$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/XMArODk6EE0Va9ZUIqva1IqmP2g.roa File: XMArODk6EE0Va9ZUIqva1IqmP2g.roa (raw, json) Hash identifier: jO+/X9sHE81Kb370Bb2Vhj+qqScEU2kYJYx1Z5JIpVA= Subject key identifier: 5C:C0:2B:38:39:3A:10:4D:15:6B:D6:54:22:AB:DA:D4:8A:A6:3F:68 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10B5 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XMArODk6EE0Va9ZUIqva1IqmP2g.roa Signing time: Mon 26 Aug 2024 05:16:42 +0000 ROA not before: Mon 26 Aug 2024 05:16:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 219.91.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4277 (0x10b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CC02B38393A104D156BD65422ABDAD48AA63F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e5:67:47:cf:8c:ec:3a:c8:dd:48:14:2f:51: dc:80:8f:00:5b:2b:2e:40:dc:5c:2a:30:c6:ce:05: 02:de:fc:49:71:73:91:f9:54:74:3a:d0:45:ad:b2: d8:44:7b:d8:cd:60:2e:b8:b4:be:ba:0a:53:0a:b9: e6:30:5a:2f:44:9d:6d:b0:6d:d1:56:f8:99:f1:e4: d8:3f:c3:72:3e:28:9c:01:1c:d4:59:37:05:b9:f0: 42:ef:ef:30:5d:d7:1d:43:0a:fa:4b:c7:fc:d8:fe: e1:fd:cb:5a:c8:b7:c1:69:96:78:bc:cc:e8:b5:ab: 18:d8:bd:00:d3:fd:2b:75:9a:64:5b:fb:39:10:05: 72:d1:18:08:aa:6a:e1:92:26:8d:8a:c1:30:67:cf: 11:e2:a8:12:f3:c6:32:93:27:67:b5:ec:91:61:76: c3:81:a4:ca:5f:c4:16:3c:c6:3b:a5:94:53:77:0c: 01:63:c0:7d:54:70:14:ba:28:d8:d1:e8:56:57:17: 85:59:3a:2a:16:34:c0:46:2d:76:ac:c3:be:68:5f: ad:23:b6:ef:dc:a3:1d:3d:5a:ef:ff:4b:cb:29:d6: b3:c0:2a:7e:0b:d0:aa:78:31:d3:95:17:5e:fb:28: 1d:a8:38:8f:86:28:26:2c:b6:60:01:54:e4:0d:66: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C0:2B:38:39:3A:10:4D:15:6B:D6:54:22:AB:DA:D4:8A:A6:3F:68 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XMArODk6EE0Va9ZUIqva1IqmP2g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8d:08:5c:a8:d9:60:f3:e5:23:fc:41:32:24:82:22:fb:e8:36: 85:02:e2:15:55:1e:5f:75:87:61:84:45:a6:f4:f2:aa:70:d5: 41:e8:d0:bc:ce:ce:59:e8:27:84:2a:66:80:b3:42:bd:6f:d6: ad:58:45:b4:17:4b:a9:8e:99:51:22:6b:1c:71:e7:97:46:6c: 7c:0a:b0:3e:d4:18:10:67:11:77:07:4f:7c:3d:fc:c9:4c:3a: 71:3f:bb:e1:f4:28:fb:4f:31:93:cc:eb:92:31:ea:42:d1:f9: be:25:0a:46:2b:c8:46:50:75:74:08:93:db:c7:2d:c9:b3:c2: 09:9d:1f:c5:0c:45:5a:e3:e9:e1:2c:d1:ea:3a:a1:a4:02:1a: 44:33:05:30:c4:33:4b:6f:c3:c2:75:ec:77:da:db:ae:51:af: 5c:90:66:29:9c:b6:50:84:42:63:0e:bf:67:9c:2d:65:d2:9d: fc:f7:2a:53:ed:a9:b8:a6:55:fd:81:b0:b8:9f:1f:2c:5d:d3: 83:21:7e:a7:e4:4d:6d:e3:e5:3e:f0:16:79:36:11:dc:9a:86: cf:3b:3a:1b:8f:47:dc:32:3f:fa:05:68:37:9e:68:cf:79:2f: 77:ae:df:71:3e:27:24:02:be:4f:c4:98:71:1d:69:19:e3:a5: 72:31:de:73 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICELUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDQzAyQjM4MzkzQTEw NEQxNTZCRDY1NDIyQUJEQUQ0OEFBNjNGNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj5WdHz4zsOsjdSBQvUdyAjwBbKy5A3FwqMMbOBQLe/Elxc5H5 VHQ60EWtsthEe9jNYC64tL66ClMKueYwWi9EnW2wbdFW+Jnx5Ng/w3I+KJwBHNRZ NwW58ELv7zBd1x1DCvpLx/zY/uH9y1rIt8Fplni8zOi1qxjYvQDT/St1mmRb+zkQ BXLRGAiqauGSJo2KwTBnzxHiqBLzxjKTJ2e17JFhdsOBpMpfxBY8xjullFN3DAFj wH1UcBS6KNjR6FZXF4VZOioWNMBGLXasw75oX60jtu/cox09Wu//S8sp1rPAKn4L 0Kp4MdOVF177KB2oOI+GKCYstmABVOQNZgTJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXMArODk6EE0Va9ZUIqva1IqmP2gwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1hNQXJPRGs2RUUwVmE5WlVJcXZhMUlx bVAyZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfbWwAwDQYJ KoZIhvcNAQELBQADggEBAI0IXKjZYPPlI/xBMiSCIvvoNoUC4hVVHl91h2GERab0 8qpw1UHo0LzOzlnoJ4QqZoCzQr1v1q1YRbQXS6mOmVEiaxxx55dGbHwKsD7UGBBn EXcHT3w9/MlMOnE/u+H0KPtPMZPM65Ix6kLR+b4lCkYryEZQdXQIk9vHLcmzwgmd H8UMRVrj6eEs0eo6oaQCGkQzBTDEM0tvw8J17Hfa265Rr1yQZimctlCEQmMOv2ec LWXSnfz3KlPtqbimVf2BsLifHyxd04MhfqfkTW3j5T7wFnk2Edyahs87OhuPR9wy P/oFaDeeaM95L3eu33E+JyQCvk/EmHEdaRnjpXIx3nM= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org