$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BxwYrCKOiXhO1wS4jpYk8Xm4UFc.roa File: BxwYrCKOiXhO1wS4jpYk8Xm4UFc.roa (raw, json) Hash identifier: 0L2RwiQu0Bbuhly8qWwLRkC4K5hnmzlMDHjuUMrGcLA= Subject key identifier: 07:1C:18:AC:22:8E:89:78:4E:D7:04:B8:8E:96:24:F1:79:B8:50:57 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1116 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BxwYrCKOiXhO1wS4jpYk8Xm4UFc.roa Signing time: Thu 17 Oct 2024 02:28:17 +0000 ROA not before: Thu 17 Oct 2024 02:28:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 60.244.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4374 (0x1116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Oct 17 02:28:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=071C18AC228E89784ED704B88E9624F179B85057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:68:00:b1:3d:cf:44:1f:4a:33:d1:df:44: 33:a2:4e:65:34:2d:bf:41:db:92:3f:67:84:7f:f3: 54:2a:73:75:3b:92:74:cb:0e:b8:29:73:35:70:48: 9c:6c:9e:7c:4f:f4:fb:24:ed:ca:3e:99:66:f7:9c: e6:eb:b2:7a:51:80:f0:df:79:3b:83:fb:58:cb:69: 28:38:ee:c8:bf:72:12:44:7e:bd:a4:f2:e7:c6:05: 70:5e:4d:1a:6e:81:72:7d:d1:69:d5:97:7c:9e:99: 0e:71:7d:22:51:b3:63:12:00:bb:05:d0:32:cf:0d: a5:bb:23:cf:c4:26:89:54:64:9c:6e:7a:42:51:af: da:d2:4a:af:44:1d:d2:8c:6d:cc:3d:e7:92:ed:fd: 2e:45:e1:d9:fd:36:b1:de:92:d5:32:0d:64:c2:5e: 51:5d:45:08:60:a1:16:f5:a8:fa:f9:eb:3f:1d:6a: 57:68:f1:a2:cc:3d:b1:4e:32:db:5f:f9:ad:38:74: 5e:9b:44:98:7b:38:ea:06:88:4c:aa:2f:61:64:48: b6:f1:d7:44:5f:a7:82:84:e2:45:ec:55:88:cd:d3: 9e:f4:71:68:b5:db:65:0c:33:b1:86:fc:d3:fd:ac: b1:de:39:b5:0d:9b:7e:dd:26:2a:57:8e:a9:f7:95: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1C:18:AC:22:8E:89:78:4E:D7:04:B8:8E:96:24:F1:79:B8:50:57 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BxwYrCKOiXhO1wS4jpYk8Xm4UFc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.176.0/22 Signature Algorithm: sha256WithRSAEncryption ac:e2:a0:73:07:65:d5:2d:b3:6c:5e:14:c8:1b:bb:7a:cf:b0: fb:0e:9e:96:48:40:8d:6b:d7:9f:d2:e9:70:4c:98:74:45:bf: d5:07:24:0c:14:ff:15:77:be:b4:cc:31:7e:fd:3f:2d:a5:a4: 6c:f3:a5:1f:3a:f6:39:53:9e:ef:bc:8c:44:2a:2e:53:24:7d: f0:3b:7d:50:41:fe:40:ac:29:32:8f:a2:36:27:5c:2d:d6:c1: be:ad:5d:db:18:d2:24:02:13:5d:b5:f2:ec:56:fb:e5:f8:0c: 24:2a:8f:d3:8e:fa:3d:69:9a:2f:b6:90:84:05:c9:43:b9:45: 01:69:d0:26:03:5b:27:0c:98:80:ed:47:fe:f2:b8:c0:9b:c3: 3c:66:17:13:5c:a8:dc:c4:32:8f:fb:01:1e:29:db:a3:20:da: 67:6e:c2:86:f0:e4:42:5d:bc:61:61:b0:f9:b0:86:ec:45:b0: ec:f8:30:0f:c1:4b:02:d2:8c:e6:2a:84:f1:bc:cf:17:f4:b9: d8:4e:92:67:37:3a:90:1d:76:19:c6:5a:fe:b8:60:db:d2:ce: 0d:7c:3c:ab:db:0c:7d:95:65:22:55:fd:37:b1:61:8c:71:e0: 64:6a:30:55:23:4e:47:e8:f3:34:c8:29:39:a7:4c:56:cc:71: b8:3d:d4:51 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICERYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDEwMTcw MjI4MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA3MUMxOEFDMjI4RTg5 Nzg0RUQ3MDRCODhFOTYyNEYxNzlCODUwNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcrWgAsT3PRB9KM9HfRDOiTmU0Lb9B25I/Z4R/81Qqc3U7knTL DrgpczVwSJxsnnxP9Psk7co+mWb3nObrsnpRgPDfeTuD+1jLaSg47si/chJEfr2k 8ufGBXBeTRpugXJ90WnVl3yemQ5xfSJRs2MSALsF0DLPDaW7I8/EJolUZJxuekJR r9rSSq9EHdKMbcw955Lt/S5F4dn9NrHektUyDWTCXlFdRQhgoRb1qPr56z8daldo 8aLMPbFOMttf+a04dF6bRJh7OOoGiEyqL2FkSLbx10Rfp4KE4kXsVYjN0570cWi1 22UMM7GG/NP9rLHeObUNm37dJipXjqn3lVyBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUBxwYrCKOiXhO1wS4jpYk8Xm4UFcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0J4d1lyQ0tPaVhoTzF3UzRqcFlrOFht NFVGYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI89LAwDQYJ KoZIhvcNAQELBQADggEBAKzioHMHZdUts2xeFMgbu3rPsPsOnpZIQI1r15/S6XBM mHRFv9UHJAwU/xV3vrTMMX79Py2lpGzzpR869jlTnu+8jEQqLlMkffA7fVBB/kCs KTKPojYnXC3Wwb6tXdsY0iQCE1218uxW++X4DCQqj9OO+j1pmi+2kIQFyUO5RQFp 0CYDWycMmIDtR/7yuMCbwzxmFxNcqNzEMo/7AR4p26Mg2mduwobw5EJdvGFhsPmw huxFsOz4MA/BSwLSjOYqhPG8zxf0udhOkmc3OpAddhnGWv64YNvSzg18PKvbDH2V ZSJV/TexYYxx4GRqMFUjTkfo8zTIKTmnTFbMcbg91FE= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:27 2024 by rpki-client on console-fra.rpki-client.org