$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ZbRDDnVdsYmv3Uz3fiC6sI534LY.roa File: ZbRDDnVdsYmv3Uz3fiC6sI534LY.roa (raw, json) Hash identifier: YOUhMHMoruoerDDn6zZ+b9fLltBimHk8TU8xrDvU1Ds= Subject key identifier: 65:B4:43:0E:75:5D:B1:89:AF:DD:4C:F7:7E:20:BA:B0:8E:77:E0:B6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1001 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZbRDDnVdsYmv3Uz3fiC6sI534LY.roa Signing time: Mon 26 Aug 2024 05:15:58 +0000 ROA not before: Mon 26 Aug 2024 05:15:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 203.79.128.0/17 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4097 (0x1001) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:58 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=65B4430E755DB189AFDD4CF77E20BAB08E77E0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:8a:61:f7:60:7d:1a:73:7f:d0:b8:db:d6: 37:92:8f:78:4d:59:3c:f0:a0:16:5f:49:8c:72:b0: ba:fa:06:50:fc:44:c8:92:82:e0:20:00:99:4a:9e: 67:c8:88:f5:58:42:27:76:6a:17:f6:66:95:eb:20: 9c:4e:f0:9e:06:b1:ca:bb:d6:61:fe:8a:30:22:b5: 66:3d:68:16:3d:b7:55:0a:6c:6b:bb:b2:f7:b6:da: bc:a8:a3:fb:b8:32:15:d2:50:a7:78:85:c0:7c:87: a0:f7:61:00:70:f9:bd:77:fd:17:ad:97:97:e0:94: f4:42:d0:ab:ad:98:81:a2:f5:cc:12:21:18:cb:28: 22:16:d0:ec:85:bf:09:67:07:74:5d:10:98:cb:76: da:33:35:14:ff:a8:8e:39:38:e2:40:32:b9:f8:4a: c6:49:b3:9c:a4:e3:78:ff:dc:65:fb:35:f5:4e:fa: a4:96:70:9e:84:52:f1:8d:76:d2:b4:2a:77:1e:f7: 6c:01:9b:95:ef:f0:99:5e:c5:d2:10:39:79:1b:98: 95:45:f3:91:7d:4e:ce:4a:40:84:6f:cf:2b:37:ba: 3e:32:a8:75:62:85:4f:3f:3f:46:24:b9:cd:f3:54: 8a:39:47:d5:1a:5b:8b:ac:a6:95:09:57:80:89:13: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B4:43:0E:75:5D:B1:89:AF:DD:4C:F7:7E:20:BA:B0:8E:77:E0:B6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ZbRDDnVdsYmv3Uz3fiC6sI534LY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9e:c1:c6:c8:30:6d:a0:49:fe:88:e1:ad:76:d4:31:9e:71:c9: 5a:2a:c0:fb:04:92:17:bf:03:f9:78:a0:27:3d:c2:06:b6:8d: d6:8a:32:d9:24:87:0f:32:dc:66:0e:35:82:d3:00:9c:5e:ac: 7b:83:68:0e:c2:97:e2:c5:ad:ec:07:33:b2:9a:b9:b3:fb:f8: 01:8b:bd:6f:d0:06:20:48:0f:e5:de:61:84:e6:5e:45:72:73: 70:71:e2:fc:43:22:47:f0:36:b3:50:42:13:7c:fd:27:c0:e1: 96:92:78:c4:a8:df:b4:e2:9c:f9:89:d7:0d:75:77:d7:b2:4c: 70:03:82:75:36:b4:09:e4:18:0b:23:0c:5a:ff:db:f1:0e:b7: 8f:7b:58:6d:fc:9b:ee:74:d2:18:76:16:44:c6:41:a3:0f:e5: c1:62:76:1e:10:39:8f:ec:ee:74:1d:62:92:6e:15:4d:15:7b: 62:7d:af:76:0c:5c:d6:2d:ab:8f:48:a8:ea:34:6d:c0:04:85: 8e:e5:ce:13:b5:62:c2:3c:fc:f2:69:88:ad:04:6c:62:54:2d: d4:60:5f:2b:0a:3c:d3:f4:00:10:fd:a3:d2:ef:15:29:7b:6e: 3c:3f:ca:9a:84:ab:fd:01:e9:58:4c:9f:b6:f4:13:0d:45:8a: 76:88:36:af -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY1QjQ0MzBFNzU1REIx ODlBRkRENENGNzdFMjBCQUIwOEU3N0UwQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9F4ph92B9GnN/0Ljb1jeSj3hNWTzwoBZfSYxysLr6BlD8RMiS guAgAJlKnmfIiPVYQid2ahf2ZpXrIJxO8J4Gscq71mH+ijAitWY9aBY9t1UKbGu7 sve22ryoo/u4MhXSUKd4hcB8h6D3YQBw+b13/Retl5fglPRC0KutmIGi9cwSIRjL KCIW0OyFvwlnB3RdEJjLdtozNRT/qI45OOJAMrn4SsZJs5yk43j/3GX7NfVO+qSW cJ6EUvGNdtK0Knce92wBm5Xv8JlexdIQOXkbmJVF85F9Ts5KQIRvzys3uj4yqHVi hU8/P0Ykuc3zVIo5R9UaW4usppUJV4CJE861AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZbRDDnVdsYmv3Uz3fiC6sI534LYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1piUkREblZkc1ltdjNVejNmaUM2c0k1 MzRMWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfLT4AwDQYJ KoZIhvcNAQELBQADggEBAJ7BxsgwbaBJ/ojhrXbUMZ5xyVoqwPsEkhe/A/l4oCc9 wga2jdaKMtkkhw8y3GYONYLTAJxerHuDaA7Cl+LFrewHM7KaubP7+AGLvW/QBiBI D+XeYYTmXkVyc3Bx4vxDIkfwNrNQQhN8/SfA4ZaSeMSo37TinPmJ1w11d9eyTHAD gnU2tAnkGAsjDFr/2/EOt497WG38m+500hh2FkTGQaMP5cFidh4QOY/s7nQdYpJu FU0Ve2J9r3YMXNYtq49IqOo0bcAEhY7lzhO1YsI8/PJpiK0EbGJULdRgXysKPNP0 ABD9o9LvFSl7bjw/ypqEq/0B6VhMn7b0Ew1FinaINq8= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org