$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/0d7NgYjMakCBrQ4y7c3Nt_QDf28.roa File: 0d7NgYjMakCBrQ4y7c3Nt_QDf28.roa (raw, json) Hash identifier: mtOy6FI4jJfh7UAgwnf8A2Cta73xoN0GCfZ7xVqRQs4= Subject key identifier: D1:DE:CD:81:88:CC:6A:40:81:AD:0E:32:ED:CD:CD:B7:F4:03:7F:6F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10AD Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0d7NgYjMakCBrQ4y7c3Nt_QDf28.roa Signing time: Mon 26 Aug 2024 05:16:40 +0000 ROA not before: Mon 26 Aug 2024 05:16:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.58.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4269 (0x10ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D1DECD8188CC6A4081AD0E32EDCDCDB7F4037F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:6c:07:57:ed:e8:5d:5f:ec:70:19:b1:ca: 8e:d6:ce:50:57:e3:ce:7c:b1:21:85:da:27:af:6e: dd:26:54:d0:1d:b1:34:79:50:a9:89:99:ed:26:ef: 91:85:98:79:28:98:a5:bd:a5:9b:33:56:96:a3:17: e9:d3:a3:13:b9:4e:ef:17:00:48:37:ad:87:c2:6a: 41:5d:52:ef:16:48:74:62:78:df:ba:09:5a:98:9b: 17:ae:a5:77:a9:9b:51:0e:6c:6d:90:7a:61:da:17: 5b:3e:d7:33:71:08:39:c7:86:72:96:b8:48:c0:91: 46:d7:86:ba:7b:db:6d:72:35:58:ea:d0:81:bc:cc: 6c:2a:58:05:5b:a4:d0:c3:39:1e:82:e3:e3:e4:c4: 7e:74:7a:da:1d:c8:2f:53:df:8a:cc:e4:7c:f8:a1: 5d:be:bc:51:ec:b6:ba:62:24:70:df:2d:81:ce:a5: 96:e7:9f:e3:a8:d8:21:a5:fe:95:88:be:f0:2e:0c: 3c:f8:dd:04:78:57:ba:f6:b7:52:db:7c:0d:b4:2f: c6:1e:5c:68:6a:53:1e:4e:5e:bf:ce:b9:34:b2:26: 86:87:80:29:2a:5f:33:b2:55:3c:94:b3:08:05:de: 8e:7a:a1:11:ce:4a:04:a1:15:f3:98:61:23:1a:55: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DE:CD:81:88:CC:6A:40:81:AD:0E:32:ED:CD:CD:B7:F4:03:7F:6F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/0d7NgYjMakCBrQ4y7c3Nt_QDf28.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.120.0/24 Signature Algorithm: sha256WithRSAEncryption 87:68:bf:9d:42:28:f8:b9:17:e8:21:21:78:d2:f5:a7:69:f3: 52:c1:22:cd:40:49:09:04:66:f1:bd:ff:c9:a3:5c:cc:e3:ea: b8:e2:84:d8:a6:da:16:aa:f7:26:8e:9b:f4:bb:5a:67:90:28: 85:98:f1:1d:e9:95:d1:dd:c1:a4:df:bc:c3:17:67:c0:35:b5: 6a:19:d2:26:aa:ed:98:c0:c4:a1:99:a4:d1:0a:3c:85:4c:55: 6f:80:6b:ec:a8:43:f4:f7:1f:de:b3:38:f9:7d:b0:74:f7:d9: a0:0a:e8:ee:9c:50:e9:78:5f:1e:34:b6:ff:8c:08:86:4d:d0: cd:b3:ec:07:bf:56:70:08:54:8b:e7:1b:8c:f4:f7:2b:58:69: 3b:3e:34:06:d4:6b:20:a7:e7:54:1a:17:b8:fb:30:ae:8f:de: 9b:e0:25:10:86:c7:38:a0:86:06:e5:ae:0b:b6:1d:7e:69:c4: c5:7c:1a:82:3c:81:69:af:27:d1:36:aa:77:72:b7:c8:21:4e: 36:1c:7b:9f:62:b4:95:c9:da:fd:92:58:20:6e:8c:b7:fe:ce: e5:33:8c:e5:1c:00:a6:d1:72:59:e7:da:65:56:65:77:db:58: bb:1a:db:5f:df:c4:93:83:2b:99:23:07:f2:e4:65:54:f9:b0: 3e:2c:22:5f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxREVDRDgxODhDQzZB NDA4MUFEMEUzMkVEQ0RDREI3RjQwMzdGNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDkGwHV+3oXV/scBmxyo7WzlBX4858sSGF2ievbt0mVNAdsTR5 UKmJme0m75GFmHkomKW9pZszVpajF+nToxO5Tu8XAEg3rYfCakFdUu8WSHRieN+6 CVqYmxeupXepm1EObG2QemHaF1s+1zNxCDnHhnKWuEjAkUbXhrp7221yNVjq0IG8 zGwqWAVbpNDDOR6C4+PkxH50etodyC9T34rM5Hz4oV2+vFHstrpiJHDfLYHOpZbn n+Oo2CGl/pWIvvAuDDz43QR4V7r2t1LbfA20L8YeXGhqUx5OXr/OuTSyJoaHgCkq XzOyVTyUswgF3o56oRHOSgShFfOYYSMaVXR5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU0d7NgYjMakCBrQ4y7c3Nt/QDf28wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzBkN05nWWpNYWtDQnJRNHk3YzNOdF9R RGYyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOngwDQYJ KoZIhvcNAQELBQADggEBAIdov51CKPi5F+ghIXjS9adp81LBIs1ASQkEZvG9/8mj XMzj6rjihNim2haq9yaOm/S7WmeQKIWY8R3pldHdwaTfvMMXZ8A1tWoZ0iaq7ZjA xKGZpNEKPIVMVW+Aa+yoQ/T3H96zOPl9sHT32aAK6O6cUOl4Xx40tv+MCIZN0M2z 7Ae/VnAIVIvnG4z09ytYaTs+NAbUayCn51QaF7j7MK6P3pvgJRCGxzighgblrgu2 HX5pxMV8GoI8gWmvJ9E2qndyt8ghTjYce59itJXJ2v2SWCBujLf+zuUzjOUcAKbR clnn2mVWZXfbWLsa21/fxJODK5kjB/LkZVT5sD4sIl8= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org