$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/x-54sQPiB4gYB0fyJiEWUZZvmaE.roa File: x-54sQPiB4gYB0fyJiEWUZZvmaE.roa (raw, json) Hash identifier: ICO+TzStFo/9EFH0wKVSpxm3u6LEkwQyhL+KqtCeyyM= Subject key identifier: C7:EE:78:B1:03:E2:07:88:18:07:47:F2:26:21:16:51:96:6F:99:A1 Certificate issuer: /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Certificate serial: 0C48 Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/x-54sQPiB4gYB0fyJiEWUZZvmaE.roa Signing time: Mon 26 Aug 2024 05:23:50 +0000 ROA not before: Mon 26 Aug 2024 05:23:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4781 IP address blocks: 210.63.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB Validity Not Before: Aug 26 05:23:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C7EE78B103E20788180747F226211651966F99A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:77:1a:d7:a3:aa:39:4a:e1:1a:76:65:78: d6:3d:52:41:06:8e:60:71:6c:69:e7:3c:5e:be:ef: 4d:c4:29:90:d8:21:15:28:e7:50:5d:36:69:dd:e0: 48:70:72:2e:f5:a7:70:83:fa:d3:a8:69:2c:f8:09: 2b:30:9d:d9:4f:e7:5b:b6:11:c2:53:a7:e3:49:28: 78:ad:5c:48:e3:8a:af:c4:15:7d:e5:e6:5a:f0:5a: 56:f2:fd:67:93:1e:12:b2:ee:1d:49:20:53:21:63: 6b:b9:4f:92:14:40:67:89:27:dd:73:11:95:97:04: 02:b0:58:99:c0:06:e3:e2:ca:6b:5c:52:c3:f4:38: 6f:78:66:4e:53:65:8f:8a:2d:c8:af:0a:a5:0f:67: 4c:11:46:ab:9b:de:b1:d2:a1:c3:ad:a1:6c:8d:10: 04:c1:3c:a8:e6:43:c5:e4:cd:2d:51:76:f3:65:ac: bf:28:f0:49:7c:05:f9:15:52:12:3a:82:9b:37:fb: c8:45:17:18:53:75:de:95:f0:1d:6b:81:f5:76:63: b9:79:e2:5b:41:2c:11:9e:17:1f:aa:69:ad:eb:96: e9:dd:82:4d:33:38:33:ac:48:bc:37:84:39:30:8d: a5:57:5a:ff:6e:96:2b:94:36:bf:9b:73:7c:3d:14: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EE:78:B1:03:E2:07:88:18:07:47:F2:26:21:16:51:96:6F:99:A1 X509v3 Authority Key Identifier: keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/x-54sQPiB4gYB0fyJiEWUZZvmaE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.102.0/24 Signature Algorithm: sha256WithRSAEncryption 86:77:88:f4:0b:55:1d:de:b9:f6:bf:ec:40:08:dd:f2:80:ab: 91:e7:ba:aa:69:55:fd:f8:af:6e:d8:20:b0:63:26:f7:cf:bb: e9:c6:66:f4:63:4f:11:5b:83:5b:16:1a:b4:36:f2:2f:66:75: 4d:36:3d:61:3c:c2:cc:8f:ad:91:27:69:ac:17:8e:f0:04:74: b4:84:63:1c:c5:74:24:ea:83:6e:71:9c:fd:4d:d2:01:42:c1: 28:1c:0f:d9:a3:24:b8:cd:2b:3b:6e:96:2a:ef:95:aa:8b:22: 8c:10:7c:1b:57:3f:03:52:84:fd:86:b5:6a:2c:4b:71:01:f0: 8a:72:cb:b2:96:15:5e:ec:26:ce:b8:14:e1:94:c9:10:cb:c9: 95:f7:ab:f3:3d:7e:76:27:79:86:cb:37:96:6d:ac:1a:4a:ec: 7e:d6:43:46:95:06:62:0e:52:96:bd:98:56:32:b0:53:72:03: 8b:39:9c:4b:0c:79:68:43:5f:a4:a9:82:fb:96:c8:cb:ca:15: 51:ab:c0:fb:df:d9:1d:87:43:34:4a:65:09:c0:32:e0:1c:60: e0:3f:37:fc:89:ba:fb:e7:ab:f2:27:72:0c:be:2d:28:a3:24: a2:d4:3a:1a:db:b4:6e:64:dc:76:ad:f9:7d:95:fe:5d:b3:a0: 20:53:eb:f7 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5 QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yNDA4MjYw NTIzNTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3RUU3OEIxMDNFMjA3 ODgxODA3NDdGMjI2MjExNjUxOTY2Rjk5QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiYXca16OqOUrhGnZleNY9UkEGjmBxbGnnPF6+703EKZDYIRUo 51BdNmnd4Ehwci71p3CD+tOoaSz4CSswndlP51u2EcJTp+NJKHitXEjjiq/EFX3l 5lrwWlby/WeTHhKy7h1JIFMhY2u5T5IUQGeJJ91zEZWXBAKwWJnABuPiymtcUsP0 OG94Zk5TZY+KLcivCqUPZ0wRRqub3rHSocOtoWyNEATBPKjmQ8XkzS1RdvNlrL8o 8El8BfkVUhI6gps3+8hFFxhTdd6V8B1rgfV2Y7l54ltBLBGeFx+qaa3rlundgk0z ODOsSLw3hDkwjaVXWv9uliuUNr+bc3w9FIARAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUx+54sQPiB4gYB0fyJiEWUZZvmaEwHwYDVR0jBBgwFoAUUptgbbhig71KCK9+ sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy94LTU0c1FQaUI0Z1lCMGZ5SmlF V1VaWnZtYUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9m MA0GCSqGSIb3DQEBCwUAA4IBAQCGd4j0C1Ud3rn2v+xACN3ygKuR57qqaVX9+K9u 2CCwYyb3z7vpxmb0Y08RW4NbFhq0NvIvZnVNNj1hPMLMj62RJ2msF47wBHS0hGMc xXQk6oNucZz9TdIBQsEoHA/ZoyS4zSs7bpYq75WqiyKMEHwbVz8DUoT9hrVqLEtx AfCKcsuylhVe7CbOuBThlMkQy8mV96vzPX52J3mGyzeWbawaSux+1kNGlQZiDlKW vZhWMrBTcgOLOZxLDHloQ1+kqYL7lsjLyhVRq8D739kdh0M0SmUJwDLgHGDgPzf8 ibr756vyJ3IMvi0ooySi1Doa27RuZNx2rfl9lf5ds6AgU+v3 -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:12 2024 by rpki-client on console-ams.rpki-client.org