$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/7LjtGwMbSQ8zCQ_xXh1bROGMix8.roa File: 7LjtGwMbSQ8zCQ_xXh1bROGMix8.roa (raw, json) Hash identifier: 9GrclOAGEY5pzADjL/JS/0tgJkgqRcSfTZPefKo0Jx0= Subject key identifier: EC:B8:ED:1B:03:1B:49:0F:33:09:0F:F1:5E:1D:5B:44:E1:8C:8B:1F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10AA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7LjtGwMbSQ8zCQ_xXh1bROGMix8.roa Signing time: Mon 26 Aug 2024 05:16:39 +0000 ROA not before: Mon 26 Aug 2024 05:16:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 202.178.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4266 (0x10aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ECB8ED1B031B490F33090FF15E1D5B44E18C8B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f8:7f:2d:ec:07:e7:a5:a2:36:21:c3:df:17: d0:7b:f4:16:6e:09:13:b9:56:9b:be:e1:07:32:6d: 6f:e0:f6:29:99:d8:23:38:86:f9:d0:99:af:38:03: 74:59:26:3c:c6:1a:f9:09:b3:5e:a9:23:a1:62:50: df:b6:cc:be:3b:a4:66:db:0e:fa:c7:7f:f3:fb:ca: d4:5d:3b:56:c9:0a:9a:fe:33:ef:ac:c3:95:ff:8e: 16:ea:2b:f4:cf:69:b8:c5:42:12:91:d6:47:05:d2: 23:97:b1:8a:b7:3a:f2:38:0e:e8:05:a7:fb:08:90: dd:c3:2a:98:d5:2b:d7:f3:b6:3c:02:63:f8:b0:93: d8:5b:8c:fb:22:e8:be:19:5e:26:ba:3e:93:90:9e: 71:d0:5c:73:26:6a:cc:d0:04:24:40:b1:6a:78:fd: 10:72:96:40:b1:b3:ce:e3:7d:62:89:c8:3b:fd:d7: fd:9a:d9:cb:09:d1:d1:98:be:c1:b7:b3:31:00:39: 46:cf:5c:2c:c3:aa:1a:00:e6:ad:7b:19:b0:3a:e8: c7:88:94:1a:78:b6:84:78:4d:2f:22:65:af:d7:0c: 71:cd:94:83:01:c6:35:c0:c0:bf:29:05:19:03:b7: 74:2c:bf:b6:1b:e6:7b:6a:b9:02:73:f8:c9:a5:d7: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B8:ED:1B:03:1B:49:0F:33:09:0F:F1:5E:1D:5B:44:E1:8C:8B:1F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7LjtGwMbSQ8zCQ_xXh1bROGMix8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.178.128.0/17 Signature Algorithm: sha256WithRSAEncryption 50:fd:a7:ba:e9:26:8f:64:52:18:6c:d1:51:ab:0e:b8:34:7d: 74:0f:9a:c6:c6:9c:2a:d2:f3:b8:a5:b0:36:2e:e9:c0:10:81: e8:ef:c1:0c:77:8b:37:0d:c8:93:24:14:11:2c:27:b1:0b:bf: bf:34:81:4d:15:62:b9:28:d8:a8:1a:60:17:53:50:79:52:ba: b9:ab:85:b1:6a:1b:fc:98:47:94:74:a8:6b:f5:ea:4b:df:43: 1f:48:b8:8b:0d:d2:dc:c4:20:fe:bf:a4:6f:86:4f:0a:ac:7c: 96:78:17:50:ce:c7:92:22:bb:b1:71:d4:b4:a1:1d:e5:30:cd: 69:66:c0:6d:a2:f7:37:0a:d6:4c:9f:38:ba:a2:5c:fd:3e:c9: fc:ec:ac:9a:12:df:ad:6e:b2:34:76:7f:cc:29:5d:5d:76:70: 3e:0e:ee:1d:b1:74:e4:47:ce:e2:ad:9e:8b:1a:54:da:f8:78: 36:04:ca:89:cb:ac:37:2d:c9:8b:68:c9:db:00:50:b9:ab:2f: 9c:4e:8d:cf:fa:ea:00:f4:13:4e:8d:34:09:16:26:7b:79:89: 52:24:a0:76:92:33:83:b5:46:79:00:7a:54:a3:6b:49:59:6f: 0e:db:ae:fc:c1:da:2d:2a:ee:8a:a0:20:d6:8d:1e:a2:4c:fd: fe:36:7e:77 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDQjhFRDFCMDMxQjQ5 MEYzMzA5MEZGMTVFMUQ1QjQ0RTE4QzhCMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1+H8t7AfnpaI2IcPfF9B79BZuCRO5Vpu+4QcybW/g9imZ2CM4 hvnQma84A3RZJjzGGvkJs16pI6FiUN+2zL47pGbbDvrHf/P7ytRdO1bJCpr+M++s w5X/jhbqK/TPabjFQhKR1kcF0iOXsYq3OvI4DugFp/sIkN3DKpjVK9fztjwCY/iw k9hbjPsi6L4ZXia6PpOQnnHQXHMmaszQBCRAsWp4/RBylkCxs87jfWKJyDv91/2a 2csJ0dGYvsG3szEAOUbPXCzDqhoA5q17GbA66MeIlBp4toR4TS8iZa/XDHHNlIMB xjXAwL8pBRkDt3Qsv7Yb5ntquQJz+Mml141HAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU7LjtGwMbSQ8zCQ/xXh1bROGMix8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzdManRHd01iU1E4ekNRX3hYaDFiUk9H TWl4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfKsoAwDQYJ KoZIhvcNAQELBQADggEBAFD9p7rpJo9kUhhs0VGrDrg0fXQPmsbGnCrS87ilsDYu 6cAQgejvwQx3izcNyJMkFBEsJ7ELv780gU0VYrko2KgaYBdTUHlSurmrhbFqG/yY R5R0qGv16kvfQx9IuIsN0tzEIP6/pG+GTwqsfJZ4F1DOx5Iiu7Fx1LShHeUwzWlm wG2i9zcK1kyfOLqiXP0+yfzsrJoS361usjR2f8wpXV12cD4O7h2xdORHzuKtnosa VNr4eDYEyonLrDctyYtoydsAULmrL5xOjc/66gD0E06NNAkWJnt5iVIkoHaSM4O1 RnkAelSja0lZbw7brvzB2i0q7oqgINaNHqJM/f42fnc= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org