$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/E03l4rr3fqQOSqfIZa-XqPfE-7E.roa File: E03l4rr3fqQOSqfIZa-XqPfE-7E.roa (raw, json) Hash identifier: 5VOeTtBIKNPVY5WEkB3qJfbSrh+bb+8rM5XXU9fXS9o= Subject key identifier: 13:4D:E5:E2:BA:F7:7E:A4:0E:4A:A7:C8:65:AF:97:A8:F7:C4:FB:B1 Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Certificate serial: 0CDC Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/E03l4rr3fqQOSqfIZa-XqPfE-7E.roa Signing time: Mon 26 Aug 2024 05:26:18 +0000 ROA not before: Mon 26 Aug 2024 05:26:18 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18419 IP address blocks: 150.129.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3 Validity Not Before: Aug 26 05:26:18 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=134DE5E2BAF77EA40E4AA7C865AF97A8F7C4FBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:90:26:8b:dc:f8:03:36:3e:84:4c:c6:9c: 21:73:fb:00:0a:af:58:dc:38:4a:27:96:6a:6f:3b: d3:bb:9a:d9:c8:17:40:68:55:9c:b4:4c:5e:4c:3c: 30:c6:96:18:95:f5:78:b0:4f:dd:92:54:72:bb:f0: 07:71:fc:ce:fc:9d:6a:c9:15:c4:bd:45:d6:39:58: ea:f4:e6:c0:d4:b7:b8:ed:08:b7:90:9f:57:6a:14: f3:ff:d6:e7:8c:56:0c:48:9e:ee:43:69:1a:de:e9: 2d:4f:19:21:73:62:1a:98:42:ae:1c:c8:01:09:3c: 4b:18:dc:28:54:f5:46:fd:a0:74:88:a7:19:35:ba: 1c:93:80:f3:28:ff:45:03:f3:4e:71:d2:67:4b:89: 72:ea:9b:3b:a8:29:18:63:32:c7:7a:56:c3:3a:88: 6b:23:e7:4a:6c:a9:10:ae:8e:86:6f:bc:96:85:81: fc:67:d1:4c:23:01:f0:cf:61:aa:87:86:fb:e3:92: bb:91:f6:08:6e:f1:ad:ab:89:c0:52:0a:1d:ac:91: e6:05:5b:8b:ad:9f:38:6d:7e:e2:0e:da:54:79:85: 72:b7:b5:8d:16:02:ad:33:c5:8e:62:c4:5e:dc:f9: 74:83:5a:ae:79:2d:07:aa:a8:77:66:12:e9:c5:6d: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4D:E5:E2:BA:F7:7E:A4:0E:4A:A7:C8:65:AF:97:A8:F7:C4:FB:B1 X509v3 Authority Key Identifier: keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/E03l4rr3fqQOSqfIZa-XqPfE-7E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.129.228.0/22 Signature Algorithm: sha256WithRSAEncryption a6:e7:2f:a9:75:78:48:bb:33:90:b1:7f:8f:71:e1:a4:1f:90: 7c:1f:4b:c1:3e:cd:47:d8:55:a5:b5:45:f0:65:d7:22:2f:95: 46:ae:f4:ff:c8:5a:da:69:c9:2d:95:b7:cb:77:c3:5b:7a:5f: c6:8d:40:2d:71:1a:ed:ea:73:d8:fe:9f:14:d2:b2:12:c5:9d: 36:fa:54:22:91:b4:a9:de:10:41:31:76:df:c9:56:3d:32:a2: b6:36:96:86:86:27:66:3a:ac:e2:93:bc:67:e6:28:d5:38:b1: 9d:a0:24:c7:45:7b:38:71:e9:43:97:c1:a7:bb:57:31:ce:1d: d2:ef:63:74:33:c8:aa:b3:43:63:9c:1b:89:88:fe:a2:9d:fd: 52:3f:e9:1b:bc:d3:d4:75:e9:51:1c:bd:c2:66:53:fe:74:98: c9:16:a8:94:fa:05:f2:4e:98:62:00:58:67:b7:48:58:9e:f8: 07:da:b0:41:ca:8c:4b:09:d6:31:b6:e8:cc:cb:26:b6:39:f4: a7:72:92:82:af:f4:0f:8b:2a:6d:43:88:a2:5c:c3:d3:98:1b: 72:75:33:b4:67:22:e2:f7:66:68:a2:d9:01:3a:33:80:7b:f2: 38:db:51:fd:36:e9:fc:bc:09:f7:eb:e3:8d:c3:45:e8:b9:24: 09:06:5a:94 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNDA4MjYw NTI2MThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzNERFNUUyQkFGNzdF QTQwRTRBQTdDODY1QUY5N0E4RjdDNEZCQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHy5Ami9z4AzY+hEzGnCFz+wAKr1jcOEonlmpvO9O7mtnIF0Bo VZy0TF5MPDDGlhiV9XiwT92SVHK78Adx/M78nWrJFcS9RdY5WOr05sDUt7jtCLeQ n1dqFPP/1ueMVgxInu5DaRre6S1PGSFzYhqYQq4cyAEJPEsY3ChU9Ub9oHSIpxk1 uhyTgPMo/0UD805x0mdLiXLqmzuoKRhjMsd6VsM6iGsj50psqRCujoZvvJaFgfxn 0UwjAfDPYaqHhvvjkruR9ghu8a2ricBSCh2skeYFW4utnzhtfuIO2lR5hXK3tY0W Aq0zxY5ixF7c+XSDWq55LQeqqHdmEunFbQVVAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUE03l4rr3fqQOSqfIZa+XqPfE+7EwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+ q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9FMDNsNHJyM2ZxUU9TcWZJWmEt WHFQZkUtN0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCloHk MA0GCSqGSIb3DQEBCwUAA4IBAQCm5y+pdXhIuzOQsX+PceGkH5B8H0vBPs1H2FWl tUXwZdciL5VGrvT/yFraacktlbfLd8Nbel/GjUAtcRrt6nPY/p8U0rISxZ02+lQi kbSp3hBBMXbfyVY9MqK2NpaGhidmOqzik7xn5ijVOLGdoCTHRXs4celDl8Gnu1cx zh3S72N0M8iqs0NjnBuJiP6inf1SP+kbvNPUdelRHL3CZlP+dJjJFqiU+gXyTphi AFhnt0hYnvgH2rBByoxLCdYxtujMyya2OfSncpKCr/QPiyptQ4iiXMPTmBtydTO0 ZyLi92ZootkBOjOAe/I421H9Nun8vAn36+ONw0XouSQJBlqU -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:34 2024 by rpki-client on console-fra.rpki-client.org