$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/hr1yQnbgl47iJ02KAPssTKnOZ9g.roa File: hr1yQnbgl47iJ02KAPssTKnOZ9g.roa (raw, json) Hash identifier: heQQLawCqxjXJ33Gk6LISZ4UtReEOXPXq1dqna5N+9s= Subject key identifier: 86:BD:72:42:76:E0:97:8E:E2:27:4D:8A:00:FB:2C:4C:A9:CE:67:D8 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0C77 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/hr1yQnbgl47iJ02KAPssTKnOZ9g.roa Signing time: Mon 26 Aug 2024 05:32:40 +0000 ROA not before: Mon 26 Aug 2024 05:32:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18018 IP address blocks: 122.255.95.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 26 05:32:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=86BD724276E0978EE2274D8A00FB2C4CA9CE67D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:e9:87:38:ef:96:c5:e9:a2:0d:13:a2:23: 18:6e:46:2f:e9:bd:4e:94:be:eb:c5:ce:54:11:49: ec:2e:24:ec:5b:f2:d0:4d:3f:d8:8f:b2:7b:f6:7a: bc:d6:63:c1:9e:7c:9c:0f:c9:f3:32:e1:95:b0:aa: 5d:43:5c:7d:ac:9f:e7:8d:14:36:04:c7:3f:04:7a: 05:95:69:0f:25:f9:8a:bd:f0:49:64:73:a6:ad:3f: f9:8e:b1:b8:59:49:3e:e9:0f:71:18:3e:f9:b5:53: 95:01:5e:06:10:c7:d8:00:f3:e5:e2:a5:04:7c:80: f3:48:1a:82:f8:80:02:bc:78:ad:19:9a:52:09:f8: 59:74:3e:0b:3a:a5:dc:03:2f:a7:2d:90:f7:5d:da: a8:06:8f:ce:80:e5:f2:1c:d8:30:cf:a4:d3:08:e4: ee:7e:e2:f3:82:53:6d:e2:9a:9f:a6:b1:fb:26:89: 92:fe:d5:26:92:44:85:0b:96:ca:2c:4c:8d:7d:24: de:05:aa:23:55:a6:41:ac:68:3b:cb:44:e4:e8:48: 9f:2a:a6:b4:9f:35:ab:a5:b7:17:49:9d:cf:83:25: a6:a3:a5:fd:29:38:84:43:71:33:78:ff:3b:ec:eb: fb:97:c7:f6:ed:89:81:ae:df:d7:25:ae:0b:b3:80: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BD:72:42:76:E0:97:8E:E2:27:4D:8A:00:FB:2C:4C:A9:CE:67:D8 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/hr1yQnbgl47iJ02KAPssTKnOZ9g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.95.128/25 Signature Algorithm: sha256WithRSAEncryption 48:2e:d1:00:65:ff:90:a8:65:4e:eb:47:b8:39:6f:2e:77:cc: c0:38:be:11:95:6a:1b:0c:da:0e:44:03:6e:23:52:d1:f4:08: 95:d0:69:57:29:5a:4e:03:79:56:cf:5c:89:2e:1f:7c:82:70: d5:2c:0b:ac:e7:3e:82:8d:9a:f9:bf:8c:45:db:50:62:86:fb: 0d:1e:06:4b:4f:3f:a8:c3:4c:6b:d1:9e:02:e5:b1:3e:fc:c9: ad:09:33:ba:09:47:dd:64:6c:9b:6b:bc:3f:a0:dc:48:d0:41: 5c:63:06:70:bd:b2:68:05:d3:da:e6:f8:1a:2e:ca:74:b4:f5: 15:80:9a:63:18:b8:60:6f:3e:1d:10:a4:e8:4b:5d:71:53:dc: 8a:98:2d:6c:63:94:28:c1:8c:41:88:4f:f6:bd:af:c6:0b:42: dc:05:65:6d:79:41:f2:dd:57:a6:13:e5:89:b2:85:35:18:e8: 6c:a5:69:f7:4d:a4:dc:1c:e6:54:1b:5a:54:fb:c8:15:b1:db: f6:c7:90:e1:c3:29:3c:5e:95:ea:31:9e:8a:23:cc:67:b6:c8: 8c:78:38:b4:47:9c:3b:db:03:e0:cb:70:02:a8:7d:0f:bb:d9: 59:80:3a:37:68:08:9d:a7:8f:45:7b:21:dd:ef:bd:ef:6a:9b: 07:b4:67:21 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNDA4MjYw NTMyNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg2QkQ3MjQyNzZFMDk3 OEVFMjI3NEQ4QTAwRkIyQzRDQTlDRTY3RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCt+mHOO+WxemiDROiIxhuRi/pvU6UvuvFzlQRSewuJOxb8tBN P9iPsnv2erzWY8GefJwPyfMy4ZWwql1DXH2sn+eNFDYExz8EegWVaQ8l+Yq98Elk c6atP/mOsbhZST7pD3EYPvm1U5UBXgYQx9gA8+XipQR8gPNIGoL4gAK8eK0ZmlIJ +Fl0Pgs6pdwDL6ctkPdd2qgGj86A5fIc2DDPpNMI5O5+4vOCU23imp+msfsmiZL+ 1SaSRIULlsosTI19JN4FqiNVpkGsaDvLROToSJ8qprSfNaultxdJnc+DJaajpf0p OIRDcTN4/zvs6/uXx/btiYGu39clrguzgNglAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUhr1yQnbgl47iJ02KAPssTKnOZ9gwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9ocjF5UW5iZ2w0N2lKMDJLQVBz c1RLbk9aOWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHev9f gDANBgkqhkiG9w0BAQsFAAOCAQEASC7RAGX/kKhlTutHuDlvLnfMwDi+EZVqGwza DkQDbiNS0fQIldBpVylaTgN5Vs9ciS4ffIJw1SwLrOc+go2a+b+MRdtQYob7DR4G S08/qMNMa9GeAuWxPvzJrQkzuglH3WRsm2u8P6DcSNBBXGMGcL2yaAXT2ub4Gi7K dLT1FYCaYxi4YG8+HRCk6EtdcVPcipgtbGOUKMGMQYhP9r2vxgtC3AVlbXlB8t1X phPlibKFNRjobKVp902k3BzmVBtaVPvIFbHb9seQ4cMpPF6V6jGeiiPMZ7bIjHg4 tEecO9sD4MtwAqh9D7vZWYA6N2gInaePRXsh3e+972qbB7RnIQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:24 2024 by rpki-client on console-ams.rpki-client.org