$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/54Wa6YGzUqwYXA8GqGXUGWPJ9Gw.roa File: 54Wa6YGzUqwYXA8GqGXUGWPJ9Gw.roa (raw, json) Hash identifier: CHjw1KJEFQhzPurkivsDH7A9aIEFzTEqb9UuTq8HCJ8= Subject key identifier: E7:85:9A:E9:81:B3:52:AC:18:5C:0F:06:A8:65:D4:19:63:C9:F4:6C Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Certificate serial: 0CC5 Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/54Wa6YGzUqwYXA8GqGXUGWPJ9Gw.roa Signing time: Mon 26 Aug 2024 05:28:07 +0000 ROA not before: Mon 26 Aug 2024 05:28:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 58.99.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3269 (0xcc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A Validity Not Before: Aug 26 05:28:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E7859AE981B352AC185C0F06A865D41963C9F46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:74:f7:65:23:aa:fa:df:ac:3f:c5:14:a3: 58:57:f5:d2:c8:2d:14:bc:87:e2:16:86:89:cf:e5: c7:8d:cb:bc:27:38:ef:b0:85:75:d0:36:38:d2:76: 4d:6e:22:70:7b:26:7d:10:5a:91:18:fb:17:5b:72: 6d:a3:2e:65:8c:d7:53:88:88:2f:d5:f0:7c:2b:18: 31:c3:68:b7:60:5c:03:3c:59:e4:66:9b:37:93:17: 7d:78:b6:d9:5e:86:5d:16:0c:27:aa:d9:fc:5b:29: a0:87:bd:9f:01:b5:54:c2:c5:31:74:49:aa:5c:5f: d8:98:1f:7e:85:ce:42:43:ee:7f:e8:42:ff:d1:61: 4c:fe:00:33:5e:38:f6:5c:2e:ac:e5:b4:73:02:60: 2c:bd:3e:22:a7:3c:6c:b3:23:b0:d0:09:46:c3:82: c9:7b:75:07:10:3c:87:72:d0:e9:a9:7d:57:73:31: 07:19:d2:6d:06:74:dd:ad:13:c4:a8:fb:71:63:48: f2:f3:8c:44:ee:ab:b5:67:a1:e2:4b:ba:ea:9e:4e: bc:88:3e:3e:31:3e:13:c7:f0:c9:c3:79:21:aa:05: 23:63:6e:d5:ab:80:ff:4c:93:41:bb:53:32:50:ae: 3c:64:c5:de:fd:0d:51:48:d7:ef:6b:93:67:9b:02: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:85:9A:E9:81:B3:52:AC:18:5C:0F:06:A8:65:D4:19:63:C9:F4:6C X509v3 Authority Key Identifier: keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/54Wa6YGzUqwYXA8GqGXUGWPJ9Gw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 58.99.64.0/18 Signature Algorithm: sha256WithRSAEncryption 49:e8:c6:da:4c:bb:2b:e3:bf:f7:2d:6e:46:0f:ec:40:dc:c5: 01:90:6c:a1:85:6e:f7:37:c3:e4:5c:a5:20:37:f9:ba:74:db: 13:89:27:eb:b5:28:22:ab:98:79:f1:37:98:65:11:cd:f1:39: b5:cf:58:2a:44:62:93:68:4e:be:b5:d5:2e:f3:f4:5e:8f:fa: d4:01:62:83:e1:23:95:80:fc:a3:dd:b1:07:3c:52:7c:20:0c: 4a:15:c7:3c:59:1f:12:37:8e:fd:0a:42:a4:82:c8:89:54:76: bc:89:48:cf:82:d8:cc:b8:2f:bb:25:15:a7:e3:2d:f3:c5:dc: cf:3c:d9:b7:23:e8:45:8d:fc:d2:b6:2a:3c:6d:e0:76:66:79: 1a:80:b5:fa:17:ad:fa:c6:92:2f:e7:89:01:c7:d7:fb:5a:04: 79:f0:1f:e3:bc:dd:df:aa:57:f5:68:e1:fc:1b:46:03:c6:56: 70:85:f5:de:a9:d9:87:3b:94:7f:41:2a:a7:be:88:80:ef:19: e0:c7:e2:15:d7:ef:e2:83:a3:99:14:a7:a8:49:91:79:ed:48: 21:96:a4:17:a4:7e:55:34:75:b1:88:5a:86:bb:ab:d2:3a:6f: 26:ea:37:ee:42:40:ab:17:f0:df:14:0d:dc:c2:f3:85:be:34: 0f:63:4f:d8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yNDA4MjYw NTI4MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU3ODU5QUU5ODFCMzUy QUMxODVDMEYwNkE4NjVENDE5NjNDOUY0NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC87nT3ZSOq+t+sP8UUo1hX9dLILRS8h+IWhonP5ceNy7wnOO+w hXXQNjjSdk1uInB7Jn0QWpEY+xdbcm2jLmWM11OIiC/V8HwrGDHDaLdgXAM8WeRm mzeTF314ttlehl0WDCeq2fxbKaCHvZ8BtVTCxTF0SapcX9iYH36FzkJD7n/oQv/R YUz+ADNeOPZcLqzltHMCYCy9PiKnPGyzI7DQCUbDgsl7dQcQPIdy0OmpfVdzMQcZ 0m0GdN2tE8So+3FjSPLzjETuq7VnoeJLuuqeTryIPj4xPhPH8MnDeSGqBSNjbtWr gP9Mk0G7UzJQrjxkxd79DVFI1+9rk2ebAv1dAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU54Wa6YGzUqwYXA8GqGXUGWPJ9GwwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80 Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvNTRXYTZZR3pVcXdZWEE4R3FHWFVH V1BKOUd3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjpjQDAN BgkqhkiG9w0BAQsFAAOCAQEASejG2ky7K+O/9y1uRg/sQNzFAZBsoYVu9zfD5Fyl IDf5unTbE4kn67UoIquYefE3mGURzfE5tc9YKkRik2hOvrXVLvP0Xo/61AFig+Ej lYD8o92xBzxSfCAMShXHPFkfEjeO/QpCpILIiVR2vIlIz4LYzLgvuyUVp+Mt88Xc zzzZtyPoRY380rYqPG3gdmZ5GoC1+het+saSL+eJAcfX+1oEefAf47zd36pX9Wjh /BtGA8ZWcIX13qnZhzuUf0Eqp76IgO8Z4MfiFdfv4oOjmRSnqEmRee1IIZakF6R+ VTR1sYhahrur0jpvJuo37kJAqxfw3xQN3MLzhb40D2NP2A== -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:14 2024 by rpki-client on console-fra.rpki-client.org