$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/yuNTAVPPNJBx6sYp4k1xFiBjgSE.roa File: yuNTAVPPNJBx6sYp4k1xFiBjgSE.roa (raw, json) Hash identifier: wPN6JXc48uHrRVem9B5cv5QmSQSB9WaEHq9ae/9Ocnw= Subject key identifier: CA:E3:53:01:53:CF:34:90:71:EA:C6:29:E2:4D:71:16:20:63:81:21 Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Certificate serial: 0C75 Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/yuNTAVPPNJBx6sYp4k1xFiBjgSE.roa Signing time: Mon 26 Aug 2024 05:32:40 +0000 ROA not before: Mon 26 Aug 2024 05:32:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18018 IP address blocks: 122.255.94.64/26 maxlen: 26 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214 Validity Not Before: Aug 26 05:32:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CAE3530153CF349071EAC629E24D711620638121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:0b:62:4a:e8:e7:9a:f7:1d:d1:e4:b3:d6: 36:ce:89:8c:aa:a0:96:57:fd:f3:cd:d6:82:27:8e: 5a:3d:4f:1e:7d:b3:04:6f:0e:ed:db:96:17:78:4d: 29:6d:3d:99:22:df:fa:2d:eb:26:07:d8:2b:51:c9: 64:d7:22:4d:15:c2:6a:1a:20:e7:a5:90:f7:12:6d: 1b:57:54:09:c5:a2:27:b8:0c:12:4c:49:af:3f:6c: 0e:64:34:e6:ef:84:48:70:73:5d:b6:55:71:9f:bf: 79:1c:b3:32:fd:72:1d:c3:46:64:00:5b:2a:74:23: 52:94:7d:1e:52:5e:c6:af:1c:6f:7f:25:db:6b:aa: 67:65:41:51:68:a1:ec:25:78:66:c8:7b:19:18:23: 93:84:2c:1e:e5:03:11:07:f1:a4:60:e9:d2:da:b0: 88:77:27:08:e1:8d:47:ca:ef:e9:19:91:b5:10:aa: 92:be:8d:95:f3:d6:6b:a2:d3:8c:4e:97:e4:bb:0c: 19:64:7a:a1:91:e6:2e:a0:ec:1f:10:b9:d4:2d:6d: 7b:6e:4b:4e:66:1c:83:41:2f:e7:51:75:e6:db:bd: cb:a4:b2:8d:17:ce:fd:df:50:a3:df:fb:9b:d6:42: 22:d1:60:08:3d:27:f0:01:19:3a:6a:76:72:f1:4a: 93:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:53:01:53:CF:34:90:71:EA:C6:29:E2:4D:71:16:20:63:81:21 X509v3 Authority Key Identifier: keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/yuNTAVPPNJBx6sYp4k1xFiBjgSE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.255.94.64/26 Signature Algorithm: sha256WithRSAEncryption 53:50:5f:f6:57:d3:c8:78:4e:41:d8:b6:07:cc:0e:bf:bf:ce: 95:5c:4d:32:eb:7b:3b:92:39:16:69:bd:bb:3b:28:82:68:04: 9b:3a:d5:62:a1:00:36:75:80:b3:37:1e:01:8b:4e:7f:15:59: b8:6e:ac:ef:28:01:9d:2b:31:5d:72:3b:0e:4a:f6:d2:f1:05: 6d:38:8f:af:43:60:35:68:7d:67:4c:4a:0f:8d:fb:fa:27:eb: f4:37:87:28:06:77:fe:7e:25:41:92:64:d6:65:aa:2f:c5:94: 6c:dc:29:6c:6c:78:c9:b9:39:f8:c5:1a:06:6c:8b:ec:8d:44: 48:12:67:ce:cd:31:f2:cd:d1:42:b8:41:a5:04:a7:5b:4e:ff: d8:74:be:d6:59:b8:f9:ca:1f:f5:1c:f0:a7:27:cd:8b:dc:71: dd:83:f6:8b:13:be:46:aa:da:38:a4:35:de:43:c6:92:88:25: ab:18:93:6a:0c:4d:6a:02:fd:4c:78:f9:96:28:fc:e2:ff:e1: 3c:09:56:36:32:eb:cf:fb:24:0c:6f:59:36:4f:d4:0c:8c:68: c9:d1:0b:c1:89:c2:76:6d:2f:b4:70:fc:88:b0:1a:fa:0d:ba: ab:2b:95:d3:84:32:5a:d5:49:22:f1:4b:49:2f:5f:65:e3:9c: 6c:c1:d7:39 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yNDA4MjYw NTMyNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENBRTM1MzAxNTNDRjM0 OTA3MUVBQzYyOUUyNEQ3MTE2MjA2MzgxMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCt9AtiSujnmvcd0eSz1jbOiYyqoJZX/fPN1oInjlo9Tx59swRv Du3blhd4TSltPZki3/ot6yYH2CtRyWTXIk0VwmoaIOelkPcSbRtXVAnFoie4DBJM Sa8/bA5kNObvhEhwc122VXGfv3kcszL9ch3DRmQAWyp0I1KUfR5SXsavHG9/Jdtr qmdlQVFooewleGbIexkYI5OELB7lAxEH8aRg6dLasIh3JwjhjUfK7+kZkbUQqpK+ jZXz1mui04xOl+S7DBlkeqGR5i6g7B8QudQtbXtuS05mHINBL+dRdebbvcukso0X zv3fUKPf+5vWQiLRYAg9J/ABGTpqdnLxSpOhAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUyuNTAVPPNJBx6sYp4k1xFiBjgSEwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC95dU5UQVZQUE5KQng2c1lwNGsx eEZpQmpnU0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGev9e QDANBgkqhkiG9w0BAQsFAAOCAQEAU1Bf9lfTyHhOQdi2B8wOv7/OlVxNMut7O5I5 Fmm9uzsogmgEmzrVYqEANnWAszceAYtOfxVZuG6s7ygBnSsxXXI7Dkr20vEFbTiP r0NgNWh9Z0xKD437+ifr9DeHKAZ3/n4lQZJk1mWqL8WUbNwpbGx4ybk5+MUaBmyL 7I1ESBJnzs0x8s3RQrhBpQSnW07/2HS+1lm4+cof9RzwpyfNi9xx3YP2ixO+Rqra OKQ13kPGkoglqxiTagxNagL9THj5lij84v/hPAlWNjLrz/skDG9ZNk/UDIxoydEL wYnCdm0vtHD8iLAa+g26qyuV04QyWtVJIvFLSS9fZeOcbMHXOQ== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:53 2024 by rpki-client on console-fra.rpki-client.org