$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8avpzY6Rg90LKbqv270y9RWZC4A.roa File: 8avpzY6Rg90LKbqv270y9RWZC4A.roa (raw, json) Hash identifier: G8P8hffdIEfLe18r8gL5BKwQAfG+WzXiYRlcAVGQMpA= Subject key identifier: F1:AB:E9:CD:8E:91:83:DD:0B:29:BA:AF:DB:BD:32:F5:15:99:0B:80 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10D9 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8avpzY6Rg90LKbqv270y9RWZC4A.roa Signing time: Mon 26 Aug 2024 05:16:50 +0000 ROA not before: Mon 26 Aug 2024 05:16:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131142 IP address blocks: 223.22.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4313 (0x10d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F1ABE9CD8E9183DD0B29BAAFDBBD32F515990B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:3b:16:d5:bf:dc:a8:62:19:ff:96:5e:1d: bf:fe:4b:78:30:a1:eb:99:8e:da:27:1d:dc:b9:a3: f0:53:97:92:b0:17:4e:1f:f3:92:ec:33:fd:f4:c6: 34:e2:38:87:31:52:67:23:39:0b:01:b1:3c:d9:a8: 42:90:30:d2:ff:3d:28:0d:c2:26:60:2e:88:3e:60: 70:f6:64:7c:8e:25:58:f5:eb:8e:d8:50:eb:00:09: 0a:ae:f1:3a:41:02:5b:52:cb:ba:c4:d1:b3:47:da: e0:e5:bf:b1:6b:9c:19:b4:37:ed:4b:82:45:41:42: c2:7c:4b:4d:60:72:c9:31:bb:69:23:37:8b:7e:17: b6:40:ad:66:d7:5e:fd:a3:19:97:64:d0:20:4d:1b: 64:54:88:98:2b:b8:0a:72:36:da:ac:28:f5:77:3b: d9:ec:84:41:8c:24:de:01:12:ca:b4:e5:96:88:d7: 75:0c:00:c6:c0:9a:1b:f3:17:63:7a:8e:96:fd:bd: 91:8c:6f:12:24:01:29:40:0a:30:b4:03:ea:01:4d: 22:c9:ff:3c:91:10:3d:8f:75:01:04:c5:81:c7:b8: 86:3f:ef:90:22:d0:97:34:34:b6:81:1a:e5:7b:d2: 91:01:80:10:85:eb:a2:ec:99:bc:e1:28:22:01:6b: fe:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AB:E9:CD:8E:91:83:DD:0B:29:BA:AF:DB:BD:32:F5:15:99:0B:80 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8avpzY6Rg90LKbqv270y9RWZC4A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.254.0/24 Signature Algorithm: sha256WithRSAEncryption 76:89:ed:6c:0a:15:a4:a8:15:ad:2f:ce:21:c9:91:c5:aa:b2: 89:9f:cd:d0:3f:65:1d:a0:6c:f8:0d:bc:b9:61:d6:e4:1d:24: 0a:b3:da:72:c5:5e:0a:21:46:66:26:06:65:5b:14:b6:ca:9c: c4:80:d8:0a:63:77:65:8b:86:3f:8a:83:99:85:d3:51:4c:59: 48:46:58:84:65:b2:97:69:52:7d:40:22:6a:5e:6d:c5:ad:90: 0c:76:b9:5d:d2:b1:44:42:c5:3f:9d:42:ab:29:a9:75:b2:12: 5b:83:cc:7f:1c:58:23:a3:61:24:8d:b8:38:0f:1a:43:75:82: b6:dd:e9:41:9c:ec:00:a3:11:4c:68:e1:40:19:1a:2f:f6:c7: 36:6a:6e:c2:ba:d2:fb:0b:d2:c0:a9:b4:40:cf:9b:c2:72:39: e0:e5:bd:3b:41:9b:e6:bb:49:5e:d6:b6:9d:09:74:70:26:7d: 84:a9:89:91:77:62:57:21:04:6d:b1:37:eb:a6:22:3b:03:73: 69:6b:ad:a1:31:69:2a:48:34:22:e8:f0:5a:90:50:34:20:8b: 92:ea:10:40:b8:9e:a4:8f:f1:63:8d:66:93:3b:76:22:94:54: 4c:ea:83:9b:da:aa:2e:2e:e0:b1:c4:b3:ff:4b:0b:9b:8d:b4: 27:08:e5:6a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICENkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxQUJFOUNEOEU5MTgz REQwQjI5QkFBRkRCQkQzMkY1MTU5OTBCODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDM8zsW1b/cqGIZ/5ZeHb/+S3gwoeuZjtonHdy5o/BTl5KwF04f 85LsM/30xjTiOIcxUmcjOQsBsTzZqEKQMNL/PSgNwiZgLog+YHD2ZHyOJVj1647Y UOsACQqu8TpBAltSy7rE0bNH2uDlv7FrnBm0N+1LgkVBQsJ8S01gcskxu2kjN4t+ F7ZArWbXXv2jGZdk0CBNG2RUiJgruApyNtqsKPV3O9nshEGMJN4BEsq05ZaI13UM AMbAmhvzF2N6jpb9vZGMbxIkASlACjC0A+oBTSLJ/zyRED2PdQEExYHHuIY/75Ai 0Jc0NLaBGuV70pEBgBCF66LsmbzhKCIBa/6bAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU8avpzY6Rg90LKbqv270y9RWZC4AwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzhhdnB6WTZSZzkwTEticXYyNzB5OVJX WkM0QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADfFv4wDQYJ KoZIhvcNAQELBQADggEBAHaJ7WwKFaSoFa0vziHJkcWqsomfzdA/ZR2gbPgNvLlh 1uQdJAqz2nLFXgohRmYmBmVbFLbKnMSA2Apjd2WLhj+Kg5mF01FMWUhGWIRlspdp Un1AImpebcWtkAx2uV3SsURCxT+dQqspqXWyEluDzH8cWCOjYSSNuDgPGkN1grbd 6UGc7ACjEUxo4UAZGi/2xzZqbsK60vsL0sCptEDPm8JyOeDlvTtBm+a7SV7Wtp0J dHAmfYSpiZF3YlchBG2xN+umIjsDc2lrraExaSpINCLo8FqQUDQgi5LqEEC4nqSP 8WONZpM7diKUVEzqg5vaqi4u4LHEs/9LC5uNtCcI5Wo= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:37 2024 by rpki-client on console-fra.rpki-client.org