$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/OzNaqY_Q_m4jp7mMlgHY1fUJrto.roa File: OzNaqY_Q_m4jp7mMlgHY1fUJrto.roa (raw, json) Hash identifier: SB7DjxvPqtV2/g7vZwX+XJmnREMbs6zAFKFOzhKUGzo= Subject key identifier: 3B:33:5A:A9:8F:D0:FE:6E:23:A7:B9:8C:96:01:D8:D5:F5:09:AE:DA Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E4E Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/OzNaqY_Q_m4jp7mMlgHY1fUJrto.roa Signing time: Mon 26 Aug 2024 05:27:13 +0000 ROA not before: Mon 26 Aug 2024 05:27:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 210.71.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3662 (0xe4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3B335AA98FD0FE6E23A7B98C9601D8D5F509AEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:ee:41:c1:ad:fb:e4:eb:5c:8a:7a:cb:8a: 5a:cd:3d:44:1a:67:09:79:21:2b:69:35:16:a7:db: 09:11:a1:c2:b0:bc:af:98:ec:b5:3c:4b:b4:62:f7: 94:68:aa:f4:ac:20:a1:d0:f3:79:cc:c0:82:a5:4a: 9a:05:e2:3a:e8:3c:0b:48:ac:10:15:93:dc:ad:f9: 99:72:43:e5:20:59:b2:8a:0c:05:b4:1a:6b:bb:7c: be:e1:a0:af:2d:fd:81:cb:47:8d:30:bd:9c:81:bc: ff:8d:c4:bd:0f:db:c7:e6:a2:b0:21:67:86:1c:53: df:dd:54:1b:71:f9:54:2b:1b:ff:8c:43:78:9f:2e: 4a:fb:73:2b:a5:15:57:bd:1e:16:06:48:f2:9e:5a: 71:d0:c1:3a:f8:e2:89:b2:69:37:a8:06:77:07:3f: 7b:71:ea:39:e0:dc:f6:df:aa:0e:be:c4:3c:35:fa: 78:cc:d2:cb:f6:21:28:86:10:ac:87:bf:79:28:41: 2d:05:34:ae:13:f5:d8:ee:67:a5:d9:91:43:73:15: c1:70:56:48:20:39:ec:72:74:9d:73:31:d4:20:c2: e3:64:5b:ef:53:33:83:90:87:d7:72:3b:f3:08:6e: 33:31:5f:99:58:61:27:77:e8:57:b0:07:67:ab:fb: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:33:5A:A9:8F:D0:FE:6E:23:A7:B9:8C:96:01:D8:D5:F5:09:AE:DA X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/OzNaqY_Q_m4jp7mMlgHY1fUJrto.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.71.0.0/17 Signature Algorithm: sha256WithRSAEncryption 55:a0:fd:55:58:a5:6d:0c:43:92:40:d1:33:53:37:c7:48:f3: 99:09:20:c8:2b:16:b2:55:a5:1d:d2:13:79:4d:e9:61:c3:07: 1a:d1:79:c6:5b:8d:ec:5e:f6:77:51:44:01:2f:6c:f0:f9:e9: 59:92:40:7c:ad:77:1c:61:9a:bb:d6:c6:d4:b1:8b:02:32:28: f6:8a:5e:13:fb:8e:f7:80:ad:cd:c4:e5:80:f7:73:36:5e:a9: 3b:67:9a:46:51:80:58:1d:8d:a7:1b:4b:e5:74:50:c3:3e:f4: bc:94:4b:5b:cd:f0:12:f8:c9:e2:42:11:ce:03:e8:d1:1a:7d: 49:af:ff:2b:7f:bc:c4:8f:2b:d3:73:95:1f:1e:0b:23:7b:c1: 6a:0c:6e:70:ed:ca:b9:2d:00:70:48:e0:ae:ea:7d:c3:41:84: e1:58:64:37:e4:23:28:fb:b5:1a:81:bc:47:e4:d0:be:16:4a: 9a:78:b8:e8:4f:e3:da:16:0e:48:fd:e7:50:69:e6:1c:ce:61: 8a:de:57:b0:84:68:e5:0b:20:2c:02:55:5b:d6:f8:4a:ba:58: 5b:23:32:42:34:a7:0d:09:38:9e:cf:e7:5c:cc:e2:5e:0a:b5: bb:2f:6d:d1:64:fa:f4:c2:79:9e:bc:7b:72:f3:7c:11:4e:a3: a5:c7:82:c1 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCMzM1QUE5OEZEMEZF NkUyM0E3Qjk4Qzk2MDFEOEQ1RjUwOUFFREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2l+5Bwa375OtcinrLilrNPUQaZwl5IStpNRan2wkRocKwvK+Y 7LU8S7Ri95RoqvSsIKHQ83nMwIKlSpoF4jroPAtIrBAVk9yt+ZlyQ+UgWbKKDAW0 Gmu7fL7hoK8t/YHLR40wvZyBvP+NxL0P28fmorAhZ4YcU9/dVBtx+VQrG/+MQ3if Lkr7cyulFVe9HhYGSPKeWnHQwTr44omyaTeoBncHP3tx6jng3Pbfqg6+xDw1+njM 0sv2ISiGEKyHv3koQS0FNK4T9djuZ6XZkUNzFcFwVkggOexydJ1zMdQgwuNkW+9T M4OQh9dyO/MIbjMxX5lYYSd36FewB2er+x+bAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUOzNaqY/Q/m4jp7mMlgHY1fUJrtowHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9Pek5hcVlfUV9tNGpwN21NbGdI WTFmVUpydG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0kcA MA0GCSqGSIb3DQEBCwUAA4IBAQBVoP1VWKVtDEOSQNEzUzfHSPOZCSDIKxayVaUd 0hN5Telhwwca0XnGW43sXvZ3UUQBL2zw+elZkkB8rXccYZq71sbUsYsCMij2il4T +473gK3NxOWA93M2Xqk7Z5pGUYBYHY2nG0vldFDDPvS8lEtbzfAS+MniQhHOA+jR Gn1Jr/8rf7zEjyvTc5UfHgsje8FqDG5w7cq5LQBwSOCu6n3DQYThWGQ35CMo+7Ua gbxH5NC+FkqaeLjoT+PaFg5I/edQaeYczmGK3lewhGjlCyAsAlVb1vhKulhbIzJC NKcNCTiez+dczOJeCrW7L23RZPr0wnmevHty83wRTqOlx4LB -----END CERTIFICATE-----Generated at Fri Sep 20 21:34:50 2024 by rpki-client on console-ams.rpki-client.org