$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/x2d0fHBHdfe9KS57WdKOV1dLYxA.roa File: x2d0fHBHdfe9KS57WdKOV1dLYxA.roa (raw, json) Hash identifier: hLS/Gpy+oUywC+8r9726EEEHwkFJCLlZxitSzaC+Cq8= Subject key identifier: C7:67:74:7C:70:47:75:F7:BD:29:2E:7B:59:D2:8E:57:57:4B:63:10 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1036 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/x2d0fHBHdfe9KS57WdKOV1dLYxA.roa Signing time: Mon 26 Aug 2024 05:16:10 +0000 ROA not before: Mon 26 Aug 2024 05:16:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 203.79.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4150 (0x1036) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C767747C704775F7BD292E7B59D28E57574B6310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:c5:86:9e:8f:0f:f2:45:8f:dd:52:0f:53: 36:24:fa:ed:11:e6:c4:27:72:4f:d5:d9:b5:11:cf: 78:d5:c7:55:70:67:ae:22:3c:94:2b:24:c5:e5:83: 7f:10:82:74:86:71:60:1f:bb:5f:a9:99:c3:5a:ec: e5:6e:66:22:16:be:72:d3:ba:b6:e9:e1:4b:f2:6c: 72:18:55:6b:f6:e3:16:32:21:07:d3:8f:8d:66:f0: d4:29:94:19:4d:ee:a4:69:dd:e6:f2:80:d4:95:7c: 5b:d2:0f:04:77:20:d6:6b:dc:32:6a:e5:80:09:ce: 6f:2a:a0:3f:c8:fc:8a:d2:a6:db:c2:07:99:74:20: c5:54:d5:07:0b:2a:eb:6b:9f:70:30:6a:1e:e1:b8: 71:1f:c7:6e:08:81:db:cf:34:05:2e:26:6d:a9:e2: 45:79:1e:2d:e0:e2:ea:92:7e:a4:bc:50:31:54:f3: 5d:55:5a:4e:83:e4:54:cd:fe:fd:27:45:16:60:d2: e7:d9:c8:37:9a:94:a8:f1:55:3a:f6:d3:bf:69:c1: d5:e2:e4:f0:ff:ec:ad:ad:22:d9:22:0f:c9:7d:ff: ea:39:2d:59:76:d2:40:0b:d6:d7:a2:72:75:6a:86: ce:2c:27:eb:3e:b7:6d:1a:07:ca:47:d8:77:7c:da: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:67:74:7C:70:47:75:F7:BD:29:2E:7B:59:D2:8E:57:57:4B:63:10 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/x2d0fHBHdfe9KS57WdKOV1dLYxA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.128.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:2e:f9:8b:f2:cd:e4:69:26:73:e0:9f:ac:a3:0b:71:5b:67: c7:3d:32:e2:28:ad:c5:66:f0:d9:16:b9:3e:6a:03:75:0a:b5: 31:80:32:28:64:07:08:49:82:61:11:8e:07:9a:b3:c6:f3:1d: df:6a:42:e7:c7:4f:05:04:13:09:e8:e8:b5:ac:0d:ae:c3:8f: af:c1:77:7c:79:0f:21:9f:42:bd:c7:6c:c5:d5:35:a5:4c:cc: 4f:0e:13:01:08:6c:6e:b0:38:bf:76:70:f1:17:7d:4e:22:bb: e3:9f:4d:07:bf:f7:0b:4c:dc:46:cc:48:f5:bb:1f:0c:b6:f9: d2:ca:8f:08:32:9a:2a:61:73:ce:6f:c1:e3:4a:2d:65:78:da: bb:08:3d:4d:d0:e5:8a:73:77:c6:b9:6c:66:46:ed:f1:e5:c1: 9b:af:20:06:c3:4e:4a:43:05:50:9e:23:ba:ab:6d:a2:e9:a9: ff:f1:2f:18:e2:bd:57:df:49:6c:42:3c:5f:ab:cf:de:c8:bd: a9:e3:a4:41:5c:0d:9d:1b:ff:f2:ee:6a:eb:a4:a7:b4:a9:34: 2b:4b:e1:2c:9f:de:31:41:37:58:77:e3:fd:77:70:45:98:d2: 3a:4f:b4:a6:95:19:31:f8:7a:9b:2c:2d:5f:76:60:6a:3a:87: fb:c2:f5:0a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEDYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3Njc3NDdDNzA0Nzc1 RjdCRDI5MkU3QjU5RDI4RTU3NTc0QjYzMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDO7MWGno8P8kWP3VIPUzYk+u0R5sQnck/V2bURz3jVx1VwZ64i PJQrJMXlg38QgnSGcWAfu1+pmcNa7OVuZiIWvnLTurbp4UvybHIYVWv24xYyIQfT j41m8NQplBlN7qRp3ebygNSVfFvSDwR3INZr3DJq5YAJzm8qoD/I/IrSptvCB5l0 IMVU1QcLKutrn3Awah7huHEfx24IgdvPNAUuJm2p4kV5Hi3g4uqSfqS8UDFU811V Wk6D5FTN/v0nRRZg0ufZyDealKjxVTr2079pwdXi5PD/7K2tItkiD8l9/+o5LVl2 0kAL1teicnVqhs4sJ+s+t20aB8pH2Hd82nLHAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUx2d0fHBHdfe9KS57WdKOV1dLYxAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3gyZDBmSEJIZGZlOUtTNTdXZEtPVjFk TFl4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbLT4AwDQYJ KoZIhvcNAQELBQADggEBAD8u+YvyzeRpJnPgn6yjC3FbZ8c9MuIorcVm8NkWuT5q A3UKtTGAMihkBwhJgmERjgeas8bzHd9qQufHTwUEEwno6LWsDa7Dj6/Bd3x5DyGf Qr3HbMXVNaVMzE8OEwEIbG6wOL92cPEXfU4iu+OfTQe/9wtM3EbMSPW7Hwy2+dLK jwgymiphc85vweNKLWV42rsIPU3Q5Ypzd8a5bGZG7fHlwZuvIAbDTkpDBVCeI7qr baLpqf/xLxjivVffSWxCPF+rz97IvanjpEFcDZ0b//Luauukp7SpNCtL4Syf3jFB N1h34/13cEWY0jpPtKaVGTH4epssLV92YGo6h/vC9Qo= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:05 2024 by rpki-client on console-ams.rpki-client.org