$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/ctgoFYcM9j4miKGRjdzgihMd_Jg.roa File: ctgoFYcM9j4miKGRjdzgihMd_Jg.roa (raw, json) Hash identifier: 4+Lp5LOKuxACdGJsQGBTvqSZp/POF2IOgq/tZVdYCXY= Subject key identifier: 72:D8:28:15:87:0C:F6:3E:26:88:A1:91:8D:DC:E0:8A:13:1D:FC:98 Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0CBA Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/ctgoFYcM9j4miKGRjdzgihMd_Jg.roa Signing time: Mon 26 Aug 2024 05:28:05 +0000 ROA not before: Mon 26 Aug 2024 05:28:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 27.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Aug 26 05:28:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=72D82815870CF63E2688A1918DDCE08A131DFC98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:60:a3:f4:c2:aa:0f:d9:7a:13:77:70:0a:f7: 87:d5:63:06:a9:3f:6b:95:a6:58:c8:de:77:9f:6c: dd:b6:6d:b5:16:50:22:c2:e5:30:d2:95:4b:2b:01: 7b:ca:64:77:36:14:6c:4c:b4:33:80:7b:cd:49:b7: 03:7f:d1:94:04:63:b5:e5:6f:34:23:41:83:ce:47: 87:54:9b:54:26:e8:42:f2:a4:4b:b6:93:5b:2a:27: fd:94:86:93:4c:ff:12:24:59:98:cb:b6:51:d1:31: ca:2e:c1:5c:a2:e7:cb:b8:cb:01:5a:e2:a9:0c:ac: 0a:67:80:11:37:3d:41:3f:80:a8:92:a5:c9:c8:46: 25:54:57:e5:5a:8b:51:47:68:3f:69:b8:0c:ce:25: 27:86:5f:b3:1a:01:71:92:92:e5:56:e9:ab:75:c4: fb:d5:02:cf:1c:aa:19:89:a3:e9:a0:b9:d9:9c:60: d5:4a:fa:9d:22:86:06:c5:4b:2e:ae:b0:ff:8e:a5: 23:77:24:76:8d:17:d4:cd:eb:a8:e5:c1:0e:4f:8c: d7:b5:34:7e:c4:f6:5b:7c:d5:b9:c9:49:05:d1:79: 21:bc:88:da:aa:3e:41:ec:dc:bb:be:ba:f8:fb:6f: 01:00:47:43:5c:3d:70:d0:ef:70:32:fe:a2:b2:7d: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D8:28:15:87:0C:F6:3E:26:88:A1:91:8D:DC:E0:8A:13:1D:FC:98 X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/ctgoFYcM9j4miKGRjdzgihMd_Jg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 58:9c:a4:8a:16:36:01:60:03:f8:37:dc:c9:1d:25:b6:78:2f: 32:3a:13:ec:3d:fc:68:83:f1:05:29:cb:05:0b:8d:7b:61:56: 4a:56:93:c1:4a:2c:63:30:df:46:3c:69:c6:f8:7e:a4:e2:62: 1f:24:72:fe:78:2e:52:a3:12:e7:01:34:bc:c9:39:b8:0b:62: 1a:90:9b:8d:0a:e0:12:39:77:ac:df:3e:39:1d:f0:20:1c:90: 2c:75:a4:99:d7:23:c1:37:fe:6d:9b:df:b0:39:d2:9a:7f:91: 96:38:49:5c:89:4c:1b:fa:22:34:bd:8d:09:f3:e4:f5:7f:4c: d3:a0:94:a3:2e:3c:6e:01:54:f7:bc:91:66:2a:c6:aa:e9:ea: 2a:ac:1a:b4:62:95:2c:47:b8:14:6b:ed:5f:a6:6f:dd:c7:9d: 02:2a:64:c7:bd:13:b3:c7:26:52:74:15:b3:b0:18:a1:d0:0c: cd:9f:33:99:cd:21:b8:de:b2:c1:39:83:d0:f6:0a:e0:e4:8f: b4:1a:b0:0c:57:f2:94:7f:06:c8:d9:fc:a1:5c:78:43:fa:2b: 42:24:5f:15:6b:27:fa:48:41:d6:a5:4a:b4:fe:07:4a:c4:43: bf:91:87:9a:dc:b2:6d:15:c5:ad:7a:b0:ea:95:4f:d1:17:1c: ec:c2:4e:8c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNDA4MjYw NTI4MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyRDgyODE1ODcwQ0Y2 M0UyNjg4QTE5MThERENFMDhBMTMxREZDOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmYKP0wqoP2XoTd3AK94fVYwapP2uVpljI3nefbN22bbUWUCLC 5TDSlUsrAXvKZHc2FGxMtDOAe81JtwN/0ZQEY7XlbzQjQYPOR4dUm1Qm6ELypEu2 k1sqJ/2UhpNM/xIkWZjLtlHRMcouwVyi58u4ywFa4qkMrApngBE3PUE/gKiSpcnI RiVUV+Vai1FHaD9puAzOJSeGX7MaAXGSkuVW6at1xPvVAs8cqhmJo+mgudmcYNVK +p0ihgbFSy6usP+OpSN3JHaNF9TN66jlwQ5PjNe1NH7E9lt81bnJSQXReSG8iNqq PkHs3Lu+uvj7bwEAR0NcPXDQ73Ay/qKyfZihAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUctgoFYcM9j4miKGRjdzgihMd/JgwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvY3Rnb0ZZY005ajRtaUtHUmpkemdp aE1kX0pnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBhtkQDAN BgkqhkiG9w0BAQsFAAOCAQEAWJykihY2AWAD+DfcyR0ltngvMjoT7D38aIPxBSnL BQuNe2FWSlaTwUosYzDfRjxpxvh+pOJiHyRy/nguUqMS5wE0vMk5uAtiGpCbjQrg Ejl3rN8+OR3wIByQLHWkmdcjwTf+bZvfsDnSmn+RljhJXIlMG/oiNL2NCfPk9X9M 06CUoy48bgFU97yRZirGqunqKqwatGKVLEe4FGvtX6Zv3cedAipkx70Ts8cmUnQV s7AYodAMzZ8zmc0huN6ywTmD0PYK4OSPtBqwDFfylH8GyNn8oVx4Q/orQiRfFWsn +khB1qVKtP4HSsRDv5GHmtyybRXFrXqw6pVP0Rcc7MJOjA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org