$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/9hep0EkE6JTjoKrKoI3y91bQjYw.roa File: 9hep0EkE6JTjoKrKoI3y91bQjYw.roa (raw, json) Hash identifier: myl6oWLM/eqYI0dhLAWFkFhRDaLvqcc4Do/UAYUX/XM= Subject key identifier: F6:17:A9:D0:49:04:E8:94:E3:A0:AA:CA:A0:8D:F2:F7:56:D0:8D:8C Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0B6C Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/9hep0EkE6JTjoKrKoI3y91bQjYw.roa Signing time: Fri 01 Sep 2023 10:13:55 +0000 ROA not before: Fri 01 Sep 2023 10:13:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 3949 IP address blocks: 61.58.41.176/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 07:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Sep 1 10:13:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F617A9D04904E894E3A0AACAA08DF2F756D08D8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:43:a7:0b:df:47:77:ef:e1:62:4f:16:66: 05:f4:ec:19:35:41:76:bd:f7:54:7c:e6:ee:44:e6: 26:93:8d:b9:31:20:87:40:04:e6:d1:0a:18:64:65: 67:91:c1:60:79:19:34:ac:c3:bb:87:52:90:f8:8c: f6:f6:60:ed:5b:8f:53:53:3f:59:26:35:05:05:43: 85:fe:65:0a:f0:4f:da:0c:2a:25:f2:38:dd:09:86: 57:8e:1f:ab:c4:8a:08:1e:ac:f1:d7:96:e3:43:8a: 36:aa:03:3d:5a:b3:2e:1e:86:d4:4e:5a:40:14:a5: a3:48:90:77:82:f6:94:d1:57:9f:a6:da:c6:25:9a: dd:4a:fd:19:2e:2e:7c:c5:0b:50:60:b7:9e:b3:26: ea:d5:98:5d:68:07:2a:ab:96:85:ea:3d:17:fb:b3: 90:8c:1e:37:24:f8:45:44:98:a8:2c:30:47:52:87: 8b:5d:44:1b:b0:f3:6f:b7:e5:19:34:32:4e:a7:c5: 2a:fe:08:1d:29:c7:35:76:83:3c:f2:28:6e:79:d0: a4:65:fc:ae:24:d9:3b:93:30:b3:ba:32:08:85:45: 8c:c3:bc:79:69:20:d6:ef:60:bf:05:78:47:b8:b6: bb:16:51:7a:07:64:58:4d:5a:7a:b5:fc:68:9b:10: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:17:A9:D0:49:04:E8:94:E3:A0:AA:CA:A0:8D:F2:F7:56:D0:8D:8C X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/9hep0EkE6JTjoKrKoI3y91bQjYw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.41.176/28 Signature Algorithm: sha256WithRSAEncryption 54:8a:34:4f:d7:28:63:d9:72:f0:26:26:d8:eb:2e:da:b4:aa: 58:12:00:a0:a1:c7:d9:a4:7d:f3:6a:9f:dd:00:99:37:c4:a0: 79:6a:9c:ab:25:74:54:12:01:9a:29:8a:22:50:df:52:c8:97: 42:71:06:00:30:6a:2e:06:13:d1:0d:c2:e5:e0:9c:92:f9:26: f3:03:bf:3f:6b:ff:ff:f7:88:9f:2e:72:f7:b9:86:4d:1e:9d: d3:02:66:82:2c:54:7c:08:10:5e:f7:20:27:e4:48:08:cc:cd: 75:a3:30:b7:e4:33:f9:2c:57:d1:7b:a0:4f:78:d5:03:3b:58: 99:91:8b:c9:3e:3d:e2:dd:bd:22:fb:35:77:8c:1f:9b:a9:d8: 80:0c:9d:20:41:92:44:e5:36:7c:37:de:5d:fb:3a:91:6b:e5: fd:c7:c6:4e:22:95:5f:23:92:7e:6d:9c:5d:a5:07:9b:ff:62: 93:2e:56:1f:fd:eb:8a:66:cf:af:23:0e:b6:82:52:24:8c:6e: ae:c5:20:57:ec:f2:8a:9d:9d:74:90:37:38:e0:d5:d2:8a:4d: db:02:52:8e:0f:08:49:3e:1f:7f:30:07:da:2b:69:39:c5:e8: 60:66:77:37:9b:b8:5d:52:fc:b4:20:5f:be:7b:df:17:ac:9f: 1e:f5:d7:45 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yMzA5MDEx MDEzNTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY2MTdBOUQwNDkwNEU4 OTRFM0EwQUFDQUEwOERGMkY3NTZEMDhEOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDImUOnC99Hd+/hYk8WZgX07Bk1QXa991R85u5E5iaTjbkxIIdA BObRChhkZWeRwWB5GTSsw7uHUpD4jPb2YO1bj1NTP1kmNQUFQ4X+ZQrwT9oMKiXy ON0JhleOH6vEiggerPHXluNDijaqAz1asy4ehtROWkAUpaNIkHeC9pTRV5+m2sYl mt1K/RkuLnzFC1Bgt56zJurVmF1oByqrloXqPRf7s5CMHjck+EVEmKgsMEdSh4td RBuw82+35Rk0Mk6nxSr+CB0pxzV2gzzyKG550KRl/K4k2TuTMLO6MgiFRYzDvHlp INbvYL8FeEe4trsWUXoHZFhNWnq1/GibEHtXAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU9hep0EkE6JTjoKrKoI3y91bQjYwwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC85aGVwMEVrRTZKVGpvS3JLb0kz eTkxYlFqWXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEPTop sDANBgkqhkiG9w0BAQsFAAOCAQEAVIo0T9coY9ly8CYm2Osu2rSqWBIAoKHH2aR9 82qf3QCZN8SgeWqcqyV0VBIBmimKIlDfUsiXQnEGADBqLgYT0Q3C5eCckvkm8wO/ P2v///eIny5y97mGTR6d0wJmgixUfAgQXvcgJ+RICMzNdaMwt+Qz+SxX0XugT3jV AztYmZGLyT494t29Ivs1d4wfm6nYgAydIEGSROU2fDfeXfs6kWvl/cfGTiKVXyOS fm2cXaUHm/9iky5WH/3rimbPryMOtoJSJIxursUgV+zyip2ddJA3OODV0opN2wJS jg8IST4ffzAH2itpOcXoYGZ3N5u4XVL8tCBfvnvfF6yfHvXXRQ== -----END CERTIFICATE-----Generated at Sat May 4 12:14:02 2024 by rpki-client on console-ams.rpki-client.org