$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/HZriAMpYjfrc8ND8TJ91ahP4CRo.roa File: HZriAMpYjfrc8ND8TJ91ahP4CRo.roa (raw, json) Hash identifier: 3eOEofhw1JdFIJts6GqxNHjnoJMHUQ8dUtfPQK1zoCA= Subject key identifier: 1D:9A:E2:00:CA:58:8D:FA:DC:F0:D0:FC:4C:9F:75:6A:13:F8:09:1A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 108F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HZriAMpYjfrc8ND8TJ91ahP4CRo.roa Signing time: Mon 26 Aug 2024 05:16:34 +0000 ROA not before: Mon 26 Aug 2024 05:16:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18412 IP address blocks: 2401:e180:8800::/44 maxlen: 44 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4239 (0x108f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1D9AE200CA588DFADCF0D0FC4C9F756A13F8091A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:c4:71:f2:35:7b:c3:cd:23:a9:c3:d9:aa: 3d:3a:80:c5:b0:e6:a8:76:45:58:7b:d9:40:59:e1: 92:0e:03:ac:e1:25:7f:f7:95:ea:c1:f3:6b:16:98: 2e:72:db:be:71:4c:dc:5c:ec:b5:2c:b8:0a:41:54: 4f:48:0a:43:45:49:8c:48:1f:ea:8c:fa:ed:9b:ae: 57:c1:35:44:fb:6a:c9:7c:28:9e:e0:de:c0:21:d8: 5a:c8:f5:a8:8b:d0:fd:a9:a9:04:93:b1:9e:72:b3: 3a:91:3d:b2:71:41:18:57:0f:f8:fa:ae:24:fa:eb: fd:78:4c:53:38:94:5d:1e:10:d4:63:ae:fb:62:6f: 86:3d:c4:f5:54:90:f2:7a:bc:aa:3c:a8:22:a4:bb: 23:bc:6c:e9:4c:d9:f6:8f:c5:24:75:20:9a:66:00: 7d:1e:b2:d5:03:ed:f7:0f:b7:3b:fb:66:5b:0f:84: 16:e9:ca:09:db:01:dc:ef:81:25:d8:eb:b7:99:01: 77:fa:1a:48:3d:1b:d7:85:3a:0a:b8:84:1c:84:fa: 29:04:e1:bf:98:91:87:21:c7:7b:6f:54:a8:b1:b3: 7e:1d:dd:75:ce:63:ad:41:52:2a:a1:a2:bc:de:0b: be:d6:05:02:99:82:8c:9a:6e:fa:d3:9b:3c:f3:96: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9A:E2:00:CA:58:8D:FA:DC:F0:D0:FC:4C:9F:75:6A:13:F8:09:1A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HZriAMpYjfrc8ND8TJ91ahP4CRo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:e180:8800::/44 Signature Algorithm: sha256WithRSAEncryption c3:30:24:00:44:05:2c:77:29:64:33:7b:a2:e9:64:66:45:32: de:c9:86:31:64:a7:f4:9c:37:8f:1d:cd:b8:e3:44:bf:9f:43: 8b:9e:10:b8:19:96:b6:83:e2:62:95:55:de:6c:42:ac:1a:42: cf:87:47:87:0d:dd:34:39:c2:f3:05:23:09:72:45:b6:ea:2f: b6:6c:4a:41:6d:1a:1c:ad:82:e2:78:4f:32:db:18:a3:51:e0: 4a:f7:32:44:49:d6:43:8a:3f:37:91:2d:00:fa:2d:46:cb:d4: b7:8a:ed:05:6d:38:75:01:15:07:d1:99:87:22:c1:e0:ed:26: b1:26:13:89:47:8f:7e:84:10:27:ef:5f:67:25:a6:0e:e3:20: ac:c2:57:92:2a:a4:29:a7:08:3a:9e:a5:ca:db:1e:7f:de:42: 2c:55:cd:97:98:db:38:b1:c1:5b:70:90:25:54:d6:24:0b:53: 9d:b8:18:f9:28:df:10:d2:82:58:68:ce:19:7f:e9:d7:b0:88: 83:d1:17:20:98:e0:43:90:7d:6e:f9:65:4f:bc:73:fb:63:3e: e3:34:76:82:c2:29:6f:52:dd:45:66:3d:11:03:39:63:35:28: 50:e0:65:dc:00:3e:3f:3b:07:c1:6e:a4:74:65:5e:b7:68:6e: 60:77:69:0a -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICEI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFEOUFFMjAwQ0E1ODhE RkFEQ0YwRDBGQzRDOUY3NTZBMTNGODA5MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkKsRx8jV7w80jqcPZqj06gMWw5qh2RVh72UBZ4ZIOA6zhJX/3 lerB82sWmC5y275xTNxc7LUsuApBVE9ICkNFSYxIH+qM+u2brlfBNUT7asl8KJ7g 3sAh2FrI9aiL0P2pqQSTsZ5yszqRPbJxQRhXD/j6riT66/14TFM4lF0eENRjrvti b4Y9xPVUkPJ6vKo8qCKkuyO8bOlM2faPxSR1IJpmAH0estUD7fcPtzv7ZlsPhBbp ygnbAdzvgSXY67eZAXf6Gkg9G9eFOgq4hByE+ikE4b+YkYchx3tvVKixs34d3XXO Y61BUiqhorzeC77WBQKZgoyabvrTmzzzlkaBAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUHZriAMpYjfrc8ND8TJ91ahP4CRowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0hacmlBTXBZamZyYzhORDhUSjkxYWhQ NENSby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAeGAiAAw DQYJKoZIhvcNAQELBQADggEBAMMwJABEBSx3KWQze6LpZGZFMt7JhjFkp/ScN48d zbjjRL+fQ4ueELgZlraD4mKVVd5sQqwaQs+HR4cN3TQ5wvMFIwlyRbbqL7ZsSkFt GhytguJ4TzLbGKNR4Er3MkRJ1kOKPzeRLQD6LUbL1LeK7QVtOHUBFQfRmYciweDt JrEmE4lHj36EECfvX2clpg7jIKzCV5IqpCmnCDqepcrbHn/eQixVzZeY2zixwVtw kCVU1iQLU524GPko3xDSglhozhl/6dewiIPRFyCY4EOQfW75ZU+8c/tjPuM0doLC KW9S3UVmPREDOWM1KFDgZdwAPj87B8FupHRlXrdobmB3aQo= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:07 2024 by rpki-client on console-fra.rpki-client.org