$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Z5e5p4yNpRGt4wHX2Uo2AWot0DA.roa File: Z5e5p4yNpRGt4wHX2Uo2AWot0DA.roa (raw, json) Hash identifier: 7yF/mDIJ3yps36PO8soj1gG/WddoGH9ijRxWpjK9Ls0= Subject key identifier: 67:97:B9:A7:8C:8D:A5:11:AD:E3:01:D7:D9:4A:36:01:6A:2D:D0:30 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1054 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z5e5p4yNpRGt4wHX2Uo2AWot0DA.roa Signing time: Mon 26 Aug 2024 05:16:19 +0000 ROA not before: Mon 26 Aug 2024 05:16:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 124.218.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4180 (0x1054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6797B9A78C8DA511ADE301D7D94A36016A2DD030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:ef:6f:c9:b9:59:4a:4b:0c:96:15:40:2b: 0f:d9:92:7e:f9:83:2b:90:61:99:ec:96:76:5c:78: 44:88:b7:6c:8f:13:2b:8d:7c:13:6d:8c:32:59:71: ab:dd:2e:19:5f:41:97:f4:33:4a:0a:d1:fd:6f:bb: 1e:d1:17:ea:fa:97:61:c8:52:73:4c:8c:ad:c7:b2: 3c:7b:cd:d3:3b:9a:8b:c0:1c:54:4e:fe:e1:b0:4f: d1:bd:57:ae:7e:05:d9:60:fd:ee:4d:dc:6e:83:21: 4f:2f:fa:a0:1f:4b:a0:bd:f2:f5:21:d4:2b:20:98: 6f:bc:7a:5b:aa:95:7b:e3:9e:4f:cb:57:25:6c:5a: a0:c6:87:c6:18:6b:af:58:f9:fb:ad:50:09:06:db: b4:5a:dc:13:69:d4:8b:88:f9:11:77:15:44:83:7a: 4a:f4:be:24:67:b4:27:24:55:fc:43:de:25:cd:80: bf:35:57:ea:61:d3:40:6c:de:57:9d:61:a7:16:66: 42:e6:93:77:80:ff:12:85:62:78:11:e9:41:0d:df: ab:c1:72:f7:50:92:bb:71:31:f5:0d:be:d0:32:40: 6f:a4:e2:5a:db:45:80:c2:b5:4a:93:0f:10:1f:df: c9:f6:88:ab:80:7f:9d:e1:a6:ce:a2:17:59:08:dc: 47:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:97:B9:A7:8C:8D:A5:11:AD:E3:01:D7:D9:4A:36:01:6A:2D:D0:30 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z5e5p4yNpRGt4wHX2Uo2AWot0DA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.116.0/22 Signature Algorithm: sha256WithRSAEncryption b8:f3:51:41:07:e8:bd:b7:40:e4:e6:01:19:12:55:79:28:89: 01:50:a2:9e:7f:f4:1d:64:12:bc:6a:08:c5:05:fe:2b:c1:2c: ef:9b:b4:4e:5d:54:2b:bf:ad:ab:34:86:fb:c5:53:b9:16:72: f9:00:6d:b4:75:c5:4b:6e:73:35:83:36:84:b7:db:61:cc:20: 11:a2:81:6f:9e:3c:63:36:30:bb:b3:68:cb:71:92:20:5c:70: 4d:b9:8f:f0:6f:7f:7e:c2:20:b6:51:4f:02:3a:9b:ad:df:2d: 5b:08:32:08:94:57:7d:b3:df:c7:cd:f9:10:d3:f9:2b:6f:17: 10:80:ef:51:36:5a:fb:80:52:7e:d9:85:fd:4a:34:fe:b2:b9: 10:d5:9a:09:b6:55:1b:be:48:a8:d9:25:41:8d:f6:d2:f8:ba: 24:86:86:f8:9c:65:22:03:76:08:c1:6d:d6:92:76:57:ce:bf: 37:90:36:aa:e4:b8:2f:fa:d0:d9:f5:f2:ed:9a:ef:3c:4a:60: 3e:f7:ef:a3:fb:a3:ee:e1:6f:f1:05:d3:a6:65:02:94:50:65: f8:c8:aa:1c:5d:61:19:90:11:74:5e:b4:7f:98:15:63:89:dc: dc:38:95:9c:fe:c4:09:65:e3:d4:d2:72:c3:25:16:e2:7a:b3: 0c:d4:ee:54 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY3OTdCOUE3OEM4REE1 MTFBREUzMDFEN0Q5NEEzNjAxNkEyREQwMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVGu9vyblZSksMlhVAKw/Zkn75gyuQYZnslnZceESIt2yPEyuN fBNtjDJZcavdLhlfQZf0M0oK0f1vux7RF+r6l2HIUnNMjK3Hsjx7zdM7movAHFRO /uGwT9G9V65+Bdlg/e5N3G6DIU8v+qAfS6C98vUh1CsgmG+8eluqlXvjnk/LVyVs WqDGh8YYa69Y+futUAkG27Ra3BNp1IuI+RF3FUSDekr0viRntCckVfxD3iXNgL81 V+ph00Bs3ledYacWZkLmk3eA/xKFYngR6UEN36vBcvdQkrtxMfUNvtAyQG+k4lrb RYDCtUqTDxAf38n2iKuAf53hps6iF1kI3EeTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZ5e5p4yNpRGt4wHX2Uo2AWot0DAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1o1ZTVwNHlOcFJHdDR3SFgyVW8yQVdv dDBEQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82nQwDQYJ KoZIhvcNAQELBQADggEBALjzUUEH6L23QOTmARkSVXkoiQFQop5/9B1kErxqCMUF /ivBLO+btE5dVCu/ras0hvvFU7kWcvkAbbR1xUtuczWDNoS322HMIBGigW+ePGM2 MLuzaMtxkiBccE25j/Bvf37CILZRTwI6m63fLVsIMgiUV32z38fN+RDT+StvFxCA 71E2WvuAUn7Zhf1KNP6yuRDVmgm2VRu+SKjZJUGN9tL4uiSGhvicZSIDdgjBbdaS dlfOvzeQNqrkuC/60Nn18u2a7zxKYD7376P7o+7hb/EF06ZlApRQZfjIqhxdYRmQ EXRetH+YFWOJ3Nw4lZz+xAll49TScsMlFuJ6swzU7lQ= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:37 2024 by rpki-client on console-fra.rpki-client.org