$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/fzL5lNlEhdqV6I4td_uVsaF_dAc.roa File: fzL5lNlEhdqV6I4td_uVsaF_dAc.roa (raw, json) Hash identifier: UPWTFJKcFPDChnqf1A2Q/AH79Rj28yXQtp6z1yRHcTU= Subject key identifier: 7F:32:F9:94:D9:44:85:DA:95:E8:8E:2D:77:FB:95:B1:A1:7F:74:07 Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Certificate serial: 0E60 Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fzL5lNlEhdqV6I4td_uVsaF_dAc.roa Signing time: Mon 26 Aug 2024 05:27:20 +0000 ROA not before: Mon 26 Aug 2024 05:27:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 1659 IP address blocks: 163.30.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3680 (0xe60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E Validity Not Before: Aug 26 05:27:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7F32F994D94485DA95E88E2D77FB95B1A17F7407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:9a:46:df:9d:90:d0:04:6c:b8:cc:36:fa: 26:7a:eb:0b:8e:32:cb:ce:74:14:e0:38:7d:b8:af: db:8f:9e:da:59:c1:ff:4f:ac:de:83:51:1f:e6:f2: 35:ef:0f:21:33:1a:67:59:10:36:3d:d8:1e:72:69: f5:19:99:0f:26:e5:d5:09:39:f1:b8:23:4f:b6:17: 80:c4:c0:3e:3a:72:29:4e:b6:b3:f7:2e:cc:48:ac: 15:c4:ea:c5:a6:3d:17:19:88:d2:30:ff:24:85:4b: 81:fd:fb:38:a9:fd:14:41:99:90:23:59:fa:7b:44: 96:87:c5:4f:ea:8f:bd:e8:e2:03:ed:18:2d:2c:01: d2:9a:d0:78:82:31:2d:54:ab:b1:d3:59:1e:68:90: 89:9e:89:cd:c4:88:cd:14:98:37:a5:2f:90:b8:57: a5:74:71:69:86:15:a6:27:31:1e:46:d5:1c:62:b9: 53:c0:0f:b3:1d:0d:29:5c:84:7a:b1:55:af:47:c6: ef:f3:61:19:45:6e:b4:47:1f:e7:f8:b4:8a:1b:04: 89:c1:cc:12:d6:fe:61:a2:36:64:7d:e1:64:23:93: 6f:fa:e6:0a:74:52:54:68:d4:30:b2:10:85:88:db: c4:12:1e:ad:a9:3c:e8:9c:54:98:90:83:4d:c4:ac: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:32:F9:94:D9:44:85:DA:95:E8:8E:2D:77:FB:95:B1:A1:7F:74:07 X509v3 Authority Key Identifier: keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/fzL5lNlEhdqV6I4td_uVsaF_dAc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.30.0.0/15 Signature Algorithm: sha256WithRSAEncryption a6:5e:9b:db:7e:5f:40:37:f5:d4:26:7e:65:40:e6:9a:79:f8: 89:97:1a:89:a1:93:80:44:fe:1b:7f:db:6d:6f:b5:17:3e:69: d1:b1:21:14:fa:e6:e4:63:f4:8d:05:58:60:8f:8e:6d:b9:31: 7a:fb:fe:a3:af:a6:7e:2e:07:4c:1f:75:9d:0b:23:e6:b4:1d: 53:8b:27:70:53:f5:4a:dc:2c:5f:19:bb:b3:8e:db:8a:dc:a7: e0:08:4f:5d:f5:a2:a7:f7:aa:52:9d:ef:d4:73:a0:f6:36:c5: 0c:e4:ca:7c:ba:39:d0:ff:bd:1a:d0:ca:1b:33:93:7e:3e:b0: 52:0f:50:88:f0:58:d7:64:5b:3a:a4:e7:14:43:08:ec:34:fd: 9c:8a:6a:e0:03:ed:e2:f1:b3:33:ef:2a:c5:e9:11:57:19:c9: 28:69:c1:11:2f:45:5e:f5:47:4f:d9:e1:d9:9d:bc:cf:f4:80: cf:76:96:00:43:62:7a:0e:a8:a6:86:0f:b5:bd:70:86:53:37: 7e:13:63:ca:17:41:f7:14:0d:07:86:72:28:f2:3c:67:26:65: a7:27:36:00:4c:62:43:20:44:8f:b4:c0:ae:a1:a3:94:6d:81: 8f:6b:47:19:1e:60:2f:e0:01:b6:a4:3f:a5:0d:01:c5:bd:5c: 7d:7f:4b:e9 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNDA4MjYw NTI3MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdGMzJGOTk0RDk0NDg1 REE5NUU4OEUyRDc3RkI5NUIxQTE3Rjc0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgjppG352Q0ARsuMw2+iZ66wuOMsvOdBTgOH24r9uPntpZwf9P rN6DUR/m8jXvDyEzGmdZEDY92B5yafUZmQ8m5dUJOfG4I0+2F4DEwD46cilOtrP3 LsxIrBXE6sWmPRcZiNIw/ySFS4H9+zip/RRBmZAjWfp7RJaHxU/qj73o4gPtGC0s AdKa0HiCMS1Uq7HTWR5okImeic3EiM0UmDelL5C4V6V0cWmGFaYnMR5G1RxiuVPA D7MdDSlchHqxVa9Hxu/zYRlFbrRHH+f4tIobBInBzBLW/mGiNmR94WQjk2/65gp0 UlRo1DCyEIWI28QSHq2pPOicVJiQg03ErF7ZAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUfzL5lNlEhdqV6I4td/uVsaF/dAcwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF /peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9mekw1bE5sRWhkcVY2STR0ZF91 VnNhRl9kQWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBox4w DQYJKoZIhvcNAQELBQADggEBAKZem9t+X0A39dQmfmVA5pp5+ImXGomhk4BE/ht/ 221vtRc+adGxIRT65uRj9I0FWGCPjm25MXr7/qOvpn4uB0wfdZ0LI+a0HVOLJ3BT 9UrcLF8Zu7OO24rcp+AIT131oqf3qlKd79RzoPY2xQzkyny6OdD/vRrQyhszk34+ sFIPUIjwWNdkWzqk5xRDCOw0/ZyKauAD7eLxszPvKsXpEVcZyShpwREvRV71R0/Z 4dmdvM/0gM92lgBDYnoOqKaGD7W9cIZTN34TY8oXQfcUDQeGcijyPGcmZacnNgBM YkMgRI+0wK6ho5RtgY9rRxkeYC/gAbakP6UNAcW9XH1/S+k= -----END CERTIFICATE-----Generated at Sat Sep 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org