$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/OQgLs0LIyOKnCybMFSkzW09agXY.roa File: OQgLs0LIyOKnCybMFSkzW09agXY.roa (raw, json) Hash identifier: 7pi14PHfgGITzzwDvjjiEPVp69PFC+RslEJGNzXfV50= Subject key identifier: 39:08:0B:B3:42:C8:C8:E2:A7:0B:26:CC:15:29:33:5B:4F:5A:81:76 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1051 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OQgLs0LIyOKnCybMFSkzW09agXY.roa Signing time: Mon 26 Aug 2024 05:16:18 +0000 ROA not before: Mon 26 Aug 2024 05:16:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 218.34.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4177 (0x1051) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39080BB342C8C8E2A70B26CC1529335B4F5A8176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:61:66:d7:d9:e1:7f:7e:f9:f3:60:c6:82: c8:f0:5f:19:25:5a:42:f2:f0:59:8d:68:db:3a:49: d2:b5:9f:d2:16:d8:c9:1b:5a:4c:82:ab:50:47:7f: bd:97:21:f3:c6:2d:62:b9:a7:ea:34:9b:65:eb:f7: 0f:a4:9f:e7:6f:c8:21:69:19:92:b5:1e:7b:dc:0a: c8:a9:68:5d:49:96:b5:35:64:6b:df:3a:63:3b:bf: eb:50:31:02:31:e0:d2:34:b0:09:2f:c3:f7:cd:c6: 9c:6a:72:54:f9:2e:24:6b:e9:1c:a9:c6:5f:5d:84: 90:02:7c:05:1a:6d:14:22:28:e8:e3:08:fb:44:4c: a0:62:72:23:6c:7e:c5:ac:b8:35:e2:fd:8f:72:15: ef:dd:48:bc:04:38:2e:1b:22:82:12:be:c7:ca:35: 8c:6c:a7:8a:b4:14:c0:a6:04:23:3e:cd:70:52:2e: b7:4f:33:d8:ff:93:80:eb:15:23:a4:7e:d1:84:3f: 11:d9:28:85:c9:6f:59:61:54:b1:c3:db:17:d6:41: 96:b8:0b:95:8c:fe:c0:0d:be:c5:51:8d:09:4b:12: c3:bd:05:33:11:4a:32:8d:cf:be:aa:31:6a:fb:82: 8b:c8:cb:a3:e7:3b:d5:55:c6:6e:36:40:52:67:b1: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:08:0B:B3:42:C8:C8:E2:A7:0B:26:CC:15:29:33:5B:4F:5A:81:76 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OQgLs0LIyOKnCybMFSkzW09agXY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.96.0/21 Signature Algorithm: sha256WithRSAEncryption 81:14:bf:b2:69:0e:55:f9:15:a4:86:b7:07:47:60:7a:7e:fd: a2:36:c1:d7:aa:2b:aa:17:49:9d:4b:70:1c:2b:4e:9e:8b:fd: fb:e2:a1:1d:ae:1f:0c:29:b8:dc:75:33:c2:94:98:dc:85:f4: 17:1f:d1:35:0a:6c:5a:ab:ca:39:e7:2d:ce:cd:5d:51:77:72: cb:06:15:7d:3a:9f:55:45:43:fc:34:9c:f8:2a:2d:db:6b:ac: 7f:65:9a:f4:7e:f7:de:77:18:5e:a9:09:45:31:43:75:dd:e2: 0a:b5:f6:43:73:71:50:a3:17:f7:6d:97:dc:ca:97:bb:33:13: dd:4f:74:12:38:35:15:6c:c7:6e:ee:44:f8:5a:9b:f0:53:46: a7:3d:2e:af:3e:e5:dc:d1:ab:dd:d5:59:a0:fd:b3:7f:d7:1f: db:c1:d0:2d:1c:b4:b0:43:04:0e:24:c2:78:04:31:91:13:2e: a5:7e:b4:12:38:7d:93:36:77:cd:43:78:ff:29:fd:8e:17:24: b1:45:88:9f:b0:ed:0e:bf:47:d7:b6:d8:b3:7a:4e:7d:cb:ca: 3d:59:88:b2:25:3d:ae:46:ea:9f:ba:64:ee:ee:3a:08:0c:95: 5e:81:ac:87:2f:a2:b9:aa:19:20:2b:fd:3e:74:5a:c2:37:36: 70:0e:42:79 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5MDgwQkIzNDJDOEM4 RTJBNzBCMjZDQzE1MjkzMzVCNEY1QTgxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs0mFm19nhf37582DGgsjwXxklWkLy8FmNaNs6SdK1n9IW2Mkb WkyCq1BHf72XIfPGLWK5p+o0m2Xr9w+kn+dvyCFpGZK1HnvcCsipaF1JlrU1ZGvf OmM7v+tQMQIx4NI0sAkvw/fNxpxqclT5LiRr6Rypxl9dhJACfAUabRQiKOjjCPtE TKBiciNsfsWsuDXi/Y9yFe/dSLwEOC4bIoISvsfKNYxsp4q0FMCmBCM+zXBSLrdP M9j/k4DrFSOkftGEPxHZKIXJb1lhVLHD2xfWQZa4C5WM/sANvsVRjQlLEsO9BTMR SjKNz76qMWr7govIy6PnO9VVxm42QFJnsfi/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUOQgLs0LIyOKnCybMFSkzW09agXYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL09RZ0xzMExJeU9LbkN5Yk1GU2t6VzA5 YWdYWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaImAwDQYJ KoZIhvcNAQELBQADggEBAIEUv7JpDlX5FaSGtwdHYHp+/aI2wdeqK6oXSZ1LcBwr Tp6L/fvioR2uHwwpuNx1M8KUmNyF9Bcf0TUKbFqryjnnLc7NXVF3cssGFX06n1VF Q/w0nPgqLdtrrH9lmvR+9953GF6pCUUxQ3Xd4gq19kNzcVCjF/dtl9zKl7szE91P dBI4NRVsx27uRPham/BTRqc9Lq8+5dzRq93VWaD9s3/XH9vB0C0ctLBDBA4kwngE MZETLqV+tBI4fZM2d81DeP8p/Y4XJLFFiJ+w7Q6/R9e22LN6Tn3Lyj1ZiLIlPa5G 6p+6ZO7uOggMlV6BrIcvormqGSAr/T50WsI3NnAOQnk= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org