$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/XL8Ln6I7KVfHpLfSUqU4xYXuXzY.roa File: XL8Ln6I7KVfHpLfSUqU4xYXuXzY.roa (raw, json) Hash identifier: scoAgtYa46weWe5mUbF4tE6jMDfaJVWuaT9p6RaR/jg= Subject key identifier: 5C:BF:0B:9F:A2:3B:29:57:C7:A4:B7:D2:52:A5:38:C5:85:EE:5F:36 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FD5 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XL8Ln6I7KVfHpLfSUqU4xYXuXzY.roa Signing time: Mon 26 Aug 2024 05:15:48 +0000 ROA not before: Mon 26 Aug 2024 05:15:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24155 IP address blocks: 203.207.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4053 (0xfd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CBF0B9FA23B2957C7A4B7D252A538C585EE5F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2f:ca:8b:4a:1b:35:9b:34:b2:b5:e8:58:2a: 1e:0d:ab:2d:c7:c6:d1:15:1a:20:a5:f6:0b:55:33: 9c:57:e6:1b:32:e6:da:25:f8:f5:c0:eb:da:4c:d4: 8a:23:71:90:0a:89:28:5d:86:8f:0d:45:c2:88:20: a0:d8:a5:1e:06:99:7e:4c:cf:10:6f:3f:d2:00:f2: fe:48:be:db:d4:d3:17:b0:2c:1e:b1:6c:1e:a7:f3: 05:1c:00:60:46:b9:b6:4c:6f:ef:2e:f6:94:55:cd: ed:fd:05:be:32:a6:6b:00:f6:db:ab:2d:5f:80:46: 1d:70:22:5d:9a:37:97:60:3f:a7:df:5f:43:5d:93: aa:3c:a9:c3:a3:eb:91:9b:7b:f6:93:a0:07:6d:f2: a1:1e:15:ae:08:d2:72:23:20:02:55:27:fa:49:14: 04:c6:e5:87:d9:b5:e5:cc:3d:65:ff:d9:db:14:75: a6:38:09:fb:26:0e:90:eb:eb:aa:32:a3:45:37:f2: ac:d0:1b:e3:6a:62:24:ff:ad:25:15:06:0d:83:c6: 42:b2:7a:65:c6:5b:bd:0c:b7:79:82:b2:54:80:0e: d5:4f:6e:7f:45:d1:f6:1d:76:82:88:bf:81:90:c6: 6a:01:4e:da:af:f7:10:d4:df:ff:fa:bf:94:9f:5b: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BF:0B:9F:A2:3B:29:57:C7:A4:B7:D2:52:A5:38:C5:85:EE:5F:36 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XL8Ln6I7KVfHpLfSUqU4xYXuXzY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.207.32.0/20 Signature Algorithm: sha256WithRSAEncryption b8:54:7d:ee:9b:b9:ef:53:f6:1d:b8:86:d0:a7:67:3a:e6:ff: 6a:3c:f9:cf:bd:4e:c3:3a:06:18:e8:b6:1f:86:04:b5:fa:3d: dd:ef:51:be:9b:4e:aa:24:67:a4:9e:1f:d0:70:56:5f:fb:3e: 08:30:f4:6c:1f:9c:31:0b:6c:67:88:70:72:de:33:da:b6:c1: 1f:fc:6e:d8:c0:26:15:73:61:b4:fe:e7:e8:1a:1b:1c:d8:2b: f4:f4:74:2f:12:39:c3:b8:88:b9:9c:ca:bd:fe:04:81:8a:24: 73:8f:2c:52:69:49:5b:55:6f:e2:fc:d8:d2:53:35:d0:68:75: 3c:d9:1b:95:30:0b:0b:c9:23:dc:12:64:df:6f:19:ed:9c:f6: 2d:1e:2e:dc:02:9b:99:f3:d2:0b:f2:0d:5c:db:a1:c0:4b:ac: 2f:0a:8d:49:be:68:0b:43:85:d1:a9:4b:c9:f6:d7:e6:d6:b6: ad:c8:2a:ad:be:f1:42:8b:eb:1a:3a:32:8c:24:4b:35:3b:44: 70:1b:12:25:15:12:45:1f:60:9e:82:dc:4e:01:81:ad:3d:2f: 2d:14:2c:e5:b0:84:34:66:1d:72:c0:4c:f6:a7:eb:09:6b:cd: df:53:4e:8c:9a:43:5a:0f:1d:02:ab:4b:99:e5:f5:ed:77:d4: e9:5d:29:6b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDQkYwQjlGQTIzQjI5 NTdDN0E0QjdEMjUyQTUzOEM1ODVFRTVGMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTL8qLShs1mzSytehYKh4Nqy3HxtEVGiCl9gtVM5xX5hsy5tol +PXA69pM1IojcZAKiShdho8NRcKIIKDYpR4GmX5MzxBvP9IA8v5IvtvU0xewLB6x bB6n8wUcAGBGubZMb+8u9pRVze39Bb4ypmsA9turLV+ARh1wIl2aN5dgP6ffX0Nd k6o8qcOj65Gbe/aToAdt8qEeFa4I0nIjIAJVJ/pJFATG5YfZteXMPWX/2dsUdaY4 CfsmDpDr66oyo0U38qzQG+NqYiT/rSUVBg2DxkKyemXGW70Mt3mCslSADtVPbn9F 0fYddoKIv4GQxmoBTtqv9xDU3//6v5SfW4I/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXL8Ln6I7KVfHpLfSUqU4xYXuXzYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1hMOExuNkk3S1ZmSHBMZlNVcVU0eFlY dVh6WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLzyAwDQYJ KoZIhvcNAQELBQADggEBALhUfe6bue9T9h24htCnZzrm/2o8+c+9TsM6Bhjoth+G BLX6Pd3vUb6bTqokZ6SeH9BwVl/7Pggw9GwfnDELbGeIcHLeM9q2wR/8btjAJhVz YbT+5+gaGxzYK/T0dC8SOcO4iLmcyr3+BIGKJHOPLFJpSVtVb+L82NJTNdBodTzZ G5UwCwvJI9wSZN9vGe2c9i0eLtwCm5nz0gvyDVzbocBLrC8KjUm+aAtDhdGpS8n2 1+bWtq3IKq2+8UKL6xo6MowkSzU7RHAbEiUVEkUfYJ6C3E4Bga09Ly0ULOWwhDRm HXLATPan6wlrzd9TToyaQ1oPHQKrS5nl9e131OldKWs= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org