$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/5gucUfoWVuh_qIcuBX-TCW6zyBQ.roa File: 5gucUfoWVuh_qIcuBX-TCW6zyBQ.roa (raw, json) Hash identifier: m5YhfFsn8BRwixDGjddRkexiPt3v79d/ZyA/MdB+McA= Subject key identifier: E6:0B:9C:51:FA:16:56:E8:7F:A8:87:2E:05:7F:93:09:6E:B3:C8:14 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D56 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5gucUfoWVuh_qIcuBX-TCW6zyBQ.roa Signing time: Mon 15 Jan 2024 21:26:02 +0000 ROA not before: Mon 15 Jan 2024 21:26:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 219.91.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3414 (0xd56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:26:02 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E60B9C51FA1656E87FA8872E057F93096EB3C814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:e7:67:ea:af:ac:88:6b:f9:35:43:aa:03: 59:60:c7:09:27:0b:84:3a:fc:1e:66:fa:06:92:12: cb:0b:d5:bb:64:bc:f3:62:ba:19:7d:91:69:3b:1f: 87:d6:fa:9a:23:44:0e:12:c2:9d:9a:29:cc:23:9c: fe:cd:d0:3c:81:98:4c:3d:f7:d8:36:fb:f1:63:3b: d5:b7:e8:ac:91:73:6a:5d:91:cc:30:9e:5a:0e:93: df:48:d6:c7:20:c2:fb:12:f7:eb:24:6d:1e:5c:aa: 9c:4e:f4:14:dc:c4:49:d9:bc:1f:18:c2:6c:53:bd: 4d:c3:9c:5d:5b:66:12:9d:14:a2:4f:73:64:cd:40: 4a:61:c3:ef:28:d4:27:71:b9:db:de:78:cd:6b:ad: 2c:50:22:70:87:e0:a2:4d:96:ab:27:83:d3:1e:c2: b5:c7:73:dc:f3:ae:63:df:56:e7:18:c1:e2:f5:db: c9:77:d0:d7:d1:b9:8d:70:6e:ec:62:e9:99:e0:34: e7:a4:fd:63:66:04:0a:a8:89:bf:b2:a7:67:47:64: c5:14:ed:50:01:38:48:91:2f:b4:ff:86:db:bb:31: 88:cd:28:0b:4f:75:ed:e8:de:48:b8:27:75:a2:d5: 92:9b:c4:9a:01:b4:ee:61:ff:c7:40:97:23:72:9a: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0B:9C:51:FA:16:56:E8:7F:A8:87:2E:05:7F:93:09:6E:B3:C8:14 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5gucUfoWVuh_qIcuBX-TCW6zyBQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.64.0/18 Signature Algorithm: sha256WithRSAEncryption 43:3b:22:eb:04:dc:55:5c:9b:9d:ec:f3:ea:ff:c7:9b:47:d1: 88:87:50:df:ba:ad:a2:9d:1c:f8:c6:3c:d2:fc:33:4a:80:f5: f8:73:e4:f5:67:8d:09:cf:f4:bd:09:7f:4d:78:bb:5f:92:fe: 50:0f:8f:c4:4f:c4:ee:e5:83:bb:1c:59:25:e2:56:83:27:a6: c9:fa:35:84:d5:01:ba:21:28:a7:7b:3a:20:b2:23:f2:bb:30: 9e:84:6e:2e:75:3c:4e:08:ee:4d:1c:c0:e0:54:53:ce:e4:f2: 13:da:c7:10:b9:cd:e5:04:36:89:3a:62:d4:58:1a:53:cf:cb: 9d:6a:9c:e1:4e:52:1f:62:91:cd:ec:b9:17:94:23:80:1c:58: 20:6e:66:75:04:21:9d:c4:b0:57:c8:ca:25:f3:af:0c:83:e9: d5:9e:17:0d:08:14:76:c9:62:45:e8:82:d3:95:66:b4:06:ef: 49:5f:32:19:da:c6:c3:c8:56:1e:02:b9:14:68:b6:2c:59:2d: 9d:8a:5a:ef:d1:9b:56:99:0d:27:dd:36:1d:7d:ed:f9:66:dc: 9a:81:ac:3b:45:71:11:cb:bc:ef:a6:1a:e0:9c:67:e2:87:83: 5b:cd:b6:38:f2:0e:cd:f6:c1:62:ba:db:5f:d3:4b:f4:ef:c3: 14:db:67:73 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI2MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU2MEI5QzUxRkExNjU2 RTg3RkE4ODcyRTA1N0Y5MzA5NkVCM0M4MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/NOdn6q+siGv5NUOqA1lgxwknC4Q6/B5m+gaSEssL1btkvPNi uhl9kWk7H4fW+pojRA4Swp2aKcwjnP7N0DyBmEw999g2+/FjO9W36KyRc2pdkcww nloOk99I1scgwvsS9+skbR5cqpxO9BTcxEnZvB8YwmxTvU3DnF1bZhKdFKJPc2TN QEphw+8o1CdxudveeM1rrSxQInCH4KJNlqsng9MewrXHc9zzrmPfVucYweL128l3 0NfRuY1wbuxi6ZngNOek/WNmBAqoib+yp2dHZMUU7VABOEiRL7T/htu7MYjNKAtP de3o3ki4J3Wi1ZKbxJoBtO5h/8dAlyNymikZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU5gucUfoWVuh/qIcuBX+TCW6zyBQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzVndWNVZm9XVnVoX3FJY3VCWC1UQ1c2 enlCUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbbW0AwDQYJ KoZIhvcNAQELBQADggEBAEM7IusE3FVcm53s8+r/x5tH0YiHUN+6raKdHPjGPNL8 M0qA9fhz5PVnjQnP9L0Jf014u1+S/lAPj8RPxO7lg7scWSXiVoMnpsn6NYTVAboh KKd7OiCyI/K7MJ6Ebi51PE4I7k0cwOBUU87k8hPaxxC5zeUENok6YtRYGlPPy51q nOFOUh9ikc3suReUI4AcWCBuZnUEIZ3EsFfIyiXzrwyD6dWeFw0IFHbJYkXogtOV ZrQG70lfMhnaxsPIVh4CuRRotixZLZ2KWu/Rm1aZDSfdNh197flm3JqBrDtFcRHL vO+mGuCcZ+KHg1vNtjjyDs32wWK621/TS/TvwxTbZ3M= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org