$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/lFlM6q7RH46--wzUAbTOVxQ73iA.roa File: lFlM6q7RH46--wzUAbTOVxQ73iA.roa (raw, json) Hash identifier: 5dbaBIMQ22Repe8UAdOJjpdJbJMWmlYrPLHaQQgWJf8= Subject key identifier: 94:59:4C:EA:AE:D1:1F:8E:BE:FB:0C:D4:01:B4:CE:57:14:3B:DE:20 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 104C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lFlM6q7RH46--wzUAbTOVxQ73iA.roa Signing time: Mon 26 Aug 2024 05:16:17 +0000 ROA not before: Mon 26 Aug 2024 05:16:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 124.218.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:17 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=94594CEAAED11F8EBEFB0CD401B4CE57143BDE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:9b:3a:67:24:d8:d1:d4:93:fd:bc:c4:9d: e7:c4:c5:6c:8b:57:79:25:f2:b8:34:74:43:a4:90: e0:0e:6e:60:16:ee:b4:a6:9f:90:97:6f:c6:63:83: fd:28:e6:f7:05:d9:e8:5f:8e:84:62:7e:a2:29:39: 52:db:b2:1b:28:c4:d9:9c:e3:d2:02:1c:5e:03:cd: 37:26:68:b9:f8:52:c9:9c:d5:47:a8:3a:46:72:97: 2e:f5:7b:4e:fe:56:f3:1d:74:02:71:80:7d:94:1a: 96:83:ce:67:f0:41:54:ca:23:a8:de:17:88:8d:cb: 6f:68:f9:4c:c5:57:9e:ec:9c:3f:6b:a4:65:8a:61: 27:1b:08:d7:fa:ba:8b:09:a0:c4:04:84:a8:cd:d8: f3:0f:87:64:80:ea:f9:a6:da:df:f6:41:a9:47:2b: 03:67:09:56:23:81:80:c3:cd:7d:c6:3d:f8:ca:83: 7e:82:e1:a3:f8:b1:dc:49:9c:c7:41:3c:82:b8:15: 7e:d9:59:2b:89:9c:ec:ac:e1:69:ac:c6:ce:63:12: c9:c7:31:23:06:cc:8b:6c:13:a5:46:14:8b:11:c2: 39:16:07:fe:c9:65:1a:68:fb:93:e2:49:b7:af:23: 88:06:78:4b:48:03:28:ce:15:7c:11:bb:ad:1f:cf: 45:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:59:4C:EA:AE:D1:1F:8E:BE:FB:0C:D4:01:B4:CE:57:14:3B:DE:20 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lFlM6q7RH46--wzUAbTOVxQ73iA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.108.0/22 Signature Algorithm: sha256WithRSAEncryption 11:2f:00:e5:39:6d:08:c3:49:7e:8f:95:9c:8b:e5:8b:bf:d3: e5:f7:19:55:60:e5:0f:c8:ba:11:a4:23:a1:4a:d7:a4:8d:f0: 3d:06:2a:69:6c:41:5b:02:91:e7:b4:ad:5e:29:94:a3:43:b6: 9c:83:ca:17:f5:37:0f:1f:20:76:98:ba:ef:79:52:33:47:3d: 37:1c:26:d7:ee:3a:6b:37:d8:76:3f:71:8c:ed:02:ae:9e:28: 75:22:38:e4:61:3a:24:52:a3:6d:e5:1b:1c:b1:35:ed:c6:d3: 80:ca:30:7a:cb:11:ff:c0:26:82:13:df:71:14:30:98:e3:21: e5:ac:f4:80:dc:19:c6:d6:98:a1:8b:82:77:9d:81:02:25:98: c4:ee:68:2f:41:a4:17:84:17:a6:f1:44:87:1c:24:0d:54:4b: db:49:50:e6:42:ec:40:53:3b:a8:c7:ed:04:fc:07:19:2f:33: c4:81:d4:26:79:ad:78:38:5f:e2:6d:85:c3:6a:3d:68:be:6e: 80:22:b4:ad:8e:4a:31:1a:13:17:fb:a8:bf:9e:a8:2f:78:dc: ac:d1:86:15:c8:ff:40:ef:21:01:d1:ba:f3:d5:3b:7e:36:cb: 67:0f:b8:40:8f:03:db:3f:6d:56:44:96:47:53:fa:08:08:82: e5:c7:03:82 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0NTk0Q0VBQUVEMTFG OEVCRUZCMENENDAxQjRDRTU3MTQzQkRFMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6SZs6ZyTY0dST/bzEnefExWyLV3kl8rg0dEOkkOAObmAW7rSm n5CXb8Zjg/0o5vcF2ehfjoRifqIpOVLbshsoxNmc49ICHF4DzTcmaLn4Usmc1Ueo OkZyly71e07+VvMddAJxgH2UGpaDzmfwQVTKI6jeF4iNy29o+UzFV57snD9rpGWK YScbCNf6uosJoMQEhKjN2PMPh2SA6vmm2t/2QalHKwNnCVYjgYDDzX3GPfjKg36C 4aP4sdxJnMdBPIK4FX7ZWSuJnOys4Wmsxs5jEsnHMSMGzItsE6VGFIsRwjkWB/7J ZRpo+5PiSbevI4gGeEtIAyjOFXwRu60fz0UtAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUlFlM6q7RH46++wzUAbTOVxQ73iAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2xGbE02cTdSSDQ2LS13elVBYlRPVnhR NzNpQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mwwDQYJ KoZIhvcNAQELBQADggEBABEvAOU5bQjDSX6PlZyL5Yu/0+X3GVVg5Q/IuhGkI6FK 16SN8D0GKmlsQVsCkee0rV4plKNDtpyDyhf1Nw8fIHaYuu95UjNHPTccJtfuOms3 2HY/cYztAq6eKHUiOORhOiRSo23lGxyxNe3G04DKMHrLEf/AJoIT33EUMJjjIeWs 9IDcGcbWmKGLgnedgQIlmMTuaC9BpBeEF6bxRIccJA1US9tJUOZC7EBTO6jH7QT8 BxkvM8SB1CZ5rXg4X+JthcNqPWi+boAitK2OSjEaExf7qL+eqC943KzRhhXI/0Dv IQHRuvPVO342y2cPuECPA9s/bVZElkdT+ggIguXHA4I= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org