$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/3CdB5dkd-zcONs_YqRVIyygdUxQ.roa File: 3CdB5dkd-zcONs_YqRVIyygdUxQ.roa (raw, json) Hash identifier: Kwgcr2lNTmKiGEvu149HPRxZ2YN0xpBFEYtbGVP2yRY= Subject key identifier: DC:27:41:E5:D9:1D:FB:37:0E:36:CF:D8:A9:15:48:CB:28:1D:53:14 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CDE Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/3CdB5dkd-zcONs_YqRVIyygdUxQ.roa Signing time: Mon 15 Jan 2024 21:23:32 +0000 ROA not before: Mon 15 Jan 2024 21:23:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 210.63.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:23:32 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DC2741E5D91DFB370E36CFD8A91548CB281D5314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:6e:d9:9b:90:2a:85:32:cf:0b:da:9a:46: 59:6a:81:3f:83:72:12:11:93:ff:1d:0f:68:a4:f3: 1c:6a:12:d2:af:07:6f:1b:ea:e7:db:20:fa:84:97: c6:bf:43:4b:79:6b:dc:00:93:d1:2a:e1:d4:fd:24: 8f:09:45:33:75:6e:41:35:39:47:d8:0a:dc:4e:b2: ee:17:4e:4f:6d:9f:ab:40:9b:ac:67:c8:e4:68:a1: 39:8d:30:68:dc:fb:dc:15:7d:11:b5:6f:b7:af:03: 82:d4:00:32:30:bc:8c:25:60:6b:11:5f:38:44:89: 44:14:83:5d:3d:5c:4a:6d:84:f6:4f:07:2d:92:0a: 36:b4:52:76:75:3a:ca:8f:0a:7c:de:12:85:80:81: 11:ba:28:df:22:91:28:7f:75:48:ce:eb:e8:6d:86: 7e:d9:7d:c4:50:0d:cf:8d:f7:88:08:c0:7b:33:7f: c4:f6:da:c2:dd:1a:60:e0:91:76:fa:3f:66:3e:82: 16:cd:75:b7:2d:ea:6b:a3:1c:c2:9d:4c:87:e1:02: 8a:98:53:06:c1:02:cd:51:50:69:43:6a:b2:71:05: 63:21:94:e4:20:9c:c4:23:fb:d3:f5:f5:35:e3:df: fb:ee:44:c0:51:70:3e:e8:0b:36:dd:bd:d4:dd:18: ae:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:27:41:E5:D9:1D:FB:37:0E:36:CF:D8:A9:15:48:CB:28:1D:53:14 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/3CdB5dkd-zcONs_YqRVIyygdUxQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.239.0/24 Signature Algorithm: sha256WithRSAEncryption 35:22:6c:cf:f0:eb:04:b2:99:fb:6a:69:23:8a:cc:a4:e2:e9: d6:58:b5:5a:75:fa:82:28:9e:06:64:02:32:cf:b9:e6:54:7b: e4:29:ce:e8:a4:47:3e:22:3b:d0:8d:9d:ca:25:1b:8b:79:2e: c1:1b:cd:b0:f9:4a:7f:0c:f1:5a:37:f6:e3:f5:13:f8:38:d8: 9c:cb:9e:60:ed:32:b3:00:09:6a:a9:11:bb:e9:8a:3b:71:bf: 28:1d:9e:14:e2:b8:c8:b0:52:54:12:2e:06:88:c2:4d:0b:6d: 75:a0:39:cd:d3:8d:47:50:4c:02:fd:c8:8d:38:fd:e2:27:bb: 48:26:53:9f:cc:37:78:6f:be:ee:88:94:28:e0:0f:ef:fc:78: 61:53:0b:e6:48:ef:a2:de:08:f8:10:f4:a0:f1:fb:3d:30:0b: 51:6a:75:01:0c:45:54:02:b2:0d:0a:b6:21:b4:1e:4a:00:ef: ee:59:41:76:48:fd:36:a8:89:0c:1b:cf:25:6c:94:a8:b2:00: a7:c9:ae:b1:e0:c9:a8:cb:73:f2:33:d2:eb:ae:d2:e3:0f:3b: 2c:48:56:76:f3:98:b5:1c:6c:b9:da:0f:b2:41:2f:45:f9:cb: 0b:2d:fa:7d:c7:a1:94:81:ed:47:46:71:cf:c9:89:1e:78:69: a4:23:76:e2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTIzMzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERDMjc0MUU1RDkxREZC MzcwRTM2Q0ZEOEE5MTU0OENCMjgxRDUzMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqkW7Zm5AqhTLPC9qaRllqgT+DchIRk/8dD2ik8xxqEtKvB28b 6ufbIPqEl8a/Q0t5a9wAk9Eq4dT9JI8JRTN1bkE1OUfYCtxOsu4XTk9tn6tAm6xn yORooTmNMGjc+9wVfRG1b7evA4LUADIwvIwlYGsRXzhEiUQUg109XEpthPZPBy2S Cja0UnZ1OsqPCnzeEoWAgRG6KN8ikSh/dUjO6+hthn7ZfcRQDc+N94gIwHszf8T2 2sLdGmDgkXb6P2Y+ghbNdbct6mujHMKdTIfhAoqYUwbBAs1RUGlDarJxBWMhlOQg nMQj+9P19TXj3/vuRMBRcD7oCzbdvdTdGK5LAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU3CdB5dkd+zcONs/YqRVIyygdUxQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzNDZEI1ZGtkLXpjT05zX1lxUlZJeXln ZFV4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP+8wDQYJ KoZIhvcNAQELBQADggEBADUibM/w6wSymftqaSOKzKTi6dZYtVp1+oIongZkAjLP ueZUe+QpzuikRz4iO9CNncolG4t5LsEbzbD5Sn8M8Vo39uP1E/g42JzLnmDtMrMA CWqpEbvpijtxvygdnhTiuMiwUlQSLgaIwk0LbXWgOc3TjUdQTAL9yI04/eInu0gm U5/MN3hvvu6IlCjgD+/8eGFTC+ZI76LeCPgQ9KDx+z0wC1FqdQEMRVQCsg0KtiG0 HkoA7+5ZQXZI/TaoiQwbzyVslKiyAKfJrrHgyajLc/Iz0uuu0uMPOyxIVnbzmLUc bLnaD7JBL0X5ywst+n3HoZSB7UdGcc/JiR54aaQjduI= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org