$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/QCb-op6gYXLfcc3H6IcgbnOypA4.roa File: QCb-op6gYXLfcc3H6IcgbnOypA4.roa (raw, json) Hash identifier: uQUD/4bGEui/Rg7xL3NTmBagH4TX2DOin1lx5DF+NdI= Subject key identifier: 40:26:FE:A2:9E:A0:61:72:DF:71:CD:C7:E8:87:20:6E:73:B2:A4:0E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FDF Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QCb-op6gYXLfcc3H6IcgbnOypA4.roa Signing time: Mon 26 Aug 2024 05:15:50 +0000 ROA not before: Mon 26 Aug 2024 05:15:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 2404:0:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4063 (0xfdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4026FEA29EA06172DF71CDC7E887206E73B2A40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:1e:fb:6e:f8:db:6a:ef:5a:6b:f4:8c:23: c0:10:83:df:71:52:0f:9b:32:87:43:97:46:f1:87: 4b:a8:e3:6e:8b:59:c4:b6:65:7a:1a:3a:84:3f:b5: 4b:0d:bb:b8:0c:bb:9c:00:89:3c:bf:74:fa:df:fd: b4:2a:b7:ad:d7:a3:f2:ed:8d:65:21:d8:de:78:15: 7e:4e:8b:5b:18:94:15:6f:da:83:66:14:f3:f9:a3: 08:8e:ce:d4:71:7f:18:3b:b5:1a:2f:9a:ad:be:bc: 5c:14:35:e5:23:bc:84:a9:41:24:1c:26:4a:56:5a: aa:63:98:cb:c9:b8:88:75:84:02:48:3b:d9:15:0b: fe:2a:97:0e:66:fa:ff:23:ae:8e:0b:81:68:a2:c4: a0:3f:6e:56:94:90:19:29:ee:ef:4b:8c:85:e2:ba: 1b:c9:c7:1e:5a:2d:6b:92:8d:3c:60:d3:30:ee:04: a1:17:55:4c:b4:9b:57:53:a6:1f:ee:18:4c:a8:5a: f2:c5:d3:35:d1:0e:c9:fb:9e:d6:87:09:38:c5:30: 78:f6:e9:03:6e:b3:1e:df:7f:57:18:b9:1b:b1:b3: d0:16:c4:52:e2:de:ab:65:68:ad:16:3f:09:d9:b4: cd:1d:e0:29:14:85:e3:f4:75:cc:75:71:2f:9a:4a: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:26:FE:A2:9E:A0:61:72:DF:71:CD:C7:E8:87:20:6E:73:B2:A4:0E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QCb-op6gYXLfcc3H6IcgbnOypA4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 58:bd:a7:5b:b0:d0:fa:9f:19:e5:be:37:79:84:38:37:fa:92: d6:73:06:eb:64:af:a5:0e:f3:ba:a7:06:c7:7e:67:dc:33:34: 08:84:8b:e9:32:61:10:0c:1e:e7:a6:c2:00:b0:ce:1b:a8:07: 60:c3:fd:04:b2:d6:18:cb:91:41:05:a0:40:9d:f7:59:31:74: 93:7c:18:57:d5:4d:99:81:d4:b3:0c:84:f4:92:a7:df:e9:fc: db:cd:e1:9f:00:b4:11:82:b4:4d:16:d0:40:40:76:bb:8e:57: 74:11:68:58:46:46:5d:15:4e:9a:72:75:a7:5f:0c:3a:4d:50: ff:3e:cf:12:cb:ef:9b:c9:b4:de:64:9b:63:4c:d3:54:f5:5e: 35:82:c2:83:19:56:e1:d7:0a:63:bd:15:8a:8d:8c:7f:3f:31: 48:37:bd:67:14:bf:93:fa:e6:bd:46:56:a2:80:ef:58:fb:05: ac:d5:04:b5:4c:45:14:67:d9:9f:0d:98:1c:13:30:9d:13:05: 5c:55:2a:d5:13:e1:86:28:61:68:5a:7f:96:bc:7b:97:26:b9: da:69:20:6d:3f:4b:b2:5b:9e:98:79:f8:33:22:72:3b:60:02: b0:e1:67:36:0c:64:24:fa:72:55:87:29:86:b8:95:54:ce:b4: 49:9c:3a:16 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICD98wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwMjZGRUEyOUVBMDYx NzJERjcxQ0RDN0U4ODcyMDZFNzNCMkE0MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKwx77bvjbau9aa/SMI8AQg99xUg+bModDl0bxh0uo426LWcS2 ZXoaOoQ/tUsNu7gMu5wAiTy/dPrf/bQqt63Xo/LtjWUh2N54FX5Oi1sYlBVv2oNm FPP5owiOztRxfxg7tRovmq2+vFwUNeUjvISpQSQcJkpWWqpjmMvJuIh1hAJIO9kV C/4qlw5m+v8jro4LgWiixKA/blaUkBkp7u9LjIXiuhvJxx5aLWuSjTxg0zDuBKEX VUy0m1dTph/uGEyoWvLF0zXRDsn7ntaHCTjFMHj26QNusx7ff1cYuRuxs9AWxFLi 3qtlaK0WPwnZtM0d4CkUheP0dcx1cS+aSvMfAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQCb+op6gYXLfcc3H6IcgbnOypA4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1FDYi1vcDZnWVhMZmNjM0g2SWNnYm5P eXBBNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBAAAEDAN BgkqhkiG9w0BAQsFAAOCAQEAWL2nW7DQ+p8Z5b43eYQ4N/qS1nMG62SvpQ7zuqcG x35n3DM0CISL6TJhEAwe56bCALDOG6gHYMP9BLLWGMuRQQWgQJ33WTF0k3wYV9VN mYHUswyE9JKn3+n8283hnwC0EYK0TRbQQEB2u45XdBFoWEZGXRVOmnJ1p18MOk1Q /z7PEsvvm8m03mSbY0zTVPVeNYLCgxlW4dcKY70Vio2Mfz8xSDe9ZxS/k/rmvUZW ooDvWPsFrNUEtUxFFGfZnw2YHBMwnRMFXFUq1RPhhihhaFp/lrx7lya52mkgbT9L sluemHn4MyJyO2ACsOFnNgxkJPpyVYcphriVVM60SZw6Fg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org