$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/QCDBgq1icD0jKFjFBvAZylb-bFo.roa File: QCDBgq1icD0jKFjFBvAZylb-bFo.roa (raw, json) Hash identifier: 8xE7FNmRq4MpvhLoxXaQcQA8clS4vK+cxjlCW/mAA8E= Subject key identifier: 40:20:C1:82:AD:62:70:3D:23:28:58:C5:06:F0:19:CA:56:FE:6C:5A Certificate issuer: /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337 Certificate serial: 1293 Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/QCDBgq1icD0jKFjFBvAZylb-bFo.roa Signing time: Mon 26 Aug 2024 05:28:13 +0000 ROA not before: Mon 26 Aug 2024 05:28:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 23675 IP address blocks: 103.132.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4755 (0x1293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337 Validity Not Before: Aug 26 05:28:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4020C182AD62703D232858C506F019CA56FE6C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:8d:ad:f4:93:ba:32:50:74:1b:ae:19:c9: 1e:22:25:89:4f:42:18:77:45:b1:c0:26:e6:79:b7: 0b:d4:90:e8:70:36:89:37:b9:b5:8a:52:fd:fe:e0: 79:9c:91:57:fd:8c:12:7d:5a:0a:2d:1b:0c:62:b7: 74:78:12:68:1b:46:36:13:b9:b4:f2:11:bc:28:e5: 33:ce:83:0f:03:61:b5:83:a3:25:d6:d7:f2:cb:20: f1:ca:5f:7b:bc:25:42:83:99:7a:ff:9d:f4:bb:1c: c3:2c:22:d4:63:84:3b:15:d8:98:67:6c:55:97:c5: 70:f5:07:4a:79:44:3f:59:17:5a:4b:b1:99:5e:90: da:f3:cb:3b:48:1b:67:19:32:8c:2f:0d:6e:1c:f1: ed:21:3a:9f:58:cb:b2:e1:23:bd:0b:36:9b:74:6c: 81:b0:2b:d0:6c:1e:41:7a:7b:28:e6:62:7e:55:34: e6:fa:c3:cf:61:ad:2e:b1:28:c2:e7:90:4c:ab:75: 37:c5:d1:de:e0:d3:e0:24:a6:cd:c3:cd:72:14:8a: e6:ca:da:6a:4c:d3:cf:75:bc:c7:57:95:4c:13:78: a7:75:92:b7:61:04:8a:dd:5d:3b:6d:4f:43:de:4e: 63:b4:8d:ee:c4:6d:11:25:7d:9f:85:56:cf:93:47: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:20:C1:82:AD:62:70:3D:23:28:58:C5:06:F0:19:CA:56:FE:6C:5A X509v3 Authority Key Identifier: keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/QCDBgq1icD0jKFjFBvAZylb-bFo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.132.156.0/22 Signature Algorithm: sha256WithRSAEncryption 90:c3:a8:46:40:56:38:75:ee:c7:f0:29:1b:34:e5:67:23:64: 0d:a4:5f:af:f5:83:27:67:ee:59:ae:42:35:e6:30:ba:3d:ce: c1:ed:26:16:72:35:b8:fa:58:6f:9a:5f:32:20:bf:05:bf:6a: 07:3d:ba:0a:8e:68:d9:c9:03:c2:61:04:cc:dd:5e:4f:07:de: 6d:e7:07:df:f1:9e:19:fd:f3:94:7a:29:5c:b8:e5:44:98:64: 5c:01:1b:85:25:af:14:e3:64:0d:28:fb:00:65:c4:ed:40:09: f6:23:aa:0a:07:48:f9:0a:80:8e:79:3b:f5:59:ea:33:e9:35: a6:43:08:81:9c:5a:e0:35:e3:05:93:e8:1d:ff:ea:ba:f9:2a: 4b:20:e8:75:18:04:b9:f7:0e:a7:f4:fa:a5:5b:dc:78:4f:9d: af:c7:ed:1d:18:1f:cb:c9:00:ae:0b:63:59:6d:92:c5:22:91: 24:ac:1d:c3:84:43:95:1a:4e:68:a8:fb:7d:71:6c:54:0c:82: 5a:1a:0e:67:e0:4e:73:06:24:c8:9a:8d:e3:33:4a:d4:3e:8a: 19:92:eb:a2:41:0b:3e:3d:ff:b7:c5:f5:ef:a8:d2:bc:eb:69: e0:a0:da:4b:d1:74:08:c3:65:06:35:48:55:ac:7d:81:9e:cd: 97:4a:04:8a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E2 QkU4RkFENzhFOTVDNDY5MEVEOTk5OTFGQTc5REY3NUYzRDMzNzAeFw0yNDA4MjYw NTI4MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQwMjBDMTgyQUQ2Mjcw M0QyMzI4NThDNTA2RjAxOUNBNTZGRTZDNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAvI2t9JO6MlB0G64ZyR4iJYlPQhh3RbHAJuZ5twvUkOhwNok3 ubWKUv3+4HmckVf9jBJ9WgotGwxit3R4EmgbRjYTubTyEbwo5TPOgw8DYbWDoyXW 1/LLIPHKX3u8JUKDmXr/nfS7HMMsItRjhDsV2JhnbFWXxXD1B0p5RD9ZF1pLsZle kNrzyztIG2cZMowvDW4c8e0hOp9Yy7LhI70LNpt0bIGwK9BsHkF6eyjmYn5VNOb6 w89hrS6xKMLnkEyrdTfF0d7g0+Akps3DzXIUiubK2mpM0891vMdXlUwTeKd1krdh BIrdXTttT0PeTmO0je7EbRElfZ+FVs+TR+zZAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUQCDBgq1icD0jKFjFBvAZylb+bFowHwYDVR0jBBgwFoAUOmvo+teOlcRpDtmZ kfp533Xz0zcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFNNQy9P bXZvLXRlT2xjUnBEdG1aa2ZwNTMzWHowemMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L09tdm8tdGVPbGNScER0bVprZnA1MzNYejB6Yy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RTTUMvUUNEQmdxMWljRDBqS0ZqRkJ2QVp5 bGItYkZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeEnDAN BgkqhkiG9w0BAQsFAAOCAQEAkMOoRkBWOHXux/ApGzTlZyNkDaRfr/WDJ2fuWa5C NeYwuj3Owe0mFnI1uPpYb5pfMiC/Bb9qBz26Co5o2ckDwmEEzN1eTwfebecH3/Ge Gf3zlHopXLjlRJhkXAEbhSWvFONkDSj7AGXE7UAJ9iOqCgdI+QqAjnk79VnqM+k1 pkMIgZxa4DXjBZPoHf/quvkqSyDodRgEufcOp/T6pVvceE+dr8ftHRgfy8kArgtj WW2SxSKRJKwdw4RDlRpOaKj7fXFsVAyCWhoOZ+BOcwYkyJqN4zNK1D6KGZLrokEL Pj3/t8X176jSvOtp4KDaS9F0CMNlBjVIVax9gZ7Nl0oEig== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:16 2024 by rpki-client on console-ams.rpki-client.org