$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/YnFsozYSskrlhDdT9dPKNHZACqI.roa File: YnFsozYSskrlhDdT9dPKNHZACqI.roa (raw, json) Hash identifier: d7KYpibcPe+7Qfpvxl4Re4oblyvR1aJPiCE7PXDd82c= Subject key identifier: 62:71:6C:A3:36:12:B2:4A:E5:84:37:53:F5:D3:CA:34:76:40:0A:A2 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 102A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YnFsozYSskrlhDdT9dPKNHZACqI.roa Signing time: Mon 26 Aug 2024 05:16:08 +0000 ROA not before: Mon 26 Aug 2024 05:16:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 210.200.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4138 (0x102a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=62716CA33612B24AE5843753F5D3CA3476400AA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:bb:e7:04:57:b6:94:ad:d3:71:cc:9e:e3: b6:20:44:28:90:cd:18:4e:16:31:e2:67:df:5f:31: d9:58:8f:18:8f:eb:92:b0:b0:ba:b1:6c:75:b0:94: 24:b9:ac:84:a0:b6:94:3f:7b:14:b3:e3:38:d8:d8: 12:76:9d:c6:9b:4c:78:19:af:38:2d:60:23:fb:d2: b3:de:85:9f:16:c5:a4:c0:91:ea:76:38:f5:93:90: f5:96:6a:be:e0:c7:48:36:8b:da:63:f7:f7:19:dd: 82:b4:28:ae:87:a4:0e:f5:93:db:d4:42:98:b7:2d: 4b:30:e9:d7:86:e3:fa:64:17:83:2d:a1:59:a3:5a: 46:b7:06:33:67:23:b7:ad:4f:ae:2a:c0:0a:d4:bf: 79:e9:e8:79:e4:af:6c:13:e0:56:92:48:a2:1c:9c: fe:8b:d3:08:4f:fa:2a:4b:bc:97:d8:0e:55:82:6b: dd:f0:55:4c:89:65:72:45:c1:9d:13:a9:63:11:a5: 54:0d:2b:65:3f:8d:9f:fd:21:87:d1:05:39:c4:b9: 45:ce:28:c7:e0:9f:67:e8:ea:63:b0:34:0b:01:37: cf:30:77:f1:99:8d:6c:cd:b9:9e:79:8a:c8:b9:24: 21:de:9a:3a:f8:f5:2f:d7:21:6f:9e:ed:22:1b:ed: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:71:6C:A3:36:12:B2:4A:E5:84:37:53:F5:D3:CA:34:76:40:0A:A2 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YnFsozYSskrlhDdT9dPKNHZACqI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.192.0/18 Signature Algorithm: sha256WithRSAEncryption ab:89:b7:87:74:ae:9b:86:81:e4:15:36:92:f7:02:bb:cb:4d: 09:05:a1:c3:27:ec:ed:e0:db:fe:06:24:e8:1e:51:b5:cd:ef: ac:67:4c:0d:d5:dc:2f:d6:11:9d:bf:69:8b:f9:75:17:29:d5: 9d:bc:a9:5a:c2:23:77:6a:57:8b:c0:65:a5:91:f0:3b:cd:a7: 12:b4:3f:61:46:a7:a4:ad:70:20:f0:c3:99:f8:a7:1a:5c:d7: ba:64:ba:71:f3:02:dc:51:39:81:bc:f7:ce:c3:3b:ba:88:ef: f9:41:ca:e6:11:33:5c:c5:72:ee:d2:31:00:6e:27:3e:7b:75: 4c:db:35:a9:85:f2:ec:be:71:db:da:d9:eb:5e:52:4c:f7:58: b2:37:b0:86:36:73:8e:dd:44:80:df:bf:63:88:a0:78:b9:5b: e2:ae:e3:87:4c:d7:b0:1c:4c:44:79:52:a0:f0:1b:ef:78:e8: c2:43:f3:51:25:c0:97:db:cd:b5:e9:d5:5f:22:83:d4:9e:f1: 8e:7a:cc:ac:9b:ac:e1:80:4a:66:9a:f5:75:0b:45:f9:88:73: 29:e3:15:ed:31:cf:2a:6c:6a:25:a9:04:4c:72:b6:44:a1:9c: cb:0a:d4:20:79:53:f4:02:59:2a:9c:ef:d0:3d:02:66:40:c6: 0e:5c:88:9f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICECowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyNzE2Q0EzMzYxMkIy NEFFNTg0Mzc1M0Y1RDNDQTM0NzY0MDBBQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCv4rvnBFe2lK3Tccye47YgRCiQzRhOFjHiZ99fMdlYjxiP65Kw sLqxbHWwlCS5rISgtpQ/exSz4zjY2BJ2ncabTHgZrzgtYCP70rPehZ8WxaTAkep2 OPWTkPWWar7gx0g2i9pj9/cZ3YK0KK6HpA71k9vUQpi3LUsw6deG4/pkF4MtoVmj Wka3BjNnI7etT64qwArUv3np6Hnkr2wT4FaSSKIcnP6L0whP+ipLvJfYDlWCa93w VUyJZXJFwZ0TqWMRpVQNK2U/jZ/9IYfRBTnEuUXOKMfgn2fo6mOwNAsBN88wd/GZ jWzNuZ55isi5JCHemjr49S/XIW+e7SIb7Vt1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUYnFsozYSskrlhDdT9dPKNHZACqIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1luRnNvellTc2tybGhEZFQ5ZFBLTkha QUNxSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyMAwDQYJ KoZIhvcNAQELBQADggEBAKuJt4d0rpuGgeQVNpL3ArvLTQkFocMn7O3g2/4GJOge UbXN76xnTA3V3C/WEZ2/aYv5dRcp1Z28qVrCI3dqV4vAZaWR8DvNpxK0P2FGp6St cCDww5n4pxpc17pkunHzAtxROYG8987DO7qI7/lByuYRM1zFcu7SMQBuJz57dUzb NamF8uy+cdva2eteUkz3WLI3sIY2c47dRIDfv2OIoHi5W+Ku44dM17AcTER5UqDw G+946MJD81ElwJfbzbXp1V8ig9Se8Y56zKybrOGASmaa9XULRfmIcynjFe0xzyps aiWpBExytkShnMsK1CB5U/QCWSqc79A9AmZAxg5ciJ8= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org