$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/1NY8JliFHKki09ICvzS7JSxdKfE.roa File: 1NY8JliFHKki09ICvzS7JSxdKfE.roa (raw, json) Hash identifier: kJc4AosR0grnSQFtHm+9pajXBknmAKtzd12KJxKhSik= Subject key identifier: D4:D6:3C:26:58:85:1C:A9:22:D3:D2:02:BF:34:BB:25:2C:5D:29:F1 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0E39 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/1NY8JliFHKki09ICvzS7JSxdKfE.roa Signing time: Wed 27 Mar 2024 05:51:16 +0000 ROA not before: Wed 27 Mar 2024 05:51:16 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131601 IP address blocks: 210.58.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3641 (0xe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Mar 27 05:51:16 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D4D63C2658851CA922D3D202BF34BB252C5D29F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:64:0c:91:e3:7e:bc:4b:6f:51:48:64:3c: 41:6b:70:01:82:f4:83:6f:80:85:e4:ef:c4:be:14: ab:d0:61:56:cd:ee:41:d8:0a:0b:67:e6:5b:b4:fa: 57:e9:20:aa:d0:94:e9:ea:0c:72:ff:bf:c4:f5:44: c3:5d:52:7c:31:73:3e:7c:0a:6c:d1:f6:7f:26:32: d2:25:c3:6f:fd:bb:28:bc:14:c7:69:fd:f7:1f:ec: 14:49:3b:94:85:07:fc:bf:1b:03:be:7a:89:2b:e9: b4:28:60:43:de:d6:bf:69:cf:a6:1d:26:1a:4e:2a: ce:90:35:43:37:bf:da:87:13:00:5f:2d:14:e1:af: 35:9c:d2:7c:35:b8:22:65:61:32:b4:68:05:43:fc: e3:7e:b6:39:fa:80:71:26:58:b5:42:36:94:18:b7: 4a:b6:6f:be:df:be:92:c1:0f:44:8c:e0:02:52:fd: 7a:03:dd:43:01:94:f1:e4:e6:b5:7b:6e:0e:0c:f8: 21:0c:1e:21:ac:b0:0a:6f:e3:04:c5:5d:ee:fd:41: 37:72:09:52:e5:56:fb:a6:0c:28:24:63:2d:c6:64: 22:c5:45:77:c4:52:52:f2:b4:e6:be:44:56:df:0c: 2e:74:96:d1:b2:d8:67:ba:c4:3d:c8:a8:f6:06:a2: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D6:3C:26:58:85:1C:A9:22:D3:D2:02:BF:34:BB:25:2C:5D:29:F1 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/1NY8JliFHKki09ICvzS7JSxdKfE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.120.0/24 Signature Algorithm: sha256WithRSAEncryption 57:4a:d8:ac:d9:05:a2:bb:43:17:50:09:17:26:a7:da:1d:a9: c1:37:fa:57:be:aa:03:6c:2a:93:ae:d2:61:2d:40:24:bf:bb: 8d:35:41:0a:b8:ba:16:f7:70:80:88:4f:7e:2c:67:2c:d8:13: 60:91:9a:2f:cf:b8:b1:ac:03:1e:88:ab:f1:a1:21:67:31:ed: 0f:d2:68:cb:a7:f5:d9:5e:63:09:b0:d2:cd:c7:62:f6:a4:84: e8:8f:dd:73:04:44:ca:b1:7f:52:8f:e0:6c:fd:61:f8:fd:5b: 98:99:5f:ba:9e:4d:7c:12:7a:ee:2d:3c:f1:23:94:81:94:94: 75:24:55:8c:af:85:37:68:f5:ef:d0:cd:10:53:18:80:5e:6c: 34:ae:1c:79:36:cf:52:4c:95:fc:2f:2e:72:ea:a6:f2:13:99: 56:d7:cc:82:05:6c:e5:e5:e7:65:16:05:f1:87:77:fa:03:46: 4f:21:29:eb:29:46:6d:dd:b1:04:34:f6:be:81:e7:47:b4:24: 1b:2a:46:81:44:45:99:39:e2:ea:11:7d:88:4f:12:4a:d3:3a: b8:24:ea:b9:b4:98:e7:98:ec:65:c7:f5:50:82:62:58:b9:c4: df:a2:f0:9b:27:bd:86:47:bf:51:29:c5:ed:2d:0a:fe:f3:d8: d6:ff:3a:45 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAzMjcw NTUxMTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ0RDYzQzI2NTg4NTFD QTkyMkQzRDIwMkJGMzRCQjI1MkM1RDI5RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTTWQMkeN+vEtvUUhkPEFrcAGC9INvgIXk78S+FKvQYVbN7kHY Cgtn5lu0+lfpIKrQlOnqDHL/v8T1RMNdUnwxcz58CmzR9n8mMtIlw2/9uyi8FMdp /fcf7BRJO5SFB/y/GwO+eokr6bQoYEPe1r9pz6YdJhpOKs6QNUM3v9qHEwBfLRTh rzWc0nw1uCJlYTK0aAVD/ON+tjn6gHEmWLVCNpQYt0q2b77fvpLBD0SM4AJS/XoD 3UMBlPHk5rV7bg4M+CEMHiGssApv4wTFXe79QTdyCVLlVvumDCgkYy3GZCLFRXfE UlLytOa+RFbfDC50ltGy2Ge6xD3IqPYGojV1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU1NY8JliFHKki09ICvzS7JSxdKfEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzFOWThKbGlGSEtraTA5SUN2elM3SlN4 ZEtmRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOngwDQYJ KoZIhvcNAQELBQADggEBAFdK2KzZBaK7QxdQCRcmp9odqcE3+le+qgNsKpOu0mEt QCS/u401QQq4uhb3cICIT34sZyzYE2CRmi/PuLGsAx6Iq/GhIWcx7Q/SaMun9dle Ywmw0s3HYvakhOiP3XMERMqxf1KP4Gz9Yfj9W5iZX7qeTXwSeu4tPPEjlIGUlHUk VYyvhTdo9e/QzRBTGIBebDSuHHk2z1JMlfwvLnLqpvITmVbXzIIFbOXl52UWBfGH d/oDRk8hKespRm3dsQQ09r6B50e0JBsqRoFERZk54uoRfYhPEkrTOrgk6rm0mOeY 7GXH9VCCYli5xN+i8JsnvYZHv1Epxe0tCv7z2Nb/OkU= -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:32 2024 by rpki-client on console-ams.rpki-client.org