$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/49ZOImCfSKy7l3iSwGgvBWuC3yE.roa File: 49ZOImCfSKy7l3iSwGgvBWuC3yE.roa (raw, json) Hash identifier: JT+GxVSvjB8S/DLuEUEDxeRzDDG09VZq8i0hn2Z9IMY= Subject key identifier: E3:D6:4E:22:60:9F:48:AC:BB:97:78:92:C0:68:2F:05:6B:82:DF:21 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1081 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/49ZOImCfSKy7l3iSwGgvBWuC3yE.roa Signing time: Mon 26 Aug 2024 05:16:30 +0000 ROA not before: Mon 26 Aug 2024 05:16:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 43.240.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4225 (0x1081) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E3D64E22609F48ACBB977892C0682F056B82DF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:79:27:6c:58:c7:94:87:81:1a:7b:04:b5:bf: 10:c1:31:52:bb:47:05:f4:0c:4d:c3:7b:b5:10:9f: 8b:34:fa:a3:f3:21:2a:97:bf:d1:5d:36:8f:76:49: 8a:39:94:7a:ce:4a:0e:7c:77:43:0c:c5:3c:f4:ec: ed:6f:c3:26:3b:f4:c2:00:e4:c2:99:a5:a1:fe:0d: bb:63:48:fa:32:0e:11:d5:7c:bf:c1:ae:3d:3c:6a: 8a:3b:9d:80:0d:52:b3:db:3b:f6:d5:c7:8e:99:78: 68:58:55:d1:49:b9:9a:99:21:37:24:f0:0d:d2:c7: 2c:55:f9:fa:e4:5b:6e:54:09:06:82:49:15:92:39: f7:32:76:84:4e:1e:33:36:16:56:e7:1e:fe:dd:44: 2c:2a:cd:a1:22:b6:eb:9f:6d:60:1f:ec:38:5a:45: c5:b7:87:f0:3e:2f:c1:ed:80:7a:a8:af:ba:35:b8: e8:73:39:e8:d2:c5:53:a2:85:fb:e2:36:cc:3a:a9: c3:7f:50:be:34:9b:45:03:39:3a:b4:09:b1:75:42: 1c:b5:e7:b9:8e:2d:a0:e0:10:19:46:99:76:1f:d2: 52:60:8b:c4:f2:0d:3a:7c:39:92:de:63:15:30:63: d9:c2:a4:e5:c5:fe:55:61:9a:6a:09:d6:10:41:16: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D6:4E:22:60:9F:48:AC:BB:97:78:92:C0:68:2F:05:6B:82:DF:21 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/49ZOImCfSKy7l3iSwGgvBWuC3yE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.240.104.0/22 Signature Algorithm: sha256WithRSAEncryption 08:57:c6:02:ea:05:66:d0:11:72:94:60:a7:ef:92:0e:ab:b5: 8b:e3:56:fa:d7:86:09:71:7c:25:e9:ca:72:b6:17:1c:66:91: 2c:36:e3:11:d3:bc:2a:40:d0:f5:20:2c:05:55:a1:15:e5:b6: f4:9b:1a:b4:94:26:64:f0:80:0d:8a:c0:f1:8c:e1:45:05:eb: dd:3d:45:55:e2:db:ef:12:89:64:ee:f9:48:3a:2a:15:7e:a0: a1:d9:c6:b5:90:55:24:67:90:c8:fb:b3:67:be:ee:a1:80:e7: 4d:82:a7:a5:e0:55:74:3a:05:f3:4a:26:ba:2c:91:f1:2e:37: 46:f1:f2:00:6b:97:40:c4:05:95:7a:22:81:70:62:c9:c9:c7: b4:55:54:43:81:b2:87:5b:3b:49:56:d5:55:c3:10:b0:51:63: b2:2d:00:69:87:b3:d2:31:43:54:ee:78:fd:a2:24:e9:43:5b: 0c:f4:93:67:80:d6:6b:3d:05:08:80:40:30:0c:5f:28:ac:ba: f6:e4:1b:00:d7:31:5d:6d:c1:65:45:cc:0e:10:21:3d:24:9c: 1e:6f:01:e0:3f:c1:e2:90:1b:3b:f6:0b:d4:f6:76:f4:9f:10: a1:69:4b:d1:53:20:eb:c4:f2:a0:ba:be:72:9c:47:29:e7:28: ee:37:34:7d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzRDY0RTIyNjA5RjQ4 QUNCQjk3Nzg5MkMwNjgyRjA1NkI4MkRGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD4eSdsWMeUh4EaewS1vxDBMVK7RwX0DE3De7UQn4s0+qPzISqX v9FdNo92SYo5lHrOSg58d0MMxTz07O1vwyY79MIA5MKZpaH+DbtjSPoyDhHVfL/B rj08aoo7nYANUrPbO/bVx46ZeGhYVdFJuZqZITck8A3SxyxV+frkW25UCQaCSRWS OfcydoROHjM2FlbnHv7dRCwqzaEituufbWAf7DhaRcW3h/A+L8HtgHqor7o1uOhz OejSxVOihfviNsw6qcN/UL40m0UDOTq0CbF1Qhy157mOLaDgEBlGmXYf0lJgi8Ty DTp8OZLeYxUwY9nCpOXF/lVhmmoJ1hBBFpu5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU49ZOImCfSKy7l3iSwGgvBWuC3yEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzQ5Wk9JbUNmU0t5N2wzaVN3R2d2Qld1 QzN5RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr8GgwDQYJ KoZIhvcNAQELBQADggEBAAhXxgLqBWbQEXKUYKfvkg6rtYvjVvrXhglxfCXpynK2 FxxmkSw24xHTvCpA0PUgLAVVoRXltvSbGrSUJmTwgA2KwPGM4UUF6909RVXi2+8S iWTu+Ug6KhV+oKHZxrWQVSRnkMj7s2e+7qGA502Cp6XgVXQ6BfNKJroskfEuN0bx 8gBrl0DEBZV6IoFwYsnJx7RVVEOBsodbO0lW1VXDELBRY7ItAGmHs9IxQ1TueP2i JOlDWwz0k2eA1ms9BQiAQDAMXyisuvbkGwDXMV1twWVFzA4QIT0knB5vAeA/weKQ Gzv2C9T2dvSfEKFpS9FTIOvE8qC6vnKcRynnKO43NH0= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org