$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dk1I6rSpr3mtZeTJTGN74-kLUhg.roa File: dk1I6rSpr3mtZeTJTGN74-kLUhg.roa (raw, json) Hash identifier: o7ORTAzJ0HabgPVJEwajIM2YWdAFFaTCgI5EmgeSqXk= Subject key identifier: 76:4D:48:EA:B4:A9:AF:79:AD:65:E4:C9:4C:63:7B:E3:E9:0B:52:18 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1098 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dk1I6rSpr3mtZeTJTGN74-kLUhg.roa Signing time: Mon 26 Aug 2024 05:16:35 +0000 ROA not before: Mon 26 Aug 2024 05:16:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4248 (0x1098) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=764D48EAB4A9AF79AD65E4C94C637BE3E90B5218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:8f:21:3c:d9:a1:4f:f5:f5:11:9a:d2:91: fe:eb:c6:2e:ee:2d:91:52:d6:00:9f:68:67:bc:f3: 0b:85:7f:16:87:f9:53:15:7e:06:7e:61:51:41:af: f6:ca:2e:19:c2:3c:5a:3c:27:0c:0c:1d:9d:20:88: 76:ff:9b:60:a8:08:a0:eb:c9:99:6c:22:79:a2:92: ee:6e:bd:fd:0a:d0:ed:36:30:12:4d:52:47:f9:de: e6:95:18:10:8e:2d:a6:d3:7b:42:eb:a9:0f:4f:82: 97:65:a7:5a:6e:f6:f0:d0:55:19:34:e8:ff:cb:93: 65:cc:6e:9f:cd:7b:23:ec:78:15:0a:12:a5:7d:8c: 92:39:bf:00:ac:d1:e6:1a:53:3b:fd:f3:b4:3b:07: 53:58:bb:42:4f:1e:a8:83:26:82:b9:66:f3:bc:68: 11:8e:22:2d:79:47:9d:92:fe:70:20:3c:17:59:c9: 1c:72:ec:28:c2:62:13:6d:27:29:cd:c7:7d:de:f0: 18:08:c4:59:9c:50:f0:28:19:90:d8:2b:e6:20:11: af:74:a5:60:27:15:2c:7b:b6:7a:4b:01:dd:6a:62: f1:40:2e:39:5b:e2:1f:79:4a:f4:a2:79:44:6b:50: 3a:ea:2d:e8:28:02:8f:8f:70:e9:59:46:39:d7:7d: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4D:48:EA:B4:A9:AF:79:AD:65:E4:C9:4C:63:7B:E3:E9:0B:52:18 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dk1I6rSpr3mtZeTJTGN74-kLUhg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:dc:4c:42:33:7a:f5:59:9f:d3:91:bd:bf:78:23:a0:59:f8: 72:f5:c8:10:7b:1b:be:05:ce:8b:2c:65:73:cc:43:bc:80:5a: bd:f5:98:8d:b4:8c:3c:d1:09:ed:f6:ed:97:20:4c:84:5a:cf: de:5a:4d:3d:c4:9b:66:74:37:61:dc:02:48:b4:6a:23:48:7c: d2:14:d0:de:33:87:91:9f:4e:03:a9:c1:0c:42:69:93:09:6d: 8b:56:0f:3a:10:fa:1c:6b:09:3a:eb:9d:c1:b8:eb:6c:c9:74: f6:52:31:d1:76:c2:1c:3a:50:40:2f:20:f0:3c:78:f2:19:a6: 1f:94:64:aa:e8:5b:61:36:51:c0:c1:55:1d:05:71:2d:ef:db: 4f:c2:68:a5:eb:14:06:ae:8d:7c:07:10:88:cf:62:54:14:52: a5:7e:58:e6:bd:9a:e7:de:3c:a6:93:7a:51:c3:a6:80:d3:11: fb:c9:d3:34:a8:45:94:e7:83:b9:94:e9:24:e4:d4:cf:28:da: a0:47:cd:39:8a:45:83:31:f4:66:a9:74:3e:8b:f6:21:61:38: 3d:50:4b:32:6e:8c:37:2a:68:ba:7b:80:5b:d0:20:aa:49:84: de:dc:68:2a:59:3c:5f:2f:11:2d:85:58:6d:1e:01:2b:8b:a1: 66:71:9b:e6 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2NEQ0OEVBQjRBOUFG NzlBRDY1RTRDOTRDNjM3QkUzRTkwQjUyMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbS48hPNmhT/X1EZrSkf7rxi7uLZFS1gCfaGe88wuFfxaH+VMV fgZ+YVFBr/bKLhnCPFo8JwwMHZ0giHb/m2CoCKDryZlsInmiku5uvf0K0O02MBJN Ukf53uaVGBCOLabTe0LrqQ9Pgpdlp1pu9vDQVRk06P/Lk2XMbp/NeyPseBUKEqV9 jJI5vwCs0eYaUzv987Q7B1NYu0JPHqiDJoK5ZvO8aBGOIi15R52S/nAgPBdZyRxy 7CjCYhNtJynNx33e8BgIxFmcUPAoGZDYK+YgEa90pWAnFSx7tnpLAd1qYvFALjlb 4h95SvSieURrUDrqLegoAo+PcOlZRjnXfRnFAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUdk1I6rSpr3mtZeTJTGN74+kLUhgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2RrMUk2clNwcjNtdFplVEpUR043NC1r TFVoZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSVTANBgkq hkiG9w0BAQsFAAOCAQEAiNxMQjN69Vmf05G9v3gjoFn4cvXIEHsbvgXOiyxlc8xD vIBavfWYjbSMPNEJ7fbtlyBMhFrP3lpNPcSbZnQ3YdwCSLRqI0h80hTQ3jOHkZ9O A6nBDEJpkwlti1YPOhD6HGsJOuudwbjrbMl09lIx0XbCHDpQQC8g8Dx48hmmH5Rk quhbYTZRwMFVHQVxLe/bT8JopesUBq6NfAcQiM9iVBRSpX5Y5r2a5948ppN6UcOm gNMR+8nTNKhFlOeDuZTpJOTUzyjaoEfNOYpFgzH0Zql0Pov2IWE4PVBLMm6MNypo unuAW9AgqkmE3txoKlk8Xy8RLYVYbR4BK4uhZnGb5g== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org