$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vTbWjZgliV2y_wzmKcY5m-Sob-A.roa File: vTbWjZgliV2y_wzmKcY5m-Sob-A.roa (raw, json) Hash identifier: snM2lq73RgTuGqs9/6BZrgC04AroBKYVlT6MVlt1LVQ= Subject key identifier: BD:36:D6:8D:98:25:89:5D:B2:FF:0C:E6:29:C6:39:9B:E4:A8:6F:E0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1068 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vTbWjZgliV2y_wzmKcY5m-Sob-A.roa Signing time: Mon 26 Aug 2024 05:16:23 +0000 ROA not before: Mon 26 Aug 2024 05:16:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131142 IP address blocks: 223.22.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4200 (0x1068) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BD36D68D9825895DB2FF0CE629C6399BE4A86FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:5b:a4:87:45:c1:e5:57:7d:a6:6d:0c:47: 0d:5c:f3:7a:eb:9a:f7:7a:98:4b:0a:30:c1:f5:92: f0:e2:d0:e4:38:4c:1e:04:00:3e:db:d2:a1:7c:f0: 65:9c:b6:8e:81:cc:c1:89:71:bf:a8:1d:2d:53:c5: ba:c1:e6:54:e9:81:64:db:bd:4e:f2:18:c2:a7:6f: f9:29:cd:d1:97:63:db:b2:be:7a:b3:d4:79:f7:fc: 68:0d:b4:11:87:05:66:b0:62:39:21:88:b0:d2:a8: 2c:73:ca:2a:df:8c:57:45:07:39:ba:89:a4:fd:f4: 63:a4:ca:25:2e:d7:65:8a:ef:80:d6:60:94:6f:6a: e0:d0:de:9e:76:53:9d:d0:ce:b6:8b:14:f0:40:d1: c8:49:c4:fd:4c:a9:c6:0f:0d:f4:2f:7f:92:7e:69: 11:f7:1f:5f:b7:38:4e:fe:44:fc:e3:09:d0:65:ba: c2:1b:58:e1:d1:d0:86:ad:dd:ee:46:a1:f1:a5:a4: 75:27:43:ba:3a:11:cd:67:a8:0b:ee:a0:75:ba:e5: 26:71:79:8c:1f:9e:12:7d:ab:d6:f7:bd:38:36:d9: d2:66:a0:ed:9e:58:fe:c4:d7:3a:27:1e:e6:22:5c: 31:20:e5:b9:75:e9:f6:81:c2:fe:11:f9:87:35:12: 1c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:D6:8D:98:25:89:5D:B2:FF:0C:E6:29:C6:39:9B:E4:A8:6F:E0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vTbWjZgliV2y_wzmKcY5m-Sob-A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.16.0/22 Signature Algorithm: sha256WithRSAEncryption ac:9b:be:ce:f9:7c:90:c1:54:af:fd:ab:42:7c:3c:f4:f8:9b: e4:bc:27:35:15:ad:a7:d6:ca:c1:dd:f4:89:f4:83:ff:a9:2a: 39:f1:bf:05:dd:75:6c:33:68:c1:af:e3:b2:7c:12:cd:d7:4b: 54:79:ac:1e:eb:65:b8:00:be:05:07:0b:46:46:e6:2e:77:2f: ee:68:88:29:99:46:b6:ed:83:e6:1d:6e:1d:49:dc:cb:ed:30: 3f:5f:81:cf:ea:c4:e9:87:b8:34:58:f2:a1:22:1e:8e:ef:7e: bb:0b:24:04:bb:b8:79:1b:b2:b8:d0:ea:61:a9:e9:f2:48:d2: ce:5f:db:ad:a6:f1:ee:6c:69:52:fe:c8:dc:d3:93:6f:ee:86: 81:15:12:0f:69:87:68:70:16:c0:4a:53:14:27:42:d5:f9:2d: 3b:b6:cd:47:de:a4:df:08:61:3f:2b:c9:39:ec:76:12:b7:32: 62:95:b9:06:7e:a3:44:80:8b:ad:b2:bc:69:47:38:23:62:83: 6e:f0:5a:90:50:66:5f:a2:f2:82:02:70:a3:b2:8c:42:56:2b: 2a:c3:b6:99:a0:5f:ba:7d:18:a3:04:94:55:fd:2a:7f:c1:79: a6:5c:0f:2f:8d:ff:68:ee:ed:f5:85:2b:65:94:4d:8b:15:5f: 6b:a2:31:95 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJEMzZENjhEOTgyNTg5 NURCMkZGMENFNjI5QzYzOTlCRTRBODZGRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDcC1ukh0XB5Vd9pm0MRw1c83rrmvd6mEsKMMH1kvDi0OQ4TB4E AD7b0qF88GWcto6BzMGJcb+oHS1TxbrB5lTpgWTbvU7yGMKnb/kpzdGXY9uyvnqz 1Hn3/GgNtBGHBWawYjkhiLDSqCxzyirfjFdFBzm6iaT99GOkyiUu12WK74DWYJRv auDQ3p52U53QzraLFPBA0chJxP1MqcYPDfQvf5J+aRH3H1+3OE7+RPzjCdBlusIb WOHR0Iat3e5GofGlpHUnQ7o6Ec1nqAvuoHW65SZxeYwfnhJ9q9b3vTg22dJmoO2e WP7E1zonHuYiXDEg5bl16faBwv4R+Yc1EhxlAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUvTbWjZgliV2y/wzmKcY5m+Sob+AwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3ZUYldqWmdsaVYyeV93em1LY1k1bS1T b2ItQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALfFhAwDQYJ KoZIhvcNAQELBQADggEBAKybvs75fJDBVK/9q0J8PPT4m+S8JzUVrafWysHd9In0 g/+pKjnxvwXddWwzaMGv47J8Es3XS1R5rB7rZbgAvgUHC0ZG5i53L+5oiCmZRrbt g+Ydbh1J3MvtMD9fgc/qxOmHuDRY8qEiHo7vfrsLJAS7uHkbsrjQ6mGp6fJI0s5f 262m8e5saVL+yNzTk2/uhoEVEg9ph2hwFsBKUxQnQtX5LTu2zUfepN8IYT8ryTns dhK3MmKVuQZ+o0SAi62yvGlHOCNig27wWpBQZl+i8oICcKOyjEJWKyrDtpmgX7p9 GKMElFX9Kn/BeaZcDy+N/2ju7fWFK2WUTYsVX2uiMZU= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:05 2024 by rpki-client on console-ams.rpki-client.org