$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/NgbpxfzkuwT7S67KMVYkslqNxRo.roa File: NgbpxfzkuwT7S67KMVYkslqNxRo.roa (raw, json) Hash identifier: X5v2ocnIBRWGG5Da1h7C7CPC3rvlsVHD93GPbvfwiZI= Subject key identifier: 36:06:E9:C5:FC:E4:BB:04:FB:4B:AE:CA:31:56:24:B2:5A:8D:C5:1A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1118 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/NgbpxfzkuwT7S67KMVYkslqNxRo.roa Signing time: Thu 17 Oct 2024 02:28:51 +0000 ROA not before: Thu 17 Oct 2024 02:28:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 60.244.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4376 (0x1118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Oct 17 02:28:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3606E9C5FCE4BB04FB4BAECA315624B25A8DC51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:e6:c6:b9:94:7f:2b:66:2e:15:43:24:31: b4:b8:05:65:44:36:17:4f:6f:bb:cc:f1:ff:ed:cc: e9:e8:df:3d:ea:fb:30:be:cf:d2:fa:5e:b5:d4:79: 53:97:b7:d7:f4:2e:52:4e:57:e5:8d:c1:8a:00:93: ca:83:97:d9:f9:c4:d8:b4:83:37:7e:74:31:42:56: ee:91:4f:9d:fe:cf:2a:42:cc:d1:83:09:03:78:ba: df:f6:e4:d4:e0:52:83:d9:31:47:2f:7c:3e:39:41: 51:da:97:61:cc:27:0f:c1:72:3d:f6:b5:bc:70:98: 20:75:f3:5d:cc:47:9b:92:c4:63:27:85:fe:df:bd: da:ad:45:89:e8:4f:74:dc:3b:3f:ad:2f:1d:7b:f8: 51:57:18:66:b2:ff:3b:a0:84:44:dd:ab:bc:12:84: 34:44:f2:19:4b:3d:ae:78:56:b3:72:37:2f:24:83: 8c:b0:7e:8e:a5:fd:41:b0:c6:8a:84:c2:c0:24:7d: 57:6a:e5:b2:01:c4:e1:0d:f7:42:64:5b:65:21:70: b3:05:76:fc:40:88:2b:7d:44:ae:fb:11:2d:4b:e7: 87:f2:13:69:11:0d:96:84:77:77:f0:b6:74:a4:1f: df:2a:00:6d:8c:0c:f0:46:0f:f1:21:ce:6e:29:ed: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:06:E9:C5:FC:E4:BB:04:FB:4B:AE:CA:31:56:24:B2:5A:8D:C5:1A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/NgbpxfzkuwT7S67KMVYkslqNxRo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.136.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:59:ac:c4:0a:a7:f2:c0:71:29:64:63:0c:c5:88:d9:f3:3b: 3d:84:d5:bb:b5:94:2a:f4:eb:d6:a7:16:dd:47:29:50:7e:cb: 58:5c:75:80:07:d2:85:3a:58:22:16:ff:24:38:f9:15:a6:21: e6:e1:2e:a7:c3:e2:28:d8:d1:82:59:5e:ee:7b:cc:25:4e:71: 09:36:03:e7:9c:ef:81:83:a1:18:c1:35:86:cf:c8:f9:2c:2e: 3d:a5:38:15:3c:19:32:47:c6:f0:0f:d0:86:90:00:6e:8a:e4: ea:ed:19:c4:18:c8:7e:df:20:bd:77:04:d1:15:dc:99:8e:9a: 8f:67:bc:a4:20:9a:46:65:1a:48:0b:f6:75:4a:5c:cf:d8:2e: 4e:ad:0a:ae:da:b5:a8:04:a0:33:68:e8:5a:94:20:1a:e7:01: dc:ab:72:4c:95:5f:46:d0:98:b6:2d:55:c0:e1:c6:78:03:d7: a6:98:5b:44:38:f7:63:f1:25:3e:61:cb:27:07:19:ed:bb:a7: cd:1c:1c:07:6e:34:76:dc:d7:52:3f:a8:60:8d:0e:3b:8a:dc: b9:a9:8d:b0:45:a4:33:46:0f:dd:8b:15:8c:90:49:f6:c1:de: 30:07:0d:4e:11:62:90:3c:cf:c8:73:88:73:3f:95:ae:9b:37: 6d:56:9c:bb -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICERgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDEwMTcw MjI4NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2MDZFOUM1RkNFNEJC MDRGQjRCQUVDQTMxNTYyNEIyNUE4REM1MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfeObGuZR/K2YuFUMkMbS4BWVENhdPb7vM8f/tzOno3z3q+zC+ z9L6XrXUeVOXt9f0LlJOV+WNwYoAk8qDl9n5xNi0gzd+dDFCVu6RT53+zypCzNGD CQN4ut/25NTgUoPZMUcvfD45QVHal2HMJw/Bcj32tbxwmCB1813MR5uSxGMnhf7f vdqtRYnoT3TcOz+tLx17+FFXGGay/zughETdq7wShDRE8hlLPa54VrNyNy8kg4yw fo6l/UGwxoqEwsAkfVdq5bIBxOEN90JkW2UhcLMFdvxAiCt9RK77ES1L54fyE2kR DZaEd3fwtnSkH98qAG2MDPBGD/Ehzm4p7YqfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUNgbpxfzkuwT7S67KMVYkslqNxRowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL05nYnB4ZnprdXdUN1M2N0tNVllrc2xx TnhSby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM89IgwDQYJ KoZIhvcNAQELBQADggEBADxZrMQKp/LAcSlkYwzFiNnzOz2E1bu1lCr069anFt1H KVB+y1hcdYAH0oU6WCIW/yQ4+RWmIebhLqfD4ijY0YJZXu57zCVOcQk2A+ec74GD oRjBNYbPyPksLj2lOBU8GTJHxvAP0IaQAG6K5OrtGcQYyH7fIL13BNEV3JmOmo9n vKQgmkZlGkgL9nVKXM/YLk6tCq7atagEoDNo6FqUIBrnAdyrckyVX0bQmLYtVcDh xngD16aYW0Q492PxJT5hyycHGe27p80cHAduNHbc11I/qGCNDjuK3LmpjbBFpDNG D92LFYyQSfbB3jAHDU4RYpA8z8hziHM/la6bN21WnLs= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:07 2024 by rpki-client on console-fra.rpki-client.org