$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/38s4Z9IdGk5KlqSe53K5g13f8Sk.roa File: 38s4Z9IdGk5KlqSe53K5g13f8Sk.roa (raw, json) Hash identifier: v1gX/GopJnsIM/cxVkj563Nr03L/2tvJ0FvSHU/xA70= Subject key identifier: DF:CB:38:67:D2:1D:1A:4E:4A:96:A4:9E:E7:72:B9:83:5D:DF:F1:29 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FE4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/38s4Z9IdGk5KlqSe53K5g13f8Sk.roa Signing time: Mon 26 Aug 2024 05:15:51 +0000 ROA not before: Mon 26 Aug 2024 05:15:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24154 IP address blocks: 210.200.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4068 (0xfe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=DFCB3867D21D1A4E4A96A49EE772B9835DDFF129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:da:ad:39:1f:6a:7e:1c:60:ca:21:67:ed: ca:78:25:08:d2:9b:ee:44:1d:1f:12:ac:b2:dd:1e: f5:d9:a9:ec:5c:ce:e3:b6:de:9d:ee:ca:47:c9:1d: ae:c3:82:19:b7:a9:72:8a:72:c0:0f:e4:a4:b0:e3: 75:63:9d:0e:40:30:8f:65:c4:d8:aa:d4:37:f1:09: ee:95:de:f6:13:b9:d2:4e:7b:7e:9c:c5:9e:bb:48: 96:f4:64:49:35:12:f4:f0:66:02:b0:77:1b:15:bb: 24:39:dc:ce:0b:b5:9f:e4:7f:b9:2a:2c:71:87:0b: e4:cd:cc:0a:a2:a1:20:86:a4:75:36:f4:5c:87:31: 2f:44:18:be:4b:75:14:a7:4e:3b:7f:a0:56:5a:fc: f9:95:62:be:33:53:a3:bc:5d:fc:86:3a:f3:85:46: 12:08:c8:56:d0:73:b6:01:72:3d:fa:55:8e:4e:47: 77:6b:0c:cc:d6:87:2f:a2:3f:d9:97:51:19:b1:ec: 74:52:b1:e8:98:9e:11:2c:6e:1f:dc:ac:70:e4:b4: 4c:ae:02:df:f1:b1:29:e6:09:b8:9a:dd:79:03:f7: 76:ec:62:26:cf:32:f0:f8:8a:d2:14:99:09:0a:8a: 6c:7e:84:03:c2:ed:74:9e:f6:9f:48:e2:b8:e9:6c: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CB:38:67:D2:1D:1A:4E:4A:96:A4:9E:E7:72:B9:83:5D:DF:F1:29 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/38s4Z9IdGk5KlqSe53K5g13f8Sk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.16.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:7f:33:f6:64:60:73:ca:ad:f2:01:a8:87:ca:bd:0d:d0:09: 86:ce:79:6e:d5:a5:08:5c:9f:cd:2f:10:0a:6a:37:9a:54:7b: 91:92:31:2e:42:07:57:8a:ac:98:3b:34:61:0b:7e:7a:1d:f8: 8e:69:bf:8f:1a:ed:d5:ff:6a:9a:03:70:c8:9e:cb:b9:84:ef: b2:b5:8e:35:40:3a:27:80:ad:d6:67:2f:30:2c:85:36:02:62: d5:21:83:16:b0:21:5e:e2:0b:5c:85:7f:3b:00:d3:a1:5d:4e: b9:36:0c:ff:9f:f0:d1:af:fd:dc:0a:95:2f:19:8b:a0:ce:60: c4:28:c5:c1:c1:1d:11:80:d3:5a:20:ac:24:31:45:66:64:01: 71:1a:cd:59:1c:19:ed:dc:f7:0e:00:c1:c4:9b:97:c2:02:56: 07:d6:81:dd:73:a0:f3:60:f5:5c:03:4d:3a:fa:98:b0:a2:19: f7:fd:1c:4d:e4:da:6b:4d:50:d2:9d:01:da:2c:28:cb:e2:8f: bb:b5:33:50:dd:2d:9b:f3:4c:f1:a2:bc:1c:45:2b:da:f4:fd: 1b:1d:e2:fb:fa:02:9e:01:c0:4b:a9:0f:4b:9e:9e:0b:b6:fc: 8b:1f:f7:42:61:c4:ec:0c:c7:a4:4b:95:7c:02:ee:2c:32:7a: dd:3e:05:52 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGQ0IzODY3RDIxRDFB NEU0QTk2QTQ5RUU3NzJCOTgzNURERkYxMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPdNqtOR9qfhxgyiFn7cp4JQjSm+5EHR8SrLLdHvXZqexczuO2 3p3uykfJHa7Dghm3qXKKcsAP5KSw43VjnQ5AMI9lxNiq1DfxCe6V3vYTudJOe36c xZ67SJb0ZEk1EvTwZgKwdxsVuyQ53M4LtZ/kf7kqLHGHC+TNzAqioSCGpHU29FyH MS9EGL5LdRSnTjt/oFZa/PmVYr4zU6O8XfyGOvOFRhIIyFbQc7YBcj36VY5OR3dr DMzWhy+iP9mXURmx7HRSseiYnhEsbh/crHDktEyuAt/xsSnmCbia3XkD93bsYibP MvD4itIUmQkKimx+hAPC7XSe9p9I4rjpbC+dAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU38s4Z9IdGk5KlqSe53K5g13f8SkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzM4czRaOUlkR2s1S2xxU2U1M0s1ZzEz ZjhTay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSyBAwDQYJ KoZIhvcNAQELBQADggEBAAp/M/ZkYHPKrfIBqIfKvQ3QCYbOeW7VpQhcn80vEApq N5pUe5GSMS5CB1eKrJg7NGELfnod+I5pv48a7dX/apoDcMiey7mE77K1jjVAOieA rdZnLzAshTYCYtUhgxawIV7iC1yFfzsA06FdTrk2DP+f8NGv/dwKlS8Zi6DOYMQo xcHBHRGA01ogrCQxRWZkAXEazVkcGe3c9w4AwcSbl8ICVgfWgd1zoPNg9VwDTTr6 mLCiGff9HE3k2mtNUNKdAdosKMvij7u1M1DdLZvzTPGivBxFK9r0/Rsd4vv6Ap4B wEupD0uengu2/Isf90JhxOwMx6RLlXwC7iwyet0+BVI= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:27 2024 by rpki-client on console-fra.rpki-client.org