$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VNeESpcn5SenJMaYIOlu8tleRFQ.roa File: VNeESpcn5SenJMaYIOlu8tleRFQ.roa (raw, json) Hash identifier: fQgHzL6U4V0N63m40Sp/lJixsS34WpFYvpiRCubdJ14= Subject key identifier: 54:D7:84:4A:97:27:E5:27:A7:24:C6:98:20:E9:6E:F2:D9:5E:44:54 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0D7C Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VNeESpcn5SenJMaYIOlu8tleRFQ.roa Signing time: Mon 26 Aug 2024 05:34:59 +0000 ROA not before: Mon 26 Aug 2024 05:34:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24168 IP address blocks: 121.50.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3452 (0xd7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Aug 26 05:34:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=54D7844A9727E527A724C69820E96EF2D95E4454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:fe:30:15:3c:fd:cd:68:7d:6c:b1:da:81: 07:13:57:48:f0:8a:7e:13:b5:04:17:51:63:30:ee: b2:ca:13:dc:08:bd:91:7b:fa:9f:37:08:f1:e3:e8: 27:59:9c:19:65:f1:22:69:8f:da:d7:0f:d0:a8:83: 5b:9f:0e:9a:2d:51:ed:c2:2a:16:0d:0c:5d:dd:48: 2a:92:a0:2f:cd:a0:80:9d:98:bd:11:ab:55:4b:76: 65:87:84:ef:a9:6d:97:fb:84:e6:b5:68:05:e4:80: 61:1e:bc:11:f2:8f:a1:ae:e3:1e:8e:e2:4a:c5:2c: d6:24:6b:4c:eb:d2:69:6b:06:90:c3:b5:c5:d5:2e: ad:6c:43:bd:4d:ef:05:4a:dd:30:ba:65:a1:1c:88: 08:0f:af:95:50:51:c5:d0:92:04:4b:2c:66:47:b6: 39:bf:a2:34:5c:f9:70:a4:70:81:b9:e5:3d:3d:fa: 72:33:67:c0:87:36:55:07:ef:4a:8d:85:ee:4f:66: 21:77:41:57:21:1d:d8:ef:0c:28:c6:59:5d:20:80: d2:ec:b3:2f:92:57:62:09:da:54:05:28:63:d7:56: 3e:a2:ca:ea:07:16:4f:87:96:da:a3:a2:de:32:25: 22:64:18:2c:e9:32:0f:ce:62:54:03:c8:5c:ba:cc: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D7:84:4A:97:27:E5:27:A7:24:C6:98:20:E9:6E:F2:D9:5E:44:54 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VNeESpcn5SenJMaYIOlu8tleRFQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.144.0/21 Signature Algorithm: sha256WithRSAEncryption b7:8f:20:a5:9a:50:2c:a0:a9:94:4e:ee:12:aa:1f:82:01:7b: ee:2a:3e:3e:62:c1:a2:2d:1e:80:d6:6f:c4:78:e3:f8:4b:00: 31:a9:79:af:64:29:6b:e7:a5:45:f1:58:30:c2:35:5b:33:19: 72:2f:2d:01:4a:c8:96:47:10:0c:14:3e:5c:1d:2e:50:5c:53: a6:f8:30:87:ef:7f:20:1e:da:80:c8:c6:27:c3:2f:e8:aa:f9: 82:e3:c1:b3:2d:32:d7:af:22:57:23:fa:07:78:34:05:9f:a2: 3c:ea:f1:05:00:5c:3c:a5:36:ab:3a:7a:c0:49:67:6c:38:e7: cb:22:d6:dd:4f:71:3b:b1:05:7c:b0:27:27:e5:a5:62:28:93: bd:ca:13:a5:c0:c9:0a:6a:f9:d9:e4:e0:80:1f:53:11:ae:59: c8:0f:af:12:eb:d2:3f:d4:d8:da:32:67:d2:e3:e1:11:a2:05: 2b:8d:c3:ee:ba:b6:9e:a5:d4:28:ba:89:9e:f4:35:72:d1:bb: f0:4f:a3:b9:ce:88:61:61:b7:ee:8b:cb:60:f4:5b:0b:db:68: 75:b5:84:34:30:08:96:86:aa:5e:d1:02:df:56:78:37:45:91: 15:6a:6a:33:f3:2c:45:7e:2f:b6:20:4d:5f:1e:ed:44:3e:3e: 97:cd:9e:f5 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yNDA4MjYw NTM0NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0RDc4NDRBOTcyN0U1 MjdBNzI0QzY5ODIwRTk2RUYyRDk1RTQ0NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW3/4wFTz9zWh9bLHagQcTV0jwin4TtQQXUWMw7rLKE9wIvZF7 +p83CPHj6CdZnBll8SJpj9rXD9Cog1ufDpotUe3CKhYNDF3dSCqSoC/NoICdmL0R q1VLdmWHhO+pbZf7hOa1aAXkgGEevBHyj6Gu4x6O4krFLNYka0zr0mlrBpDDtcXV Lq1sQ71N7wVK3TC6ZaEciAgPr5VQUcXQkgRLLGZHtjm/ojRc+XCkcIG55T09+nIz Z8CHNlUH70qNhe5PZiF3QVchHdjvDCjGWV0ggNLssy+SV2IJ2lQFKGPXVj6iyuoH Fk+Hltqjot4yJSJkGCzpMg/OYlQDyFy6zAeHAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUVNeESpcn5SenJMaYIOlu8tleRFQwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1ZOZUVTcGNuNVNl bkpNYVlJT2x1OHRsZVJGUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN5MpAwDQYJKoZIhvcNAQELBQADggEBALePIKWaUCygqZRO7hKqH4IBe+4q Pj5iwaItHoDWb8R44/hLADGpea9kKWvnpUXxWDDCNVszGXIvLQFKyJZHEAwUPlwd LlBcU6b4MIfvfyAe2oDIxifDL+iq+YLjwbMtMtevIlcj+gd4NAWfojzq8QUAXDyl Nqs6esBJZ2w458si1t1PcTuxBXywJyflpWIok73KE6XAyQpq+dnk4IAfUxGuWcgP rxLr0j/U2NoyZ9Lj4RGiBSuNw+66tp6l1Ci6iZ70NXLRu/BPo7nOiGFht+6Ly2D0 WwvbaHW1hDQwCJaGql7RAt9WeDdFkRVqajPzLEV+L7YgTV8e7UQ+PpfNnvU= -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:00 2024 by rpki-client on console-fra.rpki-client.org