$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/Fm01gh4_8FLGpeUnKmGmTO3N3LY.roa File: Fm01gh4_8FLGpeUnKmGmTO3N3LY.roa (raw, json) Hash identifier: VzZiA1+Z1QX/UyeB0efrZ4veYMrzM1CiHGgsWm+H1oM= Subject key identifier: 16:6D:35:82:1E:3F:F0:52:C6:A5:E5:27:2A:61:A6:4C:ED:CD:DC:B6 Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0CD9 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/Fm01gh4_8FLGpeUnKmGmTO3N3LY.roa Signing time: Mon 26 Aug 2024 05:27:36 +0000 ROA not before: Mon 26 Aug 2024 05:27:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131596 IP address blocks: 210.202.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 26 05:27:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=166D35821E3FF052C6A5E5272A61A64CEDCDDCB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:c2:6c:45:ca:d7:34:26:33:82:fa:59:51: f2:7f:34:fd:7a:8f:4d:05:e8:5d:e6:53:9b:5a:5b: c5:7e:f1:13:f1:42:37:3d:f6:40:31:c9:aa:e0:40: 50:97:bc:fc:c6:1e:7a:ea:b9:e0:52:1e:55:27:70: 3f:d9:c7:e3:14:59:d5:37:4e:64:66:4f:1f:13:e0: be:6f:d5:c1:d7:6b:54:8f:62:e1:5d:30:f9:74:15: c5:af:5d:fb:e8:b2:ca:f4:33:10:17:ee:57:60:b9: f7:e1:6e:b5:49:d7:72:2b:c5:fd:36:ba:c8:4c:b0: f9:fc:84:2d:84:2d:46:85:6e:a5:ec:cc:08:aa:ce: d9:09:30:2c:05:38:67:87:47:d8:39:7b:fe:9b:62: e1:8a:4a:ab:d7:c8:45:d7:73:a0:1a:01:b5:4a:0c: a7:3b:ac:68:59:e0:bc:38:bd:8a:c9:bd:cc:ef:22: 13:0f:42:db:ce:39:23:6e:3e:b2:75:df:d7:53:fa: 22:8e:73:52:e5:6e:9e:09:c2:5f:2b:f7:d4:c5:2f: a7:9a:d7:6d:e1:bb:10:c0:88:5d:55:1b:70:56:35: de:47:60:06:b5:00:08:55:37:43:dd:c0:ed:fe:5f: 0b:dd:36:25:b5:c0:cb:a4:37:04:a7:a2:ad:f8:00: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6D:35:82:1E:3F:F0:52:C6:A5:E5:27:2A:61:A6:4C:ED:CD:DC:B6 X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/Fm01gh4_8FLGpeUnKmGmTO3N3LY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.56.0/21 Signature Algorithm: sha256WithRSAEncryption b2:45:67:13:29:04:88:73:04:c8:e9:41:19:63:ae:f4:7a:68: fa:d9:bd:64:ab:e7:c2:d7:45:fe:68:cf:54:8c:67:f0:cc:96: ad:61:0b:cd:ca:88:92:31:c4:8a:67:78:83:10:15:06:36:5a: 49:54:cf:49:03:9f:eb:42:f3:66:fa:72:3d:ac:dc:74:d1:03: 5e:9e:d5:be:be:a4:0e:29:31:5a:03:7e:6f:07:5e:74:40:44: 9b:9b:b8:3f:2a:17:76:ab:93:da:ef:52:55:b5:46:8f:7a:37: df:0f:35:03:23:ff:8f:c5:07:b2:b6:b0:c4:66:55:1d:84:db: 84:e8:28:69:09:f0:7b:fa:14:fb:de:f8:e5:03:88:95:44:08: 9d:49:3a:ba:1a:00:93:9d:72:21:56:42:8f:b6:1a:f7:67:a6: 1e:e3:3c:fd:3b:38:98:dd:50:02:b8:57:74:94:dd:02:55:ea: 0f:91:11:a3:82:e8:51:7b:c9:99:62:5e:53:43:9c:bc:f5:d6: d2:65:d0:d8:e6:c2:56:9b:72:a8:8e:64:c4:28:d3:b7:a5:a0: 34:6d:42:fa:c0:59:fd:fd:72:f8:0e:da:78:f3:b1:36:b9:2f: 06:1f:ab:7b:bc:3b:ef:48:c4:6b:70:6f:ad:5f:d8:59:76:0d: 46:21:b3:71 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA4MjYw NTI3MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2NkQzNTgyMUUzRkYw NTJDNkE1RTUyNzJBNjFBNjRDRURDRERDQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+s8JsRcrXNCYzgvpZUfJ/NP16j00F6F3mU5taW8V+8RPxQjc9 9kAxyargQFCXvPzGHnrqueBSHlUncD/Zx+MUWdU3TmRmTx8T4L5v1cHXa1SPYuFd MPl0FcWvXfvossr0MxAX7ldguffhbrVJ13Irxf02ushMsPn8hC2ELUaFbqXszAiq ztkJMCwFOGeHR9g5e/6bYuGKSqvXyEXXc6AaAbVKDKc7rGhZ4Lw4vYrJvczvIhMP QtvOOSNuPrJ139dT+iKOc1Llbp4Jwl8r99TFL6ea123huxDAiF1VG3BWNd5HYAa1 AAhVN0PdwO3+XwvdNiW1wMukNwSnoq34ALQnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUFm01gh4/8FLGpeUnKmGmTO3N3LYwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9GbTAxZ2g0XzhGTEdwZVVuS21H bVRPM04zTFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0so4 MA0GCSqGSIb3DQEBCwUAA4IBAQCyRWcTKQSIcwTI6UEZY670emj62b1kq+fC10X+ aM9UjGfwzJatYQvNyoiSMcSKZ3iDEBUGNlpJVM9JA5/rQvNm+nI9rNx00QNentW+ vqQOKTFaA35vB150QESbm7g/Khd2q5Pa71JVtUaPejffDzUDI/+PxQeytrDEZlUd hNuE6ChpCfB7+hT73vjlA4iVRAidSTq6GgCTnXIhVkKPthr3Z6Ye4zz9OziY3VAC uFd0lN0CVeoPkRGjguhRe8mZYl5TQ5y89dbSZdDY5sJWm3KojmTEKNO3paA0bUL6 wFn9/XL4Dtp487E2uS8GH6t7vDvvSMRrcG+tX9hZdg1GIbNx -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:45 2024 by rpki-client on console-fra.rpki-client.org