$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/kUVtn7uJcaAz6lzPW8AbWDJSIII.roa File: kUVtn7uJcaAz6lzPW8AbWDJSIII.roa (raw, json) Hash identifier: /juIOjyMfKn7iKE5HKh8GLBoUBjItI1MO/D0V+dOUug= Subject key identifier: 91:45:6D:9F:BB:89:71:A0:33:EA:5C:CF:5B:C0:1B:58:32:52:20:82 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10FF Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kUVtn7uJcaAz6lzPW8AbWDJSIII.roa Signing time: Wed 18 Sep 2024 06:04:35 +0000 ROA not before: Wed 18 Sep 2024 06:04:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 210.202.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4351 (0x10ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Sep 18 06:04:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=91456D9FBB8971A033EA5CCF5BC01B5832522082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:98:d0:25:93:ea:88:77:ed:dd:57:30:53: 9d:4c:a1:60:5e:a2:1a:96:c9:34:04:1d:5c:46:61: bc:5a:04:d3:64:5c:7a:51:ff:18:6a:91:c7:d7:88: 98:e2:d4:30:45:f7:d4:e1:21:27:78:6d:16:8a:29: aa:d8:f3:f9:a9:39:73:36:a7:5d:a8:26:c2:c7:bd: 3f:44:c4:bb:1e:26:1b:72:ab:bb:6a:77:e4:bf:ba: bc:e1:97:60:9f:f9:e4:19:df:6c:38:53:e5:64:96: 3d:d6:30:76:38:38:ac:2f:f1:0d:0d:24:d7:d5:ad: d4:cb:e8:bb:19:4b:3e:64:4b:16:59:c9:fa:17:a3: a0:14:ba:a8:0e:1c:47:ba:de:d0:8b:fd:a0:44:81: 45:b0:e6:dc:84:96:3b:9f:a0:5c:dd:4a:b3:61:ed: 77:4d:2c:e9:e0:03:10:df:9c:a7:10:39:4e:01:07: c5:07:08:ba:07:aa:2d:be:4d:d0:d5:fc:df:af:d8: d2:92:95:a8:6c:c1:d1:97:43:47:d3:9e:d3:b6:fb: 60:0b:8f:b3:83:d1:0b:c8:66:0c:dc:bf:bc:7c:7d: 1a:40:0d:9e:bb:61:a8:08:63:88:fe:52:25:cf:ac: 18:84:60:49:c1:ff:d3:e3:ab:e4:91:23:77:6f:50: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:45:6D:9F:BB:89:71:A0:33:EA:5C:CF:5B:C0:1B:58:32:52:20:82 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kUVtn7uJcaAz6lzPW8AbWDJSIII.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.233.0/24 Signature Algorithm: sha256WithRSAEncryption c1:b2:f2:a4:76:1e:27:7e:40:d2:a1:7e:96:f7:df:c6:ab:da: 8d:f6:8c:8b:6f:e4:1c:4a:e7:b1:27:bd:14:f7:74:db:c2:a9: 55:5f:ad:77:2d:fa:ae:db:92:93:a3:2a:4d:cf:11:a7:06:90: 3c:e1:ad:fa:b4:69:e6:25:a9:fe:8d:71:7e:85:8a:3b:b2:1a: a7:d3:67:86:ca:bd:e2:5c:e2:79:08:3d:79:17:39:b1:7d:2a: 14:c6:9d:07:ed:39:c9:c8:b5:e7:e3:81:5f:f4:46:05:52:bb: 7e:db:bd:4e:0f:44:17:87:73:00:e5:f9:37:f3:e6:6c:94:78: 3a:a4:83:45:ac:73:20:82:b4:0b:b9:ac:4d:c0:35:fe:21:53: 3f:fe:56:fc:5c:52:16:77:62:ab:8c:a4:bd:cd:90:a5:6a:96: 18:9b:a5:3a:95:90:bf:59:eb:4c:88:1b:91:cc:56:97:69:be: fc:2a:a7:c8:a7:55:99:df:88:11:b0:6c:02:89:a0:09:23:fa: 87:73:8c:23:25:1f:68:f3:a8:9e:9a:68:71:4c:51:b7:78:e3: cb:24:42:99:19:b5:da:3b:34:6b:a8:f9:45:6a:8a:b7:20:e4: b6:f7:a8:86:95:da:f9:09:44:34:35:c3:10:5d:e1:ed:96:37: 57:f3:b3:a5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA5MTgw NjA0MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxNDU2RDlGQkI4OTcx QTAzM0VBNUNDRjVCQzAxQjU4MzI1MjIwODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqeZjQJZPqiHft3VcwU51MoWBeohqWyTQEHVxGYbxaBNNkXHpR /xhqkcfXiJji1DBF99ThISd4bRaKKarY8/mpOXM2p12oJsLHvT9ExLseJhtyq7tq d+S/urzhl2Cf+eQZ32w4U+Vklj3WMHY4OKwv8Q0NJNfVrdTL6LsZSz5kSxZZyfoX o6AUuqgOHEe63tCL/aBEgUWw5tyEljufoFzdSrNh7XdNLOngAxDfnKcQOU4BB8UH CLoHqi2+TdDV/N+v2NKSlahswdGXQ0fTntO2+2ALj7OD0QvIZgzcv7x8fRpADZ67 YagIY4j+UiXPrBiEYEnB/9Pjq+SRI3dvUPy7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUkUVtn7uJcaAz6lzPW8AbWDJSIIIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2tVVnRuN3VKY2FBejZselBXOEFiV0RK U0lJSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyukwDQYJ KoZIhvcNAQELBQADggEBAMGy8qR2Hid+QNKhfpb338ar2o32jItv5BxK57EnvRT3 dNvCqVVfrXct+q7bkpOjKk3PEacGkDzhrfq0aeYlqf6NcX6FijuyGqfTZ4bKveJc 4nkIPXkXObF9KhTGnQftOcnItefjgV/0RgVSu37bvU4PRBeHcwDl+Tfz5myUeDqk g0WscyCCtAu5rE3ANf4hUz/+VvxcUhZ3YquMpL3NkKVqlhibpTqVkL9Z60yIG5HM Vpdpvvwqp8inVZnfiBGwbAKJoAkj+odzjCMlH2jzqJ6aaHFMUbd448skQpkZtdo7 NGuo+UVqircg5Lb3qIaV2vkJRDQ1wxBd4e2WN1fzs6U= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org