$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2ayOrcOYIWl43LuPJPsHUiUqFMc.roa File: 2ayOrcOYIWl43LuPJPsHUiUqFMc.roa (raw, json) Hash identifier: GB2igJyxNr+70QwcDlDDUFtBscib1LxwMcoXnxwfbmg= Subject key identifier: D9:AC:8E:AD:C3:98:21:69:78:DC:BB:8F:24:FB:07:52:25:2A:14:C7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1049 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2ayOrcOYIWl43LuPJPsHUiUqFMc.roa Signing time: Mon 26 Aug 2024 05:16:16 +0000 ROA not before: Mon 26 Aug 2024 05:16:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 219.91.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4169 (0x1049) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D9AC8EADC398216978DCBB8F24FB0752252A14C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:c4:64:84:16:9d:e4:27:25:77:5a:8e:76: d1:0b:44:c8:31:45:2d:02:3c:c5:93:02:80:35:d8: d3:8a:00:df:4a:72:30:d8:4b:06:43:e0:da:7f:a9: b7:60:9a:cf:45:11:46:9e:e6:00:35:12:d1:60:f8: 4a:fd:65:49:e1:1c:91:fd:a5:a0:b8:cf:4d:f8:77: 6e:b1:e1:5c:a0:f7:1a:99:61:a9:c5:7a:dc:5b:48: 8b:f5:a7:53:98:fd:53:8e:ae:51:93:65:6f:3f:4a: 36:c7:11:58:32:7d:11:07:85:91:c0:f3:ac:9a:3f: 1e:52:c2:bd:47:65:13:64:fe:57:f0:b8:86:87:2b: a5:73:55:05:a6:47:56:e2:6e:6a:4d:d2:72:7e:da: 0d:f3:bf:f8:e8:fc:a9:a2:2b:a6:0f:46:e1:7b:cf: ad:d6:ea:18:a9:1a:fa:36:2c:bc:d0:55:8f:4f:af: 33:1a:17:f5:c8:c8:40:9e:9b:e1:ef:21:35:f8:c7: dd:cf:f1:0a:3e:d4:d7:43:65:65:46:65:ab:4c:62: b6:1e:7e:0c:3a:73:4d:97:c1:bb:7a:13:8f:2e:ac: 47:1b:6c:30:e4:fc:41:d1:9f:29:2f:67:7d:14:e6: 07:e3:5d:ee:b1:e6:a4:74:7b:cc:ea:fb:f0:48:ea: 56:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AC:8E:AD:C3:98:21:69:78:DC:BB:8F:24:FB:07:52:25:2A:14:C7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2ayOrcOYIWl43LuPJPsHUiUqFMc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.68.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:b5:53:e2:a0:c4:1e:65:68:35:c3:43:f3:9b:69:f6:9e:a0: 56:e0:2a:3b:cb:46:5a:77:54:89:0a:3d:80:8c:a0:63:6e:de: f0:2a:c8:9e:a2:59:34:bf:59:b9:05:de:30:a5:e4:d1:36:00: e5:4b:ec:3c:19:e0:c4:4b:0d:34:55:17:25:8f:6b:bd:6f:3a: e6:a8:fb:f4:22:d2:2b:03:c7:bf:fb:97:41:3e:61:43:35:ac: 51:7e:f3:40:f8:24:81:b8:56:26:8e:ec:30:75:ad:2a:8c:45: f6:d3:77:79:b2:04:5e:cd:05:a2:1e:f8:49:65:02:d4:5c:b2: c7:f9:84:af:f3:1d:b1:9d:7f:b4:3a:3f:fa:fc:78:10:86:96: ef:5e:2d:c9:ec:73:a8:c7:a4:c2:ee:c2:e7:8c:a0:e1:3b:59: 94:12:38:87:ea:10:a6:a2:5b:d1:08:7b:d1:31:18:88:b8:9e: 1b:8f:67:c4:fa:6a:95:cc:b7:05:5e:a6:39:30:98:ee:d3:e2: f5:b2:83:d0:c2:7a:d5:72:56:e1:97:58:c1:5f:45:2b:e9:0f: b3:b3:6b:00:3f:c8:ed:ed:11:e3:39:c8:0c:a4:85:73:8f:9d: 28:29:d7:6c:51:56:be:44:ac:35:b2:4d:87:2e:be:a9:50:b2: f7:8f:3f:7c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ5QUM4RUFEQzM5ODIx Njk3OERDQkI4RjI0RkIwNzUyMjUyQTE0QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUr8RkhBad5Ccld1qOdtELRMgxRS0CPMWTAoA12NOKAN9KcjDY SwZD4Np/qbdgms9FEUae5gA1EtFg+Er9ZUnhHJH9paC4z034d26x4Vyg9xqZYanF etxbSIv1p1OY/VOOrlGTZW8/SjbHEVgyfREHhZHA86yaPx5Swr1HZRNk/lfwuIaH K6VzVQWmR1bibmpN0nJ+2g3zv/jo/KmiK6YPRuF7z63W6hipGvo2LLzQVY9PrzMa F/XIyECem+HvITX4x93P8Qo+1NdDZWVGZatMYrYefgw6c02Xwbt6E48urEcbbDDk /EHRnykvZ30U5gfjXe6x5qR0e8zq+/BI6lapAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU2ayOrcOYIWl43LuPJPsHUiUqFMcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzJheU9yY09ZSVdsNDNMdVBKUHNIVWlV cUZNYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHbW0QwDQYJ KoZIhvcNAQELBQADggEBABy1U+KgxB5laDXDQ/ObafaeoFbgKjvLRlp3VIkKPYCM oGNu3vAqyJ6iWTS/WbkF3jCl5NE2AOVL7DwZ4MRLDTRVFyWPa71vOuao+/Qi0isD x7/7l0E+YUM1rFF+80D4JIG4ViaO7DB1rSqMRfbTd3myBF7NBaIe+EllAtRcssf5 hK/zHbGdf7Q6P/r8eBCGlu9eLcnsc6jHpMLuwueMoOE7WZQSOIfqEKaiW9EIe9Ex GIi4nhuPZ8T6apXMtwVepjkwmO7T4vWyg9DCetVyVuGXWMFfRSvpD7OzawA/yO3t EeM5yAykhXOPnSgp12xRVr5ErDWyTYcuvqlQsvePP3w= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:27 2024 by rpki-client on console-fra.rpki-client.org