$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dsXYlfxFbkPrpuVFWyI8GLuA2-A.roa File: dsXYlfxFbkPrpuVFWyI8GLuA2-A.roa (raw, json) Hash identifier: Y11KwJLLiDc165WXw+4fvYtbMj8kr7zuYDEQxjjbxvQ= Subject key identifier: 76:C5:D8:95:FC:45:6E:43:EB:A6:E5:45:5B:22:3C:18:BB:80:DB:E0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 101C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dsXYlfxFbkPrpuVFWyI8GLuA2-A.roa Signing time: Mon 26 Aug 2024 05:16:04 +0000 ROA not before: Mon 26 Aug 2024 05:16:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 219.91.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4124 (0x101c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=76C5D895FC456E43EBA6E5455B223C18BB80DBE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:b2:a4:38:4c:6c:f4:c2:7a:ae:57:5b:31: f1:43:2f:a7:ae:dd:b6:15:b1:cf:e9:4d:92:e5:9c: 5d:2a:65:b4:15:14:73:a6:59:cb:42:37:26:0b:0a: 37:bc:0a:38:b0:c0:7d:48:13:2b:ff:f8:10:ea:7e: 8c:db:b9:55:22:0e:b8:e1:4b:d6:fd:cc:3c:a8:f7: d4:a7:01:11:94:4d:c9:a3:9c:2b:3f:83:de:60:ab: cf:b9:70:d5:15:76:8a:01:27:3f:96:13:fb:8f:86: 32:82:c1:9e:da:c7:00:f2:d3:60:40:c0:5f:9d:d7: 99:1f:4b:94:33:be:17:b7:6d:72:c9:b7:85:2a:9a: 2e:cb:4f:35:a0:97:7a:34:a1:46:14:dc:cf:a7:c1: f3:e0:fd:55:aa:20:ec:ba:89:7b:e4:04:5b:bf:ef: ec:30:10:a0:7b:e9:fc:a6:04:53:e2:cc:7d:40:5f: c9:c4:19:7b:11:d9:7e:7b:0a:8b:6c:bd:49:dd:f9: 7b:46:04:51:fd:0d:6a:5d:08:ee:da:f4:a6:b4:3c: 96:4f:d4:bb:a8:15:fb:0a:aa:6c:e0:18:ae:74:64: d9:56:53:6c:63:91:88:b8:df:ab:9c:0f:a8:82:18: 2b:95:04:24:a3:fd:95:47:c4:8a:9b:3b:63:26:c4: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C5:D8:95:FC:45:6E:43:EB:A6:E5:45:5B:22:3C:18:BB:80:DB:E0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dsXYlfxFbkPrpuVFWyI8GLuA2-A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.0.0/18 Signature Algorithm: sha256WithRSAEncryption 8b:33:30:79:6c:31:db:54:fd:f6:70:df:47:5f:fa:1b:47:b4: ae:c3:ee:ef:13:db:95:1c:10:0e:67:81:61:21:c1:14:bf:a2: 2f:32:a4:5e:60:47:3f:01:41:74:b2:5d:b1:06:4d:36:87:3c: 5c:c4:d9:5a:b1:16:9c:a9:e2:5e:26:01:4b:56:4e:72:77:1e: 03:b1:fc:72:1f:7b:25:b4:0a:30:c4:6d:59:c6:eb:59:3b:aa: e1:9c:07:22:a7:bc:ba:ac:70:23:16:19:d9:7e:c4:bd:8d:28: 8d:4b:45:a1:be:8f:bc:de:7b:f4:56:c1:b4:d7:97:f7:bf:2f: 42:85:c1:1f:56:af:e8:af:c9:14:b2:df:95:36:5d:15:90:14: 57:51:96:e2:c8:bf:d5:b0:3d:86:72:40:94:71:2e:72:36:6c: bf:3e:a2:66:22:10:b2:af:af:79:c0:63:e1:95:e8:2d:04:2b: 35:f6:d2:d5:39:a5:cd:a5:d4:00:e4:a1:3c:36:a7:71:e5:f0: fd:60:84:55:6a:5e:7e:5f:00:e4:8f:62:62:64:f5:47:23:23: 0f:fc:80:11:9d:a5:0c:4b:41:e9:06:92:ea:1c:0b:d7:38:f5: c7:8c:f9:cc:4f:b4:95:ea:51:dc:da:d4:3d:76:9e:3b:b2:93: 1d:67:00:c6 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2QzVEODk1RkM0NTZF NDNFQkE2RTU0NTVCMjIzQzE4QkI4MERCRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCksLKkOExs9MJ6rldbMfFDL6eu3bYVsc/pTZLlnF0qZbQVFHOm WctCNyYLCje8CjiwwH1IEyv/+BDqfozbuVUiDrjhS9b9zDyo99SnARGUTcmjnCs/ g95gq8+5cNUVdooBJz+WE/uPhjKCwZ7axwDy02BAwF+d15kfS5Qzvhe3bXLJt4Uq mi7LTzWgl3o0oUYU3M+nwfPg/VWqIOy6iXvkBFu/7+wwEKB76fymBFPizH1AX8nE GXsR2X57CotsvUnd+XtGBFH9DWpdCO7a9Ka0PJZP1LuoFfsKqmzgGK50ZNlWU2xj kYi436ucD6iCGCuVBCSj/ZVHxIqbO2MmxK2RAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUdsXYlfxFbkPrpuVFWyI8GLuA2+AwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2RzWFlsZnhGYmtQcnB1VkZXeUk4R0x1 QTItQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbbWwAwDQYJ KoZIhvcNAQELBQADggEBAIszMHlsMdtU/fZw30df+htHtK7D7u8T25UcEA5ngWEh wRS/oi8ypF5gRz8BQXSyXbEGTTaHPFzE2VqxFpyp4l4mAUtWTnJ3HgOx/HIfeyW0 CjDEbVnG61k7quGcByKnvLqscCMWGdl+xL2NKI1LRaG+j7zee/RWwbTXl/e/L0KF wR9Wr+ivyRSy35U2XRWQFFdRluLIv9WwPYZyQJRxLnI2bL8+omYiELKvr3nAY+GV 6C0EKzX20tU5pc2l1ADkoTw2p3Hl8P1ghFVqXn5fAOSPYmJk9UcjIw/8gBGdpQxL QekGkuocC9c49ceM+cxPtJXqUdza1D12njuykx1nAMY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org