$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/--QLoQcSAdgDLIBtoIY7ulY6RLA.roa File: --QLoQcSAdgDLIBtoIY7ulY6RLA.roa (raw, json) Hash identifier: SbrGsuhGK0TM9Ls4EDOBHT30cs1/AN0ljmDT+smY5AM= Subject key identifier: FB:E4:0B:A1:07:12:01:D8:03:2C:80:6D:A0:86:3B:BA:56:3A:44:B0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10BB Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/--QLoQcSAdgDLIBtoIY7ulY6RLA.roa Signing time: Mon 26 Aug 2024 05:16:44 +0000 ROA not before: Mon 26 Aug 2024 05:16:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 210.200.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4283 (0x10bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FBE40BA1071201D8032C806DA0863BBA563A44B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:70:9c:e0:f0:1e:a0:76:6f:20:4a:b8:00: 2d:5f:39:ba:c6:fd:be:a8:0d:06:10:6b:6c:11:e9: e6:09:44:5e:ad:f8:45:3f:14:29:ab:ce:44:00:42: d2:36:e0:f8:d9:a2:b8:58:a0:05:0f:4b:23:c8:e3: 12:f2:a7:fe:75:71:4d:f7:8e:14:f4:c2:17:b2:e4: cf:1b:57:ce:7d:ab:28:56:76:23:7b:cd:d0:8e:83: fe:01:00:7e:de:a1:6b:2a:cc:ba:f3:52:58:fb:04: ad:e4:47:2a:d5:0e:40:27:6b:e8:20:b3:a3:46:4f: 5e:20:06:e0:5d:36:0e:b3:94:3a:a2:dc:10:3b:9e: 19:d6:2a:44:9a:0e:4b:5d:3e:c0:70:4f:47:00:2a: 99:1a:e8:7f:73:28:c0:8e:f7:96:1b:23:9e:dc:eb: 85:21:b9:e5:d4:6d:a4:35:18:41:97:73:87:7b:2e: 70:4f:14:c9:9d:84:36:bb:ce:55:ee:2e:73:01:8a: 98:2f:af:97:7e:23:2e:91:ce:12:96:b8:3d:2f:b4: 3b:a1:69:a3:be:90:04:3a:d0:2a:f9:c0:84:7a:a2: 44:6a:2a:18:0a:1e:23:0a:20:16:64:5a:4a:54:49: c8:26:c2:a1:1b:04:23:32:99:b6:82:db:e7:64:41: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E4:0B:A1:07:12:01:D8:03:2C:80:6D:A0:86:3B:BA:56:3A:44:B0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/--QLoQcSAdgDLIBtoIY7ulY6RLA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.17.0/24 Signature Algorithm: sha256WithRSAEncryption 84:6c:4a:d5:6e:6f:eb:1d:4e:51:54:40:67:c7:2a:46:35:5b: 19:8d:53:7a:52:01:f1:21:d2:88:7f:55:8c:ee:f0:bd:cd:fb: 79:e1:b4:54:e9:91:80:65:6a:0d:86:2e:86:1b:bf:76:63:c2: ad:03:d5:bf:66:f7:17:99:95:1b:66:b7:c4:d4:45:0b:7e:af: 67:b6:03:0d:44:5c:95:03:ee:ed:71:9e:d6:92:50:78:f7:3a: 4c:12:ab:79:f5:d6:79:ee:d9:f1:7f:7f:b7:e9:7f:ea:98:71: 99:78:c1:3a:8b:fd:5b:5c:e8:33:91:ec:c1:b8:41:96:94:39: 5b:3e:42:2f:31:ea:cb:12:cb:23:79:0d:ff:2d:b1:e9:4f:2f: 6e:e4:ee:24:86:41:a6:3a:db:fe:e7:26:eb:a3:9b:d3:ef:4b: 92:c3:36:bf:b6:1d:b2:23:02:8c:85:d6:70:b3:7a:95:ef:a2: 2b:0f:dd:7f:9f:5b:87:c7:38:a3:a4:2c:dd:eb:0f:75:ac:44: b1:6b:a5:e0:b5:3a:2f:10:09:34:3d:e2:2e:e2:60:1a:b7:09: 45:0a:da:59:6e:92:77:fc:9d:ab:da:8f:45:b0:17:cf:b6:6a: 23:53:be:41:d9:1f:a5:f4:41:bf:73:52:e3:0f:40:2b:7e:52: 89:1a:b8:f1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICELswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZCRTQwQkExMDcxMjAx RDgwMzJDODA2REEwODYzQkJBNTYzQTQ0QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQYHCc4PAeoHZvIEq4AC1fObrG/b6oDQYQa2wR6eYJRF6t+EU/ FCmrzkQAQtI24PjZorhYoAUPSyPI4xLyp/51cU33jhT0whey5M8bV859qyhWdiN7 zdCOg/4BAH7eoWsqzLrzUlj7BK3kRyrVDkAna+ggs6NGT14gBuBdNg6zlDqi3BA7 nhnWKkSaDktdPsBwT0cAKpka6H9zKMCO95YbI57c64UhueXUbaQ1GEGXc4d7LnBP FMmdhDa7zlXuLnMBipgvr5d+Iy6RzhKWuD0vtDuhaaO+kAQ60Cr5wIR6okRqKhgK HiMKIBZkWkpUScgmwqEbBCMymbaC2+dkQS23AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU++QLoQcSAdgDLIBtoIY7ulY6RLAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy0tUUxvUWNTQWRnRExJQnRvSVk3dWxZ NlJMQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyBEwDQYJ KoZIhvcNAQELBQADggEBAIRsStVub+sdTlFUQGfHKkY1WxmNU3pSAfEh0oh/VYzu 8L3N+3nhtFTpkYBlag2GLoYbv3Zjwq0D1b9m9xeZlRtmt8TURQt+r2e2Aw1EXJUD 7u1xntaSUHj3OkwSq3n11nnu2fF/f7fpf+qYcZl4wTqL/Vtc6DOR7MG4QZaUOVs+ Qi8x6ssSyyN5Df8tselPL27k7iSGQaY62/7nJuujm9PvS5LDNr+2HbIjAoyF1nCz epXvoisP3X+fW4fHOKOkLN3rD3WsRLFrpeC1Oi8QCTQ94i7iYBq3CUUK2lluknf8 navaj0WwF8+2aiNTvkHZH6X0Qb9zUuMPQCt+UokauPE= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org