$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Ic1rlHTJdHAY-sjBa7ZgkQPy1PA.roa File: Ic1rlHTJdHAY-sjBa7ZgkQPy1PA.roa (raw, json) Hash identifier: PP4sbK6MBnERJxo1sscuc9/96SxZp5GT9c3pT9w5vnU= Subject key identifier: 21:CD:6B:94:74:C9:74:70:18:FA:C8:C1:6B:B6:60:91:03:F2:D4:F0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 105A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ic1rlHTJdHAY-sjBa7ZgkQPy1PA.roa Signing time: Mon 26 Aug 2024 05:16:20 +0000 ROA not before: Mon 26 Aug 2024 05:16:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131597 IP address blocks: 218.35.64.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4186 (0x105a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=21CD6B9474C9747018FAC8C16BB6609103F2D4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:a6:a1:31:f2:86:db:f1:49:6d:9a:e6:a9: c5:6d:53:1d:0a:f9:9a:15:0d:d2:9b:9e:2c:e4:23: ca:0e:4e:c8:7f:74:5d:8c:53:0a:0d:12:d7:31:f6: ba:2b:be:7c:07:3e:e7:3a:d4:4c:9d:5e:10:6f:1a: f6:2a:d7:0b:bb:3d:0c:23:24:98:d4:04:ee:04:5b: bf:43:86:0f:a3:15:70:61:58:a3:d6:5a:c9:79:af: 6b:73:c7:62:73:37:d5:32:b1:6e:7a:7f:7c:96:9d: 50:4f:b8:31:4b:27:47:08:49:2b:81:50:af:14:0d: ec:95:d9:19:16:4b:8f:ea:5c:bb:2c:57:d5:27:c2: 5c:6a:d0:0d:4b:08:fe:dd:34:62:d7:f6:c6:cb:d1: 9e:8e:fd:33:b7:4e:e9:72:99:58:4d:7b:05:aa:66: da:6d:d0:69:5b:9e:c7:2b:2a:8c:98:7d:b3:45:27: 3e:96:76:ee:85:0b:ef:f9:69:7a:7a:4e:37:a0:0c: cc:de:52:e6:3a:c8:3d:1e:eb:86:7e:87:25:24:c0: f8:63:43:31:f2:b5:d2:85:66:b0:5f:ea:11:fd:6f: 87:d5:49:57:ba:8a:31:e7:3a:b9:80:e2:72:3e:42: 72:63:b2:d6:36:17:cd:53:ec:74:85:dc:ad:24:99: 72:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CD:6B:94:74:C9:74:70:18:FA:C8:C1:6B:B6:60:91:03:F2:D4:F0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ic1rlHTJdHAY-sjBa7ZgkQPy1PA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.64.0/19 Signature Algorithm: sha256WithRSAEncryption 99:36:61:69:1f:42:50:56:6e:0e:54:ee:44:55:e2:d5:94:4d: 76:03:2e:7b:83:e9:f5:64:60:8e:f7:0f:9a:c5:7c:cb:83:77: 77:63:f1:72:c4:c0:4d:83:e2:41:05:22:fb:1c:37:e0:fb:75: 74:52:93:07:02:da:f6:5e:89:8f:15:c4:a8:47:00:d0:4a:85: 78:f7:9f:27:b4:f8:b8:d6:d5:54:3a:c8:15:f2:bb:b0:31:86: 84:f1:26:d6:6f:4e:0f:6a:02:bd:5b:a2:73:e7:fd:17:e2:01: ab:ec:c1:1f:56:c4:72:3e:68:1a:6a:7e:9b:45:6f:36:1f:4a: 15:26:ff:fe:25:ff:27:5c:e0:00:bf:69:e6:22:af:d7:9b:69: b0:d1:74:e2:38:38:a1:cb:c0:53:06:4e:10:05:6e:06:c8:fd: 0b:19:39:84:82:15:b3:a5:2c:82:a7:66:d0:6a:24:e4:74:98: 15:77:9c:3a:a1:8c:a1:5b:73:24:22:e8:36:14:05:d3:dc:7b: 5a:56:8a:ff:4a:ff:3c:c4:e5:02:3d:62:ea:6d:00:b3:dc:0e: 21:09:22:1c:d0:3a:35:89:88:f5:cc:b0:ea:4d:df:e2:e6:e8: 35:5a:50:2a:f6:1b:f3:89:21:95:43:62:eb:e9:be:25:48:a6: 5b:7b:b7:3a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIxQ0Q2Qjk0NzRDOTc0 NzAxOEZBQzhDMTZCQjY2MDkxMDNGMkQ0RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/5aahMfKG2/FJbZrmqcVtUx0K+ZoVDdKbnizkI8oOTsh/dF2M UwoNEtcx9rorvnwHPuc61EydXhBvGvYq1wu7PQwjJJjUBO4EW79Dhg+jFXBhWKPW Wsl5r2tzx2JzN9UysW56f3yWnVBPuDFLJ0cISSuBUK8UDeyV2RkWS4/qXLssV9Un wlxq0A1LCP7dNGLX9sbL0Z6O/TO3TulymVhNewWqZtpt0GlbnscrKoyYfbNFJz6W du6FC+/5aXp6TjegDMzeUuY6yD0e64Z+hyUkwPhjQzHytdKFZrBf6hH9b4fVSVe6 ijHnOrmA4nI+QnJjstY2F81T7HSF3K0kmXILAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUIc1rlHTJdHAY+sjBa7ZgkQPy1PAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0ljMXJsSFRKZEhBWS1zakJhN1pna1FQ eTFQQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaI0AwDQYJ KoZIhvcNAQELBQADggEBAJk2YWkfQlBWbg5U7kRV4tWUTXYDLnuD6fVkYI73D5rF fMuDd3dj8XLEwE2D4kEFIvscN+D7dXRSkwcC2vZeiY8VxKhHANBKhXj3nye0+LjW 1VQ6yBXyu7AxhoTxJtZvTg9qAr1bonPn/RfiAavswR9WxHI+aBpqfptFbzYfShUm //4l/ydc4AC/aeYir9ebabDRdOI4OKHLwFMGThAFbgbI/QsZOYSCFbOlLIKnZtBq JOR0mBV3nDqhjKFbcyQi6DYUBdPce1pWiv9K/zzE5QI9YuptALPcDiEJIhzQOjWJ iPXMsOpN3+Lm6DVaUCr2G/OJIZVDYuvpviVIplt7tzo= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org