$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/CV1SeW3bk2Edd4dBsKpLdwCURlo.roa File: CV1SeW3bk2Edd4dBsKpLdwCURlo.roa (raw, json) Hash identifier: u7lqOJNH39lv/K0M9+HpePf23MlFW801Ym3dVI/l+7M= Subject key identifier: 09:5D:52:79:6D:DB:93:61:1D:77:87:41:B0:AA:4B:77:00:94:46:5A Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0C40 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/CV1SeW3bk2Edd4dBsKpLdwCURlo.roa Signing time: Mon 26 Aug 2024 05:23:48 +0000 ROA not before: Mon 26 Aug 2024 05:23:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4781 IP address blocks: 210.63.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Aug 26 05:23:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=095D52796DDB93611D778741B0AA4B770094465A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1f:8e:c3:51:32:76:a8:ac:57:9d:51:6f:29: 55:89:c1:64:4b:4f:89:49:cf:2e:2c:36:7b:c7:3d: b4:c5:0d:fe:56:c9:1d:cd:c3:44:04:e1:e0:50:30: 9d:e0:3c:86:1b:35:dc:2b:e4:97:ad:63:38:c8:ca: f5:ad:e7:5e:dd:5c:20:2a:29:24:ea:84:df:a9:37: 37:88:3a:d4:06:39:de:a6:94:b8:e1:f1:63:81:f0: ee:a6:58:53:4a:ae:d5:2a:ff:39:4e:f5:6b:ae:34: 82:85:d8:94:15:db:a1:ec:ad:be:c7:e0:5f:de:7a: 03:08:c9:49:c9:f8:14:77:34:81:3f:e8:d1:98:8b: 15:81:12:a2:66:de:a6:1c:c8:c8:4e:2c:c3:a5:f8: a9:f0:76:20:a8:a9:9f:82:f7:5e:fb:9f:c4:7b:ff: d0:13:9f:9d:3a:d2:f9:14:8e:63:6b:c5:25:2d:c0: fa:c3:a3:40:43:ce:f6:e5:75:2f:d9:00:65:12:97: 05:2d:ba:ee:3c:c6:71:e1:6b:5c:83:d3:1b:88:45: 38:25:50:c2:cf:f6:5b:ed:76:d7:f8:f9:32:8b:52: 7f:44:1c:5c:bc:07:f4:8f:31:62:35:8d:99:91:dc: 2d:47:a1:89:83:7f:06:37:f5:b4:85:0a:bb:3d:e2: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5D:52:79:6D:DB:93:61:1D:77:87:41:B0:AA:4B:77:00:94:46:5A X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/CV1SeW3bk2Edd4dBsKpLdwCURlo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.96.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:22:a6:0d:33:f3:97:f8:7f:95:4b:b0:9d:3f:71:dd:9e:36: c9:a9:66:5f:42:d5:f9:19:2e:ce:64:25:9b:8f:a8:5f:a8:a2: d1:50:ae:97:ec:2f:65:ab:3f:eb:52:68:b0:fe:f5:99:81:33: ff:56:44:82:de:2d:ad:f7:38:0f:5c:bc:02:a8:74:b4:1c:6a: ad:e9:85:16:c3:ba:a0:22:8b:4a:58:0a:73:45:e2:7b:5c:b6: e0:f3:30:df:c3:b0:fc:04:1a:d9:f2:c6:3b:3b:55:f0:09:c3: 9f:0f:b1:6c:ad:34:c6:90:8a:67:7c:32:a7:05:1f:45:c6:09: a9:63:2e:be:1c:5b:99:4b:a8:e5:62:99:ea:d2:c8:d1:79:b2: 87:71:c5:71:07:c7:4b:0f:87:be:3d:ce:36:09:f9:05:66:b4: f0:09:6a:83:7e:d8:f3:54:a2:68:79:f7:d5:52:cd:56:a2:ae: ad:3d:a1:ed:63:ee:24:50:63:ab:a0:3f:9b:da:94:6d:53:e2: 61:42:14:38:35:87:45:7f:b5:53:7c:a3:ec:18:94:a2:10:71: 75:9c:af:5e:10:29:d2:55:2a:40:a8:f2:66:5b:a5:94:38:be: a5:24:ab:68:eb:2a:1c:67:93:bb:82:01:20:37:60:9a:68:7f: 22:58:cc:68 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNDA4MjYw NTIzNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA5NUQ1Mjc5NkREQjkz NjExRDc3ODc0MUIwQUE0Qjc3MDA5NDQ2NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjH47DUTJ2qKxXnVFvKVWJwWRLT4lJzy4sNnvHPbTFDf5WyR3N w0QE4eBQMJ3gPIYbNdwr5JetYzjIyvWt517dXCAqKSTqhN+pNzeIOtQGOd6mlLjh 8WOB8O6mWFNKrtUq/zlO9WuuNIKF2JQV26Hsrb7H4F/eegMIyUnJ+BR3NIE/6NGY ixWBEqJm3qYcyMhOLMOl+KnwdiCoqZ+C9177n8R7/9ATn5060vkUjmNrxSUtwPrD o0BDzvbldS/ZAGUSlwUtuu48xnHha1yD0xuIRTglUMLP9lvtdtf4+TKLUn9EHFy8 B/SPMWI1jZmR3C1HoYmDfwY39bSFCrs94tYhAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUCV1SeW3bk2Edd4dBsKpLdwCURlowHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy9DVjFTZVczYmsyRWRkNGRCc0tw TGR3Q1VSbG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9g MA0GCSqGSIb3DQEBCwUAA4IBAQAbIqYNM/OX+H+VS7CdP3HdnjbJqWZfQtX5GS7O ZCWbj6hfqKLRUK6X7C9lqz/rUmiw/vWZgTP/VkSC3i2t9zgPXLwCqHS0HGqt6YUW w7qgIotKWApzReJ7XLbg8zDfw7D8BBrZ8sY7O1XwCcOfD7FsrTTGkIpnfDKnBR9F xgmpYy6+HFuZS6jlYpnq0sjRebKHccVxB8dLD4e+Pc42CfkFZrTwCWqDftjzVKJo effVUs1Woq6tPaHtY+4kUGOroD+b2pRtU+JhQhQ4NYdFf7VTfKPsGJSiEHF1nK9e ECnSVSpAqPJmW6WUOL6lJKto6yocZ5O7ggEgN2CaaH8iWMxo -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org