$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/c_cX4hD2L88VVvvcnKLTQT2hqVI.roa File: c_cX4hD2L88VVvvcnKLTQT2hqVI.roa (raw, json) Hash identifier: 6oKWxS6vmA4qxq2beX2GMo32JEyMqxmK2YtVlto49iM= Subject key identifier: 73:F7:17:E2:10:F6:2F:CF:15:56:FB:DC:9C:A2:D3:41:3D:A1:A9:52 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10EB Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/c_cX4hD2L88VVvvcnKLTQT2hqVI.roa Signing time: Fri 30 Aug 2024 07:59:29 +0000 ROA not before: Fri 30 Aug 2024 07:59:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 218.34.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4331 (0x10eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 30 07:59:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=73F717E210F62FCF1556FBDC9CA2D3413DA1A952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:be:82:40:e8:c8:07:91:81:11:fe:38:6e:1c: 86:e9:38:bb:07:0b:be:ae:bd:df:bd:1d:c8:16:ec: ee:7d:49:20:5c:e4:12:13:f7:f1:b9:5d:60:67:48: 71:92:4c:d0:6b:cd:8f:bd:f0:95:98:ef:97:6a:95: 04:33:b2:51:d2:fc:ae:16:fa:58:c7:7d:07:80:16: 91:20:d6:e1:69:0c:8f:6c:15:17:20:de:c8:25:e0: 8d:b1:e5:f8:da:93:96:99:07:7c:dc:5f:77:fa:28: fd:50:3b:c3:6b:40:67:98:f3:ca:3d:f6:86:37:2e: dd:d0:f3:18:45:f2:42:e5:84:30:d0:12:ee:a1:bd: 3e:71:7f:1c:3e:b7:ff:bd:41:3c:4f:d1:66:32:06: d4:be:8d:80:75:16:dc:f7:2e:67:d3:e2:9b:b7:03: 58:37:7e:0b:3d:30:b5:d2:62:fc:bd:8f:eb:87:af: 55:14:f9:eb:25:8d:7d:23:9a:f1:83:16:5c:a9:c6: 4f:be:26:26:9c:40:54:71:55:9d:66:ee:1c:40:dc: bb:cb:25:af:00:77:94:f5:7f:93:b8:05:74:33:e1: f8:cc:2d:09:49:b4:d2:fd:f1:1b:68:af:5d:e8:8f: 35:82:61:54:ad:d8:9f:fe:bc:65:3b:a3:90:71:80: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F7:17:E2:10:F6:2F:CF:15:56:FB:DC:9C:A2:D3:41:3D:A1:A9:52 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/c_cX4hD2L88VVvvcnKLTQT2hqVI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.128.0/21 Signature Algorithm: sha256WithRSAEncryption 37:b5:6d:3f:7b:c4:3d:1b:79:c5:f5:07:95:5c:18:bc:5d:11: bc:de:7d:d2:96:e7:eb:e9:30:4e:b4:1f:83:88:d6:2a:87:0b: 66:d3:38:ce:f3:05:89:fa:7f:3e:f3:97:20:58:ed:f4:9f:00: 2a:1a:5a:45:fc:f0:de:fc:c8:72:29:aa:72:a7:d5:43:73:1b: 67:be:7b:79:5e:e4:2d:c2:63:83:60:29:22:16:a4:70:41:c5: 56:ec:e2:c2:1d:ed:1d:01:ba:e5:0b:4e:20:44:dc:c6:3d:f8: 18:41:3d:cf:26:f0:0d:8b:f6:b9:6d:bf:a8:63:35:5b:14:15: d5:d8:3f:af:4a:8b:8a:95:6c:31:0c:5a:c3:2b:30:56:c3:b1: f9:d6:2f:c4:4e:97:28:4f:d2:5e:4b:94:89:a4:e5:5f:22:f3: 8e:38:e3:e7:60:8c:ca:2a:8d:f1:52:c1:d8:90:e6:d9:14:0b: d5:ec:90:15:f6:33:59:23:ee:93:87:eb:ea:a7:19:ab:d2:f0: e5:34:a2:7b:31:99:a0:34:84:28:de:25:50:79:a6:05:17:08: 1c:8f:7a:ef:fd:ee:35:1c:16:50:91:65:e1:97:c7:4d:7e:2f: 7d:ec:3c:81:59:c7:d0:5a:cd:b4:c4:0f:2a:48:0b:04:b9:0f: 73:d5:d1:d9 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MzAw NzU5MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDczRjcxN0UyMTBGNjJG Q0YxNTU2RkJEQzlDQTJEMzQxM0RBMUE5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYvoJA6MgHkYER/jhuHIbpOLsHC76uvd+9HcgW7O59SSBc5BIT 9/G5XWBnSHGSTNBrzY+98JWY75dqlQQzslHS/K4W+ljHfQeAFpEg1uFpDI9sFRcg 3sgl4I2x5fjak5aZB3zcX3f6KP1QO8NrQGeY88o99oY3Lt3Q8xhF8kLlhDDQEu6h vT5xfxw+t/+9QTxP0WYyBtS+jYB1Ftz3LmfT4pu3A1g3fgs9MLXSYvy9j+uHr1UU +esljX0jmvGDFlypxk++JiacQFRxVZ1m7hxA3LvLJa8Ad5T1f5O4BXQz4fjMLQlJ tNL98Rtor13ojzWCYVSt2J/+vGU7o5BxgA8NAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUc/cX4hD2L88VVvvcnKLTQT2hqVIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2NfY1g0aEQyTDg4VlZ2dmNuS0xUUVQy aHFWSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaIoAwDQYJ KoZIhvcNAQELBQADggEBADe1bT97xD0becX1B5VcGLxdEbzefdKW5+vpME60H4OI 1iqHC2bTOM7zBYn6fz7zlyBY7fSfACoaWkX88N78yHIpqnKn1UNzG2e+e3le5C3C Y4NgKSIWpHBBxVbs4sId7R0BuuULTiBE3MY9+BhBPc8m8A2L9rltv6hjNVsUFdXY P69Ki4qVbDEMWsMrMFbDsfnWL8ROlyhP0l5LlImk5V8i84444+dgjMoqjfFSwdiQ 5tkUC9XskBX2M1kj7pOH6+qnGavS8OU0onsxmaA0hCjeJVB5pgUXCByPeu/97jUc FlCRZeGXx01+L33sPIFZx9BazbTEDypICwS5D3PV0dk= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org