$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ObPRsGwxGZljrjG65pEKeuefddE.roa File: ObPRsGwxGZljrjG65pEKeuefddE.roa (raw, json) Hash identifier: aIH/ysBf2jplyST6oCScjswRnnW7Z3pu0Nirt03cKc4= Subject key identifier: 39:B3:D1:B0:6C:31:19:99:63:AE:31:BA:E6:91:0A:7A:E7:9F:75:D1 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1084 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ObPRsGwxGZljrjG65pEKeuefddE.roa Signing time: Mon 26 Aug 2024 05:16:30 +0000 ROA not before: Mon 26 Aug 2024 05:16:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.201.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4228 (0x1084) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39B3D1B06C31199963AE31BAE6910A7AE79F75D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:9f:47:a0:be:15:68:a5:32:9a:80:58:3b: 04:d9:ae:24:e2:67:f5:d3:cb:91:59:e8:cc:35:36: cb:e9:b5:6d:9d:80:80:8f:a5:28:7f:5b:6b:9b:c4: 9c:89:06:f2:92:cf:60:26:c0:71:1b:6e:67:8c:de: 29:0f:c7:b9:c6:f3:89:d9:81:1c:a1:83:06:80:13: 70:68:9f:a2:cc:ea:6c:24:16:9c:55:8a:e1:33:ac: 4d:22:0c:ae:1c:fa:42:b9:12:8d:59:bc:d5:10:f5: f3:df:db:b7:b6:ad:9d:02:16:e9:b1:9a:b4:7f:ac: 5e:a6:f6:2e:43:53:1f:27:f3:97:d0:c9:3e:cf:7b: a9:8f:33:31:6a:e3:58:88:3c:f5:71:df:39:14:0f: 98:02:62:ef:a2:e3:3e:d0:63:e9:22:70:3c:77:76: 9a:70:a1:ca:71:04:af:1b:79:c2:bf:83:0e:5f:3d: 89:3e:c4:b6:d9:ad:dc:e0:b6:dd:59:d8:15:1e:cf: 84:b1:4c:55:be:a5:27:39:84:4b:74:ed:e9:63:4f: 8f:64:99:5c:22:72:2f:d4:d7:62:e6:f6:9f:ab:2c: 18:bc:f8:62:27:4d:0e:60:64:e3:6e:8a:8a:2b:5d: 7e:10:fd:84:7e:31:7c:67:d3:8b:59:d8:80:06:fc: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B3:D1:B0:6C:31:19:99:63:AE:31:BA:E6:91:0A:7A:E7:9F:75:D1 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ObPRsGwxGZljrjG65pEKeuefddE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.78.0/24 Signature Algorithm: sha256WithRSAEncryption b4:1f:92:7e:27:57:d5:4a:b0:46:38:a1:7d:40:61:90:36:e7: 98:cd:89:6b:b2:27:8b:4e:ef:7e:0f:56:d9:a0:32:e0:01:9b: 6e:16:f6:31:ef:1a:70:32:53:77:44:ce:e6:05:bf:2d:79:00: 94:f2:4e:9d:c6:74:cd:b3:c5:8a:42:78:d9:53:8c:82:31:19: f4:5f:02:72:fe:e4:19:39:83:d9:21:c5:b2:0f:9c:04:f9:31: 19:70:de:6b:fd:c3:50:a4:7c:10:54:40:f9:61:27:ac:87:51: 60:59:57:7f:9a:78:9e:7b:f7:ba:c3:e7:b3:0a:c4:f0:a5:b0: d9:48:13:b1:b0:1c:f9:7a:11:f8:26:db:18:90:a7:ca:c8:48: d4:cd:01:9b:30:15:91:47:32:d6:9e:e6:5c:1b:fb:2f:6e:c8: a6:4e:e1:e8:db:9f:61:1e:cc:1c:0e:f6:2d:73:01:74:25:53: e1:d9:49:e9:3c:73:36:7f:2f:0d:fb:e6:06:f5:69:9b:83:c5: cb:8b:fe:05:e0:a7:52:86:22:8b:a0:d4:0a:47:db:46:be:13: 8e:d6:e4:04:cc:04:c7:01:02:10:72:88:27:c3:69:8f:23:f6: 6e:72:48:48:07:a1:be:91:0d:d2:70:49:eb:15:d3:a6:11:10: dc:6a:a8:c1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5QjNEMUIwNkMzMTE5 OTk2M0FFMzFCQUU2OTEwQTdBRTc5Rjc1RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCr/J9HoL4VaKUymoBYOwTZriTiZ/XTy5FZ6Mw1NsvptW2dgICP pSh/W2ubxJyJBvKSz2AmwHEbbmeM3ikPx7nG84nZgRyhgwaAE3Bon6LM6mwkFpxV iuEzrE0iDK4c+kK5Eo1ZvNUQ9fPf27e2rZ0CFumxmrR/rF6m9i5DUx8n85fQyT7P e6mPMzFq41iIPPVx3zkUD5gCYu+i4z7QY+kicDx3dppwocpxBK8becK/gw5fPYk+ xLbZrdzgtt1Z2BUez4SxTFW+pSc5hEt07eljT49kmVwici/U12Lm9p+rLBi8+GIn TQ5gZONuioorXX4Q/YR+MXxn04tZ2IAG/NkzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUObPRsGwxGZljrjG65pEKeuefddEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL09iUFJzR3d4R1psanJqRzY1cEVLZXVl ZmRkRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyU4wDQYJ KoZIhvcNAQELBQADggEBALQfkn4nV9VKsEY4oX1AYZA255jNiWuyJ4tO734PVtmg MuABm24W9jHvGnAyU3dEzuYFvy15AJTyTp3GdM2zxYpCeNlTjIIxGfRfAnL+5Bk5 g9khxbIPnAT5MRlw3mv9w1CkfBBUQPlhJ6yHUWBZV3+aeJ5797rD57MKxPClsNlI E7GwHPl6Efgm2xiQp8rISNTNAZswFZFHMtae5lwb+y9uyKZO4ejbn2EezBwO9i1z AXQlU+HZSek8czZ/Lw375gb1aZuDxcuL/gXgp1KGIoug1ApH20a+E47W5ATMBMcB AhByiCfDaY8j9m5ySEgHob6RDdJwSesV06YRENxqqME= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:05 2024 by rpki-client on console-ams.rpki-client.org