:27:37 +0000 ROA not before: Mon 26 Aug 2024 05:27:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.202.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 26 05:27:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=84AAB317F218C693CAE11387B8A62C28811297E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:db:bc:49:a3:6e:db:57:ca:f7:df:f2:ef: c5:fb:a5:5d:cb:a4:d0:31:91:23:c1:10:3c:b3:43: b5:e9:44:59:c9:76:b0:15:6b:06:d9:52:4e:1d:96: ee:da:9c:14:d4:85:98:a1:84:13:29:4d:8e:8c:b3: 5f:1f:8e:c8:fe:57:49:2e:45:65:98:9b:64:a5:e1: 15:4c:ab:02:3d:c3:92:3a:5a:45:1f:f5:c0:3c:6c: 18:1d:ec:43:b9:0e:3e:b5:35:5d:ed:d1:20:36:41: f0:d5:76:d3:97:4f:b2:3b:3a:b9:79:94:06:a2:d1: e2:13:ec:ad:46:9f:41:b7:17:78:56:2e:7c:96:f3: a7:28:36:58:f0:05:ec:2e:dd:c0:09:91:c7:30:80: 91:f9:cb:54:ae:6b:91:76:29:38:d3:dc:b2:48:2e: cc:2e:84:12:fb:4c:37:03:cb:6e:9e:43:ea:c4:11: cd:c7:a0:a1:f3:c6:a8:d0:fa:8b:03:4c:55:ea:56: 23:57:b1:6c:2f:64:4b:df:2c:02:e9:78:00:1b:34: e5:62:17:00:36:39:de:46:22:b7:be:f7:1c:43:12: 96:a9:14:f6:7b:cf:22:e0:a3:51:45:9c:ac:35:04: 6b:80:78:c2:b7:0f:41:5b:6c:c7:e3:5b:1b:dd:cf: d1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AA:B3:17:F2:18:C6:93:CA:E1:13:87:B8:A6:2C:28:81:12:97:E5 X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/hKqzF_IYxpPK4ROHuKYsKIESl-U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.56.0/21 Signature Algorithm: sha256WithRSAEncryption 4f:ad:7a:6d:24:b2:04:0a:74:fc:de:10:cf:34:d9:83:56:1f: de:37:21:04:76:50:20:51:43:6a:f2:5a:ff:ab:a8:b9:2f:44: 5e:d8:9e:e3:d9:a9:60:d4:84:2e:7b:e7:dc:e8:1f:12:d4:73: 71:c1:ef:ac:60:bf:0b:8e:b6:9e:a1:f0:5e:b6:c3:3a:be:d6: ab:dd:16:61:5c:2f:bb:c9:3a:c9:93:7f:77:65:78:09:52:bd: 21:a8:62:09:79:f3:83:a7:47:98:ca:e2:86:9d:0a:a0:5c:22: 23:9f:ce:ff:98:d3:00:3e:43:6f:86:e3:5b:fe:0e:b6:f3:4c: bf:89:7b:fc:e6:a8:e0:7a:1c:66:6d:6d:b9:28:97:c4:1d:fb: c5:3e:d6:13:af:be:38:9b:1e:d7:fb:e0:0d:63:9c:c3:51:64: 1a:81:81:14:b6:19:64:35:ee:2d:b1:91:d9:1c:48:37:82:2d: 9b:82:04:9a:26:28:98:74:62:02:04:74:a2:f2:03:88:cf:b3: 1c:df:8f:7f:5e:84:1a:c7:c4:a2:de:a0:30:13:ee:e2:5e:9a: f0:04:7a:46:78:a2:60:09:87:e6:eb:c2:c2:68:6e:76:0f:eb: 96:ec:a3:33:70:ef:d5:23:ca:6e:ce:8a:a2:f7:54:9d:03:2d: 5f:66:52:db -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA4MjYw NTI3MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg0QUFCMzE3RjIxOEM2 OTNDQUUxMTM4N0I4QTYyQzI4ODExMjk3RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOXtu8SaNu21fK99/y78X7pV3LpNAxkSPBEDyzQ7XpRFnJdrAV awbZUk4dlu7anBTUhZihhBMpTY6Ms18fjsj+V0kuRWWYm2Sl4RVMqwI9w5I6WkUf 9cA8bBgd7EO5Dj61NV3t0SA2QfDVdtOXT7I7Orl5lAai0eIT7K1Gn0G3F3hWLnyW 86coNljwBewu3cAJkccwgJH5y1Sua5F2KTjT3LJILswuhBL7TDcDy26eQ+rEEc3H oKHzxqjQ+osDTFXqViNXsWwvZEvfLALpeAAbNOViFwA2Od5GIre+9xxDEpapFPZ7 zyLgo1FFnKw1BGuAeMK3D0FbbMfjWxvdz9GnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUhKqzF/IYxpPK4ROHuKYsKIESl+UwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9oS3F6Rl9JWXhwUEs0Uk9IdUtZ c0tJRVNsLVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0so4 MA0GCSqGSIb3DQEBCwUAA4IBAQBPrXptJLIECnT83hDPNNmDVh/eNyEEdlAgUUNq 8lr/q6i5L0Re2J7j2alg1IQue+fc6B8S1HNxwe+sYL8LjraeofBetsM6vtar3RZh XC+7yTrJk393ZXgJUr0hqGIJefODp0eYyuKGnQqgXCIjn87/mNMAPkNvhuNb/g62 80y/iXv85qjgehxmbW25KJfEHfvFPtYTr744mx7X++ANY5zDUWQagYEUthlkNe4t sZHZHEg3gi2bggSaJiiYdGICBHSi8gOIz7Mc349/XoQax8Si3qAwE+7iXprwBHpG eKJgCYfm68LCaG52D+uW7KMzcO/VI8puzoqi91SdAy1fZlLb -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:45 2024 by rpki-client on console-fra.rpki-client.org