$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2zejLU-0CxVTVKcMD82IL_jzjdI.roa File: 2zejLU-0CxVTVKcMD82IL_jzjdI.roa (raw, json) Hash identifier: Kroy+WJcN649QhcJ/ru0VXPaOgTHKZfnKz8rYjn+Ffg= Subject key identifier: DB:37:A3:2D:4F:B4:0B:15:53:54:A7:0C:0F:CD:88:2F:F8:F3:8D:D2 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D68 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2zejLU-0CxVTVKcMD82IL_jzjdI.roa Signing time: Mon 15 Jan 2024 21:26:26 +0000 ROA not before: Mon 15 Jan 2024 21:26:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131597 IP address blocks: 218.35.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:26:26 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DB37A32D4FB40B155354A70C0FCD882FF8F38DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c7:ea:fd:b9:73:0f:17:c3:f2:1f:b5:32:75: be:13:a0:16:1e:8e:52:cc:eb:0e:b4:0b:cf:76:24: 95:83:4e:cf:d2:53:a8:c5:8e:66:65:ed:3f:0f:0b: 35:9c:2e:fb:e4:7a:9f:6c:98:de:f5:a3:76:08:44: 49:62:1d:4a:e0:f4:fc:c3:4a:95:d6:6e:fb:2e:be: 03:f0:41:4c:7e:7a:d3:43:55:36:3c:6f:f9:46:08: ae:05:42:8a:46:de:e2:e6:e4:2d:6d:31:97:9f:ce: 44:90:06:74:67:17:fb:00:ce:0a:fa:91:95:8c:49: 6f:3d:4d:54:df:71:00:ba:e8:31:01:d4:c8:8f:a1: 63:94:38:9b:7a:85:1a:d1:5b:b4:60:96:e4:23:e0: 91:33:e6:3e:ce:c7:c5:04:83:17:a0:24:56:d4:00: e7:59:aa:c6:5c:d9:ad:11:d7:20:11:90:96:41:c5: 2a:62:2e:de:6d:02:c6:ff:ef:be:68:84:0c:75:5d: 1f:92:f3:52:1e:25:6b:43:9e:28:f1:0a:49:9e:14: 49:63:dd:a6:ce:74:24:f3:12:d4:84:80:a1:d9:03: fe:f2:44:46:29:87:04:61:4b:6e:f7:d1:15:7b:bb: 77:7a:be:5b:4a:c8:e5:dd:1d:29:21:06:bb:ce:b4: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:37:A3:2D:4F:B4:0B:15:53:54:A7:0C:0F:CD:88:2F:F8:F3:8D:D2 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2zejLU-0CxVTVKcMD82IL_jzjdI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.32.0/19 Signature Algorithm: sha256WithRSAEncryption 26:22:3a:0e:1f:56:cf:9c:15:4a:18:77:6e:0c:cb:96:c9:09: 9e:38:42:f0:ea:26:03:cb:5d:e5:2a:d8:43:53:fa:1b:c0:e8: 2e:ce:26:cb:90:72:70:48:0a:b1:c7:e1:95:b9:2e:6c:60:3c: 8c:4b:eb:57:87:b2:58:26:af:1a:a8:db:db:be:e1:ef:d6:bc: 77:37:40:04:35:3e:c1:16:62:68:67:7f:f1:f6:41:cb:d4:84: 2f:5c:2d:51:6f:8f:40:11:7e:03:14:46:6d:c2:c4:6a:1d:49: 65:46:5d:10:fa:a7:b0:39:2f:a4:6a:e6:2f:01:02:f0:6d:65: 80:99:22:ee:57:1c:07:eb:bd:c2:16:87:d1:c6:58:24:b3:d7: b4:11:1b:cc:2d:67:41:b4:fd:77:92:95:fc:df:d2:5d:67:ea: b9:ea:ef:55:28:19:e6:eb:c6:cf:f5:aa:c4:9d:ac:3b:ea:5e: 46:64:a8:78:b0:f6:7d:be:68:e2:17:07:c3:22:6b:c2:eb:29: 52:83:11:fc:d0:59:8e:a8:b2:58:84:6d:83:70:6d:45:2c:59: 8a:74:4f:0f:2a:f9:89:fd:5e:75:0c:ef:ca:7d:d4:62:11:a6: cd:3a:ad:86:4c:33:37:75:cd:fe:d6:9d:45:85:bb:1e:af:2a: e4:52:aa:12 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI2MjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERCMzdBMzJENEZCNDBC MTU1MzU0QTcwQzBGQ0Q4ODJGRjhGMzhERDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqx+r9uXMPF8PyH7Uydb4ToBYejlLM6w60C892JJWDTs/SU6jF jmZl7T8PCzWcLvvkep9smN71o3YIREliHUrg9PzDSpXWbvsuvgPwQUx+etNDVTY8 b/lGCK4FQopG3uLm5C1tMZefzkSQBnRnF/sAzgr6kZWMSW89TVTfcQC66DEB1MiP oWOUOJt6hRrRW7RgluQj4JEz5j7Ox8UEgxegJFbUAOdZqsZc2a0R1yARkJZBxSpi Lt5tAsb/775ohAx1XR+S81IeJWtDnijxCkmeFElj3abOdCTzEtSEgKHZA/7yREYp hwRhS2730RV7u3d6vltKyOXdHSkhBrvOtEQRAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU2zejLU+0CxVTVKcMD82IL/jzjdIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzJ6ZWpMVS0wQ3hWVFZLY01EODJJTF9q empkSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaIyAwDQYJ KoZIhvcNAQELBQADggEBACYiOg4fVs+cFUoYd24My5bJCZ44QvDqJgPLXeUq2ENT +hvA6C7OJsuQcnBICrHH4ZW5LmxgPIxL61eHslgmrxqo29u+4e/WvHc3QAQ1PsEW Ymhnf/H2QcvUhC9cLVFvj0ARfgMURm3CxGodSWVGXRD6p7A5L6Rq5i8BAvBtZYCZ Iu5XHAfrvcIWh9HGWCSz17QRG8wtZ0G0/XeSlfzf0l1n6rnq71UoGebrxs/1qsSd rDvqXkZkqHiw9n2+aOIXB8Mia8LrKVKDEfzQWY6osliEbYNwbUUsWYp0Tw8q+Yn9 XnUM78p91GIRps06rYZMMzd1zf7WnUWFux6vKuRSqhI= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org