$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/5wVUsFnzJIWxqI0nzMz1xr2pJlk.roa File: 5wVUsFnzJIWxqI0nzMz1xr2pJlk.roa (raw, json) Hash identifier: G0V3mAvwOkV46Qw9kO5o1SwygAAcsvY9B0HthV0jnxw= Subject key identifier: E7:05:54:B0:59:F3:24:85:B1:A8:8D:27:CC:CC:F5:C6:BD:A9:26:59 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DDE Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5wVUsFnzJIWxqI0nzMz1xr2pJlk.roa Signing time: Mon 15 Jan 2024 21:35:07 +0000 ROA not before: Mon 15 Jan 2024 21:35:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 60.244.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3550 (0xdde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:35:07 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E70554B059F32485B1A88D27CCCCF5C6BDA92659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:89:96:f4:f9:c7:a7:bb:77:3b:53:97:4e: b8:05:ba:cb:f0:9e:3a:fc:4a:2f:26:28:b4:0c:de: 51:c5:a4:a2:d3:83:36:ec:59:75:81:f2:8f:cb:3e: 5b:72:e9:28:2a:af:34:57:47:6d:f2:4e:3e:65:25: b3:47:00:ed:f6:fc:a3:6f:cd:d7:6e:ca:c7:89:bc: 79:6a:33:ce:8a:05:41:60:44:d4:aa:c9:27:bc:34: 58:44:79:be:83:57:de:d6:49:e4:e2:7e:f9:2c:33: 4e:91:41:c2:81:b1:f1:cf:ee:3a:b7:12:81:57:e6: 77:29:49:c7:0f:c3:6b:83:bd:1a:62:4c:c4:8d:e9: dd:b1:d9:59:80:e6:29:e1:d2:03:b1:d2:ae:03:dc: 2d:b0:c6:4a:56:97:5c:dd:e9:31:65:cc:7f:72:c8: a7:36:c8:2a:27:c2:bf:27:fb:68:d6:7e:92:37:38: 0b:20:f2:89:78:02:44:52:12:1e:1b:d5:2d:4e:e3: 87:04:69:d0:b1:93:9c:95:16:c4:af:fd:28:dd:0b: 89:18:c1:cf:1f:f0:3e:c9:c4:83:09:3f:51:57:1f: 54:1d:0b:83:48:6e:5b:4c:3a:25:20:d2:52:ee:2a: ed:62:6f:2a:51:f8:a9:38:08:70:bb:db:50:c3:6d: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:05:54:B0:59:F3:24:85:B1:A8:8D:27:CC:CC:F5:C6:BD:A9:26:59 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/5wVUsFnzJIWxqI0nzMz1xr2pJlk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.0.0/18 Signature Algorithm: sha256WithRSAEncryption 85:8e:2d:ba:4e:9d:00:ae:cf:a0:ab:bd:29:ff:0e:b3:6b:96: 1e:c7:c0:4f:90:a6:03:99:8f:6d:9c:3f:b7:c6:7b:f7:8a:08: c0:8f:d6:36:c8:b8:93:09:b2:1c:af:23:89:3d:54:5c:df:df: a8:0f:2d:39:8d:5c:0b:34:99:6d:e3:f5:b3:47:6a:92:e7:80: 3c:78:49:d7:33:03:bf:ee:e2:d1:8c:81:8f:ba:20:2a:bf:ae: 9b:6c:d2:0d:64:d1:a8:f9:0e:cc:c3:4f:8a:81:31:72:8d:e7: de:4a:63:d9:25:55:23:52:5f:68:89:ce:af:ca:96:ba:3a:be: 81:6a:0a:41:7a:a1:a5:68:80:a1:07:e6:86:b1:5a:28:f2:31: 7c:7b:f1:e8:1e:aa:64:43:ed:a6:99:38:cd:95:a4:7c:de:e4: 4d:23:5c:81:7e:52:9b:f6:37:d0:c4:71:e4:39:af:8d:65:be: 4b:3f:0d:7a:fb:c1:70:99:df:23:cf:8e:af:9c:d9:03:9b:cc: 83:ae:51:ff:0b:27:5f:63:a3:b2:5d:79:87:48:d7:f5:bd:68: fe:17:57:8e:70:b4:d1:1b:17:9c:a0:0c:3c:dd:22:74:ba:d0: 87:b6:20:87:07:21:9c:b2:4a:5c:f9:0d:99:23:a5:53:90:b7: 95:6b:34:99 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM1MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU3MDU1NEIwNTlGMzI0 ODVCMUE4OEQyN0NDQ0NGNUM2QkRBOTI2NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFRYmW9PnHp7t3O1OXTrgFusvwnjr8Si8mKLQM3lHFpKLTgzbs WXWB8o/LPlty6SgqrzRXR23yTj5lJbNHAO32/KNvzdduyseJvHlqM86KBUFgRNSq ySe8NFhEeb6DV97WSeTifvksM06RQcKBsfHP7jq3EoFX5ncpSccPw2uDvRpiTMSN 6d2x2VmA5inh0gOx0q4D3C2wxkpWl1zd6TFlzH9yyKc2yConwr8n+2jWfpI3OAsg 8ol4AkRSEh4b1S1O44cEadCxk5yVFsSv/SjdC4kYwc8f8D7JxIMJP1FXH1QdC4NI bltMOiUg0lLuKu1ibypR+Kk4CHC721DDbdBHAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU5wVUsFnzJIWxqI0nzMz1xr2pJlkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzV3VlVzRm56SklXeHFJMG56TXoxeHIy cEpsay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY89AAwDQYJ KoZIhvcNAQELBQADggEBAIWOLbpOnQCuz6CrvSn/DrNrlh7HwE+QpgOZj22cP7fG e/eKCMCP1jbIuJMJshyvI4k9VFzf36gPLTmNXAs0mW3j9bNHapLngDx4SdczA7/u 4tGMgY+6ICq/rpts0g1k0aj5DszDT4qBMXKN595KY9klVSNSX2iJzq/Klro6voFq CkF6oaVogKEH5oaxWijyMXx78egeqmRD7aaZOM2VpHze5E0jXIF+Upv2N9DEceQ5 r41lvks/DXr7wXCZ3yPPjq+c2QObzIOuUf8LJ19jo7JdeYdI1/W9aP4XV45wtNEb F5ygDDzdInS60Ie2IIcHIZyySlz5DZkjpVOQt5VrNJk= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org