$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/mr3RAto-qNG__kllz5ziv01Ocnk.roa File: mr3RAto-qNG__kllz5ziv01Ocnk.roa (raw, json) Hash identifier: MRtgCcBN2IOHCXcpe7fVjIaSYyaK1rvKujguzXfe1Uw= Subject key identifier: 9A:BD:D1:02:DA:3E:A8:D1:BF:FE:49:65:CF:9C:E2:BF:4D:4E:72:79 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1063 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mr3RAto-qNG__kllz5ziv01Ocnk.roa Signing time: Mon 26 Aug 2024 05:16:22 +0000 ROA not before: Mon 26 Aug 2024 05:16:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131142 IP address blocks: 210.200.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4195 (0x1063) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9ABDD102DA3EA8D1BFFE4965CF9CE2BF4D4E7279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:7d:2e:61:99:74:c5:d8:63:ed:e8:09:9f: ce:97:32:c3:3b:6e:82:f9:dd:02:e4:7c:36:66:a7: a2:ab:63:09:35:6e:2b:0a:83:7a:af:b7:c2:6f:a2: af:38:25:3d:45:d2:f1:8e:30:5e:0c:82:41:9f:e9: 5a:f8:06:ae:31:26:57:6a:71:c7:30:f0:c8:d0:28: b8:5f:de:d5:c5:d8:af:23:61:c0:f1:68:c5:5b:63: 57:95:cc:47:3c:1e:f5:e6:2e:ff:4c:8e:2b:49:a6: a4:38:ab:d9:55:ca:04:9b:92:47:0a:5a:9d:3d:ae: be:34:31:6f:19:64:67:ff:38:13:5e:fb:47:ef:a2: 34:9f:6d:ec:18:b6:2e:b0:7c:18:3b:67:a0:ad:90: ff:da:ef:5c:96:2b:97:a7:31:20:93:1f:c9:a5:7e: ca:b5:77:d4:8c:75:0e:bf:47:0f:10:f3:fb:ef:c4: 25:ac:c3:55:1f:f3:d2:7a:18:a5:19:be:99:12:c5: c5:0e:d7:08:4a:80:43:c7:98:39:1a:18:59:3a:bc: ac:8a:6a:b0:04:25:41:67:9f:e0:6f:2f:34:a3:06: 41:97:37:7b:d8:48:f0:ca:25:a4:12:8b:2b:ce:7f: fa:bf:53:97:be:49:d0:4c:85:26:d4:1d:06:f6:b0: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:D1:02:DA:3E:A8:D1:BF:FE:49:65:CF:9C:E2:BF:4D:4E:72:79 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/mr3RAto-qNG__kllz5ziv01Ocnk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.80.0/22 Signature Algorithm: sha256WithRSAEncryption 12:02:05:59:8a:bb:f6:ff:e5:77:35:f6:d6:6c:f7:a0:ef:6a: 9f:63:a6:57:a1:8b:f5:4a:df:c3:d9:aa:6a:71:34:1c:af:fc: d5:cc:0e:97:7d:1b:34:b9:83:23:69:1c:d8:1b:1e:23:3c:d0: 69:c9:80:45:57:f3:30:26:da:c6:71:8f:23:cf:90:7d:8f:14: c6:a1:74:c7:0f:07:fb:8b:ce:2d:70:0e:70:dd:a6:59:1f:c4: 64:61:92:12:d1:53:19:89:55:52:ec:c6:0f:dc:f0:eb:75:8d: ef:c1:a9:16:aa:da:b7:e0:10:72:aa:f9:dc:6a:81:31:36:e4: f5:44:8b:5b:d7:56:89:46:ac:28:01:e4:92:93:04:14:58:82: e3:ed:bb:12:7a:ce:c9:99:34:d1:52:5f:a4:79:10:d6:fe:08: fc:68:c5:75:80:e9:08:76:ba:f5:f7:8b:df:51:93:44:9c:6d: 81:cd:15:2e:98:6f:4e:8b:9f:73:61:cb:00:05:20:08:be:a8: 7b:1e:0a:7e:fc:6a:b5:3c:20:60:6a:33:f3:8d:0f:d6:cf:c5: dd:3d:53:f9:01:c7:a6:54:3d:e5:d6:4d:2a:61:81:54:b1:03: b7:71:c7:c9:d5:92:20:fe:9c:70:5e:e6:4e:ee:39:cd:7b:bd: 62:04:c0:10 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBQkREMTAyREEzRUE4 RDFCRkZFNDk2NUNGOUNFMkJGNEQ0RTcyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCoX0uYZl0xdhj7egJn86XMsM7boL53QLkfDZmp6KrYwk1bisK g3qvt8Jvoq84JT1F0vGOMF4MgkGf6Vr4Bq4xJldqcccw8MjQKLhf3tXF2K8jYcDx aMVbY1eVzEc8HvXmLv9MjitJpqQ4q9lVygSbkkcKWp09rr40MW8ZZGf/OBNe+0fv ojSfbewYti6wfBg7Z6CtkP/a71yWK5enMSCTH8mlfsq1d9SMdQ6/Rw8Q8/vvxCWs w1Uf89J6GKUZvpkSxcUO1whKgEPHmDkaGFk6vKyKarAEJUFnn+BvLzSjBkGXN3vY SPDKJaQSiyvOf/q/U5e+SdBMhSbUHQb2sLuZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUmr3RAto+qNG//kllz5ziv01OcnkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL21yM1JBdG8tcU5HX19rbGx6NXppdjAx T2Nuay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyFAwDQYJ KoZIhvcNAQELBQADggEBABICBVmKu/b/5Xc19tZs96Dvap9jplehi/VK38PZqmpx NByv/NXMDpd9GzS5gyNpHNgbHiM80GnJgEVX8zAm2sZxjyPPkH2PFMahdMcPB/uL zi1wDnDdplkfxGRhkhLRUxmJVVLsxg/c8Ot1je/BqRaq2rfgEHKq+dxqgTE25PVE i1vXVolGrCgB5JKTBBRYguPtuxJ6zsmZNNFSX6R5ENb+CPxoxXWA6Qh2uvX3i99R k0ScbYHNFS6Yb06Ln3NhywAFIAi+qHseCn78arU8IGBqM/OND9bPxd09U/kBx6ZU PeXWTSphgVSxA7dxx8nVkiD+nHBe5k7uOc17vWIEwBA= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:05 2024 by rpki-client on console-ams.rpki-client.org