$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/drRRrnpavQwp3piHgAaz79BZH7U.roa File: drRRrnpavQwp3piHgAaz79BZH7U.roa (raw, json) Hash identifier: cqpog5/vEQOffx6nJq7EOBoDJ2cYROv7cMt1M6Ueqs8= Subject key identifier: 76:B4:51:AE:7A:5A:BD:0C:29:DE:98:87:80:06:B3:EF:D0:59:1F:B5 Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Certificate serial: 0C0C Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/drRRrnpavQwp3piHgAaz79BZH7U.roa Signing time: Mon 26 Aug 2024 05:24:04 +0000 ROA not before: Mon 26 Aug 2024 05:24:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17710 IP address blocks: 150.107.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07 Validity Not Before: Aug 26 05:24:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=76B451AE7A5ABD0C29DE98878006B3EFD0591FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:34:17:53:06:fa:75:cb:90:09:7a:7f:d8: e8:d5:47:57:6d:4c:7c:bb:54:56:45:99:28:d0:a9: c9:d3:af:34:00:44:55:c9:a9:b3:45:0c:da:32:9f: bd:66:9a:3e:e2:cb:b2:70:75:7b:d0:5c:14:57:9f: 64:84:eb:b1:aa:be:23:05:64:b2:8e:41:f1:e2:13: 08:4a:ed:8b:9c:4f:53:c3:60:f6:7c:9a:2a:35:8f: a1:cf:ff:56:27:dd:3a:69:8e:0c:03:04:d9:a3:00: 31:59:2a:6f:ca:82:26:f5:32:c2:b8:dd:fd:ea:5e: d8:44:d0:1b:b1:61:d8:96:e8:ac:c6:9d:d7:e7:7f: a9:93:5d:d9:80:ac:f9:16:31:57:bb:82:76:d3:4d: ff:e2:15:9c:57:11:8c:70:e0:59:ab:af:93:b8:1e: 6c:4b:7a:12:49:06:da:1a:d9:d3:2b:cd:fb:bf:e4: bf:17:35:23:7a:7c:c3:10:43:2c:bb:d9:4d:45:4b: 05:b2:8f:9b:db:64:89:60:5d:c6:a3:2c:c5:ef:d7: c1:ea:3c:80:19:b7:fb:51:cf:56:3f:78:0d:02:8b: 50:d7:f9:77:7a:85:bd:6b:69:ef:a4:86:39:7b:3a: 97:a9:e2:47:ba:60:9c:87:65:2f:07:68:9e:65:b3: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:51:AE:7A:5A:BD:0C:29:DE:98:87:80:06:B3:EF:D0:59:1F:B5 X509v3 Authority Key Identifier: keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/drRRrnpavQwp3piHgAaz79BZH7U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.107.64.0/22 Signature Algorithm: sha256WithRSAEncryption 36:f6:0a:50:4f:70:8d:78:93:ef:85:f7:01:65:44:d1:5e:c8: 2c:10:d1:82:fa:7d:25:d5:a8:77:11:f6:92:a5:b1:6b:fe:4f: aa:54:18:c8:27:40:e9:e9:17:f4:37:9d:09:1d:79:b5:85:e6: 59:8d:4e:92:b3:7e:fe:70:ef:04:7c:5a:60:76:83:39:e2:f3: 0f:39:ac:9e:db:db:40:99:45:e2:6f:5c:50:a3:2c:88:75:75: ff:4e:9a:94:4d:cc:30:02:fa:cd:22:8b:ce:04:ed:fc:5d:8f: b4:4b:b4:60:54:eb:fb:0a:87:fd:af:1c:ec:85:07:63:37:f5: 4e:fe:7d:29:6d:7d:ec:f8:18:45:65:d7:ea:bc:00:79:86:9e: ad:19:aa:dc:db:bb:1a:69:47:a4:ce:3d:a8:29:02:86:33:7b: cf:24:c9:89:20:ed:f4:34:8c:6d:eb:e6:e5:73:87:4f:f3:85: d0:0e:4b:15:2f:8f:1d:71:3a:0b:40:fe:2f:90:95:1b:21:bc: 0c:a3:5a:20:4a:91:47:5d:3d:19:b0:16:7b:73:b5:cb:97:f2: c2:19:ac:fe:c2:1e:bd:11:3d:fa:d8:90:ca:3e:0b:7d:6b:4b: 1a:36:89:9b:bb:ba:07:f2:ae:a9:3a:ee:70:23:4c:9e:df:c7: d5:3e:50:34 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk3 OTdCREU4RDA1ODFGQTI5OUQ4RTE0MjBFRDI5NTdDNDIwOEEwNzAeFw0yNDA4MjYw NTI0MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc2QjQ1MUFFN0E1QUJE MEMyOURFOTg4NzgwMDZCM0VGRDA1OTFGQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpgDQXUwb6dcuQCXp/2OjVR1dtTHy7VFZFmSjQqcnTrzQARFXJ qbNFDNoyn71mmj7iy7JwdXvQXBRXn2SE67GqviMFZLKOQfHiEwhK7YucT1PDYPZ8 mio1j6HP/1Yn3TppjgwDBNmjADFZKm/Kgib1MsK43f3qXthE0BuxYdiW6KzGndfn f6mTXdmArPkWMVe7gnbTTf/iFZxXEYxw4Fmrr5O4HmxLehJJBtoa2dMrzfu/5L8X NSN6fMMQQyy72U1FSwWyj5vbZIlgXcajLMXv18HqPIAZt/tRz1Y/eA0Ci1DX+Xd6 hb1rae+khjl7Opep4ke6YJyHZS8HaJ5lswMRAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdrRRrnpavQwp3piHgAaz79BZH7UwHwYDVR0jBBgwFoAUaXl73o0FgfopnY4U IO0pV8QgigcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVU L2FYbDczbzBGZ2ZvcG5ZNFVJTzBwVjhRZ2lnYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvYVhsNzNvMEZnZm9wblk0VUlPMHBWOFFnaWdjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUElJTkVUL2RyUlJybnBhdlF3cDNwaUhn QWF6NzlCWkg3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKW a0AwDQYJKoZIhvcNAQELBQADggEBADb2ClBPcI14k++F9wFlRNFeyCwQ0YL6fSXV qHcR9pKlsWv+T6pUGMgnQOnpF/Q3nQkdebWF5lmNTpKzfv5w7wR8WmB2gzni8w85 rJ7b20CZReJvXFCjLIh1df9OmpRNzDAC+s0ii84E7fxdj7RLtGBU6/sKh/2vHOyF B2M39U7+fSltfez4GEVl1+q8AHmGnq0ZqtzbuxppR6TOPagpAoYze88kyYkg7fQ0 jG3r5uVzh0/zhdAOSxUvjx1xOgtA/i+QlRshvAyjWiBKkUddPRmwFntztcuX8sIZ rP7CHr0RPfrYkMo+C31rSxo2iZu7ugfyrqk67nAjTJ7fx9U+UDQ= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org