$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/0TskJ-MVZyr6X5WHtGbsd2FW4uA.roa File: 0TskJ-MVZyr6X5WHtGbsd2FW4uA.roa (raw, json) Hash identifier: GkmpQFy10987tf5d6hx0D2iAWMWaUtmtlknYjBkbeII= Subject key identifier: D1:3B:24:27:E3:15:67:2A:FA:5F:95:87:B4:66:EC:77:61:56:E2:E0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1032 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0TskJ-MVZyr6X5WHtGbsd2FW4uA.roa Signing time: Mon 26 Aug 2024 05:16:09 +0000 ROA not before: Mon 26 Aug 2024 05:16:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 210.202.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4146 (0x1032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D13B2427E315672AFA5F9587B466EC776156E2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:57:27:a6:0a:74:41:f5:44:90:c2:3d:18: 0a:1f:f4:17:41:86:18:48:f4:c3:ff:27:75:f3:dd: 7b:51:50:27:14:86:64:30:2f:9a:2a:85:bd:86:a5: a0:33:fe:a7:c1:b9:4f:19:ea:b5:f3:66:32:b5:7a: df:15:08:38:ba:a8:a8:5e:9a:84:a8:3f:d2:fa:fb: e4:6a:e7:0a:56:d0:e0:0f:f3:fa:81:04:dc:21:f7: 23:9a:aa:00:2c:d2:da:11:94:86:21:05:18:40:8e: 53:ba:3e:30:3f:d5:25:b4:d7:8c:0e:23:14:ad:e8: 7a:2b:ff:75:be:5f:d4:af:03:6e:50:0b:fc:c5:84: 36:b9:0e:20:a8:9f:be:b7:09:b2:ab:e8:13:22:99: 0b:c2:9e:87:f8:c8:2c:5c:ad:83:d8:37:55:8d:83: 4f:d3:9f:36:9d:2a:70:fe:12:46:5d:48:e8:d7:76: a3:9d:60:23:8d:eb:7d:c6:7e:41:f3:9c:11:9c:be: ec:5c:9b:9f:46:41:c2:9e:76:de:4a:08:98:2d:47: 9b:57:04:ef:07:cf:7d:81:97:48:19:5e:dc:39:c5: 92:12:78:44:d3:6a:9b:1e:89:1c:5e:73:d1:df:26: 05:e5:cf:bc:86:1c:0e:64:40:82:18:ee:af:9d:c3: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3B:24:27:E3:15:67:2A:FA:5F:95:87:B4:66:EC:77:61:56:E2:E0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0TskJ-MVZyr6X5WHtGbsd2FW4uA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.128.0/18 Signature Algorithm: sha256WithRSAEncryption cd:6b:ed:d7:1e:70:4e:c4:29:29:7a:60:94:6f:41:5c:28:12: 53:0b:72:66:f0:42:68:c1:15:96:89:1c:9b:e1:1b:05:83:68: 5c:f0:4f:53:95:81:45:67:e8:f8:18:42:91:fd:79:27:3a:a0: 48:fa:3e:e6:4b:cd:40:80:1d:a9:3a:2f:78:e2:3a:ca:a3:6d: 40:c8:9d:5a:97:d8:44:e9:6c:fa:4e:31:0f:e4:41:32:21:4b: b6:a7:d8:d4:60:dc:78:ff:48:44:7d:61:a6:b6:37:a6:29:11: f2:b7:84:ef:52:06:58:d5:08:39:35:09:3d:6f:bb:47:c6:eb: c1:e6:d6:35:ab:3f:e6:e0:1c:d4:cc:c2:76:45:93:08:18:7c: a4:66:05:6f:8d:47:68:7b:fe:0e:9b:61:de:77:72:95:1f:77: 47:09:5d:4f:35:e4:2b:97:5e:ef:31:f4:38:82:55:3e:a7:ca: 14:ca:6d:d8:84:cc:1c:b6:0e:74:38:32:6a:72:7f:9f:5c:6d: c4:47:14:21:04:a8:af:96:29:63:73:db:be:a4:9a:7b:e0:1e: d3:36:02:f3:a9:95:91:5c:52:f8:4d:13:fa:32:af:f2:ed:61: 1b:14:36:09:0f:ac:b6:8a:db:e7:48:81:ec:d7:a9:b5:d8:b8: 3c:8c:cf:3d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxM0IyNDI3RTMxNTY3 MkFGQTVGOTU4N0I0NjZFQzc3NjE1NkUyRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7cFcnpgp0QfVEkMI9GAof9BdBhhhI9MP/J3Xz3XtRUCcUhmQw L5oqhb2GpaAz/qfBuU8Z6rXzZjK1et8VCDi6qKhemoSoP9L6++Rq5wpW0OAP8/qB BNwh9yOaqgAs0toRlIYhBRhAjlO6PjA/1SW014wOIxSt6Hor/3W+X9SvA25QC/zF hDa5DiCon763CbKr6BMimQvCnof4yCxcrYPYN1WNg0/TnzadKnD+EkZdSOjXdqOd YCON633GfkHznBGcvuxcm59GQcKedt5KCJgtR5tXBO8Hz32Bl0gZXtw5xZISeETT apseiRxec9HfJgXlz7yGHA5kQIIY7q+dwxL/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU0TskJ+MVZyr6X5WHtGbsd2FW4uAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzBUc2tKLU1WWnlyNlg1V0h0R2JzZDJG VzR1QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyoAwDQYJ KoZIhvcNAQELBQADggEBAM1r7dcecE7EKSl6YJRvQVwoElMLcmbwQmjBFZaJHJvh GwWDaFzwT1OVgUVn6PgYQpH9eSc6oEj6PuZLzUCAHak6L3jiOsqjbUDInVqX2ETp bPpOMQ/kQTIhS7an2NRg3Hj/SER9Yaa2N6YpEfK3hO9SBljVCDk1CT1vu0fG68Hm 1jWrP+bgHNTMwnZFkwgYfKRmBW+NR2h7/g6bYd53cpUfd0cJXU815CuXXu8x9DiC VT6nyhTKbdiEzBy2DnQ4Mmpyf59cbcRHFCEEqK+WKWNz276kmnvgHtM2AvOplZFc UvhNE/oyr/LtYRsUNgkPrLaK2+dIgezXqbXYuDyMzz0= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:04 2024 by rpki-client on console-ams.rpki-client.org