$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ZSHuNfJyRGwLWPwLNqjEBnQ-iec.roa File: ZSHuNfJyRGwLWPwLNqjEBnQ-iec.roa (raw, json) Hash identifier: q2ueSIW39s5gZmEd1v60Z56lnWVYJK30sNTs4Ner+X0= Subject key identifier: 65:21:EE:35:F2:72:44:6C:0B:58:FC:0B:36:A8:C4:06:74:3E:89:E7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 101D Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZSHuNfJyRGwLWPwLNqjEBnQ-iec.roa Signing time: Mon 26 Aug 2024 05:16:05 +0000 ROA not before: Mon 26 Aug 2024 05:16:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 210.201.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4125 (0x101d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6521EE35F272446C0B58FC0B36A8C406743E89E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:5c:70:b9:16:50:90:b3:95:0b:b7:5e:1f: 0f:aa:9e:b4:9d:a0:c4:23:20:a7:50:72:9b:75:b7: 60:b3:3f:e6:fb:01:c8:12:3b:f3:80:25:8d:93:b5: a3:d8:d9:b2:f7:b2:47:fc:5e:e9:74:26:e0:a9:27: ce:fa:4d:e7:60:a0:a7:48:c7:87:88:e6:a4:56:f4: d2:02:5a:aa:cd:94:03:f2:f7:b2:83:a4:14:ec:78: fc:a5:f0:ba:31:77:bd:30:18:ff:71:f1:cc:75:cb: cb:9b:9a:53:92:4e:25:38:d4:70:2f:f2:a7:d4:fb: 9b:54:c0:7b:d6:f2:94:fd:7f:a7:02:c3:3e:32:ef: 16:14:a2:c3:25:90:ec:39:71:37:54:e9:6e:45:8a: 77:71:66:58:3f:29:4d:9a:f1:05:07:a5:83:8c:15: 9f:e3:cd:40:ba:bd:a8:12:07:6a:e4:41:f6:4d:d6: f6:c5:a4:e5:ff:be:00:0b:f1:f9:41:c3:b3:1a:57: 4e:c4:a9:63:7f:df:66:25:d7:c6:4d:be:eb:ca:df: 77:41:e9:78:83:6a:58:6e:71:27:3f:3c:cb:06:a4: 66:df:64:88:84:10:38:e2:18:5e:16:3d:5d:4c:3a: 02:66:f2:78:6f:7e:62:13:40:12:9e:d3:7c:db:14: b1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:EE:35:F2:72:44:6C:0B:58:FC:0B:36:A8:C4:06:74:3E:89:E7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZSHuNfJyRGwLWPwLNqjEBnQ-iec.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.60.0/23 Signature Algorithm: sha256WithRSAEncryption ca:e4:33:9e:38:f4:cc:03:f7:73:f3:29:da:e3:e0:ca:ac:e9: a0:c8:18:1a:4a:27:1e:37:47:6f:08:ea:fa:5e:ff:7b:23:d0: 71:b7:20:68:b1:bb:78:04:ca:7b:45:e6:0c:83:e2:e3:5f:57: 61:f5:43:67:e2:d5:84:e1:c0:1f:64:1a:16:a2:3f:a4:12:0a: 1f:49:8f:b9:7e:8d:dd:8e:7a:56:94:ba:f6:7a:76:67:27:2a: 87:ef:2c:8c:68:3a:79:1e:39:2e:66:a6:1c:df:d6:ef:ea:17: 7c:83:90:ab:7f:64:3c:86:9e:bf:70:c4:45:2f:c3:47:7d:c6: ea:be:69:2e:ae:e6:77:71:88:1b:82:78:68:c9:af:2a:28:bf: aa:39:c6:5d:5c:2a:6d:05:db:5a:10:24:6d:8b:fd:97:da:36: 35:1a:10:2f:ec:d4:7e:d0:19:b9:ba:8b:33:34:46:e5:b4:b7: c2:1c:7e:29:d0:a0:1f:61:b9:19:fb:5a:32:73:07:28:80:c9: ec:0b:5f:cb:d0:da:57:64:a4:c7:f6:e6:d9:d6:f8:cc:3c:e1: dc:70:49:09:53:af:93:a9:8e:92:6c:8d:a2:7a:05:f2:89:b8: 07:50:9e:28:5d:fa:ae:be:44:32:6e:0c:2a:08:35:28:28:b1: 13:ce:c0:78 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY1MjFFRTM1RjI3MjQ0 NkMwQjU4RkMwQjM2QThDNDA2NzQzRTg5RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaO1xwuRZQkLOVC7deHw+qnrSdoMQjIKdQcpt1t2CzP+b7AcgS O/OAJY2TtaPY2bL3skf8Xul0JuCpJ876TedgoKdIx4eI5qRW9NICWqrNlAPy97KD pBTsePyl8Loxd70wGP9x8cx1y8ubmlOSTiU41HAv8qfU+5tUwHvW8pT9f6cCwz4y 7xYUosMlkOw5cTdU6W5FindxZlg/KU2a8QUHpYOMFZ/jzUC6vagSB2rkQfZN1vbF pOX/vgAL8flBw7MaV07EqWN/32Yl18ZNvuvK33dB6XiDalhucSc/PMsGpGbfZIiE EDjiGF4WPV1MOgJm8nhvfmITQBKe03zbFLF3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZSHuNfJyRGwLWPwLNqjEBnQ+iecwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1pTSHVOZkp5Ukd3TFdQd0xOcWpFQm5R LWllYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSyTwwDQYJ KoZIhvcNAQELBQADggEBAMrkM5449MwD93PzKdrj4Mqs6aDIGBpKJx43R28I6vpe /3sj0HG3IGixu3gEyntF5gyD4uNfV2H1Q2fi1YThwB9kGhaiP6QSCh9Jj7l+jd2O elaUuvZ6dmcnKofvLIxoOnkeOS5mphzf1u/qF3yDkKt/ZDyGnr9wxEUvw0d9xuq+ aS6u5ndxiBuCeGjJryoov6o5xl1cKm0F21oQJG2L/ZfaNjUaEC/s1H7QGbm6izM0 RuW0t8IcfinQoB9huRn7WjJzByiAyewLX8vQ2ldkpMf25tnW+Mw84dxwSQlTr5Op jpJsjaJ6BfKJuAdQnihd+q6+RDJuDCoINSgosRPOwHg= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org