$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/DAOVd3ybq972VFIXd3mBUeRJwt4.roa File: DAOVd3ybq972VFIXd3mBUeRJwt4.roa (raw, json) Hash identifier: NsM/z6eB65qcj5twqsZDUidrDKVmj6cIk5hLT6C++oc= Subject key identifier: 0C:03:95:77:7C:9B:AB:DE:F6:54:52:17:77:79:81:51:E4:49:C2:DE Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1092 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DAOVd3ybq972VFIXd3mBUeRJwt4.roa Signing time: Mon 26 Aug 2024 05:16:34 +0000 ROA not before: Mon 26 Aug 2024 05:16:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 218.34.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4242 (0x1092) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0C0395777C9BABDEF654521777798151E449C2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:2a:71:ec:01:39:a3:c3:25:a8:f4:93:6d: 81:1d:22:6b:52:55:26:52:b5:ea:fa:d8:69:19:db: c1:60:6e:6b:eb:ca:dd:aa:94:27:01:8e:0d:75:c7: 54:ba:b0:4a:39:86:45:9a:15:ad:19:60:02:00:3b: 86:91:3a:57:0f:b9:d5:0b:d6:47:04:25:32:ad:21: 24:fa:13:e1:19:54:32:9c:27:19:d8:ef:6b:f0:28: cd:2a:2d:c9:d8:cf:cb:92:d1:92:0c:8d:f3:03:73: d0:3d:e7:8a:0c:1d:5d:62:aa:36:c1:fc:b7:d8:6c: 12:11:f5:ec:41:0a:aa:ad:97:d9:a5:95:b9:2c:95: b7:ad:31:52:5d:90:a5:91:ab:56:9e:10:26:17:be: 5d:fc:ac:3b:b8:5f:c6:55:6b:44:38:d9:66:12:3b: 13:ed:1e:a7:ec:07:2d:82:af:12:67:ee:26:68:29: a7:c7:18:8f:49:ce:f1:8b:20:06:c7:42:91:0b:a7: b8:91:1f:eb:de:f6:78:ae:ef:fd:71:e2:17:21:31: 86:b9:69:4d:e9:d1:fb:5a:b5:0a:b7:3f:0d:be:da: 9a:1b:f2:2b:c2:fe:70:dc:a7:96:08:2c:ca:a8:c1: 44:83:04:8b:52:c4:e0:c9:11:55:fd:71:8f:0f:29: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:95:77:7C:9B:AB:DE:F6:54:52:17:77:79:81:51:E4:49:C2:DE X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DAOVd3ybq972VFIXd3mBUeRJwt4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.0.0/16 Signature Algorithm: sha256WithRSAEncryption 74:47:e3:31:4f:3d:7d:4b:1f:39:da:09:54:b2:08:64:16:b3: e2:7b:7b:25:bf:bc:98:7a:15:28:14:df:f9:54:cb:4a:15:6f: 0b:8d:af:b2:50:0c:15:54:65:22:f5:1e:23:e9:de:7d:2e:33: f8:79:77:21:d2:7c:ac:60:4f:f0:4d:bd:69:a8:ae:2d:16:b6: 72:c6:6d:35:89:0d:38:2e:e2:13:58:e4:bd:07:9d:64:e1:d3: 06:08:34:c5:24:08:f0:b9:98:a7:b7:92:7a:6f:7c:d9:85:ba: 19:02:06:a0:48:d7:1d:80:dc:05:6e:3b:89:c7:f5:0c:e8:00: 02:26:2d:56:3f:64:20:bb:3d:eb:15:3e:c3:05:a5:e3:bc:7c: d2:34:7d:30:d5:f4:6e:f2:95:4d:70:b9:ad:89:9e:c4:d8:ce: ad:0f:4f:a7:1d:08:18:78:1a:c6:2c:6a:c1:4c:0a:6e:4c:a6: 99:61:9d:6a:68:da:6f:2b:dd:73:8f:d7:c5:e2:89:e5:5e:43: 59:c8:ae:5d:2a:a8:51:d4:bd:56:2c:da:92:13:a2:4f:c5:03: fb:92:e2:1d:82:81:02:fa:ca:30:2b:ec:ad:7b:bf:15:2b:81: 00:00:9e:5f:90:5d:be:fa:32:26:b9:c9:c4:39:a6:4b:a6:aa: 4c:40:8d:d2 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBDMDM5NTc3N0M5QkFC REVGNjU0NTIxNzc3Nzk4MTUxRTQ0OUMyREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEhCpx7AE5o8MlqPSTbYEdImtSVSZSter62GkZ28Fgbmvryt2q lCcBjg11x1S6sEo5hkWaFa0ZYAIAO4aROlcPudUL1kcEJTKtIST6E+EZVDKcJxnY 72vwKM0qLcnYz8uS0ZIMjfMDc9A954oMHV1iqjbB/LfYbBIR9exBCqqtl9mllbks lbetMVJdkKWRq1aeECYXvl38rDu4X8ZVa0Q42WYSOxPtHqfsBy2CrxJn7iZoKafH GI9JzvGLIAbHQpELp7iRH+ve9niu7/1x4hchMYa5aU3p0ftatQq3Pw2+2pob8ivC /nDcp5YILMqowUSDBItSxODJEVX9cY8PKSxXAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUDAOVd3ybq972VFIXd3mBUeRJwt4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0RBT1ZkM3licTk3MlZGSVhkM21CVWVS Snd0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDaIjANBgkq hkiG9w0BAQsFAAOCAQEAdEfjMU89fUsfOdoJVLIIZBaz4nt7Jb+8mHoVKBTf+VTL ShVvC42vslAMFVRlIvUeI+nefS4z+Hl3IdJ8rGBP8E29aaiuLRa2csZtNYkNOC7i E1jkvQedZOHTBgg0xSQI8LmYp7eSem982YW6GQIGoEjXHYDcBW47icf1DOgAAiYt Vj9kILs96xU+wwWl47x80jR9MNX0bvKVTXC5rYmexNjOrQ9Ppx0IGHgaxixqwUwK bkymmWGdamjabyvdc4/XxeKJ5V5DWciuXSqoUdS9VizakhOiT8UD+5LiHYKBAvrK MCvsrXu/FSuBAACeX5BdvvoyJrnJxDmmS6aqTECN0g== -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:07 2024 by rpki-client on console-fra.rpki-client.org