$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/-Ze1pmQ9YBoNFFkA1bNh1xa4_Jw.roa File: -Ze1pmQ9YBoNFFkA1bNh1xa4_Jw.roa (raw, json) Hash identifier: phM1vV4ony/DEJ8te895Xs2p+0ck6+ldZ1ob46MWN6U= Subject key identifier: F9:97:B5:A6:64:3D:60:1A:0D:14:59:00:D5:B3:61:D7:16:B8:FC:9C Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0C43 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/-Ze1pmQ9YBoNFFkA1bNh1xa4_Jw.roa Signing time: Mon 26 Aug 2024 05:23:48 +0000 ROA not before: Mon 26 Aug 2024 05:23:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4781 IP address blocks: 210.63.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Aug 26 05:23:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F997B5A6643D601A0D145900D5B361D716B8FC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ed:7e:ac:7f:e1:7c:01:eb:4e:92:d3:27:09: 01:7c:fb:b2:ff:80:6e:ef:51:7c:7b:58:27:cf:4a: 33:8c:ad:eb:3d:0c:e0:b7:b6:1c:0b:71:18:94:7a: e0:82:39:fe:00:ed:42:b7:18:8f:53:03:84:4f:48: 8c:33:1e:16:b3:cc:3d:d7:f4:34:bf:12:36:0e:25: a7:44:90:91:30:a5:51:2e:a6:e7:77:7d:bf:64:e3: f4:8a:a2:cc:a1:ed:07:c0:e1:c8:0f:79:1f:01:91: ac:50:94:4f:be:71:52:ed:c0:9a:cb:7b:39:40:41: 58:4e:be:dd:92:61:ca:fb:53:6a:24:31:46:f0:a4: e0:0b:41:6f:2a:89:23:da:68:fa:53:c2:9f:cc:23: 7e:4e:87:b4:40:a9:12:ce:c4:84:f2:52:9b:e3:af: 75:34:fb:85:07:19:61:7d:1a:f1:1f:53:e2:40:ce: 0e:81:7d:7f:c2:e4:19:54:82:e6:8c:cc:ad:95:b5: b4:98:97:9d:da:b3:e2:ec:a8:33:b0:cd:83:de:bc: 61:0e:b3:03:44:a3:1e:f9:a6:f6:95:7c:2b:19:3c: eb:0c:0c:73:89:78:c3:e4:9f:84:d2:de:46:19:ca: e3:62:b1:1d:e3:5c:67:5b:19:73:7b:3a:40:11:81: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:97:B5:A6:64:3D:60:1A:0D:14:59:00:D5:B3:61:D7:16:B8:FC:9C X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/-Ze1pmQ9YBoNFFkA1bNh1xa4_Jw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.98.0/24 Signature Algorithm: sha256WithRSAEncryption 19:be:56:f7:4a:59:cb:e4:4d:75:ab:99:9a:d0:6b:24:d3:c1: 0b:07:a8:fc:e0:51:68:15:4c:22:09:49:72:ca:79:84:25:ba: 83:29:1d:da:a4:ea:b6:be:06:23:2f:f9:94:89:9b:6d:69:bb: ea:a8:e5:85:b0:3b:f0:2e:9a:21:16:c5:a7:b2:99:c9:75:5d: d3:b4:3b:84:dd:0b:09:d8:96:7a:25:18:f9:ad:e3:60:a6:bc: 92:1a:d2:e4:cd:f1:b3:ea:1c:d0:bc:e3:0a:b2:f9:43:af:7e: ae:19:c9:32:c2:28:6e:f4:89:a1:30:58:30:9b:d5:8e:29:e5: eb:fa:c1:9c:34:10:e8:d5:0a:bb:85:1e:cd:3e:fd:38:98:fb: 4f:1f:b6:7a:26:19:15:2a:a0:05:8b:89:17:ca:26:a3:c4:84: eb:54:68:ec:b4:51:e4:5e:79:87:85:d1:59:c2:be:ea:2a:fd: 3a:9b:70:ac:c7:6f:bc:2c:f5:94:41:c8:06:90:cd:22:11:ef: cb:a8:54:18:5b:b7:13:0f:2a:71:0b:d4:6c:2e:3e:c5:7c:9f: 60:25:4e:45:8d:d2:4c:63:66:0c:53:a7:6d:48:1d:00:f6:b4: 73:6a:db:8f:71:67:c3:d3:0b:68:f7:ae:3b:2b:49:ed:8f:b1: 56:3d:30:0e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNDA4MjYw NTIzNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY5OTdCNUE2NjQzRDYw MUEwRDE0NTkwMEQ1QjM2MUQ3MTZCOEZDOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDp7X6sf+F8AetOktMnCQF8+7L/gG7vUXx7WCfPSjOMres9DOC3 thwLcRiUeuCCOf4A7UK3GI9TA4RPSIwzHhazzD3X9DS/EjYOJadEkJEwpVEupud3 fb9k4/SKosyh7QfA4cgPeR8BkaxQlE++cVLtwJrLezlAQVhOvt2SYcr7U2okMUbw pOALQW8qiSPaaPpTwp/MI35Oh7RAqRLOxITyUpvjr3U0+4UHGWF9GvEfU+JAzg6B fX/C5BlUguaMzK2VtbSYl53as+LsqDOwzYPevGEOswNEox75pvaVfCsZPOsMDHOJ eMPkn4TS3kYZyuNisR3jXGdbGXN7OkARgfqdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU+Ze1pmQ9YBoNFFkA1bNh1xa4/JwwHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy8tWmUxcG1ROVlCb05GRmtBMWJO aDF4YTRfSncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9i MA0GCSqGSIb3DQEBCwUAA4IBAQAZvlb3SlnL5E11q5ma0Gsk08ELB6j84FFoFUwi CUlyynmEJbqDKR3apOq2vgYjL/mUiZttabvqqOWFsDvwLpohFsWnspnJdV3TtDuE 3QsJ2JZ6JRj5reNgprySGtLkzfGz6hzQvOMKsvlDr36uGckywihu9ImhMFgwm9WO KeXr+sGcNBDo1Qq7hR7NPv04mPtPH7Z6JhkVKqAFi4kXyiajxITrVGjstFHkXnmH hdFZwr7qKv06m3Csx2+8LPWUQcgGkM0iEe/LqFQYW7cTDypxC9RsLj7FfJ9gJU5F jdJMY2YMU6dtSB0A9rRzatuPcWfD0wto9647K0ntj7FWPTAO -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:12 2024 by rpki-client on console-ams.rpki-client.org