$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/irc9qna7gJ5V9guoSc1DAmipNZw.roa File: irc9qna7gJ5V9guoSc1DAmipNZw.roa (raw, json) Hash identifier: N4r+J4wbKQEjipC7R5GKeYSMRJFGnpGeQIinkUUBrNY= Subject key identifier: 8A:B7:3D:AA:76:BB:80:9E:55:F6:0B:A8:49:CD:43:02:68:A9:35:9C Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0CA7 Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/irc9qna7gJ5V9guoSc1DAmipNZw.roa Signing time: Mon 26 Aug 2024 05:26:56 +0000 ROA not before: Mon 26 Aug 2024 05:26:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131627 IP address blocks: 101.3.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Aug 26 05:26:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8AB73DAA76BB809E55F60BA849CD430268A9359C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:34:66:1b:b0:39:9a:24:9f:c0:09:b4:f7: b8:a5:20:01:97:74:5f:55:b8:9e:fb:98:04:b0:a7: 98:01:8e:e0:6d:b8:44:c8:74:c9:7a:44:0d:02:00: 13:0d:5f:9e:50:8a:9c:ae:1e:82:e0:f9:94:24:30: 53:35:14:46:82:b2:51:3a:ea:5f:c5:a5:7b:bf:75: 56:72:35:c5:e7:97:3c:b3:0c:7e:8c:42:b6:58:37: 6b:4e:6c:65:66:43:75:e3:b3:bf:03:48:52:f6:b3: a2:98:e9:c1:1e:f9:64:62:63:8b:72:25:6a:f3:af: cb:60:32:ec:c5:ab:47:ed:ca:30:4c:01:43:f8:75: 60:d4:d8:b9:e4:88:43:39:8a:54:87:fb:41:26:31: f8:72:dd:34:e2:42:c8:8e:59:d8:03:5a:c8:1e:a9: 5c:96:fd:86:4b:99:53:4a:f4:14:f5:03:74:2e:d7: 8e:4d:bc:3f:44:65:b1:73:ae:df:94:21:cf:f7:d7: f7:20:6e:9b:69:ec:25:8e:ac:3e:77:79:19:37:ae: 18:9d:fb:af:92:cb:d7:65:f9:a3:f1:7b:ab:35:de: ba:98:f9:a2:51:b5:71:29:b1:bf:68:4f:05:4b:62: 73:11:4b:c3:bd:e4:46:aa:88:f8:d9:b0:01:1c:86: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B7:3D:AA:76:BB:80:9E:55:F6:0B:A8:49:CD:43:02:68:A9:35:9C X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/irc9qna7gJ5V9guoSc1DAmipNZw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.3.108.0/22 Signature Algorithm: sha256WithRSAEncryption 23:c2:e0:e8:bd:b2:c7:0f:b1:c0:4f:48:6c:6d:55:74:63:2e: 4e:76:bc:fa:f8:36:c1:8d:06:2c:5f:45:85:1d:5a:bf:46:71: 04:c7:bf:0c:26:9d:cb:bc:ff:97:d4:02:87:5f:ee:73:2f:79: 7f:a1:3a:a2:19:c4:1d:a2:29:76:77:b1:09:4a:70:42:11:f5: dc:9c:6a:bf:1d:15:f6:db:25:3a:99:07:c9:41:53:2c:ef:42: ba:6d:86:e5:60:c3:7c:e4:93:62:7b:25:3b:99:58:c9:9b:bc: 5c:d3:78:52:84:a7:cc:07:ca:48:1c:8d:5f:24:b9:76:5a:7c: d7:9e:96:ae:bb:4c:6a:d8:e3:6e:28:a2:f1:e2:82:66:d8:c3: c9:9e:22:a0:f9:e4:d8:49:6b:1a:6f:c4:18:a8:d0:12:fb:13: a3:56:ca:db:03:9a:8c:ba:bc:9b:9e:3d:70:bd:46:6e:e9:83: 9e:f6:8b:4b:79:68:22:b1:8c:33:69:d8:02:af:29:b6:89:fc: 72:c9:30:a3:07:cf:56:d9:89:98:ef:79:0e:c7:59:38:6a:e3: 90:ac:0c:d5:a0:95:e0:f6:7e:03:39:db:8f:8d:ad:a2:60:40: 16:e1:f4:fc:7a:8c:d1:36:df:a2:40:3d:22:ff:00:fb:d5:e9: a2:2c:77:32 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNDA4MjYw NTI2NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhBQjczREFBNzZCQjgw OUU1NUY2MEJBODQ5Q0Q0MzAyNjhBOTM1OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDShTRmG7A5miSfwAm097ilIAGXdF9VuJ77mASwp5gBjuBtuETI dMl6RA0CABMNX55QipyuHoLg+ZQkMFM1FEaCslE66l/FpXu/dVZyNcXnlzyzDH6M QrZYN2tObGVmQ3Xjs78DSFL2s6KY6cEe+WRiY4tyJWrzr8tgMuzFq0ftyjBMAUP4 dWDU2LnkiEM5ilSH+0EmMfhy3TTiQsiOWdgDWsgeqVyW/YZLmVNK9BT1A3Qu145N vD9EZbFzrt+UIc/31/cgbptp7CWOrD53eRk3rhid+6+Sy9dl+aPxe6s13rqY+aJR tXEpsb9oTwVLYnMRS8O95EaqiPjZsAEchqCnAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUirc9qna7gJ5V9guoSc1DAmipNZwwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L2lyYzlxbmE3Z0o1 VjlndW9TYzFEQW1pcE5ady5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJlA2wwDQYJKoZIhvcNAQELBQADggEBACPC4Oi9sscPscBPSGxtVXRjLk52 vPr4NsGNBixfRYUdWr9GcQTHvwwmncu8/5fUAodf7nMveX+hOqIZxB2iKXZ3sQlK cEIR9dycar8dFfbbJTqZB8lBUyzvQrpthuVgw3zkk2J7JTuZWMmbvFzTeFKEp8wH ykgcjV8kuXZafNeelq67TGrY424oovHigmbYw8meIqD55NhJaxpvxBio0BL7E6NW ytsDmoy6vJuePXC9Rm7pg572i0t5aCKxjDNp2AKvKbaJ/HLJMKMHz1bZiZjveQ7H WThq45CsDNWgleD2fgM524+NraJgQBbh9Px6jNE236JAPSL/APvV6aIsdzI= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org