$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/4Sd9h-FOFipRxjfws7MZ31BDqYU.roa File: 4Sd9h-FOFipRxjfws7MZ31BDqYU.roa (raw, json) Hash identifier: bC70mCDcNA1u6TUoP4aqh6YDVKbH+1mOK30/5w/fi6c= Subject key identifier: E1:27:7D:87:E1:4E:16:2A:51:C6:37:F0:B3:B3:19:DF:50:43:A9:85 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D88 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4Sd9h-FOFipRxjfws7MZ31BDqYU.roa Signing time: Mon 15 Jan 2024 21:29:12 +0000 ROA not before: Mon 15 Jan 2024 21:29:12 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 210.63.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3464 (0xd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:29:12 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E1277D87E14E162A51C637F0B3B319DF5043A985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b2:ef:78:34:5e:19:53:8b:6b:9c:30:ef:cf: 74:f7:00:7e:62:71:e7:12:d1:00:5a:75:f8:ab:b3: b8:34:78:8c:55:5b:ef:a3:ae:59:f9:84:60:c0:80: 16:06:b8:6f:a2:0c:41:bd:da:70:ca:37:d7:e6:8a: e9:0f:8a:83:0c:1f:5d:68:d2:c4:bf:ca:20:8d:36: f9:e8:9d:be:93:47:c0:3d:a6:43:83:8e:b7:bb:80: 48:f4:c2:99:ee:73:ce:ae:de:5d:5d:a7:72:71:63: 7f:a8:a6:6e:e3:76:a2:2f:ba:d8:1e:4f:aa:99:66: c3:07:e9:5c:ed:a4:fc:1e:97:6e:59:73:29:29:42: 0b:88:c2:ff:99:1b:21:11:d8:10:40:6c:2e:2f:9e: 71:c4:db:84:d4:2f:8a:e6:7d:f4:14:97:1d:b3:e7: 15:88:ab:85:fa:f0:d4:5b:ae:06:c5:db:80:59:24: fe:1b:8c:53:40:b2:bd:4e:8c:0d:a1:c4:0b:ab:60: 0f:01:10:8f:6d:8a:89:f3:cb:d0:ca:0c:9e:ca:eb: a3:b0:4a:2f:f1:9d:e7:f0:74:84:fc:3a:1c:1e:ab: 55:27:8b:c6:c2:cd:fd:6a:73:53:b1:7a:90:33:49: 05:8a:3a:8b:4c:95:a5:7d:06:b0:52:af:01:87:ec: dd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:27:7D:87:E1:4E:16:2A:51:C6:37:F0:B3:B3:19:DF:50:43:A9:85 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/4Sd9h-FOFipRxjfws7MZ31BDqYU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.236.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ea:dc:d4:2d:10:30:35:40:f4:8d:da:56:5b:5d:56:8f:a1: 91:b1:0d:f3:7f:c6:06:91:4d:42:78:b3:63:49:a6:49:8c:9a: 5a:a2:6b:fd:f6:b0:c6:d1:fd:0b:42:b6:34:e5:bc:8c:1b:25: a4:62:f4:3d:d5:1c:04:99:24:00:14:6a:8f:af:90:b7:16:69: e2:e4:b2:f3:55:a1:37:7d:60:4f:a6:6f:03:14:79:30:c9:4a: d4:6b:06:32:4b:53:8e:2a:a9:85:1d:60:cf:7c:e5:ee:c0:aa: f5:cb:be:1c:e8:ad:d3:d4:a1:d3:49:86:96:3f:c7:61:a8:c7: 5c:05:07:5e:31:81:5d:83:0f:09:c7:d1:f5:3d:0e:00:2d:6e: 3d:4b:47:67:eb:fb:35:1b:f0:30:d3:1d:11:ee:4b:06:68:05: 6a:9d:20:4e:39:9b:c7:15:c7:7f:e4:5b:50:69:b4:a7:cb:3c: e4:57:0f:7d:77:a9:b9:c5:75:6e:a5:7f:83:ac:4e:7a:fb:fe: 62:b1:6f:cf:47:6f:50:16:92:22:c0:e4:f3:8b:40:24:0d:b3: a4:28:b4:f2:f4:a6:50:e6:3f:f7:17:7f:0d:ea:85:b9:42:40: 2c:a1:a3:a9:d0:d2:65:81:97:75:d5:94:40:c0:72:9a:10:0d: 93:be:88:4c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI5MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUxMjc3RDg3RTE0RTE2 MkE1MUM2MzdGMEIzQjMxOURGNTA0M0E5ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfsu94NF4ZU4trnDDvz3T3AH5icecS0QBadfirs7g0eIxVW++j rln5hGDAgBYGuG+iDEG92nDKN9fmiukPioMMH11o0sS/yiCNNvnonb6TR8A9pkOD jre7gEj0wpnuc86u3l1dp3JxY3+opm7jdqIvutgeT6qZZsMH6VztpPwel25Zcykp QguIwv+ZGyER2BBAbC4vnnHE24TUL4rmffQUlx2z5xWIq4X68NRbrgbF24BZJP4b jFNAsr1OjA2hxAurYA8BEI9tionzy9DKDJ7K66OwSi/xnefwdIT8Ohweq1Uni8bC zf1qc1OxepAzSQWKOotMlaV9BrBSrwGH7N1bAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU4Sd9h+FOFipRxjfws7MZ31BDqYUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzRTZDloLUZPRmlwUnhqZndzN01aMzFC RHFZVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP+wwDQYJ KoZIhvcNAQELBQADggEBAIDq3NQtEDA1QPSN2lZbXVaPoZGxDfN/xgaRTUJ4s2NJ pkmMmlqia/32sMbR/QtCtjTlvIwbJaRi9D3VHASZJAAUao+vkLcWaeLksvNVoTd9 YE+mbwMUeTDJStRrBjJLU44qqYUdYM985e7AqvXLvhzordPUodNJhpY/x2Gox1wF B14xgV2DDwnH0fU9DgAtbj1LR2fr+zUb8DDTHRHuSwZoBWqdIE45m8cVx3/kW1Bp tKfLPORXD313qbnFdW6lf4OsTnr7/mKxb89Hb1AWkiLA5POLQCQNs6QotPL0plDm P/cXfw3qhblCQCyho6nQ0mWBl3XVlEDAcpoQDZO+iEw= -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:33 2024 by rpki-client on console-ams.rpki-client.org