$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/o8dL2AJ0mBaU64QhP-_K3zn1KFA.roa File: o8dL2AJ0mBaU64QhP-_K3zn1KFA.roa (raw, json) Hash identifier: 6zYoonGmnyK/gHdraXoexP1fPGzMi5unG9djIDc9cIU= Subject key identifier: A3:C7:4B:D8:02:74:98:16:94:EB:84:21:3F:EF:CA:DF:39:F5:28:50 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1088 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/o8dL2AJ0mBaU64QhP-_K3zn1KFA.roa Signing time: Mon 26 Aug 2024 05:16:32 +0000 ROA not before: Mon 26 Aug 2024 05:16:32 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9415 IP address blocks: 2404:0:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4232 (0x1088) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:32 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A3C74BD80274981694EB84213FEFCADF39F52850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:14:06:72:f1:67:15:92:f6:a2:82:7b:92: 4d:ca:18:27:e9:af:6d:54:75:66:7d:dd:4d:32:0e: 0c:c1:d0:21:4c:0e:66:88:9f:6e:01:fa:d0:79:d0: 12:b4:20:c4:b3:42:d2:20:a7:2e:12:0f:fe:5e:48: e6:a7:a3:9a:7c:7d:7c:d2:36:38:49:40:eb:cd:ad: 85:0b:91:ff:ad:8e:75:01:dd:63:77:89:94:a6:d7: 14:01:4d:f2:be:c0:6b:af:c6:08:dc:bd:bd:39:f1: 57:60:69:84:f7:77:68:9c:87:95:d5:4c:39:d6:c2: 95:6d:ca:7d:86:29:1a:cf:4d:ad:15:53:38:f0:12: 32:30:f6:52:47:ad:c9:5e:bf:58:0e:9f:5d:a7:1b: 63:c6:24:31:53:41:58:a0:66:07:fc:18:bf:8a:9e: f0:b9:38:14:f4:27:39:e6:2a:e8:9c:81:51:ec:80: 4b:2e:86:bf:a1:5c:82:25:52:e8:8f:9f:ea:f3:0d: 52:d3:44:f6:4f:16:61:42:04:20:10:8e:52:69:6e: df:89:cf:a8:d4:d0:43:05:70:c6:e3:cc:27:4c:e4: a6:5e:2e:03:bf:ae:40:29:62:6f:af:c2:4a:3e:a0: 23:43:2b:ea:8b:5a:d9:02:57:c7:4e:be:a4:07:78: cf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C7:4B:D8:02:74:98:16:94:EB:84:21:3F:EF:CA:DF:39:F5:28:50 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/o8dL2AJ0mBaU64QhP-_K3zn1KFA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 4d:d5:77:31:e7:d6:91:b6:9c:05:1a:82:cd:2c:e6:75:ac:4a: 09:5b:80:ad:4d:07:87:72:bc:38:c0:ea:7f:67:b6:7b:56:68: 49:64:19:4d:e8:2f:30:35:c9:25:41:3b:43:e7:d9:41:99:1a: d6:fe:d8:f6:bc:14:3a:c4:d2:65:7f:f4:b8:43:b8:bb:43:e6: 52:80:e0:26:5e:a4:52:ed:96:6b:d7:a7:39:ed:bd:1f:fa:6d: 56:d1:c3:b2:ef:f3:40:7e:a8:ec:af:7a:6b:74:51:2e:d3:34: 8e:e4:96:9c:7c:f3:c0:34:1d:89:d3:4b:38:ec:f8:3a:89:d2: d3:64:6f:da:17:e0:78:e9:76:b8:89:f1:92:c6:a7:6f:96:91: a0:93:ba:82:d6:98:79:4c:c2:0f:4a:3f:60:52:a6:ec:87:6e: e6:c9:d0:dc:7d:8b:74:fd:6e:89:59:76:76:ab:bd:35:b2:9c: fc:83:6d:42:dc:96:d1:9e:c8:12:4c:c4:73:0f:2d:5f:8c:0d: 88:2f:0f:94:87:6e:62:3b:26:45:0e:85:03:77:92:27:0a:a8: 70:d1:b2:00:2b:8a:94:19:57:42:b1:28:aa:d9:8f:d8:97:f6: 2a:16:ac:2c:3c:f3:79:2e:f0:0d:fe:d2:d0:9c:4a:0e:8c:2b: 40:9e:df:bb -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzQzc0QkQ4MDI3NDk4 MTY5NEVCODQyMTNGRUZDQURGMzlGNTI4NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnPRQGcvFnFZL2ooJ7kk3KGCfpr21UdWZ93U0yDgzB0CFMDmaI n24B+tB50BK0IMSzQtIgpy4SD/5eSOano5p8fXzSNjhJQOvNrYULkf+tjnUB3WN3 iZSm1xQBTfK+wGuvxgjcvb058VdgaYT3d2ich5XVTDnWwpVtyn2GKRrPTa0VUzjw EjIw9lJHrclev1gOn12nG2PGJDFTQVigZgf8GL+KnvC5OBT0JznmKuicgVHsgEsu hr+hXIIlUuiPn+rzDVLTRPZPFmFCBCAQjlJpbt+Jz6jU0EMFcMbjzCdM5KZeLgO/ rkApYm+vwko+oCNDK+qLWtkCV8dOvqQHeM+ZAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUo8dL2AJ0mBaU64QhP+/K3zn1KFAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL284ZEwyQUowbUJhVTY0UWhQLV9LM3pu MUtGQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBAAAMDAN BgkqhkiG9w0BAQsFAAOCAQEATdV3MefWkbacBRqCzSzmdaxKCVuArU0Hh3K8OMDq f2e2e1ZoSWQZTegvMDXJJUE7Q+fZQZka1v7Y9rwUOsTSZX/0uEO4u0PmUoDgJl6k Uu2Wa9enOe29H/ptVtHDsu/zQH6o7K96a3RRLtM0juSWnHzzwDQdidNLOOz4OonS 02Rv2hfgeOl2uInxksanb5aRoJO6gtaYeUzCD0o/YFKm7Idu5snQ3H2LdP1uiVl2 dqu9NbKc/INtQtyW0Z7IEkzEcw8tX4wNiC8PlIduYjsmRQ6FA3eSJwqocNGyACuK lBlXQrEoqtmP2Jf2KhasLDzzeS7wDf7S0JxKDowrQJ7fuw== -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:28 2024 by rpki-client on console-fra.rpki-client.org