$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/t8j7AhtIzjLpl8S8PuPPni1TX5g.roa File: t8j7AhtIzjLpl8S8PuPPni1TX5g.roa (raw, json) Hash identifier: Qflh5yW3u5FjuAAevDa6p79Y/gOHjwjSPitvDLVkbC4= Subject key identifier: B7:C8:FB:02:1B:48:CE:32:E9:97:C4:BC:3E:E3:CF:9E:2D:53:5F:98 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0E1F Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/t8j7AhtIzjLpl8S8PuPPni1TX5g.roa Signing time: Mon 26 Aug 2024 05:25:04 +0000 ROA not before: Mon 26 Aug 2024 05:25:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38843 IP address blocks: 124.150.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3615 (0xe1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Aug 26 05:25:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B7C8FB021B48CE32E997C4BC3EE3CF9E2D535F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:5a:56:4f:e5:c4:e2:87:72:a0:18:d8:a8: 3d:7a:f9:aa:e2:25:cd:fd:1a:cd:18:e3:b1:95:bc: 42:76:8d:c7:39:c3:32:78:43:a5:6d:ef:ab:b6:13: c4:93:78:b1:14:9a:ff:34:2f:6a:0c:0a:e7:02:78: 0b:23:10:a8:79:52:d9:4e:ec:54:dc:73:a9:21:00: e1:f5:ee:38:43:b0:68:cf:ec:6b:d4:7a:47:fd:3a: 06:78:35:34:82:e6:8a:0f:d3:0a:10:c5:ae:58:26: 5f:06:2c:9f:09:0f:d0:9c:e3:d7:77:58:59:3b:97: 66:82:e6:5d:74:da:1f:89:89:62:50:7d:fc:d9:06: 54:4d:bd:ad:c9:72:73:23:5a:0d:a8:65:31:1a:e3: da:21:e1:6e:07:4a:fb:d1:2c:15:36:77:21:b3:a4: 13:4a:5c:52:73:34:00:da:37:ba:6a:0f:3d:b9:b8: d4:60:19:5d:06:e7:70:7b:80:7d:a9:39:d3:f3:e4: ce:5f:f2:de:72:96:2a:0a:fb:97:ba:37:65:fc:57: 42:84:bf:7d:2c:d9:97:c5:fe:3b:ae:28:18:81:e8: a2:dd:2b:50:05:92:c2:3a:f5:3b:98:0b:d8:f9:57: d5:a3:03:22:be:6a:2c:e8:56:8a:3d:9d:db:8b:9c: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C8:FB:02:1B:48:CE:32:E9:97:C4:BC:3E:E3:CF:9E:2D:53:5F:98 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/t8j7AhtIzjLpl8S8PuPPni1TX5g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.128.0/21 Signature Algorithm: sha256WithRSAEncryption b5:57:79:2a:a5:27:cb:ee:f0:69:32:b5:74:a0:a9:b2:92:78: 81:48:30:22:2c:e6:50:7c:d0:4a:25:b9:6e:21:1c:aa:39:89: e3:2b:2c:f4:b4:e2:8c:31:cb:4e:d3:bc:36:93:39:32:f6:b7: 5f:66:f0:f7:a6:e6:a7:98:90:76:98:35:8b:8d:34:5d:da:be: f8:15:5a:59:da:5f:d0:37:43:b2:37:44:24:da:aa:ac:3c:bd: 3a:cc:16:d7:45:74:3e:e0:4d:f6:e5:dd:aa:fe:46:a9:2f:0a: 33:4f:aa:f2:3e:2c:31:39:d3:03:82:07:91:c5:36:d5:e7:ee: 42:7d:88:fa:55:10:33:73:2e:e2:95:48:b0:b9:0c:0c:c8:38: 4d:e5:90:24:45:ab:6a:fe:70:19:bd:41:86:84:3e:37:0f:52: fd:cc:bb:08:34:59:33:53:6f:b9:83:a3:fe:38:26:a6:2d:f9: 61:8d:a1:12:da:36:f8:3e:f6:43:4b:33:d1:90:7d:cc:70:ce: ce:fc:d8:db:3d:94:99:57:bf:0c:f0:e5:89:5e:6c:1d:c2:ae: 58:36:99:a4:a6:d3:e5:02:30:da:12:83:d5:8f:04:4c:bb:fe: 5e:b8:ee:e9:e2:88:c5:3d:55:9d:a8:dd:ad:da:0b:95:72:49: bd:1b:24:13 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yNDA4MjYw NTI1MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3QzhGQjAyMUI0OENF MzJFOTk3QzRCQzNFRTNDRjlFMkQ1MzVGOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDE21pWT+XE4odyoBjYqD16+ariJc39Gs0Y47GVvEJ2jcc5wzJ4 Q6Vt76u2E8STeLEUmv80L2oMCucCeAsjEKh5UtlO7FTcc6khAOH17jhDsGjP7GvU ekf9OgZ4NTSC5ooP0woQxa5YJl8GLJ8JD9Cc49d3WFk7l2aC5l102h+JiWJQffzZ BlRNva3JcnMjWg2oZTEa49oh4W4HSvvRLBU2dyGzpBNKXFJzNADaN7pqDz25uNRg GV0G53B7gH2pOdPz5M5f8t5ylioK+5e6N2X8V0KEv30s2ZfF/juuKBiB6KLdK1AF ksI69TuYC9j5V9WjAyK+aizoVoo9nduLnDUDAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUt8j7AhtIzjLpl8S8PuPPni1TX5gwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vdDhqN0FodEl6akxwbDhTOFB1UFBu aTFUWDVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3yWgDAN BgkqhkiG9w0BAQsFAAOCAQEAtVd5KqUny+7waTK1dKCpspJ4gUgwIizmUHzQSiW5 biEcqjmJ4yss9LTijDHLTtO8NpM5Mva3X2bw96bmp5iQdpg1i400Xdq++BVaWdpf 0DdDsjdEJNqqrDy9OswW10V0PuBN9uXdqv5GqS8KM0+q8j4sMTnTA4IHkcU21efu Qn2I+lUQM3Mu4pVIsLkMDMg4TeWQJEWrav5wGb1BhoQ+Nw9S/cy7CDRZM1NvuYOj /jgmpi35YY2hEto2+D72Q0sz0ZB9zHDOzvzY2z2UmVe/DPDliV5sHcKuWDaZpKbT 5QIw2hKD1Y8ETLv+Xrju6eKIxT1VnajdrdoLlXJJvRskEw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org