$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Q_dD7qQ0MuTGsV-cH54LMvHJJFg.roa File: Q_dD7qQ0MuTGsV-cH54LMvHJJFg.roa (raw, json) Hash identifier: I0NmIf/JJeVV5sS5SWbxt7ZxVoDRK4YvI+r5BYtnCKE= Subject key identifier: 43:F7:43:EE:A4:34:32:E4:C6:B1:5F:9C:1F:9E:0B:32:F1:C9:24:58 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 109B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Q_dD7qQ0MuTGsV-cH54LMvHJJFg.roa Signing time: Mon 26 Aug 2024 05:16:36 +0000 ROA not before: Mon 26 Aug 2024 05:16:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.202.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4251 (0x109b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=43F743EEA43432E4C6B15F9C1F9E0B32F1C92458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:67:85:a7:5e:7c:fb:28:9e:54:f6:c4:bc: 18:6f:73:ae:6e:3a:57:16:f9:7f:c9:0e:1b:a4:6f: 69:4f:14:56:9f:fd:1c:d7:d5:16:90:05:bd:49:e6: 9d:91:2a:c8:a4:06:b8:5a:01:77:5b:77:25:aa:ea: 32:8b:bd:72:0b:1f:5e:d5:2a:f2:8b:3e:ab:d1:e8: 80:c8:7f:7c:ed:82:96:3e:2a:6d:2d:a5:cf:56:0a: 39:dc:bc:02:67:14:48:9a:2b:0b:06:8c:59:9c:85: 41:7c:94:71:ec:06:26:d0:ca:5c:5d:5b:91:fc:40: 78:e1:dd:c2:c4:68:b6:3b:40:7b:57:2b:3a:69:2f: 3e:10:02:ef:b4:1e:57:b5:8a:ef:8e:69:84:b8:21: 0a:e2:a2:23:0e:ab:5b:1b:e9:83:aa:72:33:9b:f9: 90:2c:82:e4:65:5f:05:1f:66:ae:75:f3:b2:9e:a8: c3:4a:ed:00:49:61:2c:25:62:b2:2c:dd:7f:e7:84: 98:27:d0:74:ad:85:2d:8b:25:68:9a:09:ec:b1:8a: 7d:3a:65:a9:7d:0c:75:6d:9e:5d:0f:8d:ad:4f:96: 68:40:19:7f:39:44:a1:bf:07:c1:bd:01:d6:46:dd: e9:a0:75:29:ea:e9:fc:a7:99:11:44:0d:60:3a:3e: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:43:EE:A4:34:32:E4:C6:B1:5F:9C:1F:9E:0B:32:F1:C9:24:58 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Q_dD7qQ0MuTGsV-cH54LMvHJJFg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.128.0/18 Signature Algorithm: sha256WithRSAEncryption 93:f4:fb:8a:1b:c7:63:a2:51:bd:b3:1d:31:2f:9c:88:e1:db: c6:8d:0a:ba:76:a0:ee:1f:fc:4d:52:34:5f:1e:51:01:45:54: 1b:3f:0c:23:e7:4d:10:66:bc:f2:d7:1e:eb:33:fd:49:31:db: 17:5a:6c:f8:3e:c7:84:84:e6:72:06:50:e0:bc:79:8f:14:7d: 59:71:09:83:0d:3b:7c:55:e0:ac:fa:65:29:89:1e:5e:9e:46: 81:db:da:33:3c:3f:8d:9c:cf:4b:c6:9c:86:86:66:a4:d7:86: 02:1f:cd:23:fa:07:b0:c5:a9:0f:ab:a4:6c:f1:4b:98:c5:51: 27:f0:f5:67:64:c5:9f:21:6f:38:60:e1:81:32:fd:d1:49:10: 91:af:22:de:9c:2c:30:f5:d2:d5:11:84:ee:ff:93:a0:b2:4f: 24:7d:bf:54:15:83:ef:2b:68:b4:20:2f:e1:37:4f:7f:95:d2: df:99:5d:db:34:3b:80:a8:b3:cd:79:8b:66:81:4b:13:4d:7a: d5:68:e6:6e:47:8a:29:e5:60:7b:37:42:d9:f1:d9:a5:33:2e: 9b:bd:2d:d0:7e:81:14:9f:12:a4:27:9f:53:f0:c7:17:95:ba: 07:2d:a6:98:5f:0e:68:63:a1:d4:bd:5b:fa:59:6e:25:29:f1: 68:f6:b1:85 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQzRjc0M0VFQTQzNDMy RTRDNkIxNUY5QzFGOUUwQjMyRjFDOTI0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClx2eFp158+yieVPbEvBhvc65uOlcW+X/JDhukb2lPFFaf/RzX 1RaQBb1J5p2RKsikBrhaAXdbdyWq6jKLvXILH17VKvKLPqvR6IDIf3ztgpY+Km0t pc9WCjncvAJnFEiaKwsGjFmchUF8lHHsBibQylxdW5H8QHjh3cLEaLY7QHtXKzpp Lz4QAu+0Hle1iu+OaYS4IQrioiMOq1sb6YOqcjOb+ZAsguRlXwUfZq5187KeqMNK 7QBJYSwlYrIs3X/nhJgn0HSthS2LJWiaCeyxin06Zal9DHVtnl0Pja1PlmhAGX85 RKG/B8G9AdZG3emgdSnq6fynmRFEDWA6PpUZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUQ/dD7qQ0MuTGsV+cH54LMvHJJFgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1FfZEQ3cVEwTXVUR3NWLWNINTRMTXZI SkpGZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyoAwDQYJ KoZIhvcNAQELBQADggEBAJP0+4obx2OiUb2zHTEvnIjh28aNCrp2oO4f/E1SNF8e UQFFVBs/DCPnTRBmvPLXHusz/Ukx2xdabPg+x4SE5nIGUOC8eY8UfVlxCYMNO3xV 4Kz6ZSmJHl6eRoHb2jM8P42cz0vGnIaGZqTXhgIfzSP6B7DFqQ+rpGzxS5jFUSfw 9WdkxZ8hbzhg4YEy/dFJEJGvIt6cLDD10tURhO7/k6CyTyR9v1QVg+8raLQgL+E3 T3+V0t+ZXds0O4Cos815i2aBSxNNetVo5m5HiinlYHs3Qtnx2aUzLpu9LdB+gRSf EqQnn1PwxxeVugctpphfDmhjodS9W/pZbiUp8Wj2sYU= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org