$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/5crH4lF94HmE0FgU2_t6-01CfKs.roa File: 5crH4lF94HmE0FgU2_t6-01CfKs.roa (raw, json) Hash identifier: d7fUA8ZYbTBZWjNrtP54/cmDC5grsPRY+IYpoR0DZP8= Subject key identifier: E5:CA:C7:E2:51:7D:E0:79:84:D0:58:14:DB:FB:7A:FB:4D:42:7C:AB Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 112F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5crH4lF94HmE0FgU2_t6-01CfKs.roa Signing time: Mon 18 Nov 2024 06:51:17 +0000 ROA not before: Mon 18 Nov 2024 06:51:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 218.35.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4399 (0x112f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Nov 18 06:51:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E5CAC7E2517DE07984D05814DBFB7AFB4D427CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:e7:ac:6b:c4:3c:34:b5:98:5c:69:fb:e0: f3:db:30:dc:70:04:cb:c4:94:5a:b7:87:25:44:7d: ce:18:0a:3f:d4:2a:63:39:1d:cb:8b:53:91:5d:5e: 00:4b:af:aa:2e:dc:e3:d7:4e:fb:bd:df:1c:0f:38: d0:76:e9:bb:fb:0e:a5:f8:5c:71:99:72:ed:80:ec: 7c:46:f5:35:3e:07:e6:d4:9b:64:11:98:7d:23:78: a9:e6:94:40:ef:d1:23:80:3d:c9:1f:1d:9a:51:4f: a5:71:ce:b0:f6:4e:a8:ee:0e:5c:7c:34:44:5a:6e: b7:ea:4e:74:d0:15:f5:37:15:d9:a4:1e:e8:a8:e3: 28:84:cc:1d:4a:8f:51:b2:b8:ab:23:1c:d6:d6:23: c9:21:a8:e5:08:65:0a:b8:7c:46:29:d5:1e:74:62: 28:c2:e4:be:a0:9f:4d:18:33:73:74:82:ff:c4:53: 19:6a:98:7e:f0:e5:f3:79:e8:97:f3:0b:2a:10:07: 9f:8f:0b:8c:83:37:c3:cc:b9:90:6c:04:ef:d3:04: 3e:0e:1f:3d:29:8f:c2:a1:29:68:e5:a4:b1:18:17: 53:38:1d:3d:54:d5:50:f6:13:de:7b:51:c5:5a:df: 38:23:3d:85:3c:9a:fb:b8:07:28:45:7d:cb:f6:0b: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:C7:E2:51:7D:E0:79:84:D0:58:14:DB:FB:7A:FB:4D:42:7C:AB X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5crH4lF94HmE0FgU2_t6-01CfKs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.24.0/23 Signature Algorithm: sha256WithRSAEncryption 75:6f:e2:0d:0b:75:05:f7:26:78:d4:f0:b0:48:89:37:94:cb: 18:59:18:02:f6:16:31:a1:92:d7:ae:7f:31:4a:30:ca:b2:9e: 2f:38:64:55:2b:68:c2:1e:72:47:73:5e:2b:78:e4:d3:de:c2: 69:8d:80:09:7e:ba:80:71:a9:9c:27:fd:76:72:b4:ef:74:c1: 0b:81:1f:61:f8:01:95:17:52:fa:6c:a2:3c:5c:3b:18:c1:b8: 02:03:29:e5:dc:08:b5:54:e7:0b:ff:e3:9b:4b:c1:cf:25:15: 5b:f0:f2:d8:7d:7f:19:82:d2:53:da:59:7a:c9:b0:b6:99:94: 23:9c:81:b5:ea:48:9a:c5:8c:fb:7e:d7:ef:64:3a:20:29:25: ae:50:3e:65:f5:07:33:49:0b:d6:d7:a9:ad:55:ae:ac:66:f0: 84:d6:51:c3:72:1f:c1:fd:24:5c:8f:eb:7f:e6:27:59:1b:85: 3e:90:c6:0d:ef:cc:c1:79:bb:31:51:c4:fa:84:0b:c8:4a:5b: 3f:ee:80:a3:c9:17:07:5f:c4:24:40:61:45:61:f0:c7:ea:3f: f4:62:ce:ca:35:65:49:2e:f7:2b:4f:86:5a:63:ce:ac:78:6f: 30:67:e1:b6:db:22:04:7d:0d:dd:f1:d1:2f:2e:64:dc:39:3f: 3d:73:d5:ba -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICES8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDExMTgw NjUxMTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU1Q0FDN0UyNTE3REUw Nzk4NEQwNTgxNERCRkI3QUZCNEQ0MjdDQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjS+esa8Q8NLWYXGn74PPbMNxwBMvElFq3hyVEfc4YCj/UKmM5 HcuLU5FdXgBLr6ou3OPXTvu93xwPONB26bv7DqX4XHGZcu2A7HxG9TU+B+bUm2QR mH0jeKnmlEDv0SOAPckfHZpRT6VxzrD2TqjuDlx8NERabrfqTnTQFfU3FdmkHuio 4yiEzB1Kj1GyuKsjHNbWI8khqOUIZQq4fEYp1R50YijC5L6gn00YM3N0gv/EUxlq mH7w5fN56JfzCyoQB5+PC4yDN8PMuZBsBO/TBD4OHz0pj8KhKWjlpLEYF1M4HT1U 1VD2E957UcVa3zgjPYU8mvu4ByhFfcv2C1qTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU5crH4lF94HmE0FgU2/t6+01CfKswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzVjckg0bEY5NEhtRTBGZ1UyX3Q2LTAx Q2ZLcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHaIxgwDQYJ KoZIhvcNAQELBQADggEBAHVv4g0LdQX3JnjU8LBIiTeUyxhZGAL2FjGhkteufzFK MMqyni84ZFUraMIeckdzXit45NPewmmNgAl+uoBxqZwn/XZytO90wQuBH2H4AZUX UvpsojxcOxjBuAIDKeXcCLVU5wv/45tLwc8lFVvw8th9fxmC0lPaWXrJsLaZlCOc gbXqSJrFjPt+1+9kOiApJa5QPmX1BzNJC9bXqa1Vrqxm8ITWUcNyH8H9JFyP63/m J1kbhT6Qxg3vzMF5uzFRxPqEC8hKWz/ugKPJFwdfxCRAYUVh8MfqP/Rizso1ZUku 9ytPhlpjzqx4bzBn4bbbIgR9Dd3x0S8uZNw5Pz1z1bo= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:07 2024 by rpki-client on console-fra.rpki-client.org