$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Wz2b4CzlZbYDAcW7TldQFxnqLSg.roa File: Wz2b4CzlZbYDAcW7TldQFxnqLSg.roa (raw, json) Hash identifier: zpKH8HshqIa8PFUvCg90SvnmOln3VPmBofz4zh7dOBs= Subject key identifier: 5B:3D:9B:E0:2C:E5:65:B6:03:01:C5:BB:4E:57:50:17:19:EA:2D:28 Certificate issuer: /CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Certificate serial: DE Authority key identifier: 35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Wz2b4CzlZbYDAcW7TldQFxnqLSg.roa Signing time: Tue 22 Oct 2024 17:59:12 +0000 ROA not before: Tue 22 Oct 2024 17:59:12 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 205329 IP address blocks: 36.50.248.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 13:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35FF90306B47A7DE0307F0E335B4DC7F27DEA4FB Validity Not Before: Oct 22 17:59:12 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5B3D9BE02CE565B60301C5BB4E57501719EA2D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:e3:90:60:35:e0:35:84:ab:40:8e:c9:5c: 43:73:7c:dc:44:7f:f8:b3:48:5b:1b:93:b3:80:a2: a9:42:6c:0c:7e:ce:29:bc:c0:6e:d0:6b:1f:af:4d: bd:89:64:06:01:8f:47:fd:a5:3d:fd:0d:16:69:73: 8b:a2:2d:be:8b:5e:4a:33:11:c9:3b:cd:14:98:00: 97:e3:02:fa:6e:22:61:d5:7a:0a:d2:b9:d6:a8:d0: 37:f6:7e:d8:bf:7c:2f:08:d3:95:9d:f0:e8:2b:80: ce:01:f1:01:f2:4b:97:f7:55:95:6a:a3:0f:25:11: 1c:6a:02:7a:1f:ac:a6:07:32:6f:90:b0:70:c6:c9: 0b:71:28:3f:d8:d6:e1:61:16:cc:91:dd:a9:04:3b: e4:b5:c5:8c:fd:5e:ea:4f:ac:38:31:6c:76:b7:b0: b4:10:8e:bd:4c:a0:e3:fe:2f:38:c9:ec:a8:05:e3: 43:bd:0a:6d:8b:4b:0a:d7:b1:7e:58:d2:79:a2:50: 87:80:fb:1a:d2:c0:ae:e0:ef:71:78:4c:72:a5:c7: e6:10:40:f6:09:25:62:97:50:e3:93:78:f3:fa:a0: 53:9f:90:fb:58:e1:be:36:a6:29:ae:c6:cb:dd:2f: 04:8c:48:ec:9f:a6:24:43:76:cf:01:54:ed:d8:8b: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3D:9B:E0:2C:E5:65:B6:03:01:C5:BB:4E:57:50:17:19:EA:2D:28 X509v3 Authority Key Identifier: keyid:35:FF:90:30:6B:47:A7:DE:03:07:F0:E3:35:B4:DC:7F:27:DE:A4:FB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Nf-QMGtHp94DB_DjNbTcfyfepPs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Nf-QMGtHp94DB_DjNbTcfyfepPs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHIJICOLTD/Wz2b4CzlZbYDAcW7TldQFxnqLSg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 36.50.248.0/23 Signature Algorithm: sha256WithRSAEncryption b9:34:9b:8f:15:7e:7a:35:a2:d9:6e:9a:42:50:30:14:b3:b6: 4c:b0:34:6d:e0:b7:68:61:5d:50:42:34:5a:69:4a:5b:bd:61: 54:a5:57:f7:ac:58:28:8f:15:42:24:3f:d3:cf:78:1a:c4:62: 6c:5d:86:32:ac:5f:3c:87:d6:80:8d:ce:83:a7:59:03:da:1a: fe:a0:0f:7a:94:17:87:87:33:9a:5f:0d:7d:8c:88:cb:c6:bd: 34:34:35:47:18:22:52:95:56:e9:19:a1:2a:e4:1c:91:4d:d0: 60:99:55:10:f7:d2:65:8b:9e:40:53:5c:b1:6d:33:f1:be:83: cd:f0:17:3f:df:af:74:cd:e7:65:2c:e3:25:b9:9d:e5:74:43: 3f:a2:04:75:7e:82:03:d0:ab:fe:41:7a:ee:3a:0b:cf:6d:df: f7:6e:71:96:bc:e2:46:d2:43:31:3f:be:95:89:a4:18:5f:e3: 0b:f2:f3:4d:54:29:80:08:67:66:24:cd:44:18:3e:13:da:06: 8d:67:b0:ae:3b:14:19:17:46:58:03:54:08:8a:f0:ca:69:c7: e2:f5:2d:e7:86:80:73:0b:8f:90:06:c8:26:79:6c:b8:7d:7f: bc:0a:4e:9b:33:c3:95:db:7d:0f:7f:0d:68:dd:78:b9:04:a7: d9:41:64:85 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVG RjkwMzA2QjQ3QTdERTAzMDdGMEUzMzVCNERDN0YyN0RFQTRGQjAeFw0yNDEwMjIx NzU5MTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVCM0Q5QkUwMkNFNTY1 QjYwMzAxQzVCQjRFNTc1MDE3MTlFQTJEMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCp4OOQYDXgNYSrQI7JXENzfNxEf/izSFsbk7OAoqlCbAx+zim8 wG7Qax+vTb2JZAYBj0f9pT39DRZpc4uiLb6LXkozEck7zRSYAJfjAvpuImHVegrS udao0Df2fti/fC8I05Wd8OgrgM4B8QHyS5f3VZVqow8lERxqAnofrKYHMm+QsHDG yQtxKD/Y1uFhFsyR3akEO+S1xYz9XupPrDgxbHa3sLQQjr1MoOP+LzjJ7KgF40O9 Cm2LSwrXsX5Y0nmiUIeA+xrSwK7g73F4THKlx+YQQPYJJWKXUOOTePP6oFOfkPtY 4b42pimuxsvdLwSMSOyfpiRDds8BVO3Yi8O3AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUWz2b4CzlZbYDAcW7TldQFxnqLSgwHwYDVR0jBBgwFoAUNf+QMGtHp94DB/Dj NbTcfyfepPswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJSklD T0xURC9OZi1RTUd0SHA5NERCX0RqTmJUY2Z5ZmVwUHMuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL05mLVFNR3RIcDk0REJfRGpOYlRjZnlmZXBQcy5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NISUpJQ09MVEQvV3oyYjRDemxa YllEQWNXN1RsZFFGeG5xTFNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASQy+DANBgkqhkiG9w0BAQsFAAOCAQEAuTSbjxV+ejWi2W6aQlAwFLO2 TLA0beC3aGFdUEI0WmlKW71hVKVX96xYKI8VQiQ/0894GsRibF2GMqxfPIfWgI3O g6dZA9oa/qAPepQXh4czml8NfYyIy8a9NDQ1RxgiUpVW6RmhKuQckU3QYJlVEPfS ZYueQFNcsW0z8b6DzfAXP9+vdM3nZSzjJbmd5XRDP6IEdX6CA9Cr/kF67joLz23f 925xlrziRtJDMT++lYmkGF/jC/LzTVQpgAhnZiTNRBg+E9oGjWewrjsUGRdGWANU CIrwymnH4vUt54aAcwuPkAbIJnlsuH1/vApOmzPDldt9D38NaN14uQSn2UFkhQ== -----END CERTIFICATE-----Generated at Sat Nov 23 08:47:14 2024 by rpki-client on console-fra.rpki-client.org