$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/094SqWYrpQ0OpPSNsXjPDeeM-pQ.roa File: 094SqWYrpQ0OpPSNsXjPDeeM-pQ.roa (raw, json) Hash identifier: bnz/+ED5/5h5FDwd5CkpemDsWHwkUDRr+pJWZ0dpb+g= Subject key identifier: D3:DE:12:A9:66:2B:A5:0D:0E:A4:F4:8D:B1:78:CF:0D:E7:8C:FA:94 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CE0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/094SqWYrpQ0OpPSNsXjPDeeM-pQ.roa Signing time: Mon 15 Jan 2024 21:23:34 +0000 ROA not before: Mon 15 Jan 2024 21:23:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 210.63.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:23:34 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D3DE12A9662BA50D0EA4F48DB178CF0DE78CFA94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:97:e3:b3:60:1a:80:e2:7c:ab:21:9a:fa: 85:1d:1d:a8:61:3e:e9:5b:16:da:45:ba:75:3e:fb: 7b:b0:fc:ca:9d:04:1f:a1:12:9b:e4:76:2c:fe:e5: de:aa:1d:0e:a2:0d:b9:05:00:57:00:7a:fd:b0:b1: 51:df:2a:b0:fa:6d:e9:22:7e:94:4e:bd:5d:06:c9: 67:d6:ed:35:73:5f:35:c0:63:f9:db:67:fd:b0:47: 26:bf:6b:25:b9:f4:7c:43:64:f4:7f:85:a3:54:95: 40:3f:d6:6b:6c:d2:24:39:2d:23:b3:4a:8f:ba:80: 3f:b9:82:2b:a6:f2:9f:ec:1c:91:f2:a5:dd:ea:31: a3:f6:5f:f1:44:ef:bb:de:3e:29:1e:45:96:54:ea: f0:70:ed:da:90:41:dd:d8:eb:72:c0:d6:ff:27:b7: a8:3f:7d:0f:b3:fc:2d:57:25:12:45:b0:5d:20:99: 7c:7a:00:a0:1e:09:cf:47:33:16:1f:fa:fe:fa:22: 36:9d:52:0f:d1:09:ec:60:a0:3d:a4:58:0a:29:0b: 0a:d1:82:3a:57:02:a6:3a:72:76:bc:4a:40:47:75: 8e:9d:58:48:f0:78:20:93:66:2b:3b:0f:fb:8d:73: 87:f6:5f:31:5f:ff:fd:95:52:3d:e9:2d:68:86:f1: c1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DE:12:A9:66:2B:A5:0D:0E:A4:F4:8D:B1:78:CF:0D:E7:8C:FA:94 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/094SqWYrpQ0OpPSNsXjPDeeM-pQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.240.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:d7:32:32:3b:ba:01:6e:0a:57:f1:5e:94:a7:01:db:74:00: 6f:eb:3d:20:9c:f6:37:47:91:27:89:9e:60:33:a6:3a:4f:c3: bc:e0:e6:42:6f:b7:72:ac:84:9d:a9:c6:5b:81:a8:c1:d9:0c: b8:1e:0f:da:56:ff:81:bb:3f:83:14:b0:e9:d4:9f:fe:50:19: 83:59:3c:90:fb:ef:2c:ba:e8:14:22:e0:3d:8a:be:da:93:58: cd:0f:47:e6:3b:c6:3d:09:77:aa:cf:cb:4a:94:34:80:68:5e: ff:d1:8f:ee:ad:86:00:1a:16:0f:9d:e1:db:00:3c:11:89:26: ab:94:b3:2c:06:a1:63:e1:59:a7:e2:fe:9a:db:b5:89:0b:68: 97:be:20:28:e9:b4:79:f2:85:e6:76:36:2f:2a:8d:f0:4a:af: ec:70:38:87:53:df:98:02:38:90:d6:86:f2:9c:63:70:39:bf: e6:75:c2:33:c3:38:01:8d:23:d6:91:a9:ad:b8:34:7e:ab:ee: 88:91:3d:8b:dc:f9:91:26:9c:20:4b:d2:89:9d:13:7d:ff:db: e6:c7:73:27:79:91:2a:6e:6d:a8:60:d5:b6:c4:69:5d:20:2b: c5:65:b8:aa:90:f2:34:0e:81:af:89:aa:4c:11:7a:b9:21:d7: 61:98:f9:01 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTIzMzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQzREUxMkE5NjYyQkE1 MEQwRUE0RjQ4REIxNzhDRjBERTc4Q0ZBOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWK5fjs2AagOJ8qyGa+oUdHahhPulbFtpFunU++3uw/MqdBB+h Epvkdiz+5d6qHQ6iDbkFAFcAev2wsVHfKrD6bekifpROvV0GyWfW7TVzXzXAY/nb Z/2wRya/ayW59HxDZPR/haNUlUA/1mts0iQ5LSOzSo+6gD+5gium8p/sHJHypd3q MaP2X/FE77vePikeRZZU6vBw7dqQQd3Y63LA1v8nt6g/fQ+z/C1XJRJFsF0gmXx6 AKAeCc9HMxYf+v76IjadUg/RCexgoD2kWAopCwrRgjpXAqY6cna8SkBHdY6dWEjw eCCTZis7D/uNc4f2XzFf//2VUj3pLWiG8cHhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU094SqWYrpQ0OpPSNsXjPDeeM+pQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzA5NFNxV1lycFEwT3BQU05zWGpQRGVl TS1wUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP/AwDQYJ KoZIhvcNAQELBQADggEBAA/XMjI7ugFuClfxXpSnAdt0AG/rPSCc9jdHkSeJnmAz pjpPw7zg5kJvt3KshJ2pxluBqMHZDLgeD9pW/4G7P4MUsOnUn/5QGYNZPJD77yy6 6BQi4D2KvtqTWM0PR+Y7xj0Jd6rPy0qUNIBoXv/Rj+6thgAaFg+d4dsAPBGJJquU sywGoWPhWafi/prbtYkLaJe+ICjptHnyheZ2Ni8qjfBKr+xwOIdT35gCOJDWhvKc Y3A5v+Z1wjPDOAGNI9aRqa24NH6r7oiRPYvc+ZEmnCBL0omdE33/2+bHcyd5kSpu bahg1bbEaV0gK8VluKqQ8jQOga+JqkwRerkh12GY+QE= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org