$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/W6wCxWgepYvwjIhxGEtuSyzx48M.roa File: W6wCxWgepYvwjIhxGEtuSyzx48M.roa (raw, json) Hash identifier: wJoq+KEV4C/QC3CaXHWy2/VU1Qsfo8EbuOH+XscZtz8= Subject key identifier: 5B:AC:02:C5:68:1E:A5:8B:F0:8C:88:71:18:4B:6E:4B:2C:F1:E3:C3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FE1 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/W6wCxWgepYvwjIhxGEtuSyzx48M.roa Signing time: Mon 26 Aug 2024 05:15:50 +0000 ROA not before: Mon 26 Aug 2024 05:15:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24154 IP address blocks: 211.76.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4065 (0xfe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5BAC02C5681EA58BF08C8871184B6E4B2CF1E3C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:46:c4:ff:50:bb:af:60:a3:6d:e5:1e:08: eb:fc:c6:e0:1d:5b:3f:16:26:74:ab:6a:e9:76:77: f9:ad:db:50:09:42:ce:bc:f3:e3:4e:3b:36:e1:5b: 17:65:14:2c:e0:06:55:9b:c0:a6:07:de:7c:e1:11: c3:ee:f3:d3:dc:53:0b:dd:dd:05:56:a1:f8:3c:a5: 52:27:91:09:70:ef:9a:a0:69:4b:dc:d0:31:e7:dc: ea:64:aa:54:01:5f:0c:87:28:58:ce:d6:58:dd:b5: 66:41:f2:a1:71:16:cb:52:02:68:c6:c7:5e:8d:be: 76:4c:0c:7b:29:28:31:80:85:65:7e:a8:83:99:b8: 31:00:a2:6d:ed:46:e1:1a:13:8a:e3:03:54:40:91: 53:d7:b8:80:0a:ba:06:f2:0d:19:64:73:63:f8:ec: b8:fe:d1:23:87:7e:4e:49:7a:74:3e:f9:87:77:cf: 8b:f7:f8:76:c3:cd:1d:2b:88:ab:32:bf:eb:3e:83: a0:95:dc:e6:67:01:c8:89:85:e6:cd:c2:85:26:1b: 18:8c:1e:bf:2f:ae:bc:59:2e:3b:2d:1f:fc:c0:81: 79:68:cb:59:7e:6e:79:30:34:3c:27:ee:b7:67:77: 17:93:be:e2:2e:99:35:06:03:30:2c:14:9f:27:45: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AC:02:C5:68:1E:A5:8B:F0:8C:88:71:18:4B:6E:4B:2C:F1:E3:C3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/W6wCxWgepYvwjIhxGEtuSyzx48M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.104.0/23 Signature Algorithm: sha256WithRSAEncryption 05:7d:bc:b6:0f:e5:05:1d:57:3c:48:a1:6e:a3:cf:e1:86:7a: 53:19:1b:4a:eb:44:c3:49:ac:12:ae:dc:42:0d:5e:22:42:9e: 27:a3:f7:cb:cd:3c:e3:67:4d:55:46:e5:0d:c4:e8:80:bd:9b: 50:71:9f:3c:9a:d0:62:85:80:08:f5:92:ad:4a:74:e2:f4:ef: c7:e3:d0:b3:c0:b2:a8:03:98:e6:67:76:84:e8:5e:0a:bb:5a: d5:68:76:43:ac:1a:43:05:f5:1e:24:d2:8f:5d:31:4c:4a:e8: e2:bd:59:bb:69:ae:07:d3:86:be:fb:b1:da:5a:70:2c:23:c2: bc:2c:b3:1a:90:96:f1:3e:75:36:38:ad:4a:f8:6c:a8:a5:38: eb:ae:c6:64:30:fe:f3:43:b8:ec:ce:f5:13:5a:d0:3c:16:c9: 1f:b1:7a:60:6c:30:9a:2a:45:44:5f:c6:43:e4:ae:0b:35:e1: 4f:8d:ce:35:f4:46:bc:93:b4:08:a8:90:2a:9c:ec:ac:0d:34: 5d:6b:cc:9f:63:06:4a:2d:52:6d:fa:56:3f:5c:5a:d8:e9:8e: f7:55:cf:70:ff:fb:9f:d3:01:98:97:d7:9f:8e:6d:0b:3d:ca: 07:29:7c:17:e5:1f:b9:c0:92:30:2b:6f:18:d2:c2:c6:dd:13: 6b:3b:32:67 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVCQUMwMkM1NjgxRUE1 OEJGMDhDODg3MTE4NEI2RTRCMkNGMUUzQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCi60bE/1C7r2CjbeUeCOv8xuAdWz8WJnSraul2d/mt21AJQs68 8+NOOzbhWxdlFCzgBlWbwKYH3nzhEcPu89PcUwvd3QVWofg8pVInkQlw75qgaUvc 0DHn3OpkqlQBXwyHKFjO1ljdtWZB8qFxFstSAmjGx16NvnZMDHspKDGAhWV+qIOZ uDEAom3tRuEaE4rjA1RAkVPXuIAKugbyDRlkc2P47Lj+0SOHfk5JenQ++Yd3z4v3 +HbDzR0riKsyv+s+g6CV3OZnAciJhebNwoUmGxiMHr8vrrxZLjstH/zAgXloy1l+ bnkwNDwn7rdndxeTvuIumTUGAzAsFJ8nRRyPAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUW6wCxWgepYvwjIhxGEtuSyzx48MwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1c2d0N4V2dlcFl2d2pJaHhHRXR1U3l6 eDQ4TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTTGgwDQYJ KoZIhvcNAQELBQADggEBAAV9vLYP5QUdVzxIoW6jz+GGelMZG0rrRMNJrBKu3EIN XiJCniej98vNPONnTVVG5Q3E6IC9m1Bxnzya0GKFgAj1kq1KdOL078fj0LPAsqgD mOZndoToXgq7WtVodkOsGkMF9R4k0o9dMUxK6OK9WbtprgfThr77sdpacCwjwrws sxqQlvE+dTY4rUr4bKilOOuuxmQw/vNDuOzO9RNa0DwWyR+xemBsMJoqRURfxkPk rgs14U+NzjX0RryTtAiokCqc7KwNNF1rzJ9jBkotUm36Vj9cWtjpjvdVz3D/+5/T AZiX15+ObQs9ygcpfBflH7nAkjArbxjSwsbdE2s7Mmc= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org