$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/AJdAe3Az18Twi75VCso_iQ9Sy2I.roa File: AJdAe3Az18Twi75VCso_iQ9Sy2I.roa (raw, json) Hash identifier: Tg3XtcnxUQOkwvpzhtTwSzt/6cH1msnBjBLoO+wCU+M= Subject key identifier: 00:97:40:7B:70:33:D7:C4:F0:8B:BE:55:0A:CA:3F:89:0F:52:CB:62 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0E20 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/AJdAe3Az18Twi75VCso_iQ9Sy2I.roa Signing time: Mon 26 Aug 2024 05:25:04 +0000 ROA not before: Mon 26 Aug 2024 05:25:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 223.27.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3616 (0xe20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 26 05:25:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0097407B7033D7C4F08BBE550ACA3F890F52CB62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:0b:60:87:48:0d:db:72:69:f9:f5:4f:1e: 4b:90:20:0e:7e:f3:61:00:60:cf:6c:d8:ac:c9:5b: 29:53:d0:6c:47:f7:5f:c9:86:3d:ff:23:d6:52:2d: 11:e9:7d:f3:9b:e0:0f:ed:41:35:0a:d9:f0:ba:bc: 4e:79:a9:73:2d:98:b7:da:5a:80:b5:40:56:f3:70: 7b:30:ad:f0:77:6e:0e:2b:20:d6:71:79:71:ab:d6: 7a:06:f1:f4:c3:2b:eb:c3:c9:c1:8d:6b:78:b2:fa: e1:0c:f3:c1:92:b9:77:e8:e1:c3:d6:af:96:6a:7d: 88:fd:6b:f8:f0:0c:1c:33:ce:4e:74:7c:41:db:66: 77:5b:d4:4e:09:93:c1:ec:db:f6:96:b8:e0:1b:85: 98:44:78:ad:4d:30:bf:9b:e5:8c:74:ed:4d:7e:c0: da:08:1a:58:a3:1c:9d:83:ed:f1:e6:8e:f9:03:40: 79:bd:fb:04:a9:2d:25:be:6c:6d:8d:45:6a:83:9c: a0:4f:37:15:eb:1a:51:26:3c:f1:c1:06:aa:30:13: 14:bd:e9:f6:d5:31:11:c9:8d:f5:92:32:e0:4c:d8: 0f:79:07:7e:bb:56:92:a6:a3:bd:21:67:d0:79:0f: ee:ad:58:bd:4c:b7:b8:0f:c8:d4:52:10:f6:02:ef: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:40:7B:70:33:D7:C4:F0:8B:BE:55:0A:CA:3F:89:0F:52:CB:62 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/AJdAe3Az18Twi75VCso_iQ9Sy2I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.39.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:6f:f9:6b:53:93:14:0f:9e:93:8e:cf:f7:47:e4:ec:0f:b3: 45:69:24:2b:70:25:9a:33:eb:ed:5e:06:59:15:30:30:fd:01: 5a:36:65:72:74:49:10:06:6b:c1:a1:13:d7:fd:6c:f3:56:43: 74:54:a2:b9:2a:bd:b7:7b:96:46:d4:cd:55:d7:be:b3:2f:b1: 6f:6a:0c:64:ed:af:cb:c4:ea:98:33:99:5e:6b:31:9d:e7:9f: 8f:06:3b:45:17:3f:53:96:ff:72:1f:31:77:50:7a:e1:fe:40: fd:8a:e7:b1:56:21:73:bf:19:4f:ba:d4:20:a9:e9:78:7a:8d: f6:ef:14:c2:0d:21:5b:ce:32:a4:3f:ae:be:06:f7:a3:df:05: 80:28:e2:a8:5d:9d:5a:73:ba:e5:a0:2c:4b:2e:6c:56:26:99: 44:df:5d:68:a6:35:4b:fa:76:6c:e8:e2:46:b7:ab:57:c5:f3: ea:8a:1c:8e:49:bb:7a:4b:09:84:54:fd:3a:a1:ae:90:c0:3e: 5c:0f:91:9c:4b:3e:99:df:6e:91:4e:2f:94:86:a5:0f:4b:f3: 97:0b:e9:b5:1f:9f:40:53:6b:d6:a7:e8:5b:69:c5:8f:99:e9: 25:15:a0:66:80:d1:16:de:57:96:fe:64:bf:e2:c3:39:87:e1: a0:79:22:82 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNDA4MjYw NTI1MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAwOTc0MDdCNzAzM0Q3 QzRGMDhCQkU1NTBBQ0EzRjg5MEY1MkNCNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4qwtgh0gN23Jp+fVPHkuQIA5+82EAYM9s2KzJWylT0GxH91/J hj3/I9ZSLRHpffOb4A/tQTUK2fC6vE55qXMtmLfaWoC1QFbzcHswrfB3bg4rINZx eXGr1noG8fTDK+vDycGNa3iy+uEM88GSuXfo4cPWr5ZqfYj9a/jwDBwzzk50fEHb Zndb1E4Jk8Hs2/aWuOAbhZhEeK1NML+b5Yx07U1+wNoIGlijHJ2D7fHmjvkDQHm9 +wSpLSW+bG2NRWqDnKBPNxXrGlEmPPHBBqowExS96fbVMRHJjfWSMuBM2A95B367 VpKmo70hZ9B5D+6tWL1Mt7gPyNRSEPYC7525AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUAJdAe3Az18Twi75VCso/iQ9Sy2IwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vQUpkQWUzQXoxOFR3aTc1VkNzb19p UTlTeTJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bJzAN BgkqhkiG9w0BAQsFAAOCAQEAm2/5a1OTFA+ek47P90fk7A+zRWkkK3AlmjPr7V4G WRUwMP0BWjZlcnRJEAZrwaET1/1s81ZDdFSiuSq9t3uWRtTNVde+sy+xb2oMZO2v y8TqmDOZXmsxneefjwY7RRc/U5b/ch8xd1B64f5A/YrnsVYhc78ZT7rUIKnpeHqN 9u8Uwg0hW84ypD+uvgb3o98FgCjiqF2dWnO65aAsSy5sViaZRN9daKY1S/p2bOji RrerV8Xz6oocjkm7eksJhFT9OqGukMA+XA+RnEs+md9ukU4vlIalD0vzlwvptR+f QFNr1qfoW2nFj5npJRWgZoDRFt5Xlv5kv+LDOYfhoHkigg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org