$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/CvnwsPTHM4RMksBgwRSarf1H3zM.roa File: CvnwsPTHM4RMksBgwRSarf1H3zM.roa (raw, json) Hash identifier: Q7zx8ETg7dCxs0ACiIsmjUvjlvhyyFh+C5u4KKRU6vw= Subject key identifier: 0A:F9:F0:B0:F4:C7:33:84:4C:92:C0:60:C1:14:9A:AD:FD:47:DF:33 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1027 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/CvnwsPTHM4RMksBgwRSarf1H3zM.roa Signing time: Mon 26 Aug 2024 05:16:08 +0000 ROA not before: Mon 26 Aug 2024 05:16:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24154 IP address blocks: 211.76.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4135 (0x1027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0AF9F0B0F4C733844C92C060C1149AADFD47DF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:76:25:d5:81:42:e1:95:e0:2e:23:05:15: 23:d0:42:4b:53:e6:0a:a3:30:bf:e5:c0:d3:ed:e3: a3:5c:db:18:4b:91:00:af:10:a9:ee:73:67:a4:c6: 87:ca:95:b7:5d:ac:1a:58:0c:5a:99:80:e0:65:48: 84:2c:64:24:53:67:49:9b:2c:fc:c1:4a:53:92:1e: e2:c7:31:e8:d0:ed:85:46:6d:b0:01:b3:c9:f0:b5: 03:4f:11:4e:e4:f3:7e:e7:6a:23:f5:b7:07:41:de: 1a:72:14:57:1e:21:ae:b5:18:3f:ee:8e:f5:3d:94: ed:14:4d:4d:3a:4a:9c:dc:2b:a7:bd:d1:18:d1:c0: 6d:f9:f5:62:a4:3c:e1:95:25:e7:99:f0:a6:a1:4d: bd:2d:6c:21:23:6b:b0:65:97:70:3e:4c:e4:6b:d4: 20:83:c8:11:0e:49:2f:0b:76:f2:47:2d:90:d8:84: 35:5f:6e:f1:55:a9:52:8a:54:5a:49:7f:7b:bb:b6: ed:a6:26:90:a0:d8:e5:b7:7c:2a:11:e1:57:13:8f: d1:28:34:b9:a1:af:1e:d4:5e:81:51:b5:cb:ee:86: d2:1f:4a:6c:c6:ae:11:9c:db:b7:96:7f:5a:93:94: 8b:14:41:80:30:86:32:c5:88:5a:8b:5c:38:1f:bc: 26:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F9:F0:B0:F4:C7:33:84:4C:92:C0:60:C1:14:9A:AD:FD:47:DF:33 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/CvnwsPTHM4RMksBgwRSarf1H3zM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.106.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:5a:b3:84:c9:b7:9f:60:a3:1d:85:64:86:ec:00:6f:6a:68: 8d:c9:c3:eb:e6:1c:84:1a:23:40:c7:eb:1b:a3:92:7d:97:a8: 70:37:69:ac:f7:c7:0b:30:9e:0a:3b:d0:08:d9:fc:a4:c7:6c: c1:73:93:55:41:a0:04:f7:d0:f2:5c:ff:2a:3d:05:8d:66:95: a1:0c:16:68:e1:d9:d3:b4:de:90:8d:70:4f:c3:b5:f8:08:f8: 7a:a0:c1:e4:6a:91:ef:d0:3e:af:3a:96:62:ec:91:11:b1:5b: 92:7c:c3:43:78:8b:2e:08:2e:7b:4e:89:e2:d8:42:0f:dc:46: da:9a:e4:60:1d:eb:75:4c:9f:06:43:1f:2b:05:72:42:e3:31: c5:e3:52:cb:71:d0:f7:79:26:68:a3:4c:67:e9:ee:4f:3a:d0: 1c:a4:e7:91:4e:04:1e:20:9d:aa:e7:4d:a6:df:4a:ed:71:48: b8:a3:74:5c:00:7b:61:7f:75:cc:47:96:6c:22:6a:65:47:e4: 94:13:58:6a:55:0b:3c:9b:25:b8:8e:28:06:fd:80:05:64:2e: 0c:55:4f:84:92:64:d1:aa:c7:99:da:dc:c4:bb:2c:99:43:5a: 44:f6:bd:29:00:42:13:d4:cf:32:a4:2d:29:a1:98:e8:9d:8b: f6:85:53:f1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICECcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBBRjlGMEIwRjRDNzMz ODQ0QzkyQzA2MEMxMTQ5QUFERkQ0N0RGMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWiXYl1YFC4ZXgLiMFFSPQQktT5gqjML/lwNPt46Nc2xhLkQCv EKnuc2ekxofKlbddrBpYDFqZgOBlSIQsZCRTZ0mbLPzBSlOSHuLHMejQ7YVGbbAB s8nwtQNPEU7k837naiP1twdB3hpyFFceIa61GD/ujvU9lO0UTU06SpzcK6e90RjR wG359WKkPOGVJeeZ8KahTb0tbCEja7Bll3A+TORr1CCDyBEOSS8LdvJHLZDYhDVf bvFVqVKKVFpJf3u7tu2mJpCg2OW3fCoR4VcTj9EoNLmhrx7UXoFRtcvuhtIfSmzG rhGc27eWf1qTlIsUQYAwhjLFiFqLXDgfvCaFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUCvnwsPTHM4RMksBgwRSarf1H3zMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0N2bndzUFRITTRSTWtzQmd3UlNhcmYx SDN6TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTTGowDQYJ KoZIhvcNAQELBQADggEBAJxas4TJt59gox2FZIbsAG9qaI3Jw+vmHIQaI0DH6xuj kn2XqHA3aaz3xwswngo70AjZ/KTHbMFzk1VBoAT30PJc/yo9BY1mlaEMFmjh2dO0 3pCNcE/DtfgI+HqgweRqke/QPq86lmLskRGxW5J8w0N4iy4ILntOieLYQg/cRtqa 5GAd63VMnwZDHysFckLjMcXjUstx0Pd5JmijTGfp7k860Byk55FOBB4gnarnTabf Su1xSLijdFwAe2F/dcxHlmwiamVH5JQTWGpVCzybJbiOKAb9gAVkLgxVT4SSZNGq x5na3MS7LJlDWkT2vSkAQhPUzzKkLSmhmOidi/aFU/E= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org