$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/z1M3pAevb7YEigFXPqnzoiD-phY.roa File: z1M3pAevb7YEigFXPqnzoiD-phY.roa (raw, json) Hash identifier: +BPXXJPnOKll1Yxr/SfjGLM2V/K/rcUVNbvZ+ENzFrw= Subject key identifier: CF:53:37:A4:07:AF:6F:B6:04:8A:01:57:3E:A9:F3:A2:20:FE:A6:16 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1069 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/z1M3pAevb7YEigFXPqnzoiD-phY.roa Signing time: Mon 26 Aug 2024 05:16:23 +0000 ROA not before: Mon 26 Aug 2024 05:16:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 219.91.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4201 (0x1069) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CF5337A407AF6FB6048A01573EA9F3A220FEA616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:86:1e:af:bd:07:4a:c2:d0:73:f1:54:56: 78:7c:d3:f3:26:bf:a6:99:91:e4:1c:cb:fe:fa:aa: 99:cb:85:62:70:ff:f1:9b:12:07:01:04:54:1b:3d: b5:89:b2:4b:af:d9:28:e5:31:f2:18:c1:3d:d9:9d: 54:22:45:eb:af:3e:ac:d6:cc:78:b3:ef:2e:9a:85: fc:78:be:95:77:c6:a9:d4:db:65:d3:48:91:c0:e9: d2:fb:8f:43:e5:2e:37:50:f3:85:70:76:74:39:f7: dc:f2:15:55:a1:af:73:90:28:8f:2b:62:d0:f9:03: 5b:3a:df:a5:3f:e1:ba:a0:4a:c3:ce:74:d3:60:3b: b7:84:df:aa:dd:7a:a2:f9:0d:4f:38:06:59:e7:e6: ff:f8:d0:e5:19:8c:d3:14:52:f3:56:3d:49:66:05: 4e:bc:bf:ec:0c:87:ce:fe:7c:fc:de:ff:0e:3a:4f: bc:7e:2d:fa:ff:0d:b1:e4:f3:53:e2:29:a6:46:e9: 51:c6:02:b7:68:a8:0d:42:ca:26:d8:51:49:7b:9f: f6:80:14:d1:f9:e7:35:09:85:51:be:b4:ed:f4:fc: bd:08:a9:ef:a7:6e:c4:1a:28:b2:74:9d:a0:54:fa: 22:8c:4e:7b:67:b3:94:fc:3f:9d:c1:0a:51:c2:27: 58:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:37:A4:07:AF:6F:B6:04:8A:01:57:3E:A9:F3:A2:20:FE:A6:16 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/z1M3pAevb7YEigFXPqnzoiD-phY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.0.0/17 Signature Algorithm: sha256WithRSAEncryption a6:2e:f2:dd:f5:c0:15:1d:27:31:7a:25:48:6b:52:e3:24:9d: f3:e6:89:68:47:1e:13:08:59:20:b3:ba:b9:35:7f:f9:bf:d8: 48:ac:ff:85:1e:a3:b3:c7:c7:d8:c0:3d:74:cc:4c:83:65:ec: dc:2f:05:c2:29:80:de:ee:56:41:b2:f3:87:61:f6:73:42:fb: 63:74:91:00:b6:d5:1e:ea:4a:0d:9b:96:2e:66:cd:b8:b2:f2: 34:b8:f4:50:e9:f8:7b:cb:45:21:75:d1:75:1f:98:20:44:b0: f9:87:6b:f3:ef:c7:be:2e:81:82:bf:00:33:81:5f:ba:a2:38: 2e:fc:c9:4b:0e:51:a4:7b:e7:4d:a3:3c:0c:bb:99:40:d7:44: 66:af:05:00:7d:bd:b7:da:12:87:fc:92:fc:76:b4:27:3a:d1: c6:9e:af:ae:59:4a:47:15:c6:4d:eb:25:27:81:d3:cf:a9:06: 0c:ba:98:9d:5b:e7:7d:a3:b9:e6:4f:07:f6:39:6b:e7:1b:bc: fa:2c:a8:9a:7a:a0:7c:59:89:96:9b:21:c9:6f:93:7f:17:f7: a1:7b:89:af:34:44:d7:28:cd:0e:02:da:86:ad:33:3a:f2:64: d2:eb:25:9c:72:41:fb:69:aa:60:fc:d4:a0:6c:87:b6:79:80: 2a:5e:c1:d4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICEGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGNTMzN0E0MDdBRjZG QjYwNDhBMDE1NzNFQTlGM0EyMjBGRUE2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC74IYer70HSsLQc/FUVnh80/Mmv6aZkeQcy/76qpnLhWJw//Gb EgcBBFQbPbWJskuv2SjlMfIYwT3ZnVQiReuvPqzWzHiz7y6ahfx4vpV3xqnU22XT SJHA6dL7j0PlLjdQ84VwdnQ599zyFVWhr3OQKI8rYtD5A1s636U/4bqgSsPOdNNg O7eE36rdeqL5DU84Blnn5v/40OUZjNMUUvNWPUlmBU68v+wMh87+fPze/w46T7x+ Lfr/DbHk81PiKaZG6VHGArdoqA1CyibYUUl7n/aAFNH55zUJhVG+tO30/L0Iqe+n bsQaKLJ0naBU+iKMTntns5T8P53BClHCJ1jzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUz1M3pAevb7YEigFXPqnzoiD+phYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3oxTTNwQWV2YjdZRWlnRlhQcW56b2lE LXBoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfbWwAwDQYJ KoZIhvcNAQELBQADggEBAKYu8t31wBUdJzF6JUhrUuMknfPmiWhHHhMIWSCzurk1 f/m/2Eis/4Ueo7PHx9jAPXTMTINl7NwvBcIpgN7uVkGy84dh9nNC+2N0kQC21R7q Sg2bli5mzbiy8jS49FDp+HvLRSF10XUfmCBEsPmHa/Pvx74ugYK/ADOBX7qiOC78 yUsOUaR7502jPAy7mUDXRGavBQB9vbfaEof8kvx2tCc60caer65ZSkcVxk3rJSeB 08+pBgy6mJ1b532jueZPB/Y5a+cbvPosqJp6oHxZiZabIclvk38X96F7ia80RNco zQ4C2oatMzryZNLrJZxyQftpqmD81KBsh7Z5gCpewdQ= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:05 2024 by rpki-client on console-ams.rpki-client.org