$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/UoH9h6EUA6CK1RJiwte1sHnstEI.roa File: UoH9h6EUA6CK1RJiwte1sHnstEI.roa (raw, json) Hash identifier: Xp5+NhvXCqMDO3DaindwCDfFV3rvQ1FuGLLLzv7peK8= Subject key identifier: 52:81:FD:87:A1:14:03:A0:8A:D5:12:62:C2:D7:B5:B0:79:EC:B4:42 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FD6 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UoH9h6EUA6CK1RJiwte1sHnstEI.roa Signing time: Mon 26 Aug 2024 05:15:48 +0000 ROA not before: Mon 26 Aug 2024 05:15:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 124.218.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4054 (0xfd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5281FD87A11403A08AD51262C2D7B5B079ECB442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:78:cc:e8:3d:c8:b8:41:1a:ef:a4:90:c6: 88:bf:61:7e:70:c5:f6:84:4d:7f:f5:1b:ed:b3:01: d6:ad:75:e3:86:0d:f5:4e:87:3c:63:79:80:78:76: 60:4c:27:57:15:20:1f:9d:28:86:c4:ab:10:f3:6e: 61:b4:3d:ac:1c:4d:8e:5a:82:19:d9:60:30:aa:b0: 15:58:bf:fc:3a:e4:35:37:42:6e:5d:5c:00:33:2f: 8b:0f:33:03:58:42:6b:3f:ed:3e:82:db:27:c3:9e: 31:06:c6:f3:58:d8:25:8f:ad:b9:aa:3a:46:9c:4e: 16:db:f0:98:3c:f5:23:46:ed:44:1b:31:99:fa:cf: c9:23:ab:ab:fb:3b:d2:87:78:47:a9:2e:9c:74:87: 63:d5:de:a9:7c:fd:22:9a:af:ff:16:fd:d1:4c:6f: 76:c7:5a:68:78:0f:c7:95:df:d7:bd:e1:55:0a:c1: 4d:b9:44:e7:33:27:18:ae:82:cd:89:49:ad:05:36: a8:48:48:db:1d:62:11:46:54:4c:68:79:e7:bc:1d: 97:af:ed:30:70:08:06:ae:4e:40:45:de:80:9b:15: 62:6e:e5:b6:53:62:19:25:8d:1e:f4:e6:d9:12:b0: f7:53:a0:41:0a:61:25:e4:ed:6e:fa:cc:75:9d:29: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:81:FD:87:A1:14:03:A0:8A:D5:12:62:C2:D7:B5:B0:79:EC:B4:42 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UoH9h6EUA6CK1RJiwte1sHnstEI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.192.0/18 Signature Algorithm: sha256WithRSAEncryption 69:e5:f2:08:fe:0d:fb:f6:86:18:a2:b8:78:14:97:3b:c1:5e: 16:67:94:50:6e:70:69:08:7d:03:18:69:4b:af:d8:e4:b2:08: 55:68:49:e5:7b:af:49:0f:e0:ff:41:38:8f:d1:a1:a0:38:aa: a5:39:8d:5f:74:0f:b7:f2:ba:47:d8:5e:79:94:d2:16:49:fb: ea:7b:12:c0:ba:04:93:aa:3d:bf:fe:36:7c:fc:b9:b4:28:6d: 5d:e3:5e:c0:06:c1:d1:9e:82:78:51:2d:00:79:ce:4c:71:09: 80:08:eb:f9:b6:8a:c9:a0:86:31:66:da:e5:44:b8:98:36:da: f9:f9:f6:d1:cd:dc:df:03:b3:4a:3f:46:9b:e1:ec:81:28:e5: c8:d5:ab:3d:a4:7f:7f:b8:d7:f1:d1:86:3b:b3:e8:31:03:74: 73:bd:70:70:1e:c7:18:bd:79:09:1a:59:99:b6:c7:d6:eb:63: 61:e2:1a:0d:f0:f5:e0:e5:ed:3c:e3:5f:05:de:d8:c2:b7:ad: 5e:f5:9e:70:26:02:6e:20:9a:49:87:1b:10:73:73:07:50:a7: 58:db:c7:94:ab:69:29:e9:28:41:89:38:7d:83:18:38:05:49: ca:9f:51:03:e0:c2:bf:da:6a:69:08:e9:d1:9d:31:3a:76:6a: 32:b9:89:95 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUyODFGRDg3QTExNDAz QTA4QUQ1MTI2MkMyRDdCNUIwNzlFQ0I0NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4B3jM6D3IuEEa76SQxoi/YX5wxfaETX/1G+2zAdatdeOGDfVO hzxjeYB4dmBMJ1cVIB+dKIbEqxDzbmG0PawcTY5aghnZYDCqsBVYv/w65DU3Qm5d XAAzL4sPMwNYQms/7T6C2yfDnjEGxvNY2CWPrbmqOkacThbb8Jg89SNG7UQbMZn6 z8kjq6v7O9KHeEepLpx0h2PV3ql8/SKar/8W/dFMb3bHWmh4D8eV39e94VUKwU25 ROczJxiugs2JSa0FNqhISNsdYhFGVExoeee8HZev7TBwCAauTkBF3oCbFWJu5bZT YhkljR705tkSsPdToEEKYSXk7W76zHWdKVvHAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUUoH9h6EUA6CK1RJiwte1sHnstEIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1VvSDloNkVVQTZDSzFSSml3dGUxc0hu c3RFSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ82sAwDQYJ KoZIhvcNAQELBQADggEBAGnl8gj+Dfv2hhiiuHgUlzvBXhZnlFBucGkIfQMYaUuv 2OSyCFVoSeV7r0kP4P9BOI/RoaA4qqU5jV90D7fyukfYXnmU0hZJ++p7EsC6BJOq Pb/+Nnz8ubQobV3jXsAGwdGegnhRLQB5zkxxCYAI6/m2ismghjFm2uVEuJg22vn5 9tHN3N8Ds0o/Rpvh7IEo5cjVqz2kf3+41/HRhjuz6DEDdHO9cHAexxi9eQkaWZm2 x9brY2HiGg3w9eDl7TzjXwXe2MK3rV71nnAmAm4gmkmHGxBzcwdQp1jbx5SraSnp KEGJOH2DGDgFScqfUQPgwr/aamkI6dGdMTp2ajK5iZU= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org