$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Ra3bQ3A3BQlXNDfhdEyPKZxB0kw.roa File: Ra3bQ3A3BQlXNDfhdEyPKZxB0kw.roa (raw, json) Hash identifier: 1QYsjR8GN7r/ELnoymO9aaJ1TYQkR90kBcb/afJp0B4= Subject key identifier: 45:AD:DB:43:70:37:05:09:57:34:37:E1:74:4C:8F:29:9C:41:D2:4C Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1082 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ra3bQ3A3BQlXNDfhdEyPKZxB0kw.roa Signing time: Mon 26 Aug 2024 05:16:30 +0000 ROA not before: Mon 26 Aug 2024 05:16:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 218.34.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4226 (0x1082) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=45ADDB4370370509573437E1744C8F299C41D24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:a3:92:3e:82:1c:cc:ed:d9:88:10:c4:d9: 14:48:15:84:82:12:60:0c:80:76:cb:b8:80:93:7d: 1b:5f:a8:17:56:6e:73:87:9a:8b:c1:d9:c2:f1:d3: 12:85:18:83:d1:7c:89:41:a2:e6:64:17:45:bb:19: b7:c5:32:d0:f0:d8:e2:f6:39:14:b6:5d:d0:38:ec: 7c:c4:7f:cd:79:23:21:c2:12:31:5a:bc:e3:9c:7e: 73:68:5f:a3:33:a3:58:f0:cc:da:3e:47:ed:c3:93: 6b:fe:09:25:d7:f9:ef:f9:b0:18:21:c7:3b:61:76: 66:ee:41:01:97:01:08:0b:5c:e7:9d:46:49:fa:1c: 34:26:8f:fb:2c:3e:bd:fb:25:f9:4d:df:ff:60:71: 4c:95:3e:c6:1e:4c:97:f2:19:0d:0d:88:7d:0d:e0: 3d:f1:54:1a:2c:3d:ab:9a:e8:30:2d:81:70:ae:70: bf:1d:a4:1b:76:19:d1:c0:c2:f5:16:b1:03:49:51: 8b:06:30:5e:5f:69:54:57:ac:3b:95:91:2d:64:7d: dc:ab:9e:ba:1c:52:c0:0f:cc:01:2a:ce:38:89:74: a5:82:ca:52:d5:8d:63:0e:97:5f:11:3c:f3:67:d9: 96:d3:31:51:11:44:24:34:bd:bc:24:6b:61:54:7e: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AD:DB:43:70:37:05:09:57:34:37:E1:74:4C:8F:29:9C:41:D2:4C X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ra3bQ3A3BQlXNDfhdEyPKZxB0kw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.104.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:ce:5a:73:91:2f:84:24:93:16:44:37:73:be:ea:da:f6:ed: 3b:49:af:9e:5c:99:b1:ae:2e:c0:70:66:f2:9a:ea:ce:78:49: 09:ee:67:fe:56:fd:15:83:38:54:0f:92:af:42:7e:77:73:79: c5:58:9a:ad:d5:62:68:2f:96:91:80:7e:64:2f:35:92:3b:7a: e8:d4:8f:bd:b7:ca:19:80:ae:00:18:b6:67:06:2c:c2:07:a4: db:f0:e5:5a:ba:53:26:f8:09:36:df:d4:16:9f:76:82:dc:84: 3b:12:04:99:90:ad:77:71:d5:ef:99:68:ff:fc:19:12:9d:ce: b6:b4:c5:e9:40:3e:c5:66:59:19:68:b9:a6:07:65:44:21:1c: 7c:45:f5:ed:ec:e2:9d:ea:a3:f3:c8:d3:85:98:25:2c:2f:37: fb:db:a1:46:b9:78:2c:07:83:b3:22:05:c5:8d:c8:e0:c8:50: 02:55:5b:88:d7:86:99:56:47:a2:32:18:e5:53:8a:1b:fd:a1: 05:23:04:43:f7:dc:5b:6c:e9:69:00:1c:e5:f1:7a:10:44:3c: 47:2d:32:06:de:30:e8:c2:7f:3d:e1:40:a1:2d:8c:db:8b:59: d7:43:87:e4:c2:dd:4d:0d:a5:7a:6c:f9:d6:de:96:04:99:63: 29:76:87:bd -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1QUREQjQzNzAzNzA1 MDk1NzM0MzdFMTc0NEM4RjI5OUM0MUQyNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCeqOSPoIczO3ZiBDE2RRIFYSCEmAMgHbLuICTfRtfqBdWbnOH movB2cLx0xKFGIPRfIlBouZkF0W7GbfFMtDw2OL2ORS2XdA47HzEf815IyHCEjFa vOOcfnNoX6Mzo1jwzNo+R+3Dk2v+CSXX+e/5sBghxzthdmbuQQGXAQgLXOedRkn6 HDQmj/ssPr37JflN3/9gcUyVPsYeTJfyGQ0NiH0N4D3xVBosPaua6DAtgXCucL8d pBt2GdHAwvUWsQNJUYsGMF5faVRXrDuVkS1kfdyrnrocUsAPzAEqzjiJdKWCylLV jWMOl18RPPNn2ZbTMVERRCQ0vbwka2FUfpqjAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQURa3bQ3A3BQlXNDfhdEyPKZxB0kwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1JhM2JRM0EzQlFsWE5EZmhkRXlQS1p4 QjBrdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHaImgwDQYJ KoZIhvcNAQELBQADggEBAE/OWnORL4QkkxZEN3O+6tr27TtJr55cmbGuLsBwZvKa 6s54SQnuZ/5W/RWDOFQPkq9CfndzecVYmq3VYmgvlpGAfmQvNZI7eujUj723yhmA rgAYtmcGLMIHpNvw5Vq6Uyb4CTbf1BafdoLchDsSBJmQrXdx1e+ZaP/8GRKdzra0 xelAPsVmWRlouaYHZUQhHHxF9e3s4p3qo/PI04WYJSwvN/vboUa5eCwHg7MiBcWN yODIUAJVW4jXhplWR6IyGOVTihv9oQUjBEP33Fts6WkAHOXxehBEPEctMgbeMOjC fz3hQKEtjNuLWddDh+TC3U0NpXps+dbelgSZYyl2h70= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org