$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/OYECPtU_58QmikYGhvGdIbTjv-E.roa File: OYECPtU_58QmikYGhvGdIbTjv-E.roa (raw, json) Hash identifier: 6ufbXiZv0WhbuDlf+HYG4tWVsjMgurmMyD+elTfCYBo= Subject key identifier: 39:81:02:3E:D5:3F:E7:C4:26:8A:46:06:86:F1:9D:21:B4:E3:BF:E1 Certificate issuer: /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Certificate serial: DB Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/OYECPtU_58QmikYGhvGdIbTjv-E.roa Signing time: Tue 22 Oct 2024 17:58:50 +0000 ROA not before: Tue 22 Oct 2024 17:58:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 150767 IP address blocks: 36.50.248.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Validity Not Before: Oct 22 17:58:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3981023ED53FE7C4268A460686F19D21B4E3BFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:3c:3b:cd:37:2f:49:a2:33:63:6f:a0:1f: 45:f6:97:bb:09:18:5c:ea:30:56:1a:92:38:9b:51: 85:ff:2e:3f:2e:44:61:a3:d4:15:a7:06:a7:62:9f: 0c:ed:fa:f7:4e:5b:96:54:fd:c4:68:67:7f:1e:f7: 3e:66:ad:91:de:d8:2c:83:f8:7a:16:ac:a7:70:9f: 7b:d1:14:ab:85:cb:ca:5b:25:b4:20:42:77:27:7d: 33:8a:05:d3:b0:07:b3:ad:20:8f:8b:b6:e0:4a:3a: 13:ba:5f:f6:43:3d:bb:d8:91:71:5a:89:b3:77:01: 11:75:38:73:57:e8:3d:aa:5b:e7:f7:b3:3b:29:eb: 82:7b:b5:95:e1:71:42:2f:b8:ad:f1:bb:d4:3d:9b: 80:36:63:07:89:50:6d:43:eb:9d:6c:d7:45:ec:d2: ec:0c:12:e6:75:75:83:cf:75:f0:81:27:4e:32:ca: 4c:d5:f0:b3:58:62:51:14:86:4e:c5:90:df:80:7a: 53:f2:37:c6:14:08:17:36:a7:b6:cf:7e:96:a3:ec: 77:9b:f9:61:20:b0:20:53:b9:9c:14:75:c5:81:af: 31:90:6d:7d:84:dd:c1:13:72:40:ef:54:e2:ce:7f: e6:7f:01:5d:1c:b0:f5:90:09:99:f9:4c:62:d3:96: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:81:02:3E:D5:3F:E7:C4:26:8A:46:06:86:F1:9D:21:B4:E3:BF:E1 X509v3 Authority Key Identifier: keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/OYECPtU_58QmikYGhvGdIbTjv-E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.50.248.0/23 Signature Algorithm: sha256WithRSAEncryption 18:18:31:e9:90:4a:d8:8d:83:5f:71:87:f9:b0:41:98:9b:1f: 00:1e:2d:20:1a:c1:4b:da:6e:0f:eb:96:bd:cc:02:16:71:5d: c7:da:7d:73:68:63:4b:98:45:64:ad:a8:e1:a7:1e:c4:76:49: 4b:f6:5c:e1:e4:38:71:21:bb:ba:0b:81:1b:66:02:de:03:36: d9:59:73:62:ea:bb:9f:f3:f2:02:9c:f4:8e:56:9a:9e:45:5b: ad:77:34:e1:7a:6e:7d:bd:cf:8c:b7:f7:51:1f:b7:c3:a2:af: a8:b8:ec:02:ba:98:b4:ac:ca:df:0c:cb:5a:47:76:cb:c2:96: bb:86:17:a4:3e:86:3a:be:f6:40:1d:60:8c:10:c8:a8:4e:9b: f4:71:c1:30:ea:90:5b:e3:7c:0b:bb:b4:dc:a6:39:59:cd:c6: 75:81:19:85:b5:70:1c:66:90:25:d9:6e:64:97:1a:5f:3a:b7: fa:59:58:21:74:b1:d2:54:f9:ac:42:45:de:dd:50:7f:14:18: 12:98:a9:7f:c4:52:a6:d1:6d:4a:db:40:0c:3a:15:58:6b:9d: 65:6b:ea:7a:c6:45:57:a2:d2:f9:f7:bf:ea:6b:a3:aa:7d:4b: 34:bc:37:14:87:bb:a4:af:6c:c9:e9:8d:07:c9:c4:e9:7a:09: a9:d3:01:10 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICANswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVG RjkwMzA2QjQ3QTdERTAzMDdGMEUzMzVCNERDN0YyN0RFQTRGQjAeFw0yNDEwMjIx NzU4NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5ODEwMjNFRDUzRkU3 QzQyNjhBNDYwNjg2RjE5RDIxQjRFM0JGRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6hTw7zTcvSaIzY2+gH0X2l7sJGFzqMFYakjibUYX/Lj8uRGGj 1BWnBqdinwzt+vdOW5ZU/cRoZ38e9z5mrZHe2CyD+HoWrKdwn3vRFKuFy8pbJbQg QncnfTOKBdOwB7OtII+LtuBKOhO6X/ZDPbvYkXFaibN3ARF1OHNX6D2qW+f3szsp 64J7tZXhcUIvuK3xu9Q9m4A2YweJUG1D651s10Xs0uwMEuZ1dYPPdfCBJ04yykzV 8LNYYlEUhk7FkN+AelPyN8YUCBc2p7bPfpaj7Heb+WEgsCBTuZwUdcWBrzGQbX2E 3cETckDvVOLOf+Z/AV0csPWQCZn5TGLTlpihAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUOYECPtU/58QmikYGhvGdIbTjv+EwHwYDVR0jBBgwFoAUNf+QMGtHp94DB/Dj NbTcfyfepPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJSklD T0xURC9OZi1RTUd0SHA5NERCX0RqTmJUY2Z5ZmVwUHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL05mLVFNR3RIcDk0REJfRGpOYlRjZnlmZXBQcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NISUpJQ09MVEQvT1lFQ1B0VV81 OFFtaWtZR2h2R2RJYlRqdi1FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASQy+DANBgkqhkiG9w0BAQsFAAOCAQEAGBgx6ZBK2I2DX3GH+bBBmJsf AB4tIBrBS9puD+uWvcwCFnFdx9p9c2hjS5hFZK2o4acexHZJS/Zc4eQ4cSG7uguB G2YC3gM22VlzYuq7n/PyApz0jlaankVbrXc04Xpufb3PjLf3UR+3w6KvqLjsArqY tKzK3wzLWkd2y8KWu4YXpD6GOr72QB1gjBDIqE6b9HHBMOqQW+N8C7u03KY5Wc3G dYEZhbVwHGaQJdluZJcaXzq3+llYIXSx0lT5rEJF3t1QfxQYEpipf8RSptFtSttA DDoVWGudZWvqesZFV6LS+fe/6mujqn1LNLw3FIe7pK9syemNB8nE6XoJqdMBEA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org