$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AJ4_rxJXVEVsWwf_dNcEEmkt2iQ.roa File: AJ4_rxJXVEVsWwf_dNcEEmkt2iQ.roa (raw, json) Hash identifier: uYV/dq6VObmnUijkAK1hE771ju9y89vrMReZezIOHxY= Subject key identifier: 00:9E:3F:AF:12:57:54:45:6C:5B:07:FF:74:D7:04:12:69:2D:DA:24 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CA2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AJ4_rxJXVEVsWwf_dNcEEmkt2iQ.roa Signing time: Mon 15 Jan 2024 21:10:26 +0000 ROA not before: Mon 15 Jan 2024 21:10:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 210.201.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3234 (0xca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:26 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=009E3FAF125754456C5B07FF74D70412692DDA24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:61:3c:32:d2:28:cd:f1:ab:2a:b5:5f:cb: fb:cc:98:28:ae:e0:46:99:8d:61:f7:b6:8b:7f:93: 6a:8e:3e:ac:c6:63:a6:32:e6:35:37:ac:ad:4f:34: 49:fa:e6:0e:dd:76:76:51:2c:24:40:9e:99:25:b9: 54:39:f1:97:1c:ba:03:2a:5d:f9:95:5e:2c:0f:92: e6:ea:13:29:2c:34:35:ef:af:89:09:c1:1a:9f:76: c0:49:14:ab:33:be:52:7c:e5:89:c2:d5:9a:43:a3: 7e:9f:d7:fd:ed:41:e1:66:c9:ac:ed:d3:ca:3a:21: 46:32:26:27:aa:60:3a:59:a6:a7:91:97:f3:f9:c2: 60:a0:0d:f2:a0:1a:2d:f2:a2:1e:89:4a:60:13:48: 7e:7c:46:ca:78:81:85:56:52:1d:5e:45:8d:79:63: 8c:08:7f:69:2f:84:25:07:8f:e4:b5:05:af:47:08: da:e7:3d:b7:ff:8c:b3:e8:7b:d4:28:ff:84:71:9c: ed:9e:d3:b1:91:a8:29:71:ba:c3:39:8e:80:a1:34: 40:67:58:1d:cd:0c:f2:d1:0b:a9:05:a7:0e:fe:fb: 45:e5:37:a4:7e:77:80:d2:e6:1a:05:c5:dd:16:e2: b7:ee:e9:4e:02:31:94:27:75:31:0f:69:a2:60:c0: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:3F:AF:12:57:54:45:6C:5B:07:FF:74:D7:04:12:69:2D:DA:24 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AJ4_rxJXVEVsWwf_dNcEEmkt2iQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.74.0/23 Signature Algorithm: sha256WithRSAEncryption c4:05:59:18:f7:ec:c9:73:87:8d:b4:9c:5c:d3:43:b4:31:90: 4a:8d:69:b7:de:aa:e0:4f:2c:c0:a1:d3:0d:20:8d:f4:b4:cc: b3:09:9e:6c:8f:30:7d:2a:6e:c2:85:e9:bd:31:58:f4:9d:be: 50:92:90:43:30:b0:4b:9f:9e:78:96:98:dd:ee:2f:6b:c1:45: 5c:c8:fd:c5:2b:63:86:50:bf:56:1f:12:e7:87:df:8b:30:09: d3:ee:db:e6:52:c4:f7:15:0b:7f:17:14:b8:52:29:14:5a:78: 72:68:43:2a:41:28:3a:2d:08:c0:3d:a2:46:fd:e7:37:57:62: c8:52:7a:94:2d:0e:08:48:2c:38:9e:90:bb:61:da:f3:88:1e: cf:d2:90:d4:ad:89:b3:a5:a4:a7:ae:84:be:19:a5:92:0c:2b: cb:9e:fb:e9:4b:d5:ce:f9:ba:db:2a:b6:d1:20:a8:cb:82:4a: 65:94:73:13:35:57:eb:e2:c8:25:45:12:a7:24:bf:0e:6c:58: 62:ad:a0:1f:38:53:93:a4:e6:8c:ff:d6:8e:28:7f:f0:2e:e4: e5:3f:53:64:25:a1:ea:2e:6a:2a:31:97:98:7f:8e:d2:f1:c8: 4d:91:62:bc:bd:55:14:7a:8b:76:6f:17:81:df:c9:6b:e3:05: f9:df:93:1a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwOUUzRkFGMTI1NzU0 NDU2QzVCMDdGRjc0RDcwNDEyNjkyRERBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDES2E8MtIozfGrKrVfy/vMmCiu4EaZjWH3tot/k2qOPqzGY6Yy 5jU3rK1PNEn65g7ddnZRLCRAnpkluVQ58ZccugMqXfmVXiwPkubqEyksNDXvr4kJ wRqfdsBJFKszvlJ85YnC1ZpDo36f1/3tQeFmyazt08o6IUYyJieqYDpZpqeRl/P5 wmCgDfKgGi3yoh6JSmATSH58Rsp4gYVWUh1eRY15Y4wIf2kvhCUHj+S1Ba9HCNrn Pbf/jLPoe9Qo/4RxnO2e07GRqClxusM5joChNEBnWB3NDPLRC6kFpw7++0XlN6R+ d4DS5hoFxd0W4rfu6U4CMZQndTEPaaJgwE0TAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUAJ4/rxJXVEVsWwf/dNcEEmkt2iQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0FKNF9yeEpYVkVWc1d3Zl9kTmNFRW1r dDJpUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSyUowDQYJ KoZIhvcNAQELBQADggEBAMQFWRj37Mlzh420nFzTQ7QxkEqNabfequBPLMCh0w0g jfS0zLMJnmyPMH0qbsKF6b0xWPSdvlCSkEMwsEufnniWmN3uL2vBRVzI/cUrY4ZQ v1YfEueH34swCdPu2+ZSxPcVC38XFLhSKRRaeHJoQypBKDotCMA9okb95zdXYshS epQtDghILDiekLth2vOIHs/SkNStibOlpKeuhL4ZpZIMK8ue++lL1c75utsqttEg qMuCSmWUcxM1V+viyCVFEqckvw5sWGKtoB84U5Ok5oz/1o4of/Au5OU/U2Qloeou aioxl5h/jtLxyE2RYry9VRR6i3ZvF4HfyWvjBfnfkxo= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org