$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/MN3JbcKVFIJ4W-WoxGGSEItz-fw.roa File: MN3JbcKVFIJ4W-WoxGGSEItz-fw.roa (raw, json) Hash identifier: 6q+hMsOBUK32lDxGdZfEH//7VWOZNRwhVeNTSQC5K+Y= Subject key identifier: 30:DD:C9:6D:C2:95:14:82:78:5B:E5:A8:C4:61:92:10:8B:73:F9:FC Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1090 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/MN3JbcKVFIJ4W-WoxGGSEItz-fw.roa Signing time: Mon 26 Aug 2024 05:16:34 +0000 ROA not before: Mon 26 Aug 2024 05:16:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 39.12.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4240 (0x1090) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=30DDC96DC2951482785BE5A8C46192108B73F9FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:32:7e:fe:f0:ca:0b:eb:06:c8:b8:27:b4: a2:79:87:e9:72:b5:f9:b4:ee:fe:9b:fd:d6:40:17: 18:42:8b:44:04:3d:0f:57:cf:a7:76:be:ae:68:ac: f0:0b:39:16:fd:b4:11:95:af:e9:24:a4:97:b9:da: b9:66:d0:a6:44:a0:29:8c:58:7f:bd:00:8d:99:28: 7c:ec:f2:dc:95:0a:f4:48:12:b4:fb:ab:c7:08:16: 55:99:13:8e:bb:dd:06:9c:c6:b8:0a:b7:3b:dd:98: b7:f2:4c:8f:cf:df:ab:9c:c4:02:a5:1c:c5:27:f8: 45:f8:74:27:cb:47:34:b0:c0:28:25:aa:3c:77:93: 44:9e:80:30:9a:cf:6f:a1:43:d0:3f:45:55:08:40: 22:64:1f:fe:eb:15:6f:e2:bb:30:89:d9:1f:47:cf: 92:71:f5:44:92:77:a9:d5:a4:f3:a0:e1:55:70:24: 21:6b:ce:eb:b4:75:cf:aa:da:a7:38:f0:16:dc:3f: 0d:e7:3b:6c:02:f5:46:f9:67:38:df:ba:c0:cf:23: 65:93:f3:1e:0f:60:a3:92:26:49:d7:3e:84:9d:5a: 46:b3:a7:e6:c1:90:e7:1f:8c:25:0d:97:04:b2:9f: aa:ca:50:0b:97:cd:43:88:b8:a6:35:2c:6b:3f:fe: 35:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DD:C9:6D:C2:95:14:82:78:5B:E5:A8:C4:61:92:10:8B:73:F9:FC X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/MN3JbcKVFIJ4W-WoxGGSEItz-fw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.12.0.0/14 Signature Algorithm: sha256WithRSAEncryption 62:64:ea:1d:a2:bd:fb:44:52:38:cf:a5:f8:89:02:42:e3:ab: 5d:85:54:53:c1:6b:e4:b3:ec:ca:06:c5:eb:05:b1:f9:fa:70: 1f:71:c1:85:bb:7e:5c:0c:ed:ce:32:59:dc:7a:00:ea:95:7b: e3:a0:7b:7f:a6:48:84:40:87:de:f9:d9:f9:33:3e:a7:e8:d5: 2d:5d:5e:00:84:53:4c:06:3e:0b:de:9b:22:f9:9d:06:2f:27: 77:ae:35:72:55:4b:75:83:45:9e:fc:95:52:2f:36:1b:8b:ec: e2:05:da:62:af:cc:0b:83:c6:7f:52:1a:dd:98:16:18:b1:2e: 6b:f8:74:d6:66:6a:38:3d:33:b2:2a:c1:77:bf:b4:c0:77:be: e5:94:69:88:38:6d:ee:25:d4:f8:8f:9c:79:5c:f6:e8:a9:ac: 9e:50:25:06:13:c0:c5:c8:9c:c7:0a:7a:a1:b6:24:81:98:a3: dc:2b:da:82:37:32:13:f7:9b:6e:72:e8:95:1d:b3:58:28:3a: 4b:fa:e7:a3:b9:5d:1c:72:e2:3d:0e:8a:86:89:f8:83:48:c3: 06:88:2a:24:6d:ff:50:ad:d6:80:91:1f:53:c6:80:0f:97:6e: e9:c3:58:64:72:51:a0:8b:ae:6e:bb:3f:22:68:e1:01:8a:d2: 2f:6f:d7:28 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMwRERDOTZEQzI5NTE0 ODI3ODVCRTVBOEM0NjE5MjEwOEI3M0Y5RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLBzJ+/vDKC+sGyLgntKJ5h+lytfm07v6b/dZAFxhCi0QEPQ9X z6d2vq5orPALORb9tBGVr+kkpJe52rlm0KZEoCmMWH+9AI2ZKHzs8tyVCvRIErT7 q8cIFlWZE4673QacxrgKtzvdmLfyTI/P36ucxAKlHMUn+EX4dCfLRzSwwCglqjx3 k0SegDCaz2+hQ9A/RVUIQCJkH/7rFW/iuzCJ2R9Hz5Jx9USSd6nVpPOg4VVwJCFr zuu0dc+q2qc48BbcPw3nO2wC9Ub5ZzjfusDPI2WT8x4PYKOSJknXPoSdWkazp+bB kOcfjCUNlwSyn6rKUAuXzUOIuKY1LGs//jXNAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUMN3JbcKVFIJ4W+WoxGGSEItz+fwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL01OM0piY0tWRklKNFctV294R0dTRUl0 ei1mdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwInDDANBgkq hkiG9w0BAQsFAAOCAQEAYmTqHaK9+0RSOM+l+IkCQuOrXYVUU8Fr5LPsygbF6wWx +fpwH3HBhbt+XAztzjJZ3HoA6pV746B7f6ZIhECH3vnZ+TM+p+jVLV1eAIRTTAY+ C96bIvmdBi8nd641clVLdYNFnvyVUi82G4vs4gXaYq/MC4PGf1Ia3ZgWGLEua/h0 1mZqOD0zsirBd7+0wHe+5ZRpiDht7iXU+I+ceVz26KmsnlAlBhPAxcicxwp6obYk gZij3CvagjcyE/ebbnLolR2zWCg6S/rno7ldHHLiPQ6Khon4g0jDBogqJG3/UK3W gJEfU8aAD5du6cNYZHJRoIuubrs/ImjhAYrSL2/XKA== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:04 2024 by rpki-client on console-ams.rpki-client.org