$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/37EjTJ0VQcAmyHmRPDHHjelU0eE.roa File: 37EjTJ0VQcAmyHmRPDHHjelU0eE.roa (raw, json) Hash identifier: wixOHiFHXMy/YFMK63jUgilsqxgtMj0LFAgzPDfXiDo= Subject key identifier: DF:B1:23:4C:9D:15:41:C0:26:C8:79:91:3C:31:C7:8D:E9:54:D1:E1 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0E13 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/37EjTJ0VQcAmyHmRPDHHjelU0eE.roa Signing time: Mon 26 Aug 2024 05:25:01 +0000 ROA not before: Mon 26 Aug 2024 05:25:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 124.150.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3603 (0xe13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 26 05:25:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DFB1234C9D1541C026C879913C31C78DE954D1E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:4a:8c:77:16:fa:fd:2f:a1:4c:96:0f:75: 03:0b:34:1a:ee:54:f4:45:e8:52:94:19:1e:85:b0: 93:0c:69:ed:1d:1a:aa:6d:f7:ee:d0:4b:9d:95:cb: ad:1a:36:de:44:42:b2:97:47:c6:e3:dd:35:c5:3a: 14:e6:47:a7:8b:f5:40:db:6e:78:59:1e:f6:03:12: 3f:7c:76:75:ce:1b:5b:54:9c:68:cd:dd:9d:29:9a: 43:d3:21:f5:67:a4:4d:85:dc:e9:b7:e6:9a:f1:0d: 79:0f:2e:50:fc:9e:75:23:8a:85:be:18:52:d1:c7: 7d:41:d1:81:9a:9a:33:61:1b:a8:5b:d8:2a:57:20: b7:ca:e7:56:22:eb:35:c0:6c:a3:45:0e:7d:f1:64: 20:59:4e:e5:66:5c:c3:62:39:34:3a:ec:ec:99:76: bd:0a:3a:db:b2:62:38:ff:d5:e1:8e:e5:94:a9:31: a1:dc:16:a6:dd:ab:fe:82:23:fd:61:3c:ef:ae:25: 6d:b2:a6:a8:57:b9:f0:d7:4d:3a:41:9d:71:7c:ed: a1:1f:5c:12:31:64:c0:d2:ac:f1:fd:cf:24:55:e7: c6:30:39:64:26:c5:18:85:79:d3:5b:1e:ab:b2:45: c4:19:c8:97:e0:84:53:41:ec:b3:24:7e:bc:ae:ca: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B1:23:4C:9D:15:41:C0:26:C8:79:91:3C:31:C7:8D:E9:54:D1:E1 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/37EjTJ0VQcAmyHmRPDHHjelU0eE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.131.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:25:ee:ab:d4:46:7e:cd:1a:ab:a4:4b:ba:8f:33:57:7b:ed: 81:22:0f:d8:b6:55:3f:21:1f:e3:58:83:ec:54:be:6b:3e:ca: 3b:0d:78:77:4c:6f:2a:65:5c:a2:4e:05:56:4b:51:9f:3b:99: 8d:1e:f1:30:e2:f0:74:74:b6:d3:03:ca:68:f4:ed:77:2d:47: 87:9f:2a:fa:11:6a:3b:6d:d4:22:7c:59:75:64:32:84:fe:dd: 7f:3b:ae:bc:4b:d9:fa:41:0d:31:fb:38:c9:50:c1:fa:f8:e9: 9a:ff:9f:b5:56:51:d6:93:d5:9e:e5:3b:5f:08:5f:d3:53:e6: 8b:94:be:37:63:ae:cb:91:fe:c8:ed:72:3e:f0:c7:98:99:5a: 45:74:27:94:cb:82:af:58:58:b9:fe:4c:85:8e:f7:92:de:22: 32:31:04:b0:43:ad:e5:52:82:4e:24:36:a0:e8:8c:17:d6:98: a0:da:ba:83:e0:83:f2:65:ef:55:97:b9:bd:33:f6:77:4b:4c: 2a:83:68:f4:fe:88:93:0f:84:96:12:66:4c:d5:b0:aa:f7:c9: e7:18:af:c7:07:d6:4a:c6:a0:02:0a:2b:55:f0:56:1f:d3:75: c3:94:f3:e0:ae:d8:47:c7:18:5d:d2:17:38:10:19:db:97:d3: 9e:72:ae:24 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDhMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNDA4MjYw NTI1MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGQjEyMzRDOUQxNTQx QzAyNkM4Nzk5MTNDMzFDNzhERTk1NEQxRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdgUqMdxb6/S+hTJYPdQMLNBruVPRF6FKUGR6FsJMMae0dGqpt 9+7QS52Vy60aNt5EQrKXR8bj3TXFOhTmR6eL9UDbbnhZHvYDEj98dnXOG1tUnGjN 3Z0pmkPTIfVnpE2F3Om35prxDXkPLlD8nnUjioW+GFLRx31B0YGamjNhG6hb2CpX ILfK51Yi6zXAbKNFDn3xZCBZTuVmXMNiOTQ67OyZdr0KOtuyYjj/1eGO5ZSpMaHc Fqbdq/6CI/1hPO+uJW2ypqhXufDXTTpBnXF87aEfXBIxZMDSrPH9zyRV58YwOWQm xRiFedNbHquyRcQZyJfghFNB7LMkfryuyi1ZAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU37EjTJ0VQcAmyHmRPDHHjelU0eEwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vMzdFalRKMFZRY0FteUhtUlBESEhq ZWxVMGVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHyWgzAN BgkqhkiG9w0BAQsFAAOCAQEAeyXuq9RGfs0aq6RLuo8zV3vtgSIP2LZVPyEf41iD 7FS+az7KOw14d0xvKmVcok4FVktRnzuZjR7xMOLwdHS20wPKaPTtdy1Hh58q+hFq O23UInxZdWQyhP7dfzuuvEvZ+kENMfs4yVDB+vjpmv+ftVZR1pPVnuU7Xwhf01Pm i5S+N2Ouy5H+yO1yPvDHmJlaRXQnlMuCr1hYuf5MhY73kt4iMjEEsEOt5VKCTiQ2 oOiMF9aYoNq6g+CD8mXvVZe5vTP2d0tMKoNo9P6Ikw+ElhJmTNWwqvfJ5xivxwfW SsagAgorVfBWH9N1w5Tz4K7YR8cYXdIXOBAZ25fTnnKuJA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org