$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/V7nan-CVdKGwuRQwERIqQOON1bU.roa File: V7nan-CVdKGwuRQwERIqQOON1bU.roa (raw, json) Hash identifier: OuMK+M+uO53FIT2UdGBX6OmnLf69H3EefjjNPFbAZlk= Subject key identifier: 57:B9:DA:9F:E0:95:74:A1:B0:B9:14:30:11:12:2A:40:E3:8D:D5:B5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1038 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/V7nan-CVdKGwuRQwERIqQOON1bU.roa Signing time: Mon 26 Aug 2024 05:16:11 +0000 ROA not before: Mon 26 Aug 2024 05:16:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 210.201.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4152 (0x1038) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:11 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=57B9DA9FE09574A1B0B9143011122A40E38DD5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:e4:ae:3e:98:bb:47:f3:cb:34:11:f1:11: da:e8:ae:d4:d1:8a:79:b1:e5:9b:46:cf:6b:d8:4d: 7e:2e:7c:26:80:2c:64:9c:0c:53:75:d2:f4:ec:6a: 38:1f:1f:6a:e0:ae:9b:22:86:87:49:24:80:02:e2: 60:70:9f:40:0b:3b:7b:46:93:9a:80:5c:ac:7c:9f: ea:2c:49:fb:84:2d:cd:b5:af:0b:e3:00:8b:08:b4: dd:ee:ce:1c:12:f6:36:8e:ac:ed:d6:99:64:b5:b8: c2:0e:11:70:05:c0:35:15:ee:95:dd:73:01:45:c9: 1b:1f:e7:8f:90:c3:6b:c5:42:56:a4:69:0b:a2:1f: 05:72:66:60:82:3a:76:e9:b9:b4:18:b4:cd:ca:82: ec:ac:42:cc:05:94:b9:ff:d5:75:44:ce:00:6b:ba: 9c:32:c8:41:d5:34:5e:e7:92:64:9c:01:06:c0:7f: 14:b9:81:01:37:70:de:5b:95:10:31:39:f0:11:a0: 34:2d:95:d5:43:c2:28:e3:9d:cb:81:5b:1e:2e:3e: f0:6b:9a:f7:77:d8:2b:6e:50:95:13:f8:27:ad:2c: 2b:a2:37:fe:0f:d8:e7:42:d1:8d:6d:15:5e:02:54: ef:95:5d:08:f5:dc:05:de:96:51:25:50:8e:a2:c0: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B9:DA:9F:E0:95:74:A1:B0:B9:14:30:11:12:2A:40:E3:8D:D5:B5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/V7nan-CVdKGwuRQwERIqQOON1bU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.64.0/18 Signature Algorithm: sha256WithRSAEncryption 38:2f:7b:74:7b:70:e3:eb:cb:60:13:41:3e:68:6c:84:a1:09: e7:a8:c6:cd:b4:6c:6d:9d:ae:1d:7f:89:9f:63:39:88:04:48: 32:48:7b:1e:7d:e6:4a:95:2c:3e:99:23:89:44:ef:24:57:23: 1a:2f:f0:22:d3:62:2f:a6:bf:78:bc:8a:b1:7d:61:ae:99:f3: e7:b3:48:56:18:f6:20:ee:ad:fb:59:bb:95:59:16:91:7e:42: 1d:a3:5d:bc:dc:cb:53:47:49:59:8b:02:c9:69:59:94:17:92: c3:26:59:77:42:1d:af:e2:e4:fa:7a:23:8c:2c:e1:a4:55:54: 83:47:16:7e:26:d7:90:45:04:cf:85:9c:7c:ed:8a:5c:68:4d: e9:97:ba:bb:d6:dc:a8:94:7a:5c:10:a2:cf:48:e8:75:60:3d: 3b:a3:0b:89:51:18:64:26:23:2d:04:0f:7b:31:3c:fb:d4:46: d1:9a:ce:67:68:12:c1:67:bb:15:83:e3:b2:ce:54:0a:98:8a: 0d:e7:f6:89:af:b4:6d:30:94:c7:c8:f3:e5:e8:2b:f1:0a:53: 38:e1:8b:59:94:23:f2:2e:b9:be:f6:54:38:8e:df:18:51:1a: e9:d9:8d:d2:5a:1f:f7:0d:18:76:02:05:64:3e:f6:8c:5c:ce: 59:3a:4f:46 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU3QjlEQTlGRTA5NTc0 QTFCMEI5MTQzMDExMTIyQTQwRTM4REQ1QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFK+SuPpi7R/PLNBHxEdrortTRinmx5ZtGz2vYTX4ufCaALGSc DFN10vTsajgfH2rgrpsihodJJIAC4mBwn0ALO3tGk5qAXKx8n+osSfuELc21rwvj AIsItN3uzhwS9jaOrO3WmWS1uMIOEXAFwDUV7pXdcwFFyRsf54+Qw2vFQlakaQui HwVyZmCCOnbpubQYtM3KguysQswFlLn/1XVEzgBrupwyyEHVNF7nkmScAQbAfxS5 gQE3cN5blRAxOfARoDQtldVDwijjncuBWx4uPvBrmvd32CtuUJUT+CetLCuiN/4P 2OdC0Y1tFV4CVO+VXQj13AXellElUI6iwOwLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUV7nan+CVdKGwuRQwERIqQOON1bUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Y3bmFuLUNWZEtHd3VSUXdFUklxUU9P TjFiVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyUAwDQYJ KoZIhvcNAQELBQADggEBADgve3R7cOPry2ATQT5obIShCeeoxs20bG2drh1/iZ9j OYgESDJIex595kqVLD6ZI4lE7yRXIxov8CLTYi+mv3i8irF9Ya6Z8+ezSFYY9iDu rftZu5VZFpF+Qh2jXbzcy1NHSVmLAslpWZQXksMmWXdCHa/i5Pp6I4ws4aRVVINH Fn4m15BFBM+FnHztilxoTemXurvW3KiUelwQos9I6HVgPTujC4lRGGQmIy0ED3sx PPvURtGazmdoEsFnuxWD47LOVAqYig3n9omvtG0wlMfI8+XoK/EKUzjhi1mUI/Iu ub72VDiO3xhRGunZjdJaH/cNGHYCBWQ+9oxczlk6T0Y= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:37 2024 by rpki-client on console-fra.rpki-client.org