$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/zlbTOz3OwHjL_3l71p2kAqYWrhM.roa File: zlbTOz3OwHjL_3l71p2kAqYWrhM.roa (raw, json) Hash identifier: M1x6RFccxNEmSFzivBh5veMXtaLa7zBAxUc0nA76WwI= Subject key identifier: CE:56:D3:3B:3D:CE:C0:78:CB:FF:79:7B:D6:9D:A4:02:A6:16:AE:13 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10BC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zlbTOz3OwHjL_3l71p2kAqYWrhM.roa Signing time: Mon 26 Aug 2024 05:16:44 +0000 ROA not before: Mon 26 Aug 2024 05:16:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131591 IP address blocks: 103.231.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4284 (0x10bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CE56D33B3DCEC078CBFF797BD69DA402A616AE13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:a0:62:df:ac:78:c3:2f:bb:e9:ba:63:25: 74:57:7f:68:44:1c:00:ca:fd:31:a1:a1:fd:bf:4e: df:7f:d4:14:ea:cb:b3:38:b2:7c:2b:48:53:68:d1: e2:c7:a6:65:94:f8:81:97:0e:11:9a:47:0e:09:46: 90:f0:bf:02:da:30:a8:26:95:14:f6:67:1b:90:e5: 49:81:de:91:de:eb:54:97:56:6d:46:4c:f2:03:04: 82:5a:09:4a:54:2d:c9:9d:70:dd:b5:8a:92:06:d1: 9c:3f:83:f2:3a:c3:ed:a9:5c:e2:5a:34:61:6d:ad: 03:bd:b3:f6:8d:ec:5b:03:2e:94:51:3b:27:98:3f: 54:d6:39:e7:c2:ff:57:e0:1e:cd:33:e0:a3:82:68: ca:7c:92:0d:46:9d:6d:d1:67:a7:62:34:e5:38:da: 79:9a:6a:45:09:69:35:9c:83:7a:42:14:ac:56:fa: a8:01:04:cd:01:96:b7:e0:4a:1a:dd:24:69:40:9e: a8:c9:2d:e0:82:7f:4a:49:3a:46:1b:66:36:07:b6: 12:25:1a:bf:4f:92:2b:ac:0b:c0:63:3b:9a:7b:cd: e7:5b:8e:2b:17:bc:a7:04:a8:25:52:3d:80:fa:2c: 85:f7:1f:7e:e9:4d:dc:0d:de:52:2a:c0:33:05:c6: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:56:D3:3B:3D:CE:C0:78:CB:FF:79:7B:D6:9D:A4:02:A6:16:AE:13 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zlbTOz3OwHjL_3l71p2kAqYWrhM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.231.48.0/24 Signature Algorithm: sha256WithRSAEncryption 15:4f:ae:93:a8:61:e6:25:cc:ce:32:5e:60:ce:b0:f9:ae:21: 38:31:50:bd:29:9c:38:1a:33:f4:5d:70:17:7f:45:a2:08:a2: be:2f:e1:ee:14:a9:4b:e0:69:e7:53:d5:66:6d:ec:39:0f:5d: 7b:30:6d:95:23:3d:df:c6:ca:f5:18:e2:c2:76:9c:05:bd:43: 83:28:8c:67:70:f1:f3:9e:e4:a6:84:11:6a:a5:b5:b6:6e:d7: 4b:d2:17:20:24:4e:97:86:0c:49:68:a1:7b:9c:2a:32:a8:9f: 67:16:a0:bb:ef:a2:f2:d1:50:a5:bc:07:d5:96:ef:e2:21:ac: 35:6a:15:eb:a2:57:2e:9d:e3:e8:17:79:f3:41:c6:fd:1e:0d: 8c:ca:de:cb:5e:c8:eb:ca:8a:b4:8b:69:6f:55:a0:12:32:36: 71:de:5b:f0:63:e7:03:fa:0a:82:a2:48:80:88:a1:9b:f4:f8: 7a:90:f4:4f:11:26:1b:d2:34:b1:ad:bb:39:45:ff:0d:96:47: 84:43:26:4a:13:23:8a:c0:97:33:2a:af:6c:da:6f:37:27:b0: 4a:b5:45:98:69:8e:3f:a4:86:a8:54:87:56:f0:52:d6:12:97: c0:f3:3e:a3:7f:28:ca:f4:00:ee:95:f7:f0:22:ab:17:e4:04: 1f:4d:d7:0f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICELwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENFNTZEMzNCM0RDRUMw NzhDQkZGNzk3QkQ2OURBNDAyQTYxNkFFMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSMaBi36x4wy+76bpjJXRXf2hEHADK/TGhof2/Tt9/1BTqy7M4 snwrSFNo0eLHpmWU+IGXDhGaRw4JRpDwvwLaMKgmlRT2ZxuQ5UmB3pHe61SXVm1G TPIDBIJaCUpULcmdcN21ipIG0Zw/g/I6w+2pXOJaNGFtrQO9s/aN7FsDLpRROyeY P1TWOefC/1fgHs0z4KOCaMp8kg1GnW3RZ6diNOU42nmaakUJaTWcg3pCFKxW+qgB BM0BlrfgShrdJGlAnqjJLeCCf0pJOkYbZjYHthIlGr9PkiusC8BjO5p7zedbjisX vKcEqCVSPYD6LIX3H37pTdwN3lIqwDMFxskLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUzlbTOz3OwHjL/3l71p2kAqYWrhMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3psYlRPejNPd0hqTF8zbDcxcDJrQXFZ V3JoTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn5zAwDQYJ KoZIhvcNAQELBQADggEBABVPrpOoYeYlzM4yXmDOsPmuITgxUL0pnDgaM/RdcBd/ RaIIor4v4e4UqUvgaedT1WZt7DkPXXswbZUjPd/GyvUY4sJ2nAW9Q4MojGdw8fOe 5KaEEWqltbZu10vSFyAkTpeGDElooXucKjKon2cWoLvvovLRUKW8B9WW7+IhrDVq FeuiVy6d4+gXefNBxv0eDYzK3steyOvKirSLaW9VoBIyNnHeW/Bj5wP6CoKiSICI oZv0+HqQ9E8RJhvSNLGtuzlF/w2WR4RDJkoTI4rAlzMqr2zabzcnsEq1RZhpjj+k hqhUh1bwUtYSl8DzPqN/KMr0AO6V9/AiqxfkBB9N1w8= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:28 2024 by rpki-client on console-fra.rpki-client.org