$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/oKzMX6dGCb4iw-_lGBvFrq1zXRA.roa File: oKzMX6dGCb4iw-_lGBvFrq1zXRA.roa (raw, json) Hash identifier: oHd2p3sbuHiEjiTPZJ0trjJwBeFsS4U8XY9mIcV5ZNA= Subject key identifier: A0:AC:CC:5F:A7:46:09:BE:22:C3:EF:E5:18:1B:C5:AE:AD:73:5D:10 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FFA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/oKzMX6dGCb4iw-_lGBvFrq1zXRA.roa Signing time: Mon 26 Aug 2024 05:15:57 +0000 ROA not before: Mon 26 Aug 2024 05:15:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24155 IP address blocks: 210.63.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4090 (0xffa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:57 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A0ACCC5FA74609BE22C3EFE5181BC5AEAD735D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:ed:28:7e:9b:72:bf:ed:82:3c:b8:67:79: b7:f9:53:7c:8c:e7:0d:17:8a:c2:20:e9:48:7e:63: 48:44:f3:04:e1:2e:d7:dd:da:ba:53:a2:50:24:f3: ad:18:32:6d:8f:39:d3:3b:82:65:df:f1:59:7c:8c: fc:25:02:2d:21:97:31:64:f9:bd:2c:e1:ec:8f:2f: 65:a9:30:fa:e4:dd:14:6e:8d:86:85:c6:ed:d4:aa: 6c:7a:ef:86:ed:10:fa:65:4f:ca:ca:21:33:38:eb: e4:b3:91:7f:f3:0d:9e:70:48:84:66:21:f3:38:a8: 77:e5:f5:4b:c0:c4:e9:65:cb:f6:02:b3:09:b6:ce: 18:48:f4:70:db:d2:7c:33:e8:78:87:0e:e2:22:0e: a8:3a:86:df:7d:e6:f3:98:d2:00:1e:d2:d5:b2:3e: b3:c9:97:50:d2:88:dd:3f:f7:44:b7:67:80:1b:26: a8:09:f3:68:a6:14:30:ba:4f:6c:a2:7a:91:91:87: 7f:76:29:21:0c:cb:af:b2:9e:69:0d:32:99:7d:79: dc:92:54:fc:84:25:44:b0:f0:e8:b9:8b:c2:5a:78: db:3c:b5:4a:28:bb:a1:90:8c:cf:c8:c9:6a:85:47: 7a:28:9c:bd:c0:d5:97:ce:7a:45:b1:68:d4:4e:fb: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AC:CC:5F:A7:46:09:BE:22:C3:EF:E5:18:1B:C5:AE:AD:73:5D:10 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/oKzMX6dGCb4iw-_lGBvFrq1zXRA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.224.0/21 Signature Algorithm: sha256WithRSAEncryption 61:0d:a0:38:d0:9c:40:e6:e5:0e:8b:d9:57:82:07:77:eb:c6: 26:2e:7a:86:bc:ca:8c:8a:21:17:05:7c:f3:cd:6c:35:8c:fd: 6a:99:b3:f8:67:5a:f9:c0:17:61:6a:9c:27:63:6b:77:a6:c0: 1a:bb:a5:85:3a:25:20:fe:b3:47:70:41:f6:d9:05:98:a0:11: 30:32:c4:fc:97:1e:26:f5:cb:e8:f3:d2:eb:4f:3c:ea:c4:bf: 28:0a:b8:8a:d6:eb:ea:d8:3c:a0:4f:cb:69:34:08:fa:de:ac: 64:fe:7b:d9:89:14:fb:12:bb:90:4d:ee:ce:54:73:32:44:45: 51:c4:9d:1a:36:ab:a5:01:55:2d:fc:c4:6d:2b:2b:02:9d:7d: 00:85:c9:1e:c5:ed:fd:3d:ff:26:5c:d1:f1:7f:b9:53:26:63: 57:ea:8a:42:65:73:83:e5:74:b2:a6:db:6f:d2:94:42:b4:87: d3:5e:79:df:68:ab:40:88:8d:6a:73:7d:25:09:e6:48:9b:3e: 36:b2:6f:70:4c:b6:d5:df:5d:8a:31:99:e7:1c:3e:85:ab:97: b2:17:42:6c:80:d7:dc:a0:b9:ca:15:34:3d:a6:d9:58:79:c8: c7:1e:db:b7:50:5a:9e:b0:f7:20:57:93:8f:64:fe:5c:d4:22: 7b:7b:c0:2c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEwQUNDQzVGQTc0NjA5 QkUyMkMzRUZFNTE4MUJDNUFFQUQ3MzVEMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrnO0ofptyv+2CPLhnebf5U3yM5w0XisIg6Uh+Y0hE8wThLtfd 2rpTolAk860YMm2POdM7gmXf8Vl8jPwlAi0hlzFk+b0s4eyPL2WpMPrk3RRujYaF xu3Uqmx674btEPplT8rKITM46+SzkX/zDZ5wSIRmIfM4qHfl9UvAxOlly/YCswm2 zhhI9HDb0nwz6HiHDuIiDqg6ht995vOY0gAe0tWyPrPJl1DSiN0/90S3Z4AbJqgJ 82imFDC6T2yiepGRh392KSEMy6+ynmkNMpl9edySVPyEJUSw8Oi5i8JaeNs8tUoo u6GQjM/IyWqFR3oonL3A1ZfOekWxaNRO+3P9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUoKzMX6dGCb4iw+/lGBvFrq1zXRAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL29Lek1YNmRHQ2I0aXctX2xHQnZGcnEx elhSQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSP+AwDQYJ KoZIhvcNAQELBQADggEBAGENoDjQnEDm5Q6L2VeCB3frxiYueoa8yoyKIRcFfPPN bDWM/WqZs/hnWvnAF2FqnCdja3emwBq7pYU6JSD+s0dwQfbZBZigETAyxPyXHib1 y+jz0utPPOrEvygKuIrW6+rYPKBPy2k0CPrerGT+e9mJFPsSu5BN7s5UczJERVHE nRo2q6UBVS38xG0rKwKdfQCFyR7F7f09/yZc0fF/uVMmY1fqikJlc4PldLKm22/S lEK0h9Need9oq0CIjWpzfSUJ5kibPjayb3BMttXfXYoxmeccPoWrl7IXQmyA19yg ucoVND2m2Vh5yMce27dQWp6w9yBXk49k/lzUInt7wCw= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org