$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/8bmRbG2v07iAB9P3F5Wqz4382oo.roa File: 8bmRbG2v07iAB9P3F5Wqz4382oo.roa (raw, json) Hash identifier: AlgQ0a9totefZQHsa1hXMetRXJfxNu0oYtBvEF3cc10= Subject key identifier: F1:B9:91:6C:6D:AF:D3:B8:80:07:D3:F7:17:95:AA:CF:8D:FC:DA:8A Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0E2D Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/8bmRbG2v07iAB9P3F5Wqz4382oo.roa Signing time: Mon 26 Aug 2024 05:25:06 +0000 ROA not before: Mon 26 Aug 2024 05:25:06 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 223.27.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3629 (0xe2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 26 05:25:06 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F1B9916C6DAFD3B88007D3F71795AACF8DFCDA8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:80:73:62:2d:a9:03:54:8e:0b:ab:4f:1c: c0:f9:eb:9f:59:64:3f:5d:58:26:b2:08:dd:5f:20: b8:8f:79:52:fc:c0:36:88:27:55:d6:bd:0e:b2:f7: ad:b3:fd:79:8b:2d:77:d5:49:51:ee:4a:fe:f7:40: 43:f2:a4:be:ea:c4:82:d2:ba:7c:67:41:03:9b:73: b5:2c:49:06:a7:02:58:4d:dc:99:5c:96:e0:b4:5d: f0:8e:64:4b:f8:c6:8e:3c:86:50:2a:e9:61:de:8b: 0b:83:63:9f:b6:54:af:5f:f7:d2:5a:4b:9f:8a:b9: 48:e5:06:9b:39:53:38:38:61:65:42:89:24:14:a2: 36:88:de:2d:ee:fe:a9:b8:14:50:35:cb:fc:68:e1: 2c:b9:fe:4a:8c:5c:ac:d5:8e:7f:75:fd:42:4c:3d: 12:eb:99:1a:24:6f:5d:7e:93:6b:15:b9:e4:0a:b3: 8a:0c:28:61:14:20:9c:04:f3:ca:ee:83:43:65:3e: 34:db:be:8b:a0:ad:dc:0c:21:b7:a4:d5:3b:59:32: c9:59:06:bb:a4:65:a6:2f:f8:90:39:eb:f6:78:49: 61:2d:de:bc:f8:c3:75:3c:c7:ca:77:36:84:cf:0a: 1e:13:59:37:69:9a:bc:db:61:09:35:fc:16:ef:50: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B9:91:6C:6D:AF:D3:B8:80:07:D3:F7:17:95:AA:CF:8D:FC:DA:8A X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/8bmRbG2v07iAB9P3F5Wqz4382oo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.53.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:a4:dd:e6:e5:74:42:0a:76:c6:86:76:04:f7:2a:1b:d6:18: 47:a3:e2:b3:b2:1f:3a:64:4c:70:3b:81:05:ef:6d:60:08:1e: 15:0b:68:6d:bd:80:d3:d5:c0:d2:47:0f:88:a5:cf:fc:30:67: df:1e:40:2c:fb:4e:ce:2d:71:ba:ac:c8:b9:29:9f:50:61:b2: 35:ee:cf:05:6a:e2:8b:37:d7:1a:ec:2f:b2:bf:f2:8d:7e:6f: 3b:5e:bd:7a:82:4d:66:d9:82:f3:cf:0c:5d:e9:00:0c:f8:76: ec:7f:14:0a:6f:1b:0b:68:97:5d:af:c8:68:fd:e5:b4:36:30: 62:55:3e:30:3d:3b:1b:ee:2d:1a:9e:9a:34:8d:6d:ed:37:70: 62:7c:ae:26:b3:e8:15:6d:98:b7:9b:72:77:ae:1a:c8:ee:a5: a8:26:62:6b:67:e6:e5:b4:db:8b:59:d1:51:81:cf:48:d3:c2: d2:ab:45:1b:b7:55:47:44:47:52:87:5b:7f:bd:1b:aa:38:dd: 8e:b3:7e:49:8b:44:79:36:02:6e:ca:38:af:b2:2f:c5:99:2f: 25:e8:48:51:93:36:59:6c:b6:bc:ad:61:29:b6:f6:63:c7:44: 06:9a:4d:1f:dd:f8:11:a3:11:a5:d4:fb:5c:a1:10:29:57:33: a2:5f:ff:52 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNDA4MjYw NTI1MDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxQjk5MTZDNkRBRkQz Qjg4MDA3RDNGNzE3OTVBQUNGOERGQ0RBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtOYBzYi2pA1SOC6tPHMD5659ZZD9dWCayCN1fILiPeVL8wDaI J1XWvQ6y962z/XmLLXfVSVHuSv73QEPypL7qxILSunxnQQObc7UsSQanAlhN3Jlc luC0XfCOZEv4xo48hlAq6WHeiwuDY5+2VK9f99JaS5+KuUjlBps5Uzg4YWVCiSQU ojaI3i3u/qm4FFA1y/xo4Sy5/kqMXKzVjn91/UJMPRLrmRokb11+k2sVueQKs4oM KGEUIJwE88rug0NlPjTbvougrdwMIbek1TtZMslZBrukZaYv+JA56/Z4SWEt3rz4 w3U8x8p3NoTPCh4TWTdpmrzbYQk1/BbvUDvlAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU8bmRbG2v07iAB9P3F5Wqz4382oowHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vOGJtUmJHMnYwN2lBQjlQM0Y1V3F6 NDM4Mm9vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bNTAN BgkqhkiG9w0BAQsFAAOCAQEADaTd5uV0Qgp2xoZ2BPcqG9YYR6Pis7IfOmRMcDuB Be9tYAgeFQtobb2A09XA0kcPiKXP/DBn3x5ALPtOzi1xuqzIuSmfUGGyNe7PBWri izfXGuwvsr/yjX5vO169eoJNZtmC888MXekADPh27H8UCm8bC2iXXa/IaP3ltDYw YlU+MD07G+4tGp6aNI1t7TdwYnyuJrPoFW2Yt5tyd64ayO6lqCZia2fm5bTbi1nR UYHPSNPC0qtFG7dVR0RHUodbf70bqjjdjrN+SYtEeTYCbso4r7IvxZkvJehIUZM2 WWy2vK1hKbb2Y8dEBppNH934EaMRpdT7XKEQKVczol//Ug== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org