$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/E5lJ0N6C_r1Z1ryv-D1Xemr7LgM.roa File: E5lJ0N6C_r1Z1ryv-D1Xemr7LgM.roa (raw, json) Hash identifier: zUsYlO9PS4jer/jm0gDMzSP5xrsoYtcHDa03P+CNe4I= Subject key identifier: 13:99:49:D0:DE:82:FE:BD:59:D6:BC:AF:F8:3D:57:7A:6A:FB:2E:03 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0C72 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/E5lJ0N6C_r1Z1ryv-D1Xemr7LgM.roa Signing time: Mon 26 Aug 2024 05:32:40 +0000 ROA not before: Mon 26 Aug 2024 05:32:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18018 IP address blocks: 122.255.94.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 26 05:32:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=139949D0DE82FEBD59D6BCAFF83D577A6AFB2E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:cb:40:0f:da:31:ea:23:3b:81:6b:56:61: 94:5e:f3:bc:26:04:25:33:2f:aa:82:42:33:a2:49: 81:73:4b:bd:0e:e1:61:66:a4:b2:07:34:00:cc:36: bf:2a:1b:49:55:ef:5c:e0:9e:ca:70:1e:20:58:2b: 10:0c:54:fa:ad:88:20:28:cf:de:be:e5:b0:f6:e9: cf:a3:1b:27:cb:5f:3a:4b:31:c5:fd:c9:b5:99:e8: 60:d6:e6:22:0a:06:31:4e:d9:92:d7:30:30:ac:88: e9:73:b7:73:ca:fa:9f:71:2d:eb:f7:09:26:01:f3: 3f:58:f8:d9:16:66:32:5e:4f:af:f9:c3:29:07:02: a7:11:c8:77:bb:26:e8:3a:82:6a:13:e8:9b:95:51: 8d:a9:87:3a:cd:98:a4:1f:01:12:6e:19:1b:af:be: 3f:bd:d6:6f:7c:64:d0:89:20:be:28:d4:9d:70:eb: 4b:d9:8e:36:2d:6c:e7:50:c0:8e:5f:ca:d9:a5:be: 34:cd:fa:3a:c5:f0:b9:1a:d3:b0:18:5b:bf:37:43: 47:2f:b8:7d:87:55:63:ba:c5:25:3a:50:7a:7c:5a: 33:3f:00:63:8f:e4:d5:77:9e:2e:4b:19:8e:74:2d: 33:2d:0b:dd:18:dd:65:93:8b:e1:34:56:8e:0f:16: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:99:49:D0:DE:82:FE:BD:59:D6:BC:AF:F8:3D:57:7A:6A:FB:2E:03 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/E5lJ0N6C_r1Z1ryv-D1Xemr7LgM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.94.0/28 Signature Algorithm: sha256WithRSAEncryption 5b:ad:82:aa:48:53:4d:6c:c8:58:29:50:c1:d3:1b:89:6e:ed: 25:02:a0:c8:bc:14:9f:8c:44:79:4d:78:04:8e:e3:ab:20:96: e2:9c:ac:07:f4:51:e4:87:54:20:78:eb:b0:79:70:df:f8:5c: 5d:52:55:38:6e:56:b3:ee:60:8c:6c:d7:2c:78:2d:50:47:68: 99:05:c8:06:fa:37:42:77:91:98:88:50:1a:0e:04:87:69:da: 8d:d7:41:d2:fe:5f:2d:0c:b5:97:7c:8d:c6:3d:38:98:cc:33: f7:79:2f:3a:3d:94:ed:1b:39:9f:f5:32:20:3a:57:86:24:c1: f9:82:cf:76:be:11:fe:2a:d3:fe:42:78:39:ac:75:b8:7f:40: ee:62:42:e2:8e:dd:a6:b2:d0:f3:7f:09:c3:20:aa:0e:22:b8: d3:ec:43:2a:26:8b:8f:da:72:c4:61:db:11:0b:a6:e2:3e:ee: 16:fd:30:bc:0c:83:e0:cd:cf:33:b0:0d:b3:2c:75:9d:05:3c: cf:67:43:65:d4:82:c5:9c:53:c1:03:d4:c2:d7:a2:8c:a3:61: 63:b5:c8:09:2f:20:3c:d7:b0:66:96:e8:4b:ab:4c:b6:d5:01: 16:97:53:7c:d0:ff:68:ae:fa:a3:23:94:dc:3a:85:d8:4f:90: bb:6f:07:44 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNDA4MjYw NTMyNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzOTk0OUQwREU4MkZF QkQ1OUQ2QkNBRkY4M0Q1NzdBNkFGQjJFMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz28tAD9ox6iM7gWtWYZRe87wmBCUzL6qCQjOiSYFzS70O4WFm pLIHNADMNr8qG0lV71zgnspwHiBYKxAMVPqtiCAoz96+5bD26c+jGyfLXzpLMcX9 ybWZ6GDW5iIKBjFO2ZLXMDCsiOlzt3PK+p9xLev3CSYB8z9Y+NkWZjJeT6/5wykH AqcRyHe7Jug6gmoT6JuVUY2phzrNmKQfARJuGRuvvj+91m98ZNCJIL4o1J1w60vZ jjYtbOdQwI5fytmlvjTN+jrF8Lka07AYW783Q0cvuH2HVWO6xSU6UHp8WjM/AGOP 5NV3ni5LGY50LTMtC90Y3WWTi+E0Vo4PFi+xAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUE5lJ0N6C/r1Z1ryv+D1Xemr7LgMwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9FNWxKME42Q19yMVoxcnl2LUQx WGVtcjdMZ00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEev9e ADANBgkqhkiG9w0BAQsFAAOCAQEAW62CqkhTTWzIWClQwdMbiW7tJQKgyLwUn4xE eU14BI7jqyCW4pysB/RR5IdUIHjrsHlw3/hcXVJVOG5Ws+5gjGzXLHgtUEdomQXI Bvo3QneRmIhQGg4Eh2najddB0v5fLQy1l3yNxj04mMwz93kvOj2U7Rs5n/UyIDpX hiTB+YLPdr4R/irT/kJ4Oax1uH9A7mJC4o7dprLQ838JwyCqDiK40+xDKiaLj9py xGHbEQum4j7uFv0wvAyD4M3PM7ANsyx1nQU8z2dDZdSCxZxTwQPUwteijKNhY7XI CS8gPNewZpboS6tMttUBFpdTfND/aK76oyOU3DqF2E+Qu28HRA== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:24 2024 by rpki-client on console-ams.rpki-client.org