$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/wZtMXO_uWGIpHhQT5Yi3VheMptc.roa File: wZtMXO_uWGIpHhQT5Yi3VheMptc.roa (raw, json) Hash identifier: kr1vnSobIbxpGlqPiqs/N8z95TiExTmyDnba+tjc428= Subject key identifier: C1:9B:4C:5C:EF:EE:58:62:29:1E:14:13:E5:88:B7:56:17:8C:A6:D7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1086 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/wZtMXO_uWGIpHhQT5Yi3VheMptc.roa Signing time: Mon 26 Aug 2024 05:16:31 +0000 ROA not before: Mon 26 Aug 2024 05:16:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9311 IP address blocks: 210.201.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4230 (0x1086) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C19B4C5CEFEE5862291E1413E588B756178CA6D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:41:6c:6e:cb:40:ac:35:64:ec:24:8e:01: e7:22:ad:df:23:2a:59:60:72:c4:91:67:83:34:d2: 55:7f:16:82:81:f1:e4:70:93:71:31:cd:ff:0a:99: 53:20:09:fc:0a:a5:bb:44:4c:8d:cc:6a:63:ec:29: 5f:f0:b3:c3:14:a9:db:de:0e:28:5c:0e:0a:9f:9d: ae:55:7e:77:1c:cf:53:e7:fa:8a:05:83:32:73:1a: 89:48:e6:9e:3d:16:f5:5b:44:8e:1a:26:14:8a:71: 5b:a2:df:bb:5b:8d:aa:fc:64:c9:2f:ff:66:8c:6d: eb:ed:3f:21:ad:dd:be:de:68:1f:34:9c:05:48:c1: ec:b4:2a:67:ea:83:27:ea:c7:43:48:31:a7:ff:08: 60:1b:1c:69:fb:0b:f5:56:91:9f:23:9f:35:5d:83: bb:fd:67:68:91:0f:0a:94:c4:29:7d:a1:1e:29:04: 8e:f7:8e:01:e0:13:3d:56:f6:b6:de:70:2e:f1:fa: 5e:ea:0b:1a:c6:c8:5d:33:64:54:1b:64:4e:b1:75: 9d:4e:f1:07:47:d8:5e:df:1e:4e:e8:71:12:af:0f: 28:5c:9b:99:db:72:4a:76:e3:0a:62:97:1d:0a:90: 0f:68:56:c3:69:43:b9:72:66:9b:3e:f7:8a:2f:da: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9B:4C:5C:EF:EE:58:62:29:1E:14:13:E5:88:B7:56:17:8C:A6:D7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/wZtMXO_uWGIpHhQT5Yi3VheMptc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.52.0/22 Signature Algorithm: sha256WithRSAEncryption 10:09:9f:80:6a:f2:71:71:c2:48:32:d0:df:a1:54:97:2a:cb: 9b:e8:db:4d:ab:3b:fe:b1:71:8b:05:ee:dc:68:aa:65:97:e6: b6:12:9f:c4:ed:6c:dc:6b:b4:0e:22:90:7c:0c:ec:34:21:bd: 76:d6:b1:94:b4:c3:1d:db:40:c8:56:21:b9:7b:b8:6f:ff:eb: ac:90:13:61:65:f4:b7:4d:ad:90:eb:37:e0:9c:3e:f3:31:ee: 39:b5:97:22:52:cc:c4:17:6a:75:2e:29:22:57:7d:d2:67:ed: a0:70:bc:af:41:b3:37:93:a5:83:5b:9e:bd:5e:a7:c4:97:34: be:17:a7:24:7e:6c:56:6c:07:c5:7d:d0:e3:f4:c5:d8:5d:85: 8f:f6:fa:da:3c:fa:ff:4b:45:68:10:92:2f:89:6d:ff:53:7c: 95:9a:82:ac:17:99:29:ed:ff:14:ae:85:18:bb:76:29:ea:36: 27:51:dc:4a:6c:de:60:5f:a1:ca:8c:b0:5b:63:04:83:6e:8d: de:ed:40:68:27:07:a4:87:cf:d6:99:1f:74:be:e9:c7:27:29: 37:5b:c0:9e:82:89:09:3c:4c:a3:2d:16:09:af:73:7f:8d:c2: 11:15:ec:fa:6f:d5:27:f8:71:a7:63:fe:8e:80:b4:ab:be:65: 00:5f:16:fc -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxOUI0QzVDRUZFRTU4 NjIyOTFFMTQxM0U1ODhCNzU2MTc4Q0E2RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHb0FsbstArDVk7CSOAecird8jKllgcsSRZ4M00lV/FoKB8eRw k3Exzf8KmVMgCfwKpbtETI3MamPsKV/ws8MUqdveDihcDgqfna5Vfnccz1Pn+ooF gzJzGolI5p49FvVbRI4aJhSKcVui37tbjar8ZMkv/2aMbevtPyGt3b7eaB80nAVI wey0Kmfqgyfqx0NIMaf/CGAbHGn7C/VWkZ8jnzVdg7v9Z2iRDwqUxCl9oR4pBI73 jgHgEz1W9rbecC7x+l7qCxrGyF0zZFQbZE6xdZ1O8QdH2F7fHk7ocRKvDyhcm5nb ckp24wpilx0KkA9oVsNpQ7lyZps+94ov2mb3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUwZtMXO/uWGIpHhQT5Yi3VheMptcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3dadE1YT191V0dJcEhoUVQ1WWkzVmhl TXB0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyTQwDQYJ KoZIhvcNAQELBQADggEBABAJn4Bq8nFxwkgy0N+hVJcqy5vo202rO/6xcYsF7txo qmWX5rYSn8TtbNxrtA4ikHwM7DQhvXbWsZS0wx3bQMhWIbl7uG//66yQE2Fl9LdN rZDrN+CcPvMx7jm1lyJSzMQXanUuKSJXfdJn7aBwvK9BszeTpYNbnr1ep8SXNL4X pyR+bFZsB8V90OP0xdhdhY/2+to8+v9LRWgQki+Jbf9TfJWagqwXmSnt/xSuhRi7 dinqNidR3Eps3mBfocqMsFtjBINujd7tQGgnB6SHz9aZH3S+6ccnKTdbwJ6CiQk8 TKMtFgmvc3+NwhEV7Ppv1Sf4cadj/o6AtKu+ZQBfFvw= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org