$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/N-QWG6yDEZP9fy-pDU5bg5o36Pg.roa File: N-QWG6yDEZP9fy-pDU5bg5o36Pg.roa (raw, json) Hash identifier: rLP5rkSRAcknXoZEZBf4xZx3WFnoLKHz1F6sShLVfBc= Subject key identifier: 37:E4:16:1B:AC:83:11:93:FD:7F:2F:A9:0D:4E:5B:83:9A:37:E8:F8 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10BA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N-QWG6yDEZP9fy-pDU5bg5o36Pg.roa Signing time: Mon 26 Aug 2024 05:16:44 +0000 ROA not before: Mon 26 Aug 2024 05:16:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 203.79.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4282 (0x10ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=37E4161BAC831193FD7F2FA90D4E5B839A37E8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:8e:2c:4a:81:22:d3:99:03:4b:66:f0:90: 2c:88:1a:f5:1a:9c:90:68:21:12:80:f0:df:a5:50: fb:62:8f:7d:07:04:fe:ee:7c:69:4d:cd:9f:9a:67: e3:de:71:04:48:1e:23:41:ac:c3:45:2b:55:35:46: f1:00:1b:af:49:3b:e4:fc:7e:92:65:c7:54:27:1c: 1b:21:d6:26:a7:1d:ea:f6:ea:78:8b:05:c6:03:92: 05:63:b6:9d:91:33:b7:75:31:94:75:0b:c0:71:f7: 3a:52:42:24:cc:36:ce:90:ed:70:9d:84:e9:75:67: 1c:61:c8:a1:53:07:b9:0d:76:99:7f:56:dc:f0:8e: e6:bb:3f:dd:0d:08:ed:bc:a0:7d:57:6e:c3:83:f0: 00:cb:31:bb:91:03:c8:25:d5:a1:70:cf:1c:07:8a: e8:7e:ca:6b:6a:fd:70:f0:44:78:e4:ca:a4:5a:49: 03:b0:ec:13:94:8e:28:ef:24:40:be:46:e6:8e:8e: 15:3c:6f:ef:36:11:81:3a:93:b5:f8:9e:82:94:40: fb:fb:72:31:b7:ce:c4:50:6c:f2:44:96:b0:3c:1b: 0f:d6:aa:38:f7:28:5b:eb:f3:2c:69:9b:b6:b2:a4: b5:55:50:71:12:c8:92:c9:2a:82:b4:70:a4:7e:97: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E4:16:1B:AC:83:11:93:FD:7F:2F:A9:0D:4E:5B:83:9A:37:E8:F8 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N-QWG6yDEZP9fy-pDU5bg5o36Pg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.216.0/22 Signature Algorithm: sha256WithRSAEncryption b3:3d:f7:4b:e4:78:28:e2:bc:77:66:b7:0e:bb:47:67:c7:57: 43:35:e6:64:6b:48:c4:0c:ab:10:a6:5c:88:ee:c1:b4:26:e5: 09:cc:01:dc:60:8b:a7:09:a2:10:41:e8:7d:0d:c2:a8:93:3b: a6:53:44:cb:68:a5:9e:43:41:30:36:7a:f0:61:de:c1:e2:7e: cc:f6:03:8d:bf:4c:4d:c0:df:3f:e5:a7:12:ae:af:6e:b7:89: be:e7:fe:d7:ad:35:07:c1:28:4c:12:13:f6:4e:07:a3:60:56: 81:cc:c3:ed:ed:f7:19:82:b1:eb:79:55:6d:da:bc:5c:0a:bd: 7e:61:28:21:75:71:73:f7:68:ec:ca:d5:53:1a:35:db:29:6b: 75:7a:e5:65:5d:6a:1e:96:75:d2:ba:d3:7f:df:af:3e:27:8c: 00:45:7f:9e:19:e8:4a:97:90:9a:f4:55:ec:f0:db:c1:dd:1a: 68:2c:cb:84:2c:64:d3:d6:a6:79:62:82:0d:26:4b:21:c4:d1: 33:3c:4f:ce:7a:51:9f:37:4c:eb:37:4e:07:c5:c3:7e:fe:cc: f1:03:0f:a9:90:70:a3:f7:58:3b:56:ad:19:19:3a:6f:89:67: 8b:06:cb:ec:c9:bd:f0:30:4f:1d:7d:23:4d:9b:53:5c:ad:4a: 03:d3:fb:3a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICELowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3RTQxNjFCQUM4MzEx OTNGRDdGMkZBOTBENEU1QjgzOUEzN0U4RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqBo4sSoEi05kDS2bwkCyIGvUanJBoIRKA8N+lUPtij30HBP7u fGlNzZ+aZ+PecQRIHiNBrMNFK1U1RvEAG69JO+T8fpJlx1QnHBsh1ianHer26niL BcYDkgVjtp2RM7d1MZR1C8Bx9zpSQiTMNs6Q7XCdhOl1ZxxhyKFTB7kNdpl/Vtzw jua7P90NCO28oH1XbsOD8ADLMbuRA8gl1aFwzxwHiuh+ymtq/XDwRHjkyqRaSQOw 7BOUjijvJEC+RuaOjhU8b+82EYE6k7X4noKUQPv7cjG3zsRQbPJElrA8Gw/Wqjj3 KFvr8yxpm7aypLVVUHESyJLJKoK0cKR+lwqJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUN+QWG6yDEZP9fy+pDU5bg5o36PgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL04tUVdHNnlERVpQOWZ5LXBEVTViZzVv MzZQZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLT9gwDQYJ KoZIhvcNAQELBQADggEBALM990vkeCjivHdmtw67R2fHV0M15mRrSMQMqxCmXIju wbQm5QnMAdxgi6cJohBB6H0NwqiTO6ZTRMtopZ5DQTA2evBh3sHifsz2A42/TE3A 3z/lpxKur263ib7n/tetNQfBKEwSE/ZOB6NgVoHMw+3t9xmCset5VW3avFwKvX5h KCF1cXP3aOzK1VMaNdspa3V65WVdah6WddK603/frz4njABFf54Z6EqXkJr0Vezw 28HdGmgsy4QsZNPWpnligg0mSyHE0TM8T856UZ83TOs3TgfFw37+zPEDD6mQcKP3 WDtWrRkZOm+JZ4sGy+zJvfAwTx19I02bU1ytSgPT+zo= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:07 2024 by rpki-client on console-fra.rpki-client.org