$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/5hcryBWjkY_nUFcTAgh_AspP4E0.roa File: 5hcryBWjkY_nUFcTAgh_AspP4E0.roa (raw, json) Hash identifier: yPsQUi7nbdJdHC0F3uellhDOQlfzlMO+6/xu8hn+dhE= Subject key identifier: E6:17:2B:C8:15:A3:91:8F:E7:50:57:13:02:08:7F:02:CA:4F:E0:4D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C23 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5hcryBWjkY_nUFcTAgh_AspP4E0.roa Signing time: Fri 05 Jan 2024 11:05:16 +0000 ROA not before: Fri 05 Jan 2024 11:05:16 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 222.250.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 5 11:05:16 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E6172BC815A3918FE750571302087F02CA4FE04D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cc:a4:c2:b1:10:48:27:dc:dd:3f:99:03:b0: 29:24:91:8f:f9:02:0c:cf:72:88:1b:85:77:27:de: 90:e5:56:14:a1:fa:05:dc:bf:a6:04:ee:ca:fe:89: e0:ca:b7:43:b7:73:87:09:37:21:ca:fb:9b:ae:17: 99:93:df:26:99:7c:2b:9d:d0:d9:28:da:bc:54:a0: 91:11:44:33:d8:3f:c2:98:f5:fc:cf:68:94:36:0c: b6:55:68:e5:b1:73:03:84:db:76:18:0d:51:4f:35: e4:c6:58:14:52:d8:e6:0f:00:42:01:37:62:78:f6: ff:2e:92:ec:8c:e4:c8:2e:1c:b7:81:4f:ab:56:35: d2:08:e1:a2:b5:2d:93:2e:5b:86:9a:9e:23:63:55: f0:20:6a:1c:2f:f7:24:7f:71:2f:82:4d:2c:44:b7: 25:7a:1a:2f:18:97:79:ce:fa:9b:8b:1f:f9:8e:eb: de:12:63:5d:de:b1:40:eb:24:04:82:36:11:4f:2f: 15:8f:29:6f:60:51:20:42:eb:cf:ad:66:26:99:46: d0:70:58:cc:4e:bb:2d:a3:b3:df:c7:1b:24:59:96: f4:46:c6:9d:9c:33:00:ba:09:ef:32:da:c7:e5:75: 58:af:65:3c:d1:31:1c:19:88:ad:5d:3c:e6:6f:6b: 1a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:17:2B:C8:15:A3:91:8F:E7:50:57:13:02:08:7F:02:CA:4F:E0:4D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5hcryBWjkY_nUFcTAgh_AspP4E0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.250.192.0/22 Signature Algorithm: sha256WithRSAEncryption 83:7c:0f:d0:4b:cc:2e:17:67:4c:60:47:b2:2f:63:59:b1:d9: 85:08:46:a1:e0:d6:2c:60:19:fa:3e:12:81:6f:58:69:c8:81: 33:e4:67:9b:03:81:ce:e9:27:78:c3:c9:7f:07:db:58:d3:bd: 92:a9:ed:8e:b6:64:a0:1c:fa:cc:00:41:5f:b3:b3:e9:0a:68: 46:0a:60:36:cd:7d:76:1f:42:e8:5b:9d:49:fe:d7:9d:2b:dc: d8:85:39:33:2c:8d:df:a5:96:6a:4e:a7:2d:5c:a2:e3:0f:24: 07:d1:21:99:6b:10:f0:be:52:99:a2:9f:fc:52:2a:ab:61:ab: 70:85:45:6c:c4:55:12:1e:5a:7d:be:26:87:9f:d4:9c:ec:d4: 7e:98:da:40:2a:92:3f:04:38:5f:2e:6c:8e:05:8a:12:8e:c7: e0:01:fd:e8:06:72:f0:b4:6b:e2:90:75:2e:cc:7c:1b:9c:08: 54:d7:86:39:a1:f0:cc:b2:c3:91:12:d1:c4:73:fe:dd:89:b5: e5:56:38:99:22:d4:17:b0:7f:95:23:ef:73:ee:d7:c3:c4:7c: e4:7e:10:c8:3e:34:38:a2:04:63:53:73:c1:0d:d8:a9:bc:8a: 73:89:a7:e4:03:22:2f:08:83:94:36:11:c1:fd:32:1d:6e:b0: 8c:ab:21:55 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMDUx MTA1MTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU2MTcyQkM4MTVBMzkx OEZFNzUwNTcxMzAyMDg3RjAyQ0E0RkUwNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDrzKTCsRBIJ9zdP5kDsCkkkY/5AgzPcogbhXcn3pDlVhSh+gXc v6YE7sr+ieDKt0O3c4cJNyHK+5uuF5mT3yaZfCud0Nko2rxUoJERRDPYP8KY9fzP aJQ2DLZVaOWxcwOE23YYDVFPNeTGWBRS2OYPAEIBN2J49v8ukuyM5MguHLeBT6tW NdII4aK1LZMuW4aaniNjVfAgahwv9yR/cS+CTSxEtyV6Gi8Yl3nO+puLH/mO694S Y13esUDrJASCNhFPLxWPKW9gUSBC68+tZiaZRtBwWMxOuy2js9/HGyRZlvRGxp2c MwC6Ce8y2sfldVivZTzRMRwZiK1dPOZvaxrdAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU5hcryBWjkY/nUFcTAgh/AspP4E0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzVoY3J5Qldqa1lfblVGY1RBZ2hfQXNw UDRFMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALe+sAwDQYJ KoZIhvcNAQELBQADggEBAIN8D9BLzC4XZ0xgR7IvY1mx2YUIRqHg1ixgGfo+EoFv WGnIgTPkZ5sDgc7pJ3jDyX8H21jTvZKp7Y62ZKAc+swAQV+zs+kKaEYKYDbNfXYf QuhbnUn+150r3NiFOTMsjd+llmpOpy1couMPJAfRIZlrEPC+Upmin/xSKqthq3CF RWzEVRIeWn2+Joef1Jzs1H6Y2kAqkj8EOF8ubI4FihKOx+AB/egGcvC0a+KQdS7M fBucCFTXhjmh8Myyw5ES0cRz/t2JteVWOJki1Bewf5Uj73Pu18PEfOR+EMg+NDii BGNTc8EN2Km8inOJp+QDIi8Ig5Q2EcH9Mh1usIyrIVU= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org