$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/HsplbUQa5VwGd8jQvMLQez0daeU.roa File: HsplbUQa5VwGd8jQvMLQez0daeU.roa (raw, json) Hash identifier: LFHoMTxkjpIOrl+0BVdnAwuoevRpkO58pldW/SxO24U= Subject key identifier: 1E:CA:65:6D:44:1A:E5:5C:06:77:C8:D0:BC:C2:D0:7B:3D:1D:69:E5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10CA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HsplbUQa5VwGd8jQvMLQez0daeU.roa Signing time: Mon 26 Aug 2024 05:16:47 +0000 ROA not before: Mon 26 Aug 2024 05:16:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 210.201.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4298 (0x10ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1ECA656D441AE55C0677C8D0BCC2D07B3D1D69E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ec:60:9c:af:1d:7f:08:cc:0d:7b:90:f1:95: c7:8f:55:8d:26:59:5e:3b:0a:fa:10:15:cd:d8:89: fb:50:83:a4:40:c1:e4:7f:77:be:3d:dc:9c:08:53: 2f:7c:9a:97:8b:cf:c4:65:e3:b2:ed:e9:b5:67:ed: ba:ac:b1:88:b5:3a:bb:30:d7:a9:86:66:d5:09:bb: 2b:ce:9c:81:eb:13:9e:bc:b1:ac:d1:da:14:59:2a: ee:82:0a:ed:14:cd:72:b2:d3:1a:c7:d4:d4:74:33: 78:8f:f9:32:b0:89:7f:1b:79:a1:64:21:d5:86:48: 3d:91:d4:6a:07:7f:2b:50:e1:99:90:e8:f0:35:c9: b8:c5:4b:31:a8:ba:41:b4:e9:0e:33:d5:9b:6b:ca: 37:69:9a:6e:8e:d5:da:f9:fc:66:65:32:f1:80:66: 7a:16:25:fa:83:73:72:f2:03:3f:05:48:8c:58:f7: fb:c0:e1:40:43:62:47:8d:78:32:11:c9:7a:63:77: 45:53:19:c9:bc:83:7d:9e:04:63:69:82:1b:87:db: e9:77:40:f4:ff:3a:bc:72:ef:30:a6:40:e7:48:2c: 6e:4c:70:41:c6:cb:b6:8a:3a:f0:20:57:37:cd:2e: 63:4e:e3:b5:b9:58:8c:74:27:a2:f1:6a:c5:32:cc: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CA:65:6D:44:1A:E5:5C:06:77:C8:D0:BC:C2:D0:7B:3D:1D:69:E5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HsplbUQa5VwGd8jQvMLQez0daeU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.0.0/18 Signature Algorithm: sha256WithRSAEncryption 62:5f:46:89:65:aa:ae:59:3a:44:91:7d:40:9a:b3:27:e7:51: 19:9e:a6:98:39:cf:b1:d9:1d:64:f3:30:60:3d:2d:56:39:bc: a9:b8:c1:c8:d5:b9:82:e1:97:ac:c2:20:ec:45:73:75:48:e4: 91:b0:a0:cb:ab:9e:2d:06:2b:fb:12:eb:64:5f:72:4c:90:66: be:4c:78:f4:0b:27:4c:96:b0:9f:6f:31:99:ef:d8:c5:ae:71: 39:b5:5e:d6:91:32:e5:4e:a8:e5:dc:01:13:7e:dc:20:cf:b7: ef:65:df:00:20:94:16:03:f7:c3:c8:7a:f1:cf:e2:7c:a5:f7: 61:17:d8:61:a5:3a:84:92:21:42:c3:4f:46:a8:97:60:92:6c: 90:5c:75:3f:06:60:64:64:22:53:f6:2a:85:b5:bd:76:4c:1c: 05:2e:2e:38:87:61:56:fe:f2:0e:34:dd:a6:81:b2:c9:3e:c8: 04:6a:f5:85:fe:e6:6c:29:73:13:a0:65:2c:18:69:0f:65:00: db:28:fb:e3:d4:73:40:26:b1:00:85:a5:a7:87:6c:32:af:d2: 45:0c:4e:ba:44:e8:a4:f2:fb:21:7f:53:6c:5b:1a:04:7f:a7: 18:8a:e7:fc:6f:dc:66:56:31:c6:6a:c7:5d:a5:f0:70:4a:4c: 77:90:a7:c0 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFFQ0E2NTZENDQxQUU1 NUMwNjc3QzhEMEJDQzJEMDdCM0QxRDY5RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDr7GCcrx1/CMwNe5DxlcePVY0mWV47CvoQFc3YiftQg6RAweR/ d7493JwIUy98mpeLz8Rl47Lt6bVn7bqssYi1Orsw16mGZtUJuyvOnIHrE568sazR 2hRZKu6CCu0UzXKy0xrH1NR0M3iP+TKwiX8beaFkIdWGSD2R1GoHfytQ4ZmQ6PA1 ybjFSzGoukG06Q4z1Ztryjdpmm6O1dr5/GZlMvGAZnoWJfqDc3LyAz8FSIxY9/vA 4UBDYkeNeDIRyXpjd0VTGcm8g32eBGNpghuH2+l3QPT/Orxy7zCmQOdILG5McEHG y7aKOvAgVzfNLmNO47W5WIx0J6LxasUyzAsXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUHsplbUQa5VwGd8jQvMLQez0daeUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0hzcGxiVVFhNVZ3R2Q4alF2TUxRZXow ZGFlVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyQAwDQYJ KoZIhvcNAQELBQADggEBAGJfRollqq5ZOkSRfUCasyfnURmeppg5z7HZHWTzMGA9 LVY5vKm4wcjVuYLhl6zCIOxFc3VI5JGwoMurni0GK/sS62RfckyQZr5MePQLJ0yW sJ9vMZnv2MWucTm1XtaRMuVOqOXcARN+3CDPt+9l3wAglBYD98PIevHP4nyl92EX 2GGlOoSSIULDT0aol2CSbJBcdT8GYGRkIlP2KoW1vXZMHAUuLjiHYVb+8g403aaB ssk+yARq9YX+5mwpcxOgZSwYaQ9lANso++PUc0AmsQCFpaeHbDKv0kUMTrpE6KTy +yF/U2xbGgR/pxiK5/xv3GZWMcZqx12l8HBKTHeQp8A= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org