$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/RcRRdT4ZZZBL9uosVHzuKY1N140.roa File: RcRRdT4ZZZBL9uosVHzuKY1N140.roa (raw, json) Hash identifier: 40kyFHTknkmBoEqHkcBBcHxjYXHdz1lVb3w0QBGFmAA= Subject key identifier: 45:C4:51:75:3E:19:65:90:4B:F6:EA:2C:54:7C:EE:29:8D:4D:D7:8D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FD7 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/RcRRdT4ZZZBL9uosVHzuKY1N140.roa Signing time: Mon 26 Aug 2024 05:15:48 +0000 ROA not before: Mon 26 Aug 2024 05:15:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24154 IP address blocks: 210.63.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4055 (0xfd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=45C451753E1965904BF6EA2C547CEE298D4DD78D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:52:69:98:96:5e:ca:28:ce:fc:1a:2b:52: 58:a2:85:a6:05:53:ed:36:51:63:39:9f:d6:37:3a: 06:bc:b9:f6:fc:5f:47:57:fc:84:54:1c:c6:5f:62: 94:84:4c:ab:31:43:f0:6a:2e:1f:4c:39:d9:a7:58: f1:a5:d1:9b:1e:bc:02:04:60:92:1c:8e:53:6e:fb: 08:2b:e1:e8:57:55:bd:92:7a:81:66:86:27:6a:23: 67:dd:4a:20:aa:3a:69:4b:a9:87:c0:a7:8d:f7:e6: 7e:3f:c4:c9:6b:00:ee:81:54:ae:18:12:c7:78:34: 71:e2:ea:0d:9c:57:9b:3c:ae:dd:e1:c2:df:28:a1: 15:06:65:87:1c:8f:90:9e:7a:79:d0:27:ce:df:01: 3e:d0:44:79:46:e1:4a:68:97:ac:9f:ba:f3:e7:0d: 81:fb:09:ce:1b:18:53:c8:ab:6c:a4:da:60:76:3a: 1e:df:8b:53:50:1d:2a:94:42:79:9c:c7:8d:b5:0c: 76:d5:19:0e:76:c1:9f:9a:8a:16:36:c2:08:9f:77: f2:1f:87:3d:39:e8:50:61:bc:4d:bf:ef:44:2b:47: 56:00:ed:6a:a6:69:17:ad:a0:14:57:f0:7e:29:e7: 4e:54:2b:dd:c8:d2:59:5c:9c:ec:0d:62:28:bd:00: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C4:51:75:3E:19:65:90:4B:F6:EA:2C:54:7C:EE:29:8D:4D:D7:8D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/RcRRdT4ZZZBL9uosVHzuKY1N140.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.236.0/24 Signature Algorithm: sha256WithRSAEncryption 74:e5:eb:5d:a4:18:ef:74:14:9e:0c:b8:55:04:54:03:49:19: a3:9c:54:dd:a7:d4:7c:a1:28:03:c8:bd:4e:c4:a8:0d:44:2a: 44:6d:7e:f4:e1:52:d4:ec:39:75:0b:a5:90:f8:c5:a5:22:f2: 6f:f9:32:23:e3:11:7c:36:07:3e:6b:10:14:7c:83:fe:07:38: b5:83:25:d6:d4:64:97:f9:f1:50:10:60:62:6f:02:b2:26:eb: 55:85:37:60:36:14:0e:d0:c6:04:86:5c:ba:10:14:20:79:5b: e7:98:d2:61:3d:41:60:94:72:d1:ed:6d:0f:ff:5e:db:fa:51: ae:0d:67:ac:68:ee:67:d5:a9:e8:df:c9:9d:f7:dc:57:35:55: 0d:dc:52:fc:f9:e1:e6:34:e8:ff:f6:e5:1b:66:60:de:d6:f6: 61:bb:97:2f:53:2d:9e:57:31:81:17:95:5b:50:9a:9f:e1:45: 3c:84:cb:cc:e9:68:53:0b:f1:cc:7a:4d:b2:c2:72:39:3c:65: 7b:81:d8:e9:dc:c2:a4:dc:f8:7f:36:19:94:dc:0d:5a:12:71: 9e:26:0b:45:8f:7e:71:0e:e2:6b:ed:68:61:7c:7a:36:eb:e7: 2b:50:26:4e:79:03:6c:26:71:8a:16:9d:b3:4c:03:b5:ee:37: 1c:77:6f:aa -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD9cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1QzQ1MTc1M0UxOTY1 OTA0QkY2RUEyQzU0N0NFRTI5OEQ0REQ3OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSFlJpmJZeyijO/BorUliihaYFU+02UWM5n9Y3Oga8ufb8X0dX /IRUHMZfYpSETKsxQ/BqLh9MOdmnWPGl0ZsevAIEYJIcjlNu+wgr4ehXVb2SeoFm hidqI2fdSiCqOmlLqYfAp4335n4/xMlrAO6BVK4YEsd4NHHi6g2cV5s8rt3hwt8o oRUGZYccj5CeennQJ87fAT7QRHlG4Upol6yfuvPnDYH7Cc4bGFPIq2yk2mB2Oh7f i1NQHSqUQnmcx421DHbVGQ52wZ+aihY2wgifd/Ifhz056FBhvE2/70QrR1YA7Wqm aRetoBRX8H4p505UK93I0llcnOwNYii9AHzfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQURcRRdT4ZZZBL9uosVHzuKY1N140wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1JjUlJkVDRaWlpCTDl1b3NWSHp1S1kx TjE0MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP+wwDQYJ KoZIhvcNAQELBQADggEBAHTl612kGO90FJ4MuFUEVANJGaOcVN2n1HyhKAPIvU7E qA1EKkRtfvThUtTsOXULpZD4xaUi8m/5MiPjEXw2Bz5rEBR8g/4HOLWDJdbUZJf5 8VAQYGJvArIm61WFN2A2FA7QxgSGXLoQFCB5W+eY0mE9QWCUctHtbQ//Xtv6Ua4N Z6xo7mfVqejfyZ333Fc1VQ3cUvz54eY06P/25RtmYN7W9mG7ly9TLZ5XMYEXlVtQ mp/hRTyEy8zpaFML8cx6TbLCcjk8ZXuB2OncwqTc+H82GZTcDVoScZ4mC0WPfnEO 4mvtaGF8ejbr5ytQJk55A2wmcYoWnbNMA7XuNxx3b6o= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org