$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/CylCSvGYoDXdm_9QxBFPwzDG5RE.roa File: CylCSvGYoDXdm_9QxBFPwzDG5RE.roa (raw, json) Hash identifier: bRBw28TFqAjT6uQurvX13jLWdzxdtGG9L0s69lXwEdY= Subject key identifier: 0B:29:42:4A:F1:98:A0:35:DD:9B:FF:50:C4:11:4F:C3:30:C6:E5:11 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10A4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/CylCSvGYoDXdm_9QxBFPwzDG5RE.roa Signing time: Mon 26 Aug 2024 05:16:38 +0000 ROA not before: Mon 26 Aug 2024 05:16:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 210.202.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4260 (0x10a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0B29424AF198A035DD9BFF50C4114FC330C6E511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:fc:cb:24:5c:6c:aa:7f:81:c0:0a:6f:2a: ef:9d:f3:f1:08:32:da:5f:5b:20:f2:53:ce:f2:3c: 4c:8b:39:e7:04:2e:63:af:39:77:03:b9:66:27:d4: 5b:6c:47:1f:5e:d4:c3:6d:8f:eb:fa:9f:7e:93:ff: 90:7d:c0:ac:f1:5a:7f:77:41:4f:79:c9:bf:50:8a: 0e:10:ac:b5:21:64:e2:7b:69:a7:f4:e2:46:1b:e6: 79:2e:6c:d7:ca:58:09:5c:44:07:00:be:cd:19:cc: 61:e4:81:4d:5e:9a:73:7d:bd:10:3b:0b:d0:21:1b: 12:7d:c5:30:b2:05:23:20:54:15:a6:4f:82:f8:bf: 37:fe:e7:3a:b3:7d:b8:97:fd:cb:94:3b:16:f2:66: 67:e7:0d:e6:19:ac:61:04:a5:58:6f:e5:a5:20:70: fe:60:48:a8:72:d0:ca:7a:3c:27:83:0c:87:08:e6: 7b:8c:71:1d:3d:9a:89:f5:68:df:60:87:6a:31:b6: 37:b6:8c:fe:9f:d2:e3:6b:89:ec:88:4b:e6:d1:e1: 97:14:24:98:ce:d4:c6:02:e9:3f:38:04:36:c2:32: a9:52:e2:fc:79:c9:fd:d1:68:e8:a3:d6:bd:99:71: 1a:e9:5a:1e:a1:8d:35:03:cb:b2:51:c8:88:a3:e0: 81:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:29:42:4A:F1:98:A0:35:DD:9B:FF:50:C4:11:4F:C3:30:C6:E5:11 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/CylCSvGYoDXdm_9QxBFPwzDG5RE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.192.0/18 Signature Algorithm: sha256WithRSAEncryption 77:ec:19:9c:3f:c7:7d:95:6e:46:4c:da:bf:55:97:63:81:ba: 37:2d:d8:91:b2:1f:07:e3:01:09:44:da:ab:a0:ca:25:5f:35: c7:a7:a1:1e:a7:62:18:b1:9c:40:81:d4:fd:f4:1e:ec:45:0b: d4:40:00:43:b8:f6:65:59:96:ef:12:71:62:91:df:5c:10:f4: 08:b6:25:49:04:2a:07:db:ad:69:b1:1f:40:35:dd:2b:6d:47: 0f:23:79:99:a8:45:34:3a:e1:92:af:dc:d4:53:2e:9e:42:b4: 44:84:7f:7f:71:4d:e1:d2:82:46:77:93:82:a2:8d:01:fd:53: f0:e0:17:ac:9d:08:ae:fe:cf:00:35:54:89:9b:34:40:ae:0a: e4:06:e3:d0:eb:81:1e:3a:1f:4c:6b:df:ed:09:c6:fe:4b:7b: 0d:68:10:25:61:9c:92:01:51:3e:f0:31:8a:2b:78:f1:5a:b7: b5:1b:1d:2c:21:36:71:9b:be:3e:22:59:62:bf:b5:8d:e1:54: d1:c1:d3:58:f0:84:1c:f4:0c:9c:58:2a:b5:c1:e9:11:7b:ca: 15:ec:75:08:04:0b:49:ad:d3:91:f2:68:21:ce:9c:ae:36:bb: ad:73:ba:4e:5c:6a:c7:86:16:54:88:f3:12:0c:75:c4:89:82: fd:36:96:cb -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCMjk0MjRBRjE5OEEw MzVERDlCRkY1MEM0MTE0RkMzMzBDNkU1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIxvzLJFxsqn+BwApvKu+d8/EIMtpfWyDyU87yPEyLOecELmOv OXcDuWYn1FtsRx9e1MNtj+v6n36T/5B9wKzxWn93QU95yb9Qig4QrLUhZOJ7aaf0 4kYb5nkubNfKWAlcRAcAvs0ZzGHkgU1emnN9vRA7C9AhGxJ9xTCyBSMgVBWmT4L4 vzf+5zqzfbiX/cuUOxbyZmfnDeYZrGEEpVhv5aUgcP5gSKhy0Mp6PCeDDIcI5nuM cR09mon1aN9gh2oxtje2jP6f0uNrieyIS+bR4ZcUJJjO1MYC6T84BDbCMqlS4vx5 yf3RaOij1r2ZcRrpWh6hjTUDy7JRyIij4IEDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUCylCSvGYoDXdm/9QxBFPwzDG5REwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0N5bENTdkdZb0RYZG1fOVF4QkZQd3pE RzVSRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSysAwDQYJ KoZIhvcNAQELBQADggEBAHfsGZw/x32VbkZM2r9Vl2OBujct2JGyHwfjAQlE2qug yiVfNcenoR6nYhixnECB1P30HuxFC9RAAEO49mVZlu8ScWKR31wQ9Ai2JUkEKgfb rWmxH0A13SttRw8jeZmoRTQ64ZKv3NRTLp5CtESEf39xTeHSgkZ3k4KijQH9U/Dg F6ydCK7+zwA1VImbNECuCuQG49DrgR46H0xr3+0Jxv5Lew1oECVhnJIBUT7wMYor ePFat7UbHSwhNnGbvj4iWWK/tY3hVNHB01jwhBz0DJxYKrXB6RF7yhXsdQgEC0mt 05HyaCHOnK42u61zuk5caseGFlSI8xIMdcSJgv02lss= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org