$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/oewfq-xJ6giF6N7RbDN7fHMVxe8.roa File: oewfq-xJ6giF6N7RbDN7fHMVxe8.roa (raw, json) Hash identifier: CFDUHeJichJ4HWyKhJ7HrUxpZ8Bp2ixBUw9gwaAybdw= Subject key identifier: A1:EC:1F:AB:EC:49:EA:08:85:E8:DE:D1:6C:33:7B:7C:73:15:C5:EF Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10A3 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/oewfq-xJ6giF6N7RbDN7fHMVxe8.roa Signing time: Mon 26 Aug 2024 05:16:38 +0000 ROA not before: Mon 26 Aug 2024 05:16:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 27.52.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A1EC1FABEC49EA0885E8DED16C337B7C7315C5EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:ea:c0:4e:dc:eb:28:d0:9b:5a:be:82:4d: f9:ad:50:75:51:62:c3:44:e9:20:18:8c:35:e6:71: 90:0a:69:dd:25:78:ef:2f:9b:0d:f1:1d:e2:5c:4a: 2d:46:19:00:54:43:37:8f:87:59:e1:da:8b:86:4b: 39:4b:b3:89:3b:a5:cb:bf:aa:4a:f4:f2:77:07:c3: 1c:c4:ff:2f:4f:6d:76:83:14:7a:87:3c:81:64:79: d3:5c:dd:cd:b5:64:f7:29:be:ca:71:69:4e:ad:50: e1:f6:e1:ca:2d:66:f1:da:30:2a:ad:01:4c:05:08: 4f:ae:05:de:c1:1f:59:76:10:16:02:4c:43:1e:89: 3d:e5:7d:e0:94:a2:06:b0:0a:ac:a7:44:64:f2:88: 60:c7:a2:e3:50:c8:c9:d0:a8:fa:d7:ba:fd:4b:08: ad:44:d6:9b:63:eb:ed:94:3b:18:98:bf:72:4c:96: fa:24:b1:8f:1b:5e:c8:0b:41:c7:87:74:bb:d8:d8: 2b:21:69:59:00:cc:2d:5d:ae:37:1d:14:96:6d:3c: 3a:dd:a7:56:21:fd:cf:46:a7:eb:d2:9d:4e:f2:b2: c8:8c:37:65:36:92:1d:cb:c8:8a:39:d8:ce:63:b4: c4:c1:f5:fc:8b:34:2c:38:b7:9b:93:48:aa:4f:a6: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EC:1F:AB:EC:49:EA:08:85:E8:DE:D1:6C:33:7B:7C:73:15:C5:EF X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/oewfq-xJ6giF6N7RbDN7fHMVxe8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.52.0.0/15 Signature Algorithm: sha256WithRSAEncryption 20:f5:05:1c:0e:09:0b:57:0b:df:cf:0b:a9:a0:b3:09:bd:0a: 99:19:dc:f7:09:6c:34:23:e1:3a:59:48:71:a3:3b:d2:dc:56: fb:a0:5d:14:6c:c4:7c:62:9b:56:8e:65:ee:af:79:14:1d:3e: 0a:0a:b9:12:dc:aa:6c:f3:48:a5:2e:c7:2c:e1:45:1c:e8:34: ed:df:33:7d:01:08:26:d5:58:64:1d:27:8c:d4:32:95:16:99: ff:ff:36:0e:92:a8:3b:8f:6d:f7:c3:85:3f:58:5a:48:f2:ba: ca:31:89:63:a2:f4:9c:07:42:89:80:85:37:32:10:9c:ac:46: 77:11:79:20:e5:05:ea:c3:91:3a:89:be:25:8e:ab:c4:28:6a: 8b:6e:d0:06:ac:9c:d2:9d:b0:f1:9a:be:0c:d5:cd:ad:e2:1b: 23:b7:32:7c:21:75:43:6e:3f:ef:e8:04:3c:c0:1a:33:25:53: ef:06:2f:0c:9c:5e:6a:fc:20:a2:46:22:1f:ae:ac:c1:c3:54: d4:1f:6e:8b:80:59:fa:2b:ce:75:cf:40:32:c3:77:05:15:82: 0d:cc:9d:fe:8b:33:f2:6e:bc:b9:1f:6e:e5:f2:41:5c:e6:f3: 75:17:6f:1f:b7:be:fc:e0:7d:be:5d:45:ce:d4:05:15:57:77: 28:84:fb:8b -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEExRUMxRkFCRUM0OUVB MDg4NUU4REVEMTZDMzM3QjdDNzMxNUM1RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3p+rATtzrKNCbWr6CTfmtUHVRYsNE6SAYjDXmcZAKad0leO8v mw3xHeJcSi1GGQBUQzePh1nh2ouGSzlLs4k7pcu/qkr08ncHwxzE/y9PbXaDFHqH PIFkedNc3c21ZPcpvspxaU6tUOH24cotZvHaMCqtAUwFCE+uBd7BH1l2EBYCTEMe iT3lfeCUogawCqynRGTyiGDHouNQyMnQqPrXuv1LCK1E1ptj6+2UOxiYv3JMlvok sY8bXsgLQceHdLvY2CshaVkAzC1drjcdFJZtPDrdp1Yh/c9Gp+vSnU7yssiMN2U2 kh3LyIo52M5jtMTB9fyLNCw4t5uTSKpPpq5nAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUoewfq+xJ6giF6N7RbDN7fHMVxe8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL29ld2ZxLXhKNmdpRjZON1JiRE43ZkhN VnhlOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwEbNDANBgkq hkiG9w0BAQsFAAOCAQEAIPUFHA4JC1cL388LqaCzCb0KmRnc9wlsNCPhOllIcaM7 0txW+6BdFGzEfGKbVo5l7q95FB0+Cgq5EtyqbPNIpS7HLOFFHOg07d8zfQEIJtVY ZB0njNQylRaZ//82DpKoO49t98OFP1haSPK6yjGJY6L0nAdCiYCFNzIQnKxGdxF5 IOUF6sOROom+JY6rxChqi27QBqyc0p2w8Zq+DNXNreIbI7cyfCF1Q24/7+gEPMAa MyVT7wYvDJxeavwgokYiH66swcNU1B9ui4BZ+ivOdc9AMsN3BRWCDcyd/osz8m68 uR9u5fJBXObzdRdvH7e+/OB9vl1FztQFFVd3KIT7iw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:50 2024 by rpki-client on console-fra.rpki-client.org