$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/q7Mw3SIzb8LXLdlbfdNBx2h_PmQ.roa File: q7Mw3SIzb8LXLdlbfdNBx2h_PmQ.roa (raw, json) Hash identifier: JDtkjTLkt8n2IwKF63ysAiPkLsGxi20UDVTqL6r8JBE= Subject key identifier: AB:B3:30:DD:22:33:6F:C2:D7:2D:D9:5B:7D:D3:41:C7:68:7F:3E:64 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 107E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/q7Mw3SIzb8LXLdlbfdNBx2h_PmQ.roa Signing time: Mon 26 Aug 2024 05:16:29 +0000 ROA not before: Mon 26 Aug 2024 05:16:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 60.244.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4222 (0x107e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ABB330DD22336FC2D72DD95B7DD341C7687F3E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:c1:2d:0f:77:ac:b6:c5:fc:7b:05:31:ff: 6d:79:9f:9b:57:ad:6d:2f:1b:f5:3a:2d:bc:1c:fc: 88:49:46:b1:e7:d0:87:97:ad:7b:23:52:a1:2e:bf: 87:fa:7f:a5:2b:a2:fc:4e:ad:15:4d:53:1e:3a:2b: ce:ce:c9:e5:35:d7:06:96:0e:46:01:cc:7d:02:be: 81:fa:54:9a:db:0b:2b:22:55:aa:87:98:a7:5a:b6: ca:88:b5:3c:f4:20:d6:fe:5c:c7:65:dd:54:28:70: f9:41:45:fe:ac:e0:e6:7c:68:4c:22:c9:7d:34:b2: f8:bf:1b:ea:b9:9d:80:6a:40:b8:3f:d3:44:bd:42: 26:6c:43:dc:17:00:15:64:e3:cc:3e:45:76:30:b7: 65:08:b3:09:b9:23:9f:59:f4:58:93:60:55:fe:45: 3d:21:8f:31:66:4c:60:93:a4:c7:b8:23:ee:3b:9e: c5:de:2b:cf:df:42:0f:fe:98:99:21:60:5e:b5:9d: f8:5a:3b:82:dd:67:29:ca:57:5d:75:de:d8:ed:87: 52:74:c4:3c:85:04:fe:3b:3e:49:49:96:ae:90:df: ac:98:0b:64:ec:9f:48:c7:8b:16:96:8e:cb:d0:fa: cf:72:0e:93:fc:b7:1a:44:d3:d7:d0:e3:c4:62:f5: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B3:30:DD:22:33:6F:C2:D7:2D:D9:5B:7D:D3:41:C7:68:7F:3E:64 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/q7Mw3SIzb8LXLdlbfdNBx2h_PmQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.128.0/17 Signature Algorithm: sha256WithRSAEncryption b7:73:ed:b8:11:36:54:2f:46:f9:45:94:a3:52:6b:55:97:4a: 5f:a3:1a:b4:37:8a:0a:5e:74:4b:1d:1f:eb:c8:b1:46:e1:00: 54:6c:22:60:23:6d:2c:cb:ec:89:fa:30:f0:5f:a4:b3:40:03: b9:3b:17:2f:c9:ef:e2:b3:ef:98:ec:4a:1e:86:e3:15:66:b6: be:d4:67:18:9a:55:fa:d7:5b:0a:27:be:70:be:46:26:63:e0: 41:e3:99:c0:db:b2:40:ae:85:1a:26:69:05:dd:34:0c:45:e6: 34:4f:ba:23:6e:0d:56:1c:4e:39:91:1c:10:23:67:66:67:83: 4b:a4:99:06:3c:22:c8:cf:cd:fe:e6:22:ec:f8:75:c1:95:12: 71:c1:f2:76:e1:df:d4:f0:54:ad:65:f8:4f:33:a6:ee:24:61: 61:2c:8a:61:21:c3:1c:ab:c8:e1:5c:12:d4:43:2d:c5:6b:35: 8c:9c:66:73:21:0c:d4:ba:2a:3f:56:42:eb:4d:6a:bc:08:e8: 3b:a6:56:06:4d:f9:43:24:17:11:44:04:60:d9:09:b5:7a:f7: f4:5a:5b:da:f5:de:14:87:4a:7e:3a:68:b6:4f:fe:36:92:c7: 18:b1:0c:4b:30:f7:7e:58:58:5e:e4:95:37:e1:4f:75:87:d5: 3c:d0:ae:f7 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCQjMzMEREMjIzMzZG QzJENzJERDk1QjdERDM0MUM3Njg3RjNFNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4dcEtD3estsX8ewUx/215n5tXrW0vG/U6Lbwc/IhJRrHn0IeX rXsjUqEuv4f6f6UrovxOrRVNUx46K87OyeU11waWDkYBzH0CvoH6VJrbCysiVaqH mKdatsqItTz0INb+XMdl3VQocPlBRf6s4OZ8aEwiyX00svi/G+q5nYBqQLg/00S9 QiZsQ9wXABVk48w+RXYwt2UIswm5I59Z9FiTYFX+RT0hjzFmTGCTpMe4I+47nsXe K8/fQg/+mJkhYF61nfhaO4LdZynKV1113tjth1J0xDyFBP47PklJlq6Q36yYC2Ts n0jHixaWjsvQ+s9yDpP8txpE09fQ48Ri9afjAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUq7Mw3SIzb8LXLdlbfdNBx2h/PmQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3E3TXczU0l6YjhMWExkbGJmZE5CeDJo X1BtUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc89IAwDQYJ KoZIhvcNAQELBQADggEBALdz7bgRNlQvRvlFlKNSa1WXSl+jGrQ3igpedEsdH+vI sUbhAFRsImAjbSzL7In6MPBfpLNAA7k7Fy/J7+Kz75jsSh6G4xVmtr7UZxiaVfrX WwonvnC+RiZj4EHjmcDbskCuhRomaQXdNAxF5jRPuiNuDVYcTjmRHBAjZ2Zng0uk mQY8IsjPzf7mIuz4dcGVEnHB8nbh39TwVK1l+E8zpu4kYWEsimEhwxyryOFcEtRD LcVrNYycZnMhDNS6Kj9WQutNarwI6DumVgZN+UMkFxFEBGDZCbV69/RaW9r13hSH Sn46aLZP/jaSxxixDEsw935YWF7klTfhT3WH1TzQrvc= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org