$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vYLqEVIUU6SB3wLgPL0FkeM1w_Y.roa File: vYLqEVIUU6SB3wLgPL0FkeM1w_Y.roa (raw, json) Hash identifier: Ov4CJNIb3Z1HdJgrD1cKzw5KSs1iFvGTZNXloSqHYGs= Subject key identifier: BD:82:EA:11:52:14:53:A4:81:DF:02:E0:3C:BD:05:91:E3:35:C3:F6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FF6 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vYLqEVIUU6SB3wLgPL0FkeM1w_Y.roa Signing time: Mon 26 Aug 2024 05:15:55 +0000 ROA not before: Mon 26 Aug 2024 05:15:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 210.200.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4086 (0xff6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BD82EA11521453A481DF02E03CBD0591E335C3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:b5:fe:75:44:02:45:5f:55:83:d7:34:8e: ef:44:22:72:73:90:bd:d1:16:4e:0d:2a:c6:1b:aa: ba:12:6a:e7:92:11:b5:15:d8:2d:69:30:19:8e:1e: 04:79:8c:4a:1e:fa:c2:0c:34:0d:a9:70:e7:81:6a: 74:d9:40:32:e8:3a:05:9e:86:e2:91:81:36:12:09: d9:69:5d:94:dd:0f:26:c9:f4:ab:af:d7:2f:37:0c: 21:3a:ff:04:c6:16:04:bf:21:5c:dd:68:8e:bc:0e: 28:70:3e:65:6a:e2:85:ae:22:d6:16:2d:21:5e:d8: d2:58:91:65:0f:41:34:7f:96:54:0e:3c:a6:4d:28: 3a:b9:36:06:e8:17:ef:3a:16:32:f4:27:9f:e0:82: a5:93:01:55:91:e9:94:cc:dc:e2:2b:dd:23:ed:10: 5c:46:56:fa:ec:bf:1e:5b:9d:3f:ad:91:72:f5:82: a0:6a:4b:50:ca:15:00:7f:93:51:47:16:4c:c9:1b: 1c:68:5f:36:ef:3c:6f:8f:d5:1d:c7:75:57:b6:84: 20:69:ee:95:cb:7d:63:36:2d:60:e8:c3:8f:fd:f7: 03:2f:6d:b1:24:87:9f:28:f6:3f:d9:83:8c:5e:d1: 4d:68:23:45:5e:85:da:21:3d:a9:4d:eb:61:d7:3b: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:82:EA:11:52:14:53:A4:81:DF:02:E0:3C:BD:05:91:E3:35:C3:F6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vYLqEVIUU6SB3wLgPL0FkeM1w_Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.148.0/22 Signature Algorithm: sha256WithRSAEncryption 11:a4:73:0c:a9:9d:07:2e:73:70:1a:95:70:6c:d5:82:79:01: 30:94:bb:f1:85:ee:2b:96:8d:80:4d:4a:fc:d3:dd:aa:5a:88: 7d:bc:7d:19:9a:c7:38:86:bc:ea:eb:2d:f0:79:87:c9:c1:a1: b5:e5:7e:7d:38:65:91:7c:77:65:2d:8f:bf:af:62:31:13:dd: 45:ed:11:d6:89:d0:04:79:6b:fb:9d:7a:fe:93:ed:24:d8:a9: d5:af:0a:a4:cd:61:ca:1e:e8:7d:5d:46:6e:0e:4c:a0:02:c4: a6:39:0a:b8:17:5c:ac:b1:b4:c1:11:93:94:07:e5:06:8d:fc: ee:b8:00:8f:b0:65:13:00:11:e7:92:0f:da:97:75:1c:d2:1c: aa:89:17:5b:aa:36:89:ee:03:28:31:cb:a1:24:24:bf:17:fc: e5:c4:3a:f8:ee:86:cf:e4:1d:00:b2:40:7e:d9:01:d6:29:9c: 05:91:87:53:46:58:eb:00:f5:db:7f:60:94:91:62:2c:3a:b9: 33:1d:5d:72:a3:0b:22:25:f0:f0:e2:22:ad:c4:87:1d:7c:be: b9:31:17:56:19:ac:fd:ce:c5:62:49:fe:13:ae:22:9c:99:90: 0e:34:2a:6f:ec:3c:47:5b:8e:96:2a:91:56:4b:6d:ac:2d:78: 2d:ca:cb:9e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJEODJFQTExNTIxNDUz QTQ4MURGMDJFMDNDQkQwNTkxRTMzNUMzRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOR7X+dUQCRV9Vg9c0ju9EInJzkL3RFk4NKsYbqroSaueSEbUV 2C1pMBmOHgR5jEoe+sIMNA2pcOeBanTZQDLoOgWehuKRgTYSCdlpXZTdDybJ9Kuv 1y83DCE6/wTGFgS/IVzdaI68DihwPmVq4oWuItYWLSFe2NJYkWUPQTR/llQOPKZN KDq5NgboF+86FjL0J5/ggqWTAVWR6ZTM3OIr3SPtEFxGVvrsvx5bnT+tkXL1gqBq S1DKFQB/k1FHFkzJGxxoXzbvPG+P1R3HdVe2hCBp7pXLfWM2LWDow4/99wMvbbEk h58o9j/Zg4xe0U1oI0VehdohPalN62HXO1bhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUvYLqEVIUU6SB3wLgPL0FkeM1w/YwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3ZZTHFFVklVVTZTQjN3TGdQTDBGa2VN MXdfWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyJQwDQYJ KoZIhvcNAQELBQADggEBABGkcwypnQcuc3AalXBs1YJ5ATCUu/GF7iuWjYBNSvzT 3apaiH28fRmaxziGvOrrLfB5h8nBobXlfn04ZZF8d2Utj7+vYjET3UXtEdaJ0AR5 a/udev6T7STYqdWvCqTNYcoe6H1dRm4OTKACxKY5CrgXXKyxtMERk5QH5QaN/O64 AI+wZRMAEeeSD9qXdRzSHKqJF1uqNonuAygxy6EkJL8X/OXEOvjuhs/kHQCyQH7Z AdYpnAWRh1NGWOsA9dt/YJSRYiw6uTMdXXKjCyIl8PDiIq3Ehx18vrkxF1YZrP3O xWJJ/hOuIpyZkA40Km/sPEdbjpYqkVZLbawteC3Ky54= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org