$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/o_e0C8v0kWY-RX5vhIXz7J7Tw48.roa File: o_e0C8v0kWY-RX5vhIXz7J7Tw48.roa (raw, json) Hash identifier: a70jO3mYfElVvjwJiHBJgb5fkjKGVEjAca2M10Shi88= Subject key identifier: A3:F7:B4:0B:CB:F4:91:66:3E:45:7E:6F:84:85:F3:EC:9E:D3:C3:8F Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0C9C Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/o_e0C8v0kWY-RX5vhIXz7J7Tw48.roa Signing time: Mon 26 Aug 2024 05:26:54 +0000 ROA not before: Mon 26 Aug 2024 05:26:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 43.255.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Aug 26 05:26:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A3F7B40BCBF491663E457E6F8485F3EC9ED3C38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:09:4e:cf:51:e8:f3:ce:eb:3d:1d:32:7a: ba:d5:40:28:51:28:73:cc:18:09:b5:1f:e8:d2:35: 55:5d:51:df:04:fd:f9:4e:bb:ef:b5:79:bc:87:dd: 9e:61:86:0d:1a:15:bb:ed:b3:fb:11:91:4a:6d:d1: a8:6e:f7:3c:f5:a8:34:8b:66:19:21:64:5c:15:cc: 94:03:95:39:15:c5:5c:2b:0a:49:6f:aa:58:81:3f: ea:3f:29:1f:3d:a0:4b:1f:63:8a:d7:9b:aa:b2:73: 4b:37:39:e8:ae:2a:31:31:d8:b7:37:1f:32:31:bd: 75:45:f3:d8:f6:11:0d:03:1e:4b:fe:1f:22:dc:ad: 34:43:14:08:ad:74:e0:47:8a:62:0d:e8:a5:8f:cf: b8:f6:6f:53:84:89:c8:96:cf:29:ac:65:9f:02:a5: cd:3b:5b:a3:e7:96:75:7b:b4:6d:7c:66:bf:5f:60: 57:c7:1d:7a:84:9f:fa:50:dd:19:50:63:30:a0:e1: c3:61:89:04:c1:40:b2:25:a5:d1:b6:51:dc:7b:93: a7:72:ad:21:44:5a:f9:8f:d4:e8:f3:52:8d:a6:cc: 3d:ad:39:9c:99:a0:ae:78:22:d6:de:73:11:d6:7d: 06:18:c3:7f:2e:d9:72:da:68:bd:67:83:91:65:37: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F7:B4:0B:CB:F4:91:66:3E:45:7E:6F:84:85:F3:EC:9E:D3:C3:8F X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/o_e0C8v0kWY-RX5vhIXz7J7Tw48.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.255.12.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:f2:a9:0d:21:37:da:53:52:07:1a:81:79:61:67:a2:d5:35: dd:7a:34:22:6a:d1:51:36:d5:c9:1e:7c:5a:20:b2:01:ba:e6: 9f:d3:7c:5c:17:16:b5:72:42:36:cc:51:a6:be:c8:d3:0a:d8: dd:43:54:8f:66:97:78:d3:5e:fd:74:01:ec:b8:69:a5:f1:b4: c9:58:de:8c:57:d5:81:ac:8c:2d:a7:b7:05:8d:2c:12:48:22: d0:09:56:ac:8b:2b:fd:b5:af:8c:a5:dd:c7:92:bd:d6:e5:29: be:d6:d3:24:50:d7:1d:ea:68:43:dd:3a:93:b7:e8:98:d7:c1: 67:e4:42:6f:27:ad:ad:4a:20:aa:16:53:a7:aa:21:0e:1a:f2: 3b:e0:ef:26:d9:c7:34:c2:13:e9:a7:fe:8c:63:a4:f5:f4:19: aa:26:17:e4:1a:b3:ef:7a:ff:ed:01:f3:d5:95:8e:58:64:0b: 4f:aa:38:84:a1:a6:f8:2d:73:78:1a:f8:7d:fa:f6:c6:50:1c: 33:7e:7a:70:91:75:e5:fe:01:0d:69:6d:f0:10:9e:07:a3:73: dd:4e:e3:51:9d:6f:19:7f:e1:be:8c:9c:ec:00:c2:9c:5a:bd: 05:10:28:27:a4:4d:82:8c:0c:a2:ae:a0:04:a5:45:76:58:ff: c4:e5:7c:e0 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNDA4MjYw NTI2NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzRjdCNDBCQ0JGNDkx NjYzRTQ1N0U2Rjg0ODVGM0VDOUVEM0MzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC75wlOz1Ho887rPR0yerrVQChRKHPMGAm1H+jSNVVdUd8E/flO u++1ebyH3Z5hhg0aFbvts/sRkUpt0ahu9zz1qDSLZhkhZFwVzJQDlTkVxVwrCklv qliBP+o/KR89oEsfY4rXm6qyc0s3OeiuKjEx2Lc3HzIxvXVF89j2EQ0DHkv+HyLc rTRDFAitdOBHimIN6KWPz7j2b1OEiciWzymsZZ8Cpc07W6PnlnV7tG18Zr9fYFfH HXqEn/pQ3RlQYzCg4cNhiQTBQLIlpdG2Udx7k6dyrSFEWvmP1OjzUo2mzD2tOZyZ oK54ItbecxHWfQYYw38u2XLaaL1ng5FlN59dAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUo/e0C8v0kWY+RX5vhIXz7J7Tw48wHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L29fZTBDOHYwa1dZ LVJYNXZoSVh6N0o3VHc0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIr/wwwDQYJKoZIhvcNAQELBQADggEBAIzyqQ0hN9pTUgcagXlhZ6LVNd16 NCJq0VE21ckefFogsgG65p/TfFwXFrVyQjbMUaa+yNMK2N1DVI9ml3jTXv10Aey4 aaXxtMlY3oxX1YGsjC2ntwWNLBJIItAJVqyLK/21r4yl3ceSvdblKb7W0yRQ1x3q aEPdOpO36JjXwWfkQm8nra1KIKoWU6eqIQ4a8jvg7ybZxzTCE+mn/oxjpPX0Gaom F+Qas+96/+0B89WVjlhkC0+qOIShpvgtc3ga+H369sZQHDN+enCRdeX+AQ1pbfAQ ngejc91O41Gdbxl/4b6MnOwAwpxavQUQKCekTYKMDKKuoASlRXZY/8TlfOA= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:15 2024 by rpki-client on console-ams.rpki-client.org