$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Dh8qgrLfWBSjqUVtgU03fPvfFz4.roa File: Dh8qgrLfWBSjqUVtgU03fPvfFz4.roa (raw, json) Hash identifier: tNnlzDQHMViqX53uivne4jR/i9Xdwj4xEgaTqhVs3fI= Subject key identifier: 0E:1F:2A:82:B2:DF:58:14:A3:A9:45:6D:81:4D:37:7C:FB:DF:17:3E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1114 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Dh8qgrLfWBSjqUVtgU03fPvfFz4.roa Signing time: Thu 17 Oct 2024 02:23:59 +0000 ROA not before: Thu 17 Oct 2024 02:23:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 60.244.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4372 (0x1114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Oct 17 02:23:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0E1F2A82B2DF5814A3A9456D814D377CFBDF173E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:ec:ef:ec:a6:77:05:db:9d:1c:c6:ff:fa: de:68:1e:92:10:ab:20:91:cb:26:e9:ad:f1:84:80: b5:df:d9:f9:7b:3a:d0:73:1f:e6:69:6f:0f:09:6e: 99:d3:9f:bb:eb:de:44:3f:9c:bb:89:ca:db:e6:b6: c2:b6:34:a8:cc:2c:ac:59:83:9a:cc:39:9f:39:31: 2e:0f:1d:b5:ac:45:e5:fb:f2:1c:b2:bf:05:a3:9c: a7:8f:ea:6f:2c:96:52:bc:8e:be:71:51:aa:90:52: 23:2d:4f:24:4c:6a:37:40:b8:6c:2f:b1:71:20:35: 2f:97:d1:cc:eb:2f:fb:37:23:75:1c:5e:8a:83:0e: 3c:96:e9:fa:d7:46:44:55:0e:a1:15:78:78:71:12: b3:3d:d1:d6:a4:6a:2a:ac:c6:1e:cb:55:17:9a:33: 08:35:1e:1c:ff:ae:4f:ae:b0:0b:0f:27:72:c8:41: ef:21:6f:2e:25:11:d4:b9:4c:44:ce:8e:75:55:50: a6:c3:22:d1:c9:16:f8:14:85:a7:1e:62:34:37:5e: 61:f7:d6:74:d5:c1:e5:cc:ff:57:46:69:bf:39:3f: 6d:19:16:bd:dd:06:c9:56:1f:5b:fd:e3:82:ec:1b: f7:80:1e:fd:49:7e:57:dd:36:27:26:a6:c7:59:45: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:2A:82:B2:DF:58:14:A3:A9:45:6D:81:4D:37:7C:FB:DF:17:3E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Dh8qgrLfWBSjqUVtgU03fPvfFz4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.172.0/22 Signature Algorithm: sha256WithRSAEncryption 34:a5:fb:44:22:bc:d9:b6:d7:f5:12:dc:66:61:64:b5:bc:dd: 29:a3:71:24:dd:9b:83:9a:2a:40:fb:56:c4:2b:7a:4a:9f:cb: 87:1a:6e:34:53:b4:a8:f8:68:b5:d2:f8:3f:e2:2e:c6:1f:59: 39:7d:00:ba:6a:ba:3a:50:82:65:9d:37:2a:da:0f:71:f0:79: dd:90:52:54:3a:2a:b9:59:6d:e8:c5:34:82:69:80:47:32:d6: 5e:5c:14:da:f7:e8:81:ad:a8:41:ba:6b:3b:92:ce:2f:9d:25: ae:98:c6:ba:8f:cc:af:81:6a:98:c2:20:bf:fd:d0:c9:ed:8b: b3:b1:11:05:7d:b6:69:08:f4:5f:3b:c2:a0:d2:07:b7:7c:c4: 95:d7:f2:92:b5:dd:25:fe:9e:8b:29:a0:c8:29:28:a3:41:d6: 2f:4e:8f:3a:7d:36:17:25:0b:39:19:2e:d6:7d:11:ba:e8:4e: b2:39:d0:24:34:e1:b4:1f:cf:9d:e5:97:06:53:27:9a:c8:ea: b3:1d:fb:ce:11:c2:3b:05:84:04:63:9d:91:5f:7b:5b:6a:58: ad:b7:42:65:a6:54:e1:14:1e:4a:97:84:38:1b:50:28:b9:0e: d5:09:40:4a:42:a7:cd:98:5e:d8:a5:a5:a5:4a:6c:38:74:0f: 87:dc:6a:c3 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICERQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDEwMTcw MjIzNTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBFMUYyQTgyQjJERjU4 MTRBM0E5NDU2RDgxNEQzNzdDRkJERjE3M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmcOzv7KZ3BdudHMb/+t5oHpIQqyCRyybprfGEgLXf2fl7OtBz H+Zpbw8JbpnTn7vr3kQ/nLuJytvmtsK2NKjMLKxZg5rMOZ85MS4PHbWsReX78hyy vwWjnKeP6m8sllK8jr5xUaqQUiMtTyRMajdAuGwvsXEgNS+X0czrL/s3I3UcXoqD DjyW6frXRkRVDqEVeHhxErM90dakaiqsxh7LVReaMwg1Hhz/rk+usAsPJ3LIQe8h by4lEdS5TETOjnVVUKbDItHJFvgUhaceYjQ3XmH31nTVweXM/1dGab85P20ZFr3d BslWH1v944LsG/eAHv1JflfdNicmpsdZRSXBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUDh8qgrLfWBSjqUVtgU03fPvfFz4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0RoOHFnckxmV0JTanFVVnRnVTAzZlB2 ZkZ6NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI89KwwDQYJ KoZIhvcNAQELBQADggEBADSl+0QivNm21/US3GZhZLW83SmjcSTdm4OaKkD7VsQr ekqfy4cabjRTtKj4aLXS+D/iLsYfWTl9ALpqujpQgmWdNyraD3Hwed2QUlQ6KrlZ bejFNIJpgEcy1l5cFNr36IGtqEG6azuSzi+dJa6YxrqPzK+BapjCIL/90Mnti7Ox EQV9tmkI9F87wqDSB7d8xJXX8pK13SX+nospoMgpKKNB1i9Ojzp9NhclCzkZLtZ9 EbroTrI50CQ04bQfz53llwZTJ5rI6rMd+84RwjsFhARjnZFfe1tqWK23QmWmVOEU HkqXhDgbUCi5DtUJQEpCp82YXtilpaVKbDh0D4fcasM= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org