$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/uhOQ9PncOSF-Vq2BkbQ74NQZip4.roa File: uhOQ9PncOSF-Vq2BkbQ74NQZip4.roa (raw, json) Hash identifier: YkrJUHUKeUX8V3i/469Q1W7dOFEPnxks2IzfqOU3XXc= Subject key identifier: BA:13:90:F4:F9:DC:39:21:7E:56:AD:81:91:B4:3B:E0:D4:19:8A:9E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 103A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/uhOQ9PncOSF-Vq2BkbQ74NQZip4.roa Signing time: Mon 26 Aug 2024 05:16:12 +0000 ROA not before: Mon 26 Aug 2024 05:16:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 210.63.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4154 (0x103a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BA1390F4F9DC39217E56AD8191B43BE0D4198A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:4e:09:74:b3:14:b3:49:7c:20:3d:88:2c: d7:b2:66:e9:47:26:2e:ed:d6:ca:13:9b:70:9a:5a: aa:f2:5e:5b:69:6a:69:a4:57:ac:b9:b5:b0:07:25: 1a:75:02:00:64:20:51:af:f5:69:e7:0f:67:32:d2: b7:88:4f:6d:df:1c:7a:73:af:8d:fc:ee:4f:c5:2a: 3a:dc:f7:75:b9:f8:c4:42:85:54:f4:b5:e8:cf:0a: d0:e0:2e:23:7a:3e:fc:4d:b6:6c:96:a5:6b:e8:af: 2a:ab:a1:83:46:8f:ba:cb:a0:c9:0e:73:49:2a:58: 26:2c:f5:c1:a3:fe:34:c9:53:d3:1d:e9:83:86:e7: c8:ae:93:dd:ce:5c:47:96:82:af:e8:4d:a6:9a:d2: 29:fe:c5:fd:d4:fb:98:f8:02:75:c0:99:31:35:89: 93:c7:0e:09:f6:d5:4e:4c:23:94:37:d2:ee:d5:69: 09:e9:48:0a:7f:ce:ec:c8:fa:89:b6:6b:bd:a8:05: c9:5f:04:fa:52:cb:f0:b0:fb:6c:3e:ae:c2:c0:16: 2d:a8:67:54:a5:f0:27:7b:37:3a:fc:67:c9:ad:9b: 45:39:bb:95:56:eb:a9:01:3f:15:1d:78:ac:6a:83: 8c:90:83:c1:08:fa:3e:53:59:ee:b0:bd:9e:a0:a6: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:90:F4:F9:DC:39:21:7E:56:AD:81:91:B4:3B:E0:D4:19:8A:9E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/uhOQ9PncOSF-Vq2BkbQ74NQZip4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.253.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:6b:e0:1e:8e:e8:6e:5d:3a:82:9f:a1:c1:9d:60:0f:b5:2e: e8:9b:62:f7:55:f3:e5:ef:1b:fa:57:f8:1f:90:ac:fa:ea:de: 67:5a:3e:31:17:f7:68:ec:b8:a4:60:fc:39:20:5a:c8:7b:5c: 53:f0:24:3d:e2:43:d1:8b:76:eb:2d:00:81:fc:ea:e4:5e:46: f7:75:0b:e6:81:92:87:5d:05:04:9d:07:31:67:3f:d7:0d:18: 73:f6:8a:63:23:a8:30:85:d7:fc:9f:5f:b5:34:ef:a2:0c:4b: 24:f6:4a:c9:88:32:a0:6d:c9:ac:e9:06:2b:45:78:8e:c3:e3: 3e:cf:23:54:1c:b9:ac:28:26:2e:d6:68:2a:bc:6c:c3:cd:64: 82:5e:4e:b2:28:fd:2e:3a:5e:2d:85:80:9d:24:fd:74:a7:a6: 27:60:eb:08:db:86:50:48:26:9f:f3:b8:d5:0d:c7:c8:57:67: 14:7b:57:46:88:d7:da:aa:d9:b3:09:79:c4:72:97:55:06:f3: 7e:bf:bc:16:ca:04:ba:ec:c2:f8:23:50:3c:94:26:8d:55:64: a3:be:27:69:a8:bf:c5:5c:81:e6:86:fc:4a:f3:b9:e7:85:e6: 98:19:7f:29:86:e2:fe:30:c9:10:0d:d9:64:4d:0b:8e:84:c5: 70:71:56:9c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEDowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJBMTM5MEY0RjlEQzM5 MjE3RTU2QUQ4MTkxQjQzQkUwRDQxOThBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJI04JdLMUs0l8ID2ILNeyZulHJi7t1soTm3CaWqryXltpammk V6y5tbAHJRp1AgBkIFGv9WnnD2cy0reIT23fHHpzr4387k/FKjrc93W5+MRChVT0 tejPCtDgLiN6PvxNtmyWpWvoryqroYNGj7rLoMkOc0kqWCYs9cGj/jTJU9Md6YOG 58iuk93OXEeWgq/oTaaa0in+xf3U+5j4AnXAmTE1iZPHDgn21U5MI5Q30u7VaQnp SAp/zuzI+om2a72oBclfBPpSy/Cw+2w+rsLAFi2oZ1Sl8Cd7Nzr8Z8mtm0U5u5VW 66kBPxUdeKxqg4yQg8EI+j5TWe6wvZ6gpqrzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUuhOQ9PncOSF+Vq2BkbQ74NQZip4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3VoT1E5UG5jT1NGLVZxMkJrYlE3NE5R WmlwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP/0wDQYJ KoZIhvcNAQELBQADggEBAC9r4B6O6G5dOoKfocGdYA+1LuibYvdV8+XvG/pX+B+Q rPrq3mdaPjEX92jsuKRg/DkgWsh7XFPwJD3iQ9GLdustAIH86uReRvd1C+aBkodd BQSdBzFnP9cNGHP2imMjqDCF1/yfX7U076IMSyT2SsmIMqBtyazpBitFeI7D4z7P I1QcuawoJi7WaCq8bMPNZIJeTrIo/S46Xi2FgJ0k/XSnpidg6wjbhlBIJp/zuNUN x8hXZxR7V0aI19qq2bMJecRyl1UG836/vBbKBLrswvgjUDyUJo1VZKO+J2mov8Vc geaG/ErzueeF5pgZfymG4v4wyRAN2WRNC46ExXBxVpw= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org