$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ZCW0ExvFTHBi5S8ipYZjRSlI0YY.roa File: ZCW0ExvFTHBi5S8ipYZjRSlI0YY.roa (raw, json) Hash identifier: b+HYhr2rmdS9Hg4EOe7bX1umZjWWxAWbkdSykexJVTQ= Subject key identifier: 64:25:B4:13:1B:C5:4C:70:62:E5:2F:22:A5:86:63:45:29:48:D1:86 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10B4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZCW0ExvFTHBi5S8ipYZjRSlI0YY.roa Signing time: Mon 26 Aug 2024 05:16:42 +0000 ROA not before: Mon 26 Aug 2024 05:16:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131142 IP address blocks: 223.22.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4276 (0x10b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6425B4131BC54C7062E52F22A58663452948D186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d7:92:08:16:15:00:03:b5:c4:ac:b0:29:e7: 4d:31:38:09:24:61:ec:10:6c:ba:67:b4:7a:5f:86: 75:79:dc:3b:4e:46:e2:7a:c5:0f:74:3b:60:58:3a: 58:8f:96:b6:7d:38:d3:d7:64:48:89:10:0e:53:3b: 62:ae:f8:33:88:b3:3d:3f:9a:53:80:b0:b7:2c:67: ea:eb:ac:01:e6:64:b2:9f:b7:31:b8:4c:24:35:48: d1:64:64:bb:f6:d6:b7:7b:0d:16:fc:4e:a0:4c:e6: 48:1a:45:98:bb:a1:93:5e:e0:ac:72:c6:52:49:41: 43:6f:65:02:16:7f:9c:a2:df:58:8f:5f:ec:bd:fd: 8b:7e:6a:ab:e7:f8:0d:d9:6e:23:ce:e4:36:da:f1: 55:ba:89:87:a8:4b:e7:52:3b:9b:d4:37:fc:a4:f4: 83:9d:f5:4b:ef:ee:15:db:3b:47:ce:fd:ee:62:65: 03:7b:a8:a7:19:d1:95:ef:69:3d:8b:2c:d0:8b:72: b5:ae:e9:c2:65:c3:54:a3:91:8f:a6:3f:1c:9b:b2: 39:fb:b3:1a:63:4c:45:15:dd:19:81:36:f7:95:df: 96:d8:2d:7f:19:34:f7:89:8e:3c:5c:e7:49:03:7e: f6:5b:6d:23:5c:41:37:b1:3d:4e:b1:9f:f9:b1:19: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:25:B4:13:1B:C5:4C:70:62:E5:2F:22:A5:86:63:45:29:48:D1:86 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZCW0ExvFTHBi5S8ipYZjRSlI0YY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.252.0/22 Signature Algorithm: sha256WithRSAEncryption bd:3a:6e:35:d2:14:13:5f:e5:2d:89:b1:60:4a:4d:ee:65:9d: c8:3d:fb:d7:86:fc:f6:6b:e0:08:4a:00:c2:6b:27:4c:d7:28: 51:30:f4:b6:b4:f8:33:57:ff:0d:9d:c7:c0:eb:19:02:55:18: c4:05:6a:fa:b0:38:1c:7e:36:2f:04:c2:c6:07:6c:b3:55:06: 6b:c3:6c:63:aa:90:53:ef:7e:f5:fa:05:44:2b:9d:b2:56:10: 69:14:70:13:52:14:fe:dd:16:36:0b:55:0e:b5:e2:a5:55:68: fa:cf:ca:86:e6:62:8d:fe:8a:49:d4:22:d2:81:4c:70:14:40: d9:ee:f8:a1:ac:65:1e:a4:39:e9:2b:27:1d:fb:03:0c:64:06: e5:51:19:ba:11:c8:a5:b1:3c:13:ff:7e:27:a5:cd:39:d8:cc: d7:3d:a1:9d:38:52:7b:72:00:44:8f:8c:59:01:87:6e:5f:6c: 7a:4b:ff:7c:ea:ad:92:20:1d:f5:63:e6:47:f9:b1:bc:05:90: af:68:27:3b:b3:3e:70:6e:4c:cc:d2:04:49:ff:6e:42:58:a1: f7:2e:d2:f2:a7:4d:1d:28:dd:69:5f:97:b8:18:04:dd:bf:ee: b3:e6:4e:a5:6f:93:53:54:7b:10:5b:58:95:d9:76:90:88:18: 82:9e:22:28 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICELQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0MjVCNDEzMUJDNTRD NzA2MkU1MkYyMkE1ODY2MzQ1Mjk0OEQxODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa15IIFhUAA7XErLAp500xOAkkYewQbLpntHpfhnV53DtORuJ6 xQ90O2BYOliPlrZ9ONPXZEiJEA5TO2Ku+DOIsz0/mlOAsLcsZ+rrrAHmZLKftzG4 TCQ1SNFkZLv21rd7DRb8TqBM5kgaRZi7oZNe4KxyxlJJQUNvZQIWf5yi31iPX+y9 /Yt+aqvn+A3ZbiPO5Dba8VW6iYeoS+dSO5vUN/yk9IOd9Uvv7hXbO0fO/e5iZQN7 qKcZ0ZXvaT2LLNCLcrWu6cJlw1SjkY+mPxybsjn7sxpjTEUV3RmBNveV35bYLX8Z NPeJjjxc50kDfvZbbSNcQTexPU6xn/mxGVt7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZCW0ExvFTHBi5S8ipYZjRSlI0YYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1pDVzBFeHZGVEhCaTVTOGlwWVpqUlNs STBZWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALfFvwwDQYJ KoZIhvcNAQELBQADggEBAL06bjXSFBNf5S2JsWBKTe5lncg9+9eG/PZr4AhKAMJr J0zXKFEw9La0+DNX/w2dx8DrGQJVGMQFavqwOBx+Ni8EwsYHbLNVBmvDbGOqkFPv fvX6BUQrnbJWEGkUcBNSFP7dFjYLVQ614qVVaPrPyobmYo3+iknUItKBTHAUQNnu +KGsZR6kOekrJx37AwxkBuVRGboRyKWxPBP/fielzTnYzNc9oZ04UntyAESPjFkB h25fbHpL/3zqrZIgHfVj5kf5sbwFkK9oJzuzPnBuTMzSBEn/bkJYofcu0vKnTR0o 3Wlfl7gYBN2/7rPmTqVvk1NUexBbWJXZdpCIGIKeIig= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:05 2024 by rpki-client on console-ams.rpki-client.org