$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ozwCdbfCU_sxKUkCUGb0rpHMios.roa File: ozwCdbfCU_sxKUkCUGb0rpHMios.roa (raw, json) Hash identifier: /+Ar7s8EpHSSVw/J1NSrPioPJYMxYbhg4akU2OFC0zQ= Subject key identifier: A3:3C:02:75:B7:C2:53:FB:31:29:49:02:50:66:F4:AE:91:CC:8A:8B Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 102F Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ozwCdbfCU_sxKUkCUGb0rpHMios.roa Signing time: Mon 26 Aug 2024 05:16:09 +0000 ROA not before: Mon 26 Aug 2024 05:16:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 218.187.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4143 (0x102f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A33C0275B7C253FB312949025066F4AE91CC8A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:0d:b0:38:47:78:af:2b:a4:1c:f2:5f:19: 7a:a2:e2:a0:fa:b6:c0:bc:81:f5:64:db:57:dd:73: 30:80:fb:03:55:fd:21:66:9c:d1:9c:1d:90:4d:ff: 7f:09:e6:17:5a:c8:e8:23:dc:3b:bf:37:02:a4:ba: e8:67:71:5e:57:06:69:05:14:00:97:1c:f7:0a:a1: 4d:c4:bd:74:f3:93:7a:6d:bf:bf:36:fc:4f:0d:4b: 05:f5:8d:94:37:eb:f4:5e:c7:c1:ba:c1:ac:92:bc: 8f:aa:a7:c2:1b:b2:0e:ac:9b:dd:27:d5:a5:6f:1d: 19:bf:6c:30:39:e4:84:7b:3c:80:4b:01:84:e9:b5: 0b:11:22:a8:80:ce:6a:a1:0a:13:7b:44:ae:85:d3: fd:87:47:91:c3:8b:53:e2:82:ee:56:4b:68:68:03: ef:52:f7:0a:db:25:50:cf:ce:82:ff:ac:d4:04:49: bb:f3:56:e5:56:13:9b:c6:90:99:3a:ad:be:0a:b1: dd:1b:95:b7:c7:44:a2:c7:6d:ba:cb:58:26:62:e6: 63:11:72:8e:8f:61:9c:74:2f:13:83:73:34:72:8d: fd:e9:25:2b:a1:6f:bd:9e:3d:2d:d1:de:b0:01:02: cb:c5:a8:e7:bf:a2:14:be:06:cf:79:8e:b6:ad:59: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3C:02:75:B7:C2:53:FB:31:29:49:02:50:66:F4:AE:91:CC:8A:8B X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ozwCdbfCU_sxKUkCUGb0rpHMios.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.187.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:ae:ff:e8:96:5e:8a:d5:79:8d:58:90:36:c2:01:f7:12:e5: bf:1a:cd:bc:cd:aa:a4:4f:c7:1c:c1:b1:32:52:6d:28:1a:8b: 56:96:fb:7f:4b:17:78:e0:7f:76:e0:e2:d9:45:81:4b:eb:5c: 23:d3:68:c4:05:4e:b8:41:93:68:eb:b7:b4:bb:43:f1:87:f3: 7e:7e:96:4f:fe:6e:52:93:96:2e:c1:54:8a:59:82:7e:50:ef: a1:5b:2f:08:c5:a1:9c:3b:66:39:9a:ac:9b:ca:8b:37:91:9d: 8b:1f:f8:4a:27:18:4e:24:af:ce:95:b5:7f:1e:14:89:df:30: 21:82:5f:5b:5e:82:ac:18:73:d0:d4:ca:96:58:67:49:98:f2: d0:29:75:dd:e8:24:11:08:8a:e7:d2:1f:a8:d7:64:cc:bc:a1: b5:c5:38:ea:b8:4b:63:8f:b6:4a:d7:37:80:e0:92:fc:d5:40: 04:67:bd:34:72:1c:1d:cd:76:99:bd:5a:2d:10:46:b8:00:a4: a3:4b:f5:c2:93:75:2a:30:3a:1f:69:9e:eb:b2:23:2f:74:12: 11:68:36:60:5d:93:15:e8:79:ec:9f:5a:16:91:42:44:fe:76: 57:c3:1f:42:60:bb:e3:84:13:f1:ae:a9:98:6c:2f:cc:eb:0a: 45:2f:92:2d -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzM0MwMjc1QjdDMjUz RkIzMTI5NDkwMjUwNjZGNEFFOTFDQzhBOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtzQ2wOEd4ryukHPJfGXqi4qD6tsC8gfVk21fdczCA+wNV/SFm nNGcHZBN/38J5hdayOgj3Du/NwKkuuhncV5XBmkFFACXHPcKoU3EvXTzk3ptv782 /E8NSwX1jZQ36/Rex8G6waySvI+qp8Ibsg6sm90n1aVvHRm/bDA55IR7PIBLAYTp tQsRIqiAzmqhChN7RK6F0/2HR5HDi1Pigu5WS2hoA+9S9wrbJVDPzoL/rNQESbvz VuVWE5vGkJk6rb4Ksd0blbfHRKLHbbrLWCZi5mMRco6PYZx0LxODczRyjf3pJSuh b72ePS3R3rABAsvFqOe/ohS+Bs95jratWVLHAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUozwCdbfCU/sxKUkCUGb0rpHMioswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL296d0NkYmZDVV9zeEtVa0NVR2IwcnBI TWlvcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDauzANBgkq hkiG9w0BAQsFAAOCAQEAD67/6JZeitV5jViQNsIB9xLlvxrNvM2qpE/HHMGxMlJt KBqLVpb7f0sXeOB/duDi2UWBS+tcI9NoxAVOuEGTaOu3tLtD8Yfzfn6WT/5uUpOW LsFUilmCflDvoVsvCMWhnDtmOZqsm8qLN5Gdix/4SicYTiSvzpW1fx4Uid8wIYJf W16CrBhz0NTKllhnSZjy0Cl13egkEQiK59IfqNdkzLyhtcU46rhLY4+2Stc3gOCS /NVABGe9NHIcHc12mb1aLRBGuACko0v1wpN1KjA6H2me67IjL3QSEWg2YF2TFeh5 7J9aFpFCRP52V8MfQmC744QT8a6pmGwvzOsKRS+SLQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:05 2024 by rpki-client on console-ams.rpki-client.org