$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/q-5pSYQHtW3viEPMrx6qyv_erXc.roa File: q-5pSYQHtW3viEPMrx6qyv_erXc.roa (raw, json) Hash identifier: fSKLSUypQCTW8GB0orLTzX/PnBlVB+RQ8spxhXUni8g= Subject key identifier: AB:EE:69:49:84:07:B5:6D:EF:88:43:CC:AF:1E:AA:CA:FF:DE:AD:77 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1097 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/q-5pSYQHtW3viEPMrx6qyv_erXc.roa Signing time: Mon 26 Aug 2024 05:16:35 +0000 ROA not before: Mon 26 Aug 2024 05:16:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 61.20.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4247 (0x1097) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ABEE69498407B56DEF8843CCAF1EAACAFFDEAD77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f1:95:47:5e:db:8e:64:41:74:3d:af:a2:6a: 05:00:9c:32:28:cb:78:b3:97:ff:42:20:6d:3a:2b: 11:0b:cd:a7:9a:f7:90:41:b2:41:0a:23:16:56:e9: 06:0e:9e:21:e0:67:83:bd:68:86:cd:4c:93:ef:ff: 52:09:34:b0:cb:6b:49:91:8a:be:1c:a2:21:1a:c7: 3f:f6:8d:32:d4:78:66:c1:c0:c3:c0:f1:45:57:fc: dd:93:56:34:57:66:a1:a1:92:a9:b7:c7:cf:86:9f: 9d:b0:f7:87:59:44:4f:e0:c6:2e:ae:fb:f1:4a:c3: a5:0a:d0:00:e4:cb:ae:c2:1c:52:75:07:9c:ad:51: 19:0b:14:41:17:af:db:a3:0d:42:37:2e:01:90:f6: 5a:cc:e7:0e:52:5d:66:da:d4:ca:1e:39:a0:48:4b: f6:17:62:e3:32:3e:fd:23:2b:1e:d5:f8:e9:2d:ed: ba:d4:3f:1c:58:28:f6:69:70:47:3f:c2:83:21:67: 41:e0:65:d0:8a:86:9d:aa:92:a6:b6:a4:08:3f:0e: d6:66:44:81:1c:34:77:0b:3b:25:5f:d9:a5:06:30: b8:e0:f8:5b:9f:a0:9d:e5:59:84:d4:0c:a6:bd:2e: 11:78:54:47:5a:21:8a:2b:53:ac:dc:ea:93:07:5d: 1b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EE:69:49:84:07:B5:6D:EF:88:43:CC:AF:1E:AA:CA:FF:DE:AD:77 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/q-5pSYQHtW3viEPMrx6qyv_erXc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 53:82:26:7e:3a:4e:fe:53:d1:b9:6c:db:ed:56:1b:70:e4:e4: 56:6b:81:c1:ef:e1:e5:d5:17:86:bb:be:fa:2f:44:49:0e:a9: 53:51:a2:dc:b3:0b:79:e5:39:0c:27:66:40:42:4d:0f:33:f4: c9:de:57:41:69:04:b0:20:7c:99:f0:e5:c2:fe:49:ec:c3:c6: e8:d2:0d:e1:7a:22:0b:de:bb:dc:7e:57:eb:bf:2a:f1:a1:fa: ce:e5:56:2d:31:0d:d2:08:5f:66:70:3c:9d:3c:4f:d2:9b:af: 12:07:0d:59:ae:1f:6e:3c:28:90:bb:c1:ee:c8:64:12:5e:94: fc:9e:0d:ae:24:28:54:07:72:cc:f5:15:89:44:1d:4c:45:08: cd:7d:49:84:f9:d8:a6:e0:11:65:fd:b0:0c:31:4d:66:0d:ae: 5d:01:e2:e1:32:41:74:59:2b:a6:28:0c:65:cd:a7:69:13:3c: 29:5d:47:e6:6d:fc:a2:15:f7:89:bc:0a:bf:cd:bd:99:7b:ef: 71:f3:ab:15:37:cf:ec:93:fc:39:b1:14:f0:8e:d3:ed:ad:14: 03:59:79:3a:2b:25:a7:ef:58:b9:ae:c3:52:86:9e:b3:33:9c: 79:28:e9:4f:88:89:4b:63:ca:8e:4d:14:aa:1b:13:39:2f:f6: 4a:de:1f:d4 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCRUU2OTQ5ODQwN0I1 NkRFRjg4NDNDQ0FGMUVBQUNBRkZERUFENzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg8ZVHXtuOZEF0Pa+iagUAnDIoy3izl/9CIG06KxELzaea95BB skEKIxZW6QYOniHgZ4O9aIbNTJPv/1IJNLDLa0mRir4coiEaxz/2jTLUeGbBwMPA 8UVX/N2TVjRXZqGhkqm3x8+Gn52w94dZRE/gxi6u+/FKw6UK0ADky67CHFJ1B5yt URkLFEEXr9ujDUI3LgGQ9lrM5w5SXWba1MoeOaBIS/YXYuMyPv0jKx7V+Okt7brU PxxYKPZpcEc/woMhZ0HgZdCKhp2qkqa2pAg/DtZmRIEcNHcLOyVf2aUGMLjg+Fuf oJ3lWYTUDKa9LhF4VEdaIYorU6zc6pMHXRs5AgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUq+5pSYQHtW3viEPMrx6qyv/erXcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3EtNXBTWVFIdFczdmlFUE1yeDZxeXZf ZXJYYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwA9FDANBgkq hkiG9w0BAQsFAAOCAQEAU4ImfjpO/lPRuWzb7VYbcOTkVmuBwe/h5dUXhru++i9E SQ6pU1Gi3LMLeeU5DCdmQEJNDzP0yd5XQWkEsCB8mfDlwv5J7MPG6NIN4XoiC967 3H5X678q8aH6zuVWLTEN0ghfZnA8nTxP0puvEgcNWa4fbjwokLvB7shkEl6U/J4N riQoVAdyzPUViUQdTEUIzX1JhPnYpuARZf2wDDFNZg2uXQHi4TJBdFkrpigMZc2n aRM8KV1H5m38ohX3ibwKv829mXvvcfOrFTfP7JP8ObEU8I7T7a0UA1l5Oislp+9Y ua7DUoaeszOceSjpT4iJS2PKjk0UqhsTOS/2St4f1A== -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:28 2024 by rpki-client on console-fra.rpki-client.org