$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6Ay8B4YLjL5lXw5BDn7IUmwoRTU.roa File: 6Ay8B4YLjL5lXw5BDn7IUmwoRTU.roa (raw, json) Hash identifier: Pj+myaDIlYaIfjJGuv9t3QTTKGrgigU0YAv5aUmOHdE= Subject key identifier: E8:0C:BC:07:86:0B:8C:BE:65:5F:0E:41:0E:7E:C8:52:6C:28:45:35 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DD6 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6Ay8B4YLjL5lXw5BDn7IUmwoRTU.roa Signing time: Mon 15 Jan 2024 21:34:54 +0000 ROA not before: Mon 15 Jan 2024 21:34:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 203.207.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3542 (0xdd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:34:54 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E80CBC07860B8CBE655F0E410E7EC8526C284535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:33:21:72:b4:fc:a8:33:ea:2c:0f:51:85: b6:5b:4a:60:31:ac:ba:a8:7e:a7:db:5a:8b:86:a5: 0d:94:24:f1:6b:a2:14:a6:55:4b:aa:a8:0e:6b:96: cd:50:af:c2:ff:5a:9b:a7:ec:bd:ac:50:2f:a1:4b: 5a:74:35:a0:b7:ee:98:4a:e5:38:e8:93:9b:29:c0: 8f:f1:f1:82:f9:41:e6:ee:13:db:09:92:46:2f:21: f2:eb:05:95:9f:00:36:19:0f:7b:38:c8:06:84:d5: 72:21:99:28:22:eb:f1:1b:7f:2c:88:1d:47:b4:c4: ec:0f:14:81:57:14:46:9f:97:fb:30:95:b5:00:a3: 46:41:49:47:b1:51:60:ca:09:4d:62:cd:67:10:55: ab:cd:d2:8e:e6:7d:fe:ca:6d:9c:b1:ae:b3:ec:35: 0f:bb:02:4a:96:65:f1:a9:8a:e0:80:9d:75:06:80: 8c:b1:5f:23:cd:48:3e:79:09:ef:16:d5:bb:6d:0e: 41:90:04:76:7a:16:c2:55:16:45:89:27:47:65:2e: 23:82:89:64:58:f6:34:e3:22:0c:da:1d:e1:d5:1e: ef:96:e8:0b:6e:6f:81:aa:56:4c:5a:d2:3a:76:66: 4b:9b:e0:32:8f:fe:03:a3:2c:c8:92:6b:4e:fd:b3: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0C:BC:07:86:0B:8C:BE:65:5F:0E:41:0E:7E:C8:52:6C:28:45:35 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6Ay8B4YLjL5lXw5BDn7IUmwoRTU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.207.32.0/20 Signature Algorithm: sha256WithRSAEncryption 95:ab:f4:3f:11:cd:49:ca:60:79:2e:fb:33:f2:65:aa:7b:99: 57:bd:3d:8f:fd:2e:e1:74:d8:11:1a:94:90:e0:11:f0:3e:54: 05:71:48:7a:fa:f0:26:d9:88:99:0a:c1:8a:3a:9c:52:4a:27: 33:ce:df:cc:11:05:f5:ef:ff:2d:85:dd:06:29:4d:d2:18:0f: 1a:db:44:ec:c1:b0:2e:ae:3d:d0:6c:ab:78:89:05:b1:ba:83: fb:7c:94:1f:c8:b2:89:d7:1a:f4:62:8f:84:8e:ea:0f:89:0a: 81:e5:6f:03:e7:1a:b8:b9:4e:53:5f:d3:e3:30:76:fc:b0:26: 1e:9d:5d:df:78:08:31:6f:c4:ce:68:30:03:74:2e:bf:30:ed: b2:03:87:b9:9e:08:c2:f2:8d:e9:ca:76:fe:9a:8f:b4:b9:73: f0:1a:c3:e9:88:c4:d7:5b:b0:a5:19:05:1b:31:85:a4:61:6b: a1:f6:7c:27:04:51:f0:61:65:71:8c:30:a9:81:b6:0a:40:bd: 9d:b2:c5:7d:26:a4:ca:3a:a0:88:6c:87:c9:c9:eb:af:90:5c: a1:fa:3e:7e:12:cf:90:32:69:51:47:86:06:f2:73:82:8e:d2: 04:e6:9e:ef:78:d5:db:ed:85:5b:9b:ed:b9:6d:75:be:ef:43: 61:66:b6:44 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM0NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU4MENCQzA3ODYwQjhD QkU2NTVGMEU0MTBFN0VDODUyNkMyODQ1MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ5jMhcrT8qDPqLA9RhbZbSmAxrLqofqfbWouGpQ2UJPFrohSm VUuqqA5rls1Qr8L/Wpun7L2sUC+hS1p0NaC37phK5Tjok5spwI/x8YL5QebuE9sJ kkYvIfLrBZWfADYZD3s4yAaE1XIhmSgi6/EbfyyIHUe0xOwPFIFXFEafl/swlbUA o0ZBSUexUWDKCU1izWcQVavN0o7mff7KbZyxrrPsNQ+7AkqWZfGpiuCAnXUGgIyx XyPNSD55Ce8W1bttDkGQBHZ6FsJVFkWJJ0dlLiOCiWRY9jTjIgzaHeHVHu+W6Atu b4GqVkxa0jp2Zkub4DKP/gOjLMiSa079s/NfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU6Ay8B4YLjL5lXw5BDn7IUmwoRTUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZBeThCNFlMakw1bFh3NUJEbjdJVW13 b1JUVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLzyAwDQYJ KoZIhvcNAQELBQADggEBAJWr9D8RzUnKYHku+zPyZap7mVe9PY/9LuF02BEalJDg EfA+VAVxSHr68CbZiJkKwYo6nFJKJzPO38wRBfXv/y2F3QYpTdIYDxrbROzBsC6u PdBsq3iJBbG6g/t8lB/IsonXGvRij4SO6g+JCoHlbwPnGri5TlNf0+MwdvywJh6d Xd94CDFvxM5oMAN0Lr8w7bIDh7meCMLyjenKdv6aj7S5c/Aaw+mIxNdbsKUZBRsx haRha6H2fCcEUfBhZXGMMKmBtgpAvZ2yxX0mpMo6oIhsh8nJ66+QXKH6Pn4Sz5Ay aVFHhgbyc4KO0gTmnu941dvthVub7bltdb7vQ2FmtkQ= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org