$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/9T1iDWTvQF6NWCziNrO3RAHNA5M.roa File: 9T1iDWTvQF6NWCziNrO3RAHNA5M.roa (raw, json) Hash identifier: T3L4Mo6xEnNzr8wKP1vMXBOX2CPg5HJsZVJkTc36ASU= Subject key identifier: F5:3D:62:0D:64:EF:40:5E:8D:58:2C:E2:36:B3:B7:44:01:CD:03:93 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1065 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9T1iDWTvQF6NWCziNrO3RAHNA5M.roa Signing time: Mon 26 Aug 2024 05:16:22 +0000 ROA not before: Mon 26 Aug 2024 05:16:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 210.200.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4197 (0x1065) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F53D620D64EF405E8D582CE236B3B74401CD0393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:50:5d:e9:68:17:80:1c:b6:2c:d5:a9:34: 82:1d:2b:72:00:92:55:50:c4:18:3e:16:2e:12:8e: f8:30:86:a3:c3:a1:2c:ad:cd:fa:12:92:7c:e0:f7: db:47:02:7f:01:74:c2:d9:ce:54:62:27:16:2f:44: d6:67:5f:05:32:4e:50:6c:ca:ac:c7:e5:33:73:7c: e9:d0:7f:34:aa:9b:91:77:62:01:fb:c6:57:ff:70: 6e:bb:4d:fa:e1:f8:ff:80:fc:6f:51:fc:49:0c:e8: 39:f3:bd:46:de:34:a8:92:d1:2e:44:7d:9f:f7:c4: 9a:fd:25:7a:f6:fc:d1:67:8e:39:45:34:db:6f:48: eb:51:20:dd:83:11:db:2a:ef:75:aa:1f:0b:de:1a: 99:1d:d4:78:6d:4a:bf:62:2a:eb:a6:fa:91:66:72: 25:33:e2:7d:34:4a:d7:4a:0f:e9:06:3c:a6:60:37: 1b:cc:55:48:01:33:b9:ac:dc:f7:2a:76:04:92:e5: 3e:4f:99:09:3f:a2:5d:95:5c:6c:30:97:44:83:8e: 19:d5:7d:f6:27:ab:e8:f8:9f:26:3c:ad:a5:45:4b: 1c:b1:30:cc:1a:fe:8b:16:c2:3b:86:e2:09:f1:66: 95:a5:48:7b:65:94:dd:29:b7:2b:2c:40:a8:cc:bb: 9a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3D:62:0D:64:EF:40:5E:8D:58:2C:E2:36:B3:B7:44:01:CD:03:93 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9T1iDWTvQF6NWCziNrO3RAHNA5M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9e:ee:43:8a:d0:5d:27:9d:4d:e3:a7:ec:e8:cb:66:b1:5e:4e: f5:b7:d4:27:eb:48:36:39:22:75:2b:a3:b3:2b:b8:74:28:f0: 9b:30:89:f2:8e:21:cb:a2:24:85:46:07:4b:5c:de:9b:22:38: ec:b8:d1:2d:96:1f:e5:e0:27:9e:56:49:96:2a:91:f0:4d:79: cf:59:a3:47:f2:6c:2a:48:16:27:eb:86:33:15:b4:7a:4a:22: 25:af:32:5e:d5:b9:4c:bf:51:3a:b2:42:a2:ee:02:7e:74:d7: be:8f:3a:a3:fa:1c:14:36:bb:62:5f:f6:b3:b8:6a:c0:9b:e8: bd:0d:e3:b0:ef:47:29:60:40:38:62:5b:2a:7d:6b:a4:df:9d: 76:70:c5:9f:2e:c5:ed:60:65:95:74:57:e0:b5:e9:27:16:6c: 37:3b:4a:32:3c:70:97:9d:0a:a2:da:f1:f8:b9:78:c9:4f:fb: 9a:54:80:58:e3:c8:c4:5d:a7:b8:bd:7a:2b:d5:2b:5a:79:6f: 66:e4:97:ee:8e:ab:89:29:85:a1:22:cc:a6:83:27:c6:65:e9: 37:b8:04:c0:b7:28:95:f2:58:55:a5:23:d3:c8:38:68:04:51: fa:0f:0f:ce:f5:1f:1d:4a:67:90:da:b4:89:1a:77:d7:fd:fe: 0f:3c:bd:25 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1M0Q2MjBENjRFRjQw NUU4RDU4MkNFMjM2QjNCNzQ0MDFDRDAzOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXIlBd6WgXgBy2LNWpNIIdK3IAklVQxBg+Fi4SjvgwhqPDoSyt zfoSknzg99tHAn8BdMLZzlRiJxYvRNZnXwUyTlBsyqzH5TNzfOnQfzSqm5F3YgH7 xlf/cG67Tfrh+P+A/G9R/EkM6DnzvUbeNKiS0S5EfZ/3xJr9JXr2/NFnjjlFNNtv SOtRIN2DEdsq73WqHwveGpkd1HhtSr9iKuum+pFmciUz4n00StdKD+kGPKZgNxvM VUgBM7ms3PcqdgSS5T5PmQk/ol2VXGwwl0SDjhnVffYnq+j4nyY8raVFSxyxMMwa /osWwjuG4gnxZpWlSHtllN0ptyssQKjMu5rBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU9T1iDWTvQF6NWCziNrO3RAHNA5MwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzlUMWlEV1R2UUY2TldDemlOck8zUkFI TkE1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyIAwDQYJ KoZIhvcNAQELBQADggEBAJ7uQ4rQXSedTeOn7OjLZrFeTvW31CfrSDY5InUro7Mr uHQo8JswifKOIcuiJIVGB0tc3psiOOy40S2WH+XgJ55WSZYqkfBNec9Zo0fybCpI FifrhjMVtHpKIiWvMl7VuUy/UTqyQqLuAn50176POqP6HBQ2u2Jf9rO4asCb6L0N 47DvRylgQDhiWyp9a6TfnXZwxZ8uxe1gZZV0V+C16ScWbDc7SjI8cJedCqLa8fi5 eMlP+5pUgFjjyMRdp7i9eivVK1p5b2bkl+6Oq4kphaEizKaDJ8Zl6Te4BMC3KJXy WFWlI9PIOGgEUfoPD871Hx1KZ5DatIkad9f9/g88vSU= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:27 2024 by rpki-client on console-fra.rpki-client.org