$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ARdlET1yX17QsaPwa0lqrvo2hIs.roa File: ARdlET1yX17QsaPwa0lqrvo2hIs.roa (raw, json) Hash identifier: DW5801K3n3IkHdeETLE7qXfXoJEWxVruDVfwBO7pasY= Subject key identifier: 01:17:65:11:3D:72:5F:5E:D0:B1:A3:F0:6B:49:6A:AE:FA:36:84:8B Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C54 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ARdlET1yX17QsaPwa0lqrvo2hIs.roa Signing time: Mon 15 Jan 2024 21:09:03 +0000 ROA not before: Mon 15 Jan 2024 21:09:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 203.79.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:03 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=011765113D725F5ED0B1A3F06B496AAEFA36848B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:13:15:fd:7b:a2:c5:23:04:dc:27:e9:04: bd:1d:74:1e:c3:a5:85:7a:09:04:4e:fb:11:3c:bf: ed:cb:e2:cf:2a:be:7c:7d:6d:a0:8c:e1:23:63:11: dc:a4:80:5a:90:f7:a2:3a:d0:4e:83:d0:04:29:ea: 5f:50:5d:97:f7:9e:74:fa:bf:81:e9:03:f9:16:93: 2d:8d:26:77:84:f2:19:e5:35:81:ce:0e:b4:5f:b8: 96:b1:76:6f:24:f9:bb:f1:ab:55:87:8f:76:48:35: c1:9a:3f:25:e5:17:5c:1d:2c:72:4c:5a:21:9d:7b: 3e:fc:12:1d:94:d8:e2:0d:1b:7e:01:19:a5:f6:a0: 4a:38:52:e3:98:69:8f:b1:89:60:6b:f7:58:da:4a: 53:81:2e:ff:ae:90:38:4b:fc:a1:ea:71:ad:98:8e: ec:6a:60:dc:d0:fd:65:41:40:48:35:e9:7c:3d:5f: cc:02:74:9b:d7:18:98:e4:2e:6e:b3:11:51:d2:7b: e3:84:b7:51:c9:4e:ac:1f:07:c4:1c:8a:e2:c8:48: 0d:0b:46:15:24:de:1c:8e:8d:94:10:f0:69:f3:84: 8a:29:65:a9:13:3b:c1:dc:9f:c3:d4:1c:c0:ba:1c: 8d:68:59:ab:26:67:7f:96:31:89:97:80:87:9a:1a: e4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:65:11:3D:72:5F:5E:D0:B1:A3:F0:6B:49:6A:AE:FA:36:84:8B X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ARdlET1yX17QsaPwa0lqrvo2hIs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.192.0/18 Signature Algorithm: sha256WithRSAEncryption ba:6e:20:8c:9e:96:90:88:39:18:64:e4:7f:11:93:fc:18:63: 54:20:8b:6c:31:8c:47:0c:e1:c2:f2:10:a4:10:cd:06:c3:cf: 0d:30:0e:31:98:6b:be:42:34:0a:f6:05:69:ef:9f:98:9b:4f: 73:08:40:18:10:7f:89:f7:6b:ec:ba:73:ca:48:b2:c4:0e:79: 63:92:ae:23:85:48:12:e9:4d:14:c5:14:c8:64:d2:d4:2b:a3: 77:f2:de:a9:3d:d7:f1:b1:40:63:df:a4:fd:b1:0e:8c:36:39: bc:0e:57:c9:4b:39:db:93:18:0c:64:f9:76:0b:a8:c4:fd:3f: 0f:fb:ac:0c:f9:8b:1a:c8:01:5b:03:43:78:fe:73:c4:5a:a9: 45:77:94:14:91:0d:66:87:e0:a7:46:c5:27:db:55:a7:4f:77: 9d:24:b8:f3:5c:5c:5f:09:eb:3b:40:33:08:99:14:4b:db:ca: cb:34:82:c0:a0:66:aa:70:46:1e:3c:80:1e:9d:62:ca:b0:3d: 48:47:51:b3:2c:4a:6e:c7:f3:64:31:8e:e4:ea:a3:d7:6c:33: 8e:c8:a8:40:ea:c7:f4:f1:0b:57:ee:bc:36:b6:09:77:a3:48: c0:5e:63:66:e3:7b:c7:30:0e:b1:74:3f:e6:be:3e:74:7a:09: 9a:6e:89:2c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAxMTc2NTExM0Q3MjVG NUVEMEIxQTNGMDZCNDk2QUFFRkEzNjg0OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS1BMV/XuixSME3CfpBL0ddB7DpYV6CQRO+xE8v+3L4s8qvnx9 baCM4SNjEdykgFqQ96I60E6D0AQp6l9QXZf3nnT6v4HpA/kWky2NJneE8hnlNYHO DrRfuJaxdm8k+bvxq1WHj3ZINcGaPyXlF1wdLHJMWiGdez78Eh2U2OING34BGaX2 oEo4UuOYaY+xiWBr91jaSlOBLv+ukDhL/KHqca2YjuxqYNzQ/WVBQEg16Xw9X8wC dJvXGJjkLm6zEVHSe+OEt1HJTqwfB8QciuLISA0LRhUk3hyOjZQQ8GnzhIopZakT O8Hcn8PUHMC6HI1oWasmZ3+WMYmXgIeaGuQdAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUARdlET1yX17QsaPwa0lqrvo2hIswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0FSZGxFVDF5WDE3UXNhUHdhMGxxcnZv MmhJcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbLT8AwDQYJ KoZIhvcNAQELBQADggEBALpuIIyelpCIORhk5H8Rk/wYY1Qgi2wxjEcM4cLyEKQQ zQbDzw0wDjGYa75CNAr2BWnvn5ibT3MIQBgQf4n3a+y6c8pIssQOeWOSriOFSBLp TRTFFMhk0tQro3fy3qk91/GxQGPfpP2xDow2ObwOV8lLOduTGAxk+XYLqMT9Pw/7 rAz5ixrIAVsDQ3j+c8RaqUV3lBSRDWaH4KdGxSfbVadPd50kuPNcXF8J6ztAMwiZ FEvbyss0gsCgZqpwRh48gB6dYsqwPUhHUbMsSm7H82QxjuTqo9dsM47IqEDqx/Tx C1fuvDa2CXejSMBeY2bje8cwDrF0P+a+PnR6CZpuiSw= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:42 2024 by rpki-client on console-ams.rpki-client.org