$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/fBZQeFCqo2znvTSrTeDf5bUCRnI.roa File: fBZQeFCqo2znvTSrTeDf5bUCRnI.roa (raw, json) Hash identifier: agQDBQB6U7/mW8x1L4ebpBCSYBzMJGbHlObDJozaLZ0= Subject key identifier: 7C:16:50:78:50:AA:A3:6C:E7:BD:34:AB:4D:E0:DF:E5:B5:02:46:72 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1061 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fBZQeFCqo2znvTSrTeDf5bUCRnI.roa Signing time: Mon 26 Aug 2024 05:16:22 +0000 ROA not before: Mon 26 Aug 2024 05:16:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131597 IP address blocks: 218.35.32.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4193 (0x1061) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7C16507850AAA36CE7BD34AB4DE0DFE5B5024672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9d:10:80:68:be:6c:a1:94:5c:2d:2a:5f:c3: 55:21:22:6c:79:4f:f0:ff:f0:3d:89:a2:b2:90:60: fd:31:1c:a9:03:22:fa:13:bb:b0:c5:75:0c:a6:a4: 2d:37:41:4f:7c:9e:f2:6c:2a:99:ca:1c:b7:27:e6: b5:57:a8:68:dc:71:a8:5a:ee:87:5e:f2:e8:46:1c: 79:0d:03:8b:14:eb:e6:12:07:a1:04:1d:9e:9a:43: f2:6a:91:e5:02:9d:3c:05:1c:76:b5:0a:37:29:b3: 3f:5f:6f:14:bf:4e:ee:bc:e6:c9:6b:bf:d9:15:f2: bb:53:e8:2c:ef:5d:0c:88:8f:2e:a7:0c:d8:dc:c1: fd:e2:45:03:29:c3:a0:9f:3e:34:2a:85:51:1a:3c: f8:0b:4e:03:cb:9a:ae:97:fb:33:41:5e:f5:3f:29: b5:7a:e5:98:57:b7:71:c9:98:27:c1:49:4d:30:f2: 5d:1a:b9:82:1d:49:91:dc:f7:cb:a7:92:de:0f:cd: df:6d:c3:42:33:45:59:87:ce:eb:b9:f5:ec:ff:6b: 2a:86:76:dc:1b:26:6e:51:35:45:4e:bd:f1:4c:6d: d9:e2:01:c9:57:46:54:59:63:c7:04:89:48:1a:76: 6a:e0:95:6b:3c:ad:b5:01:ce:30:bd:99:90:41:8a: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:16:50:78:50:AA:A3:6C:E7:BD:34:AB:4D:E0:DF:E5:B5:02:46:72 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/fBZQeFCqo2znvTSrTeDf5bUCRnI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.32.0/19 Signature Algorithm: sha256WithRSAEncryption 9b:16:83:91:f0:19:3e:92:c5:65:af:a6:68:a7:91:1f:a2:64: 14:b9:1b:cc:76:4d:9c:f4:ec:65:ee:d5:c4:4a:fb:8f:33:91: 83:b4:a2:a1:bb:e2:f9:26:77:44:ba:c4:0c:86:40:3d:a9:dc: 86:4b:15:3b:d7:68:54:4e:de:f1:25:dd:f1:2b:f1:19:a5:20: 2a:b2:4c:23:d4:b7:94:dc:d6:79:f4:dd:2e:f4:65:94:f9:f9: 6f:ee:ab:63:81:2e:64:da:60:c5:26:f5:d2:42:ac:9f:73:32: f7:63:22:9a:22:6e:ca:5d:8f:36:4e:f7:c1:2a:b5:1d:5d:9e: d4:f0:95:75:f2:e5:75:7a:6c:ca:6b:d6:6c:d9:c0:9b:c7:aa: 58:2e:d2:e9:6c:47:a6:eb:95:ca:21:59:dd:2c:9d:a5:e3:b1: ab:ce:24:65:34:33:c1:54:ef:29:0c:30:01:8c:a4:fd:eb:8f: 39:cc:d1:84:13:b0:fe:cf:3f:6a:28:92:a6:26:45:eb:07:3f: 18:6d:ac:0e:8c:66:07:0b:60:0b:ea:6d:9a:07:07:2d:8f:56: 93:bd:45:0e:9f:e2:e8:55:32:7f:de:6c:74:7e:2a:40:3b:6f: 5a:c6:4f:98:36:89:a7:33:62:ac:70:1f:4c:cb:6e:a8:f2:14: 58:a5:1f:99 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEGEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdDMTY1MDc4NTBBQUEz NkNFN0JEMzRBQjRERTBERkU1QjUwMjQ2NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGnRCAaL5soZRcLSpfw1UhImx5T/D/8D2JorKQYP0xHKkDIvoT u7DFdQympC03QU98nvJsKpnKHLcn5rVXqGjccaha7ode8uhGHHkNA4sU6+YSB6EE HZ6aQ/JqkeUCnTwFHHa1Cjcpsz9fbxS/Tu685slrv9kV8rtT6CzvXQyIjy6nDNjc wf3iRQMpw6CfPjQqhVEaPPgLTgPLmq6X+zNBXvU/KbV65ZhXt3HJmCfBSU0w8l0a uYIdSZHc98unkt4Pzd9tw0IzRVmHzuu59ez/ayqGdtwbJm5RNUVOvfFMbdniAclX RlRZY8cEiUgadmrglWs8rbUBzjC9mZBBikrdAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUfBZQeFCqo2znvTSrTeDf5bUCRnIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2ZCWlFlRkNxbzJ6bnZUU3JUZURmNWJV Q1JuSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaIyAwDQYJ KoZIhvcNAQELBQADggEBAJsWg5HwGT6SxWWvpminkR+iZBS5G8x2TZz07GXu1cRK +48zkYO0oqG74vkmd0S6xAyGQD2p3IZLFTvXaFRO3vEl3fEr8RmlICqyTCPUt5Tc 1nn03S70ZZT5+W/uq2OBLmTaYMUm9dJCrJ9zMvdjIpoibspdjzZO98EqtR1dntTw lXXy5XV6bMpr1mzZwJvHqlgu0ulsR6brlcohWd0snaXjsavOJGU0M8FU7ykMMAGM pP3rjznM0YQTsP7PP2ookqYmResHPxhtrA6MZgcLYAvqbZoHBy2PVpO9RQ6f4uhV Mn/ebHR+KkA7b1rGT5g2iaczYqxwH0zLbqjyFFilH5k= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:38 2024 by rpki-client on console-fra.rpki-client.org