$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/FuyE0lwv0urOqcLeFIkVTPkUmM4.roa File: FuyE0lwv0urOqcLeFIkVTPkUmM4.roa (raw, json) Hash identifier: MJjRi8n9xx5WlJCWkcmCC+wZQ4pvO+RMTc5WsNgglPc= Subject key identifier: 16:EC:84:D2:5C:2F:D2:EA:CE:A9:C2:DE:14:89:15:4C:F9:14:98:CE Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1067 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FuyE0lwv0urOqcLeFIkVTPkUmM4.roa Signing time: Mon 26 Aug 2024 05:16:22 +0000 ROA not before: Mon 26 Aug 2024 05:16:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 222.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4199 (0x1067) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=16EC84D25C2FD2EACEA9C2DE1489154CF91498CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:35:2d:43:b0:ac:a0:1a:67:ef:c6:b5:29: ba:2e:96:7b:0b:56:6c:73:1f:00:6d:c6:d7:1f:06: 77:89:4b:e4:0e:ab:05:9a:7c:8e:3f:16:49:45:7b: 17:0c:17:86:90:23:c3:84:65:db:35:09:3b:42:b3: 57:24:4c:38:3b:89:74:23:df:77:c7:2c:2d:8f:f5: df:3f:81:15:24:51:e4:80:39:f1:cf:35:14:b1:d3: 6f:72:d8:b6:be:e6:72:90:d7:05:24:b0:9d:19:06: 3f:c2:eb:ab:1b:90:b4:94:c1:9e:7e:5c:c5:69:d4: ca:17:b6:bd:cc:c9:d9:94:ff:5c:4f:59:d4:ab:34: a8:d6:26:fa:4d:eb:7e:4b:fc:6e:56:73:e5:08:85: 1c:c9:81:06:82:46:10:02:21:29:62:d3:c0:e5:43: 54:56:eb:f5:c8:72:5b:aa:e4:82:8d:bb:01:ef:e9: 66:a3:e5:da:7d:4d:dc:e1:25:c9:79:ed:fa:94:15: a0:6c:aa:f3:fc:92:f6:e7:f3:3c:01:62:37:4e:c7: 71:f5:bd:08:3d:a5:ce:fe:a1:82:eb:b3:fd:e6:8f: e2:d6:9b:60:1b:5f:59:d6:09:60:ae:f4:6c:91:b7: 20:42:86:49:96:94:7d:ce:ce:bc:54:5c:df:98:34: 64:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EC:84:D2:5C:2F:D2:EA:CE:A9:C2:DE:14:89:15:4C:F9:14:98:CE X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FuyE0lwv0urOqcLeFIkVTPkUmM4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.157.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:5f:b2:50:1e:b4:e0:76:a7:f4:d4:91:3e:cb:2a:70:44:56: a8:14:84:66:5f:46:a9:f3:c6:6f:af:68:ef:02:39:9d:85:5a: 0c:96:16:f9:31:8f:0f:71:3d:df:98:6a:3a:58:f0:dc:ac:03: cc:36:9e:53:ba:7f:8c:48:41:b9:a5:62:b2:c4:e9:22:2c:0a: fb:80:46:a8:49:22:6f:5b:b7:cb:9b:49:f9:d6:59:db:25:93: 56:97:00:4c:e1:d1:8b:95:c5:23:e0:c1:dc:91:50:e4:3f:f2: c3:25:ae:f7:70:d1:84:97:4a:0a:36:08:f6:23:53:30:73:46: bb:08:54:eb:07:f2:bb:34:86:64:a5:3c:df:0b:b2:fa:83:74: 4a:c5:c1:e2:d1:b8:e6:d8:2d:51:65:61:d2:cc:b8:12:d1:d1: 9e:62:d0:ce:5c:83:0b:49:48:75:b8:92:1e:68:39:3b:dd:6a: 34:48:d6:da:e8:af:31:e6:12:1b:58:8a:cd:7e:ae:2b:70:e5: 8a:48:a2:f5:93:ad:7e:01:7e:58:ab:8a:8b:6d:7b:80:37:26: e2:1c:3a:b0:27:e1:2d:b4:e1:cb:8d:43:6a:d7:a3:b3:58:1f: 9d:8b:e9:8d:07:e6:aa:9c:49:04:a9:d5:8d:41:c9:b2:e3:ab: 30:9f:16:a7 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEGcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2RUM4NEQyNUMyRkQy RUFDRUE5QzJERTE0ODkxNTRDRjkxNDk4Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGGDUtQ7CsoBpn78a1KboulnsLVmxzHwBtxtcfBneJS+QOqwWa fI4/FklFexcMF4aQI8OEZds1CTtCs1ckTDg7iXQj33fHLC2P9d8/gRUkUeSAOfHP NRSx029y2La+5nKQ1wUksJ0ZBj/C66sbkLSUwZ5+XMVp1MoXtr3MydmU/1xPWdSr NKjWJvpN635L/G5Wc+UIhRzJgQaCRhACISli08DlQ1RW6/XIcluq5IKNuwHv6Waj 5dp9TdzhJcl57fqUFaBsqvP8kvbn8zwBYjdOx3H1vQg9pc7+oYLrs/3mj+LWm2Ab X1nWCWCu9GyRtyBChkmWlH3OzrxUXN+YNGTxAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUFuyE0lwv0urOqcLeFIkVTPkUmM4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0Z1eUUwbHd2MHVyT3FjTGVGSWtWVFBr VW1NNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDenTANBgkq hkiG9w0BAQsFAAOCAQEAVF+yUB604Han9NSRPssqcERWqBSEZl9GqfPGb69o7wI5 nYVaDJYW+TGPD3E935hqOljw3KwDzDaeU7p/jEhBuaVissTpIiwK+4BGqEkib1u3 y5tJ+dZZ2yWTVpcATOHRi5XFI+DB3JFQ5D/ywyWu93DRhJdKCjYI9iNTMHNGuwhU 6wfyuzSGZKU83wuy+oN0SsXB4tG45tgtUWVh0sy4EtHRnmLQzlyDC0lIdbiSHmg5 O91qNEjW2uivMeYSG1iKzX6uK3Dlikii9ZOtfgF+WKuKi217gDcm4hw6sCfhLbTh y41Datejs1gfnYvpjQfmqpxJBKnVjUHJsuOrMJ8Wpw== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:04 2024 by rpki-client on console-ams.rpki-client.org