$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2TgzjztK9c-bkdlSrVaoebEtwd8.roa File: 2TgzjztK9c-bkdlSrVaoebEtwd8.roa (raw, json) Hash identifier: plcRDig2QovKyfj7qlXcyyPet2VXP+UReE7Qwc5eMac= Subject key identifier: D9:38:33:8F:3B:4A:F5:CF:9B:91:D9:52:AD:56:A8:79:B1:2D:C1:DF Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10D2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2TgzjztK9c-bkdlSrVaoebEtwd8.roa Signing time: Mon 26 Aug 2024 05:16:49 +0000 ROA not before: Mon 26 Aug 2024 05:16:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 203.79.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4306 (0x10d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D938338F3B4AF5CF9B91D952AD56A879B12DC1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:73:0c:0a:c7:47:62:e7:49:86:f0:be:58:f4: 4c:08:30:0d:ef:60:91:42:54:e2:5c:56:6e:9d:91: 79:f3:08:f2:7f:82:ea:13:60:5a:c7:5a:74:03:82: ab:4f:9a:a4:1f:20:ac:f4:48:05:a4:13:ea:1a:78: c2:63:a7:e5:1b:84:03:f1:d6:1c:cd:86:f6:c2:4e: 78:52:5a:f7:32:2b:13:f5:2b:9e:03:0d:9d:a8:b7: 2a:d0:57:5c:34:80:f1:ba:6e:ac:d2:fa:3c:de:3a: 5e:3b:01:59:81:b3:06:d3:92:df:de:90:3b:34:17: c7:b0:f6:bc:00:bb:ca:0f:64:50:1a:47:aa:5b:31: 0e:7e:84:d8:44:37:b4:af:0d:b2:db:76:4a:67:1e: ab:b6:2e:c3:82:47:81:53:bf:11:25:36:7d:f8:ba: c2:f0:dc:b3:20:ec:98:d6:8e:07:d5:4e:2d:55:29: 44:06:f7:ff:e2:84:44:70:5f:8d:b6:f3:19:59:1e: 3a:9c:8e:49:24:09:83:6e:65:cf:7c:2b:f9:38:12: 94:72:4c:1f:d0:21:1c:f3:33:0d:4a:e9:ac:ef:47: 83:f2:9e:ea:c2:b0:39:5d:1a:20:e6:75:a6:9d:57: f3:89:7c:d7:59:25:99:ef:99:78:11:59:53:0c:e9: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:38:33:8F:3B:4A:F5:CF:9B:91:D9:52:AD:56:A8:79:B1:2D:C1:DF X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2TgzjztK9c-bkdlSrVaoebEtwd8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.224.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:7c:e4:d7:f2:dd:57:4a:55:87:ec:79:75:21:27:d8:b6:b8: 5a:c6:a6:5f:79:d9:8b:46:08:07:64:c6:9a:93:86:19:7c:9f: a2:90:60:7f:89:32:58:8c:41:7d:a6:bd:6a:db:d6:c9:e5:fd: 82:30:f3:85:04:97:b6:aa:18:3d:20:b3:f4:07:e2:ac:64:69: 89:44:e9:4a:32:93:a8:e5:67:64:5f:c8:1a:17:4b:f9:27:47: 5c:61:22:f2:d7:d3:ec:fd:3c:74:78:2c:db:fc:a3:16:9b:ea: 69:1d:87:66:2a:2e:ae:98:53:fa:e6:5a:c2:a9:cc:da:52:2f: 49:36:1e:15:65:58:19:bb:47:22:96:75:bd:36:8f:b1:61:2e: cf:65:e4:75:4a:47:8c:98:fa:2e:e0:98:4c:2b:ea:ba:cf:7f: 61:d1:0c:e5:13:24:b5:46:a8:d0:37:40:3e:39:77:90:6a:ed: 91:2c:9a:1f:89:09:86:25:6f:d9:bd:2b:5d:1b:87:e0:f1:85: bf:9a:7a:48:df:4d:1a:4a:3b:62:ba:41:24:d1:e3:12:86:57: e9:d0:cf:8b:a0:0a:07:17:3c:79:19:17:ef:b4:81:47:38:b4: f7:39:63:c8:69:ee:ec:43:af:6b:c8:89:49:59:83:b7:ee:12: 41:8b:75:c2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICENIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5MzgzMzhGM0I0QUY1 Q0Y5QjkxRDk1MkFENTZBODc5QjEyREMxREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTcwwKx0di50mG8L5Y9EwIMA3vYJFCVOJcVm6dkXnzCPJ/guoT YFrHWnQDgqtPmqQfIKz0SAWkE+oaeMJjp+UbhAPx1hzNhvbCTnhSWvcyKxP1K54D DZ2otyrQV1w0gPG6bqzS+jzeOl47AVmBswbTkt/ekDs0F8ew9rwAu8oPZFAaR6pb MQ5+hNhEN7SvDbLbdkpnHqu2LsOCR4FTvxElNn34usLw3LMg7JjWjgfVTi1VKUQG 9//ihERwX4228xlZHjqcjkkkCYNuZc98K/k4EpRyTB/QIRzzMw1K6azvR4PynurC sDldGiDmdaadV/OJfNdZJZnvmXgRWVMM6SwPAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU2TgzjztK9c+bkdlSrVaoebEtwd8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzJUZ3pqenRLOWMtYmtkbFNyVmFvZWJF dHdkOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLT+AwDQYJ KoZIhvcNAQELBQADggEBAI185Nfy3VdKVYfseXUhJ9i2uFrGpl952YtGCAdkxpqT hhl8n6KQYH+JMliMQX2mvWrb1snl/YIw84UEl7aqGD0gs/QH4qxkaYlE6Uoyk6jl Z2RfyBoXS/knR1xhIvLX0+z9PHR4LNv8oxab6mkdh2YqLq6YU/rmWsKpzNpSL0k2 HhVlWBm7RyKWdb02j7FhLs9l5HVKR4yY+i7gmEwr6rrPf2HRDOUTJLVGqNA3QD45 d5Bq7ZEsmh+JCYYlb9m9K10bh+Dxhb+aekjfTRpKO2K6QSTR4xKGV+nQz4ugCgcX PHkZF++0gUc4tPc5Y8hp7uxDr2vIiUlZg7fuEkGLdcI= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:04 2024 by rpki-client on console-ams.rpki-client.org