$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/buTNE5G08s1RXBzJ1htSUVpdyS4.roa File: buTNE5G08s1RXBzJ1htSUVpdyS4.roa (raw, json) Hash identifier: 19M+9+qb25mDU/ITlyiLfjZbreiy/m+izafeK0Ty7rs= Subject key identifier: 6E:E4:CD:13:91:B4:F2:CD:51:5C:1C:C9:D6:1B:52:51:5A:5D:C9:2E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 106C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/buTNE5G08s1RXBzJ1htSUVpdyS4.roa Signing time: Mon 26 Aug 2024 05:16:23 +0000 ROA not before: Mon 26 Aug 2024 05:16:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 124.218.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4204 (0x106c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6EE4CD1391B4F2CD515C1CC9D61B52515A5DC92E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:22:06:70:35:7f:7b:5a:17:ca:91:e5:4a: bd:bd:5b:ce:04:15:26:c5:d7:c7:10:b3:39:14:e6: 9f:4f:46:ac:19:56:7c:39:76:0e:ff:73:58:09:89: 30:1e:60:38:a3:d5:4f:83:34:81:e4:b1:d0:ca:87: fc:9b:78:f2:e1:d1:64:3d:0d:61:29:6e:6f:5f:a2: 66:58:9f:17:f6:f6:70:73:52:47:47:23:1e:f1:fc: 67:d4:42:9c:82:c1:43:39:51:d5:58:c8:e9:3a:b0: 09:ef:22:1b:18:66:d8:a3:1a:15:6f:c0:65:9c:70: 4a:a2:70:72:f2:fe:d9:93:e2:03:d9:8d:06:86:93: 60:df:72:93:5a:9d:86:54:94:ea:43:e2:d6:74:1e: c9:12:1a:75:01:8a:a5:9d:6f:97:73:4b:cc:87:90: ab:aa:09:90:6c:b5:eb:35:31:aa:f9:f0:8c:fc:7f: 97:64:63:f9:46:36:70:fe:8d:76:81:62:77:fb:57: 9b:e0:22:6b:84:cf:8e:8f:61:82:16:c7:64:f6:72: 51:bb:51:f4:d4:61:2c:ad:27:34:f8:92:be:4d:66: aa:18:47:46:7e:fa:bd:f6:45:6e:6c:4b:28:0d:40: 86:ba:ad:29:77:a7:03:1a:5d:c5:05:ec:98:7a:fa: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E4:CD:13:91:B4:F2:CD:51:5C:1C:C9:D6:1B:52:51:5A:5D:C9:2E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/buTNE5G08s1RXBzJ1htSUVpdyS4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.174.0/24 Signature Algorithm: sha256WithRSAEncryption ca:9f:b2:96:f0:b6:21:01:5d:34:38:e6:be:17:79:cc:ce:91: 28:04:c3:1b:01:84:7a:41:01:d8:87:b5:3e:9f:ca:08:1c:d6: 04:a2:ad:1b:96:08:2b:f2:2f:78:ee:27:fd:7d:4c:2a:f5:1f: 13:35:e9:f7:76:05:a5:03:3f:c7:bb:45:01:1e:9b:f7:fb:d2: 04:8c:bc:82:96:82:6d:02:c5:83:b0:d1:93:53:6c:87:ef:52: 8a:1d:f6:a0:37:30:9c:ce:1e:0a:87:30:11:f0:04:48:e8:e2: 2a:3b:e2:0e:80:7f:cc:30:2f:c0:0e:d5:2f:06:64:53:50:4b: de:4d:07:b0:7f:26:4c:20:60:72:5c:a9:d3:69:e1:46:72:56: 19:e4:64:e6:4f:c1:fc:ad:35:e5:16:67:2b:51:2e:96:65:59: e9:a5:fa:fe:9b:1c:a9:4b:cc:70:4b:fe:b9:8c:a1:a1:bf:f5: 97:a2:c9:ea:d0:29:73:8f:65:8f:72:55:10:2b:d7:fb:2b:e0: 7f:80:22:bb:33:22:6b:d1:f7:5b:ab:f2:f7:3a:a9:6f:04:de: 59:f7:7b:60:06:f3:15:b1:ef:06:a5:89:35:a5:8c:86:71:35: ab:f1:1e:71:f0:2a:97:d6:bc:8e:a7:b8:ce:a7:25:54:0a:ff: f3:d8:ff:4b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZFRTRDRDEzOTFCNEYy Q0Q1MTVDMUNDOUQ2MUI1MjUxNUE1REM5MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPqyIGcDV/e1oXypHlSr29W84EFSbF18cQszkU5p9PRqwZVnw5 dg7/c1gJiTAeYDij1U+DNIHksdDKh/ybePLh0WQ9DWEpbm9fomZYnxf29nBzUkdH Ix7x/GfUQpyCwUM5UdVYyOk6sAnvIhsYZtijGhVvwGWccEqicHLy/tmT4gPZjQaG k2DfcpNanYZUlOpD4tZ0HskSGnUBiqWdb5dzS8yHkKuqCZBstes1Mar58Iz8f5dk Y/lGNnD+jXaBYnf7V5vgImuEz46PYYIWx2T2clG7UfTUYSytJzT4kr5NZqoYR0Z+ +r32RW5sSygNQIa6rSl3pwMaXcUF7Jh6+iglAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUbuTNE5G08s1RXBzJ1htSUVpdyS4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2J1VE5FNUcwOHMxUlhCekoxaHRTVVZw ZHlTNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82q4wDQYJ KoZIhvcNAQELBQADggEBAMqfspbwtiEBXTQ45r4XeczOkSgEwxsBhHpBAdiHtT6f yggc1gSirRuWCCvyL3juJ/19TCr1HxM16fd2BaUDP8e7RQEem/f70gSMvIKWgm0C xYOw0ZNTbIfvUood9qA3MJzOHgqHMBHwBEjo4io74g6Af8wwL8AO1S8GZFNQS95N B7B/JkwgYHJcqdNp4UZyVhnkZOZPwfytNeUWZytRLpZlWeml+v6bHKlLzHBL/rmM oaG/9ZeiyerQKXOPZY9yVRAr1/sr4H+AIrszImvR91ur8vc6qW8E3ln3e2AG8xWx 7waliTWljIZxNavxHnHwKpfWvI6nuM6nJVQK//PY/0s= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:05 2024 by rpki-client on console-ams.rpki-client.org