$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/uMVyvpPoU0D8Ysu5r_P2Jcd1Xic.roa File: uMVyvpPoU0D8Ysu5r_P2Jcd1Xic.roa (raw, json) Hash identifier: 5zA72H52sDeUqNALxYAENEbOM4o2suqUwbE3Sul80B0= Subject key identifier: B8:C5:72:BE:93:E8:53:40:FC:62:CB:B9:AF:F3:F6:25:C7:75:5E:27 Certificate issuer: /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337 Certificate serial: 1294 Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/uMVyvpPoU0D8Ysu5r_P2Jcd1Xic.roa Signing time: Mon 26 Aug 2024 05:28:13 +0000 ROA not before: Mon 26 Aug 2024 05:28:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 23675 IP address blocks: 202.126.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4756 (0x1294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337 Validity Not Before: Aug 26 05:28:13 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B8C572BE93E85340FC62CBB9AFF3F625C7755E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fa:26:48:d3:84:e7:ca:c8:46:ae:d5:b1:68: b0:a3:34:77:9f:c2:a2:28:c1:32:87:56:57:1d:3d: 11:66:1a:f4:70:ca:b1:8e:89:6e:25:53:51:df:9d: 2d:26:b3:b0:80:d3:92:ce:e9:2a:a9:28:89:e6:8a: 60:19:be:36:fd:ec:3c:47:da:9d:5d:a0:97:0a:8b: db:ee:39:39:b9:2d:4b:37:e6:ff:16:63:2b:8c:63: e9:1c:7c:30:d4:d9:88:8c:59:b9:b4:24:4d:20:b3: e2:9c:43:81:fd:7d:74:5b:f6:99:3a:0d:95:22:c0: 15:72:17:9c:d8:b8:38:ff:d3:72:c2:e7:9f:86:1a: 15:f8:b1:40:08:1b:7f:49:54:33:84:27:65:a3:48: c8:25:d8:b9:42:ea:5d:47:ea:1e:a6:bc:0e:33:e6: 04:35:e1:f8:cc:36:49:88:af:90:e8:22:dd:ba:5a: 4d:79:09:62:8c:78:fd:43:d6:ab:94:5a:51:b8:22: 3e:61:05:a0:1a:86:32:c2:0c:6f:35:66:5c:c5:55: cf:b0:be:6d:4a:77:ba:6e:3f:97:f3:41:e6:e0:c5: d3:23:70:1e:a3:38:21:6a:70:7d:59:0e:12:95:d0: 7c:9d:50:a2:e9:e4:38:6d:8a:9f:6a:f2:68:b2:99: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C5:72:BE:93:E8:53:40:FC:62:CB:B9:AF:F3:F6:25:C7:75:5E:27 X509v3 Authority Key Identifier: keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/uMVyvpPoU0D8Ysu5r_P2Jcd1Xic.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.126.64.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:b6:08:96:3c:5e:8e:15:df:fa:af:a1:79:54:57:96:f1:86: ce:b1:3b:1b:72:1b:66:3a:ae:cc:4d:03:d5:2e:8a:3e:90:3a: ab:f5:6d:eb:34:85:44:1a:f1:ed:3f:fc:c2:28:40:60:4b:79: f8:90:ac:fa:57:cc:23:33:97:db:a3:81:ae:0d:31:4c:d5:c1: 30:4b:79:b5:d8:20:e1:ed:30:46:14:b5:a9:04:d9:00:b0:b0: c3:65:66:8e:ac:d2:73:71:26:30:03:79:c2:3a:1f:2f:33:c1: 76:63:ee:1e:23:ee:b9:89:e7:f9:33:83:ae:f0:be:ff:3c:1d: ba:2c:0e:fa:29:c4:9b:a9:b9:7c:09:7b:f3:77:9f:0c:56:03: c9:f7:67:ed:76:06:93:48:14:eb:f0:ad:cd:bb:ad:f9:25:d9: 07:45:66:45:95:a9:c0:90:d7:1f:31:e0:4d:6d:7a:6e:a2:5f: 79:6e:ec:b0:9a:14:82:54:1d:3d:32:70:1a:15:8b:04:be:a8: 75:5f:c7:f4:54:cd:17:20:3c:cb:36:74:ba:b9:4a:d0:4f:f5: 08:c8:5c:27:1e:39:b6:8b:37:0a:4a:8c:6e:19:9c:1c:af:7a: 2c:37:fc:8c:45:a3:e7:18:b7:e4:d4:db:61:99:7b:03:84:bd: 8f:53:9c:7c -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEpQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E2 QkU4RkFENzhFOTVDNDY5MEVEOTk5OTFGQTc5REY3NUYzRDMzNzAeFw0yNDA4MjYw NTI4MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI4QzU3MkJFOTNFODUz NDBGQzYyQ0JCOUFGRjNGNjI1Qzc3NTVFMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDa+iZI04TnyshGrtWxaLCjNHefwqIowTKHVlcdPRFmGvRwyrGO iW4lU1HfnS0ms7CA05LO6SqpKInmimAZvjb97DxH2p1doJcKi9vuOTm5LUs35v8W YyuMY+kcfDDU2YiMWbm0JE0gs+KcQ4H9fXRb9pk6DZUiwBVyF5zYuDj/03LC55+G GhX4sUAIG39JVDOEJ2WjSMgl2LlC6l1H6h6mvA4z5gQ14fjMNkmIr5DoIt26Wk15 CWKMeP1D1quUWlG4Ij5hBaAahjLCDG81ZlzFVc+wvm1Kd7puP5fzQebgxdMjcB6j OCFqcH1ZDhKV0HydUKLp5Dhtip9q8miymX0XAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUuMVyvpPoU0D8Ysu5r/P2Jcd1XicwHwYDVR0jBBgwFoAUOmvo+teOlcRpDtmZ kfp533Xz0zcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFNNQy9P bXZvLXRlT2xjUnBEdG1aa2ZwNTMzWHowemMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L09tdm8tdGVPbGNScER0bVprZnA1MzNYejB6Yy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RTTUMvdU1WeXZwUG9VMEQ4WXN1NXJfUDJK Y2QxWGljLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMp+QDAN BgkqhkiG9w0BAQsFAAOCAQEAfLYIljxejhXf+q+heVRXlvGGzrE7G3IbZjquzE0D 1S6KPpA6q/Vt6zSFRBrx7T/8wihAYEt5+JCs+lfMIzOX26OBrg0xTNXBMEt5tdgg 4e0wRhS1qQTZALCww2VmjqzSc3EmMAN5wjofLzPBdmPuHiPuuYnn+TODrvC+/zwd uiwO+inEm6m5fAl783efDFYDyfdn7XYGk0gU6/Ctzbut+SXZB0VmRZWpwJDXHzHg TW16bqJfeW7ssJoUglQdPTJwGhWLBL6odV/H9FTNFyA8yzZ0urlK0E/1CMhcJx45 tos3CkqMbhmcHK96LDf8jEWj5xi35NTbYZl7A4S9j1OcfA== -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:14 2024 by rpki-client on console-fra.rpki-client.org