$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/UaX2rvQPAuIDtaDO4l-yHRdIswA.roa File: UaX2rvQPAuIDtaDO4l-yHRdIswA.roa (raw, json) Hash identifier: 3flPEgXUR/+s8PrAEYyef89lHbHhBD/5Yzjf8Bw28xc= Subject key identifier: 51:A5:F6:AE:F4:0F:02:E2:03:B5:A0:CE:E2:5F:B2:1D:17:48:B3:00 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0E1E Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/UaX2rvQPAuIDtaDO4l-yHRdIswA.roa Signing time: Mon 26 Aug 2024 05:25:04 +0000 ROA not before: Mon 26 Aug 2024 05:25:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 124.150.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3614 (0xe1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 26 05:25:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=51A5F6AEF40F02E203B5A0CEE25FB21D1748B300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:e8:a0:ff:7b:f4:9c:e8:a8:a8:35:fc:5d: 09:cc:a6:3f:0c:92:de:93:23:8b:01:ce:5f:a5:cd: ab:9c:34:b6:d5:b7:68:22:56:81:62:d5:1d:a4:94: 14:57:ee:76:da:87:1f:95:bf:43:83:95:6e:ad:6b: 93:bb:ff:d0:fc:26:19:dc:07:06:bb:2c:f1:75:13: 7d:fd:06:e4:5b:44:12:08:f5:d8:99:43:3b:03:d1: 4a:88:55:a3:05:4d:c1:f7:f8:9d:62:8b:19:e6:30: b5:34:d0:40:d1:67:da:8c:28:dc:7f:5d:f7:0b:d9: 21:62:ba:af:16:a3:87:5e:fc:ef:f6:0c:c1:e8:52: 37:ef:a6:db:90:43:c9:0b:e2:71:94:47:9d:4e:99: 78:6e:be:69:e9:5a:10:c4:34:08:7b:66:9d:e1:6a: 2a:f9:55:65:b0:29:4a:50:97:e9:8e:44:eb:3b:42: 56:88:4a:f8:ea:33:ad:72:c5:a8:54:8d:9c:48:c7: 73:37:a7:3f:6f:92:01:27:b1:2a:e8:59:d5:3e:0a: ff:bf:03:6b:44:8f:d1:c7:6c:c3:ad:2c:36:f3:ee: a5:ce:fa:76:dc:e4:50:f6:c7:59:99:86:2e:fb:2b: 45:e3:29:b1:e9:a5:1c:d6:78:02:c7:60:b0:6b:d9: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A5:F6:AE:F4:0F:02:E2:03:B5:A0:CE:E2:5F:B2:1D:17:48:B3:00 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/UaX2rvQPAuIDtaDO4l-yHRdIswA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.132.0/22 Signature Algorithm: sha256WithRSAEncryption bc:a4:8a:9a:97:af:01:f0:72:fe:73:df:0f:04:b3:51:80:83: 28:f3:ba:d0:94:21:58:96:1a:a6:65:1c:20:04:f7:7d:fe:ef: 97:f8:ab:8c:03:3b:03:32:73:2e:b2:2f:b8:ff:8e:9c:05:ab: db:9b:14:2f:50:3c:d3:4a:29:fb:d1:5e:5a:c7:2e:43:90:3d: a1:00:7b:fe:d3:6b:17:35:96:34:c2:c1:a7:3c:96:02:23:c3: cb:7b:c2:6c:7e:ae:e3:35:01:f0:dc:94:62:78:dd:a6:e7:f2: 5f:a5:07:45:de:8c:48:1c:c4:e3:e5:01:28:ab:be:3f:b0:63: 31:0f:6f:04:c4:e8:64:c4:29:39:ac:eb:00:34:b6:07:b7:13: b2:9c:b8:d4:54:aa:4b:df:d0:7c:1b:e8:f4:c1:a2:57:b5:a6: 3e:34:c8:fc:54:8e:4a:cd:22:03:0b:1f:e8:34:ef:70:8b:45: 7a:97:c1:8a:93:be:5b:af:15:51:af:1d:55:3f:92:6d:a0:6b: c9:c2:11:45:c5:2b:2d:30:d9:94:44:ad:3f:f7:42:5e:8c:87: 05:2f:73:52:d4:b0:a6:39:94:4f:f4:7e:64:82:64:b0:29:d0: 47:17:e4:33:ea:da:66:3f:c9:73:72:29:bb:17:98:18:b5:3f: 1c:00:4b:f0 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNDA4MjYw NTI1MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUxQTVGNkFFRjQwRjAy RTIwM0I1QTBDRUUyNUZCMjFEMTc0OEIzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVieig/3v0nOioqDX8XQnMpj8Mkt6TI4sBzl+lzaucNLbVt2gi VoFi1R2klBRX7nbahx+Vv0ODlW6ta5O7/9D8JhncBwa7LPF1E339BuRbRBII9diZ QzsD0UqIVaMFTcH3+J1iixnmMLU00EDRZ9qMKNx/XfcL2SFiuq8Wo4de/O/2DMHo UjfvptuQQ8kL4nGUR51OmXhuvmnpWhDENAh7Zp3hair5VWWwKUpQl+mOROs7QlaI SvjqM61yxahUjZxIx3M3pz9vkgEnsSroWdU+Cv+/A2tEj9HHbMOtLDbz7qXO+nbc 5FD2x1mZhi77K0XjKbHppRzWeALHYLBr2Zm7AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUUaX2rvQPAuIDtaDO4l+yHRdIswAwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vVWFYMnJ2UVBBdUlEdGFETzRsLXlI UmRJc3dBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnyWhDAN BgkqhkiG9w0BAQsFAAOCAQEAvKSKmpevAfBy/nPfDwSzUYCDKPO60JQhWJYapmUc IAT3ff7vl/irjAM7AzJzLrIvuP+OnAWr25sUL1A800op+9FeWscuQ5A9oQB7/tNr FzWWNMLBpzyWAiPDy3vCbH6u4zUB8NyUYnjdpufyX6UHRd6MSBzE4+UBKKu+P7Bj MQ9vBMToZMQpOazrADS2B7cTspy41FSqS9/QfBvo9MGiV7WmPjTI/FSOSs0iAwsf 6DTvcItFepfBipO+W68VUa8dVT+SbaBrycIRRcUrLTDZlEStP/dCXoyHBS9zUtSw pjmUT/R+ZIJksCnQRxfkM+raZj/Jc3IpuxeYGLU/HABL8A== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org