$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/vzzvqKEyvPbO0vysYGBD8_4lVVI.roa File: vzzvqKEyvPbO0vysYGBD8_4lVVI.roa (raw, json) Hash identifier: WS/50W5hwCFltMIwUuhzUvb6kg2SKrSJB4i843fAhqI= Subject key identifier: BF:3C:EF:A8:A1:32:BC:F6:CE:D2:FC:AC:60:60:43:F3:FE:25:55:52 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1011 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vzzvqKEyvPbO0vysYGBD8_4lVVI.roa Signing time: Mon 26 Aug 2024 05:16:01 +0000 ROA not before: Mon 26 Aug 2024 05:16:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 124.218.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4113 (0x1011) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BF3CEFA8A132BCF6CED2FCAC606043F3FE255552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:13:df:d0:c1:94:82:00:74:bf:1f:7a:28: 62:96:c5:d6:36:71:d3:1d:82:20:b9:51:75:14:2b: d2:d7:a1:67:e6:e7:d3:33:72:f2:ec:ae:0a:db:09: 14:88:5b:9f:8a:2a:1f:48:18:a9:d3:49:a3:62:65: 7e:7c:93:97:1e:9e:d2:3e:94:65:5f:3b:93:7a:fb: 47:0e:fe:52:1d:34:39:10:bb:48:7d:79:1f:66:5f: b5:29:b4:ec:90:b3:ab:03:b9:f3:fb:36:75:86:a2: d9:bf:aa:81:a1:67:5b:75:ba:a6:a4:14:e1:a6:ca: 32:b1:21:19:02:9d:94:d1:94:4d:14:f8:c6:11:7c: a8:c6:b6:bf:3a:92:5a:15:07:46:ce:74:3f:42:c1: d4:b1:e5:8c:a7:81:35:16:6b:c9:7f:b8:ce:fc:e7: d6:9a:65:db:88:2e:a8:ad:cc:2a:56:09:74:3d:54: 89:f9:ac:36:9b:e9:d3:31:b8:dd:b7:9a:aa:7a:23: 31:94:a8:e8:49:d7:fd:17:06:5f:b9:01:c8:a8:06: b4:68:4e:ca:1e:4b:ae:1b:c9:cf:f4:c2:5a:a7:d7: cd:de:53:71:43:f6:7e:be:1b:cd:34:5f:20:58:c2: 49:88:ba:b8:28:dd:86:cc:dd:50:dc:eb:96:9d:d0: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3C:EF:A8:A1:32:BC:F6:CE:D2:FC:AC:60:60:43:F3:FE:25:55:52 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/vzzvqKEyvPbO0vysYGBD8_4lVVI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.96.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:7d:a2:ff:54:72:57:28:ae:bb:94:e5:9f:2e:bf:70:89:2b: 35:64:ad:f2:21:00:6f:ae:2f:c1:79:8f:34:0b:69:8f:61:b5: 78:5b:2c:2e:95:8a:b9:21:fb:94:ce:6c:8c:63:43:e2:bf:46: e3:f4:ee:72:81:7f:98:e8:a3:b4:90:72:c2:4c:19:c4:6b:9a: d9:57:99:d0:dd:d5:28:a3:da:4f:55:20:90:0e:b8:67:5e:6a: 60:bd:f6:92:2f:5d:20:19:48:65:0c:6d:10:cb:31:11:17:e3: 75:78:a4:10:82:b6:5a:0e:6a:03:0d:07:7c:8f:a5:97:aa:7a: d2:03:06:47:04:d4:bd:36:86:d6:6d:0f:39:83:bc:22:8f:98: 56:4c:28:d8:25:80:28:79:76:e7:93:5b:86:5e:ae:5d:10:87: f8:cc:2c:1f:62:b4:99:3e:5e:7b:6b:15:72:de:04:c4:ac:ac: 84:34:ea:3c:0a:e3:28:9d:98:7f:05:9f:b8:1d:21:6c:53:56: f1:86:f3:6a:70:7e:64:13:fb:df:d5:63:18:13:34:fd:27:ed: 78:cf:a5:76:43:6a:1b:47:b8:c2:fa:09:da:63:2e:50:0a:6c: 64:6d:c9:93:b5:18:eb:52:f3:82:38:54:8e:ee:62:a1:8e:9d: 33:89:97:24 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJGM0NFRkE4QTEzMkJD RjZDRUQyRkNBQzYwNjA0M0YzRkUyNTU1NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhtRPf0MGUggB0vx96KGKWxdY2cdMdgiC5UXUUK9LXoWfm59Mz cvLsrgrbCRSIW5+KKh9IGKnTSaNiZX58k5centI+lGVfO5N6+0cO/lIdNDkQu0h9 eR9mX7UptOyQs6sDufP7NnWGotm/qoGhZ1t1uqakFOGmyjKxIRkCnZTRlE0U+MYR fKjGtr86kloVB0bOdD9CwdSx5YyngTUWa8l/uM7859aaZduILqitzCpWCXQ9VIn5 rDab6dMxuN23mqp6IzGUqOhJ1/0XBl+5AcioBrRoTsoeS64byc/0wlqn183eU3FD 9n6+G800XyBYwkmIurgo3YbM3VDc65ad0JFBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUvzzvqKEyvPbO0vysYGBD8/4lVVIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3Z6enZxS0V5dlBiTzB2eXNZR0JEOF80 bFZWSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mAwDQYJ KoZIhvcNAQELBQADggEBAI59ov9UclcorruU5Z8uv3CJKzVkrfIhAG+uL8F5jzQL aY9htXhbLC6Virkh+5TObIxjQ+K/RuP07nKBf5joo7SQcsJMGcRrmtlXmdDd1Sij 2k9VIJAOuGdeamC99pIvXSAZSGUMbRDLMREX43V4pBCCtloOagMNB3yPpZeqetID BkcE1L02htZtDzmDvCKPmFZMKNglgCh5dueTW4Zerl0Qh/jMLB9itJk+XntrFXLe BMSsrIQ06jwK4yidmH8Fn7gdIWxTVvGG82pwfmQT+9/VYxgTNP0n7XjPpXZDahtH uML6CdpjLlAKbGRtyZO1GOtS84I4VI7uYqGOnTOJlyQ= -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org