$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/UHrru-5BKNtDebfDzpzVi8b5geU.roa File: UHrru-5BKNtDebfDzpzVi8b5geU.roa (raw, json) Hash identifier: r2vKJS6p4Kk1wUOOMbNOKmdhJD3xvMqRAR0ONuV48Po= Subject key identifier: 50:7A:EB:BB:EE:41:28:DB:43:79:B7:C3:CE:9C:D5:8B:C6:F9:81:E5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1058 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UHrru-5BKNtDebfDzpzVi8b5geU.roa Signing time: Mon 26 Aug 2024 05:16:19 +0000 ROA not before: Mon 26 Aug 2024 05:16:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.203.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4184 (0x1058) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=507AEBBBEE4128DB4379B7C3CE9CD58BC6F981E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:80:9b:35:fe:6f:1c:21:d6:aa:2f:15:26: 9b:8a:42:a5:45:ee:1e:cb:b9:b1:3f:5c:18:23:a1: c3:f2:09:a4:11:c9:04:e0:d2:46:e5:37:1e:df:37: f2:04:28:7f:45:e4:6f:14:d0:1e:6a:f2:54:5e:80: 4d:8c:f2:5f:1d:70:b5:0e:fe:79:85:1b:59:73:3d: 78:f8:be:84:24:b8:ab:f5:f9:3d:f6:8f:73:e1:ca: 12:a2:ea:65:28:06:8e:22:1d:24:b8:0a:00:c6:35: 5b:24:36:4d:75:9d:02:d6:4e:9b:45:fb:07:96:27: cb:7e:5b:7d:a9:e4:0e:e0:8e:08:6d:42:c8:8f:b1: 3a:23:27:e4:6d:fe:6e:72:5f:c1:2c:b0:99:61:e0: 23:74:bb:ab:cf:5f:8f:0c:9c:b1:44:75:22:79:b3: 45:6a:32:88:df:cd:63:48:87:0b:9a:f1:87:36:64: 84:21:ec:8f:1f:cc:6e:5c:26:53:4d:cb:54:7a:f0: 95:54:5a:f0:12:78:18:21:30:16:78:8f:12:c7:7b: a6:13:6c:f1:8d:c4:f9:39:3a:d7:c6:04:cb:28:2d: 24:20:e1:bd:c8:f1:82:4a:f5:dc:29:47:04:44:74: ad:a3:20:74:ff:fc:a6:ba:eb:ed:1f:ee:c2:b1:a6: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7A:EB:BB:EE:41:28:DB:43:79:B7:C3:CE:9C:D5:8B:C6:F9:81:E5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UHrru-5BKNtDebfDzpzVi8b5geU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.20.0/22 Signature Algorithm: sha256WithRSAEncryption 31:1b:d5:cb:66:04:1c:08:75:b7:5b:55:e8:d2:87:d2:82:7c: 93:91:29:1c:a1:ee:1b:21:08:51:7c:ee:43:ba:0c:4f:b8:1e: ff:75:24:72:38:a0:b2:c7:9d:16:7c:2c:ca:98:75:88:24:aa: a4:44:b7:2f:e9:f7:d0:10:bc:08:a6:32:2d:b1:9f:68:63:30: 97:66:df:2a:ed:91:c4:02:fa:92:67:da:5a:db:d1:e9:5b:55: 21:7f:56:ca:16:71:72:d9:b8:27:0f:b5:c0:d2:42:f9:d9:b5: 35:40:c5:9c:95:ae:e8:1c:5a:4f:41:26:56:16:df:ec:34:a5: 28:e4:12:6e:62:d3:10:fd:fb:ad:35:28:54:5e:40:5c:3e:bb: a8:c6:98:ff:0c:7e:70:36:3e:d0:78:06:34:9f:f6:f4:50:aa: cc:d2:66:4e:db:f4:61:89:5f:71:f5:b2:66:c6:2a:b8:b3:bb: 08:db:7a:7e:60:35:78:3a:1c:8d:8f:c4:91:8b:df:f0:d1:42: b0:13:3a:bf:c7:3a:47:1f:48:2f:5e:e9:a2:ee:0e:46:df:2e: 63:c5:b4:7c:e6:1e:4b:dd:8a:fb:3f:d0:c4:27:d4:b0:7e:e0: 44:b9:8c:e4:5a:43:30:f0:31:51:73:e7:dc:b0:92:ce:e8:b7: f5:e5:ec:52 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUwN0FFQkJCRUU0MTI4 REI0Mzc5QjdDM0NFOUNENThCQzZGOTgxRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCttYCbNf5vHCHWqi8VJpuKQqVF7h7LubE/XBgjocPyCaQRyQTg 0kblNx7fN/IEKH9F5G8U0B5q8lRegE2M8l8dcLUO/nmFG1lzPXj4voQkuKv1+T32 j3PhyhKi6mUoBo4iHSS4CgDGNVskNk11nQLWTptF+weWJ8t+W32p5A7gjghtQsiP sTojJ+Rt/m5yX8EssJlh4CN0u6vPX48MnLFEdSJ5s0VqMojfzWNIhwua8Yc2ZIQh 7I8fzG5cJlNNy1R68JVUWvASeBghMBZ4jxLHe6YTbPGNxPk5OtfGBMsoLSQg4b3I 8YJK9dwpRwREdK2jIHT//Ka66+0f7sKxpn+1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUUHrru+5BKNtDebfDzpzVi8b5geUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1VIcnJ1LTVCS050RGViZkR6cHpWaThi NWdlVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyxQwDQYJ KoZIhvcNAQELBQADggEBADEb1ctmBBwIdbdbVejSh9KCfJORKRyh7hshCFF87kO6 DE+4Hv91JHI4oLLHnRZ8LMqYdYgkqqREty/p99AQvAimMi2xn2hjMJdm3yrtkcQC +pJn2lrb0elbVSF/VsoWcXLZuCcPtcDSQvnZtTVAxZyVrugcWk9BJlYW3+w0pSjk Em5i0xD9+601KFReQFw+u6jGmP8MfnA2PtB4BjSf9vRQqszSZk7b9GGJX3H1smbG Krizuwjben5gNXg6HI2PxJGL3/DRQrATOr/HOkcfSC9e6aLuDkbfLmPFtHzmHkvd ivs/0MQn1LB+4ES5jORaQzDwMVFz59ywks7ot/Xl7FI= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:37 2024 by rpki-client on console-fra.rpki-client.org