$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/XbB-iV6ldtlg7nhQWR9P7s7Tzsg.roa File: XbB-iV6ldtlg7nhQWR9P7s7Tzsg.roa (raw, json) Hash identifier: TlzKpjqF18A0AFUdMNx7Hl94Gsi/VEkuKUzYHvBJdgE= Subject key identifier: 5D:B0:7E:89:5E:A5:76:D9:60:EE:78:50:59:1F:4F:EE:CE:D3:CE:C8 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 100E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XbB-iV6ldtlg7nhQWR9P7s7Tzsg.roa Signing time: Mon 26 Aug 2024 05:16:01 +0000 ROA not before: Mon 26 Aug 2024 05:16:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 124.218.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4110 (0x100e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5DB07E895EA576D960EE7850591F4FEECED3CEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a2:e7:01:e5:2a:f2:2b:2d:37:c6:74:59:8b: ca:9a:43:c5:e4:b8:66:99:24:05:9c:ff:fd:30:3d: 5b:f2:6e:c1:53:cb:bd:34:01:d7:6f:2e:1d:e9:52: 5f:e9:54:23:09:1a:c2:68:8f:6f:e4:c3:e7:78:06: 3e:ed:a1:64:88:d3:e0:96:a4:6d:3b:71:de:b7:07: d9:4e:f1:d0:1c:d2:11:9b:d1:c7:29:f7:4c:1d:b5: 76:84:19:6a:c6:39:95:f4:da:80:13:7f:44:b9:19: 1c:de:9a:8e:76:37:b7:07:2e:a5:40:d6:dc:3a:e0: e4:e7:92:af:67:c0:47:02:9e:d8:40:da:66:f2:db: 59:cd:b2:ea:5e:af:99:d0:25:81:f8:43:2c:09:f9: d4:27:08:ae:16:86:28:5d:b5:ab:e0:5e:f3:40:09: 17:01:05:00:42:9b:34:50:a9:58:19:1d:1f:fd:4a: 2c:df:b5:29:ee:2d:f1:2a:91:e1:c5:3d:7e:89:ef: b6:81:8e:77:72:80:b5:80:52:5c:4f:a9:83:de:12: 94:de:c4:bd:ee:30:96:85:38:51:67:c8:8c:cf:c5: fe:2b:d2:54:d3:e8:64:07:d3:1b:8d:d6:2e:84:19: b1:36:b9:f4:37:a4:f0:18:e7:59:ce:89:7c:e0:17: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B0:7E:89:5E:A5:76:D9:60:EE:78:50:59:1F:4F:EE:CE:D3:CE:C8 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XbB-iV6ldtlg7nhQWR9P7s7Tzsg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.100.0/22 Signature Algorithm: sha256WithRSAEncryption 03:ef:fa:5c:26:68:dc:0b:9b:65:91:27:e1:1b:90:8a:dd:3c: 63:21:49:b1:58:86:79:7f:f5:d6:de:0a:69:c7:c0:fe:4e:1d: 0a:a6:8e:31:0b:40:13:64:ff:ee:af:ac:91:94:42:be:21:99: b4:67:c6:7e:94:f9:2f:48:e8:9c:3b:7e:8b:12:79:08:96:d7: 75:12:1e:c7:b4:8d:eb:41:54:05:0c:a9:b3:f0:2b:8b:ba:ed: 57:bd:9c:54:99:91:a8:43:b2:d2:fc:9b:de:a2:f1:b8:d0:69: 77:8b:e9:af:fc:be:72:51:e5:94:06:78:43:f9:9e:78:45:2f: 68:0f:2b:0a:b3:9f:38:78:26:a3:33:88:8c:75:6a:c2:5e:9e: 2f:96:f1:70:b9:39:a5:03:96:ce:a1:6e:cd:fe:6a:ec:63:b1: 28:4f:f7:fa:0f:96:b8:b7:4e:9b:a8:ab:0c:53:69:34:e6:b4: a2:f8:6a:51:fc:19:04:b1:e8:fa:77:0c:44:3e:fc:16:60:26: 98:4d:67:56:a2:62:69:5c:b3:98:a9:62:e2:09:9f:48:13:a7: 4d:20:dc:26:a3:bd:af:88:ba:4f:7c:08:09:ba:49:48:10:bb: 8c:f7:8f:ce:08:18:00:03:09:f9:89:b5:fd:80:e5:d8:3d:55: 79:e3:1a:ae -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEA4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVEQjA3RTg5NUVBNTc2 RDk2MEVFNzg1MDU5MUY0RkVFQ0VEM0NFQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCVoucB5SryKy03xnRZi8qaQ8XkuGaZJAWc//0wPVvybsFTy700 AddvLh3pUl/pVCMJGsJoj2/kw+d4Bj7toWSI0+CWpG07cd63B9lO8dAc0hGb0ccp 90wdtXaEGWrGOZX02oATf0S5GRzemo52N7cHLqVA1tw64OTnkq9nwEcCnthA2mby 21nNsuper5nQJYH4QywJ+dQnCK4WhihdtavgXvNACRcBBQBCmzRQqVgZHR/9Sizf tSnuLfEqkeHFPX6J77aBjndygLWAUlxPqYPeEpTexL3uMJaFOFFnyIzPxf4r0lTT 6GQH0xuN1i6EGbE2ufQ3pPAY51nOiXzgF4aRAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXbB+iV6ldtlg7nhQWR9P7s7TzsgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1hiQi1pVjZsZHRsZzduaFFXUjlQN3M3 VHpzZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mQwDQYJ KoZIhvcNAQELBQADggEBAAPv+lwmaNwLm2WRJ+EbkIrdPGMhSbFYhnl/9dbeCmnH wP5OHQqmjjELQBNk/+6vrJGUQr4hmbRnxn6U+S9I6Jw7fosSeQiW13USHse0jetB VAUMqbPwK4u67Ve9nFSZkahDstL8m96i8bjQaXeL6a/8vnJR5ZQGeEP5nnhFL2gP Kwqznzh4JqMziIx1asJeni+W8XC5OaUDls6hbs3+auxjsShP9/oPlri3TpuoqwxT aTTmtKL4alH8GQSx6Pp3DEQ+/BZgJphNZ1aiYmlcs5ipYuIJn0gTp00g3Cajva+I uk98CAm6SUgQu4z3j84IGAADCfmJtf2A5dg9VXnjGq4= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org