$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BFifzoW_llKKg9kjhkGK6Tjh3dk.roa File: BFifzoW_llKKg9kjhkGK6Tjh3dk.roa (raw, json) Hash identifier: x+5vJjHrn19O1nsW54OKrKwIiuQWICPEUryEIN9f2iI= Subject key identifier: 04:58:9F:CE:85:BF:96:52:8A:83:D9:23:86:41:8A:E9:38:E1:DD:D9 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CC2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BFifzoW_llKKg9kjhkGK6Tjh3dk.roa Signing time: Mon 15 Jan 2024 21:11:02 +0000 ROA not before: Mon 15 Jan 2024 21:11:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.202.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3266 (0xcc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:11:02 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=04589FCE85BF96528A83D92386418AE938E1DDD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:33:4c:0e:06:fb:db:9f:1b:26:c9:7d:2f: 25:c3:99:7c:12:6d:3d:ae:a9:9c:1c:47:bb:5c:6a: 8d:17:13:01:69:06:19:c8:2c:74:36:09:dc:5c:02: 6e:ef:5d:03:bc:6c:d7:e9:bb:b0:dc:74:4f:c4:df: 4e:ba:d0:1d:cd:1b:ff:3f:86:c1:e7:4f:74:3a:a5: 25:7d:2b:fe:26:e3:b9:b4:b6:41:28:d5:ed:7b:74: 49:36:05:fc:19:2a:fe:eb:ec:d5:f1:a5:54:fa:80: 27:fe:57:06:1f:f2:fa:57:97:c5:3b:74:70:f3:49: 44:a9:3b:3e:96:ae:f0:85:60:47:eb:5f:6d:1d:13: 77:bd:2e:06:aa:e7:11:1c:90:4f:f3:85:0b:56:12: bc:b6:4a:28:b4:8f:ea:56:e2:ca:a9:63:05:c7:09: 8e:f1:e3:50:c0:d1:19:92:f6:7e:2d:8d:4e:c8:95: f6:ba:08:2d:b5:1b:3a:a5:5c:72:70:08:3a:24:3f: 2f:4d:93:bc:0f:d0:db:98:08:18:86:8a:d3:9c:95: d2:de:b9:83:a5:48:7a:ec:b1:2c:4f:c3:6d:94:68: f0:dc:ff:49:de:2b:4d:fe:ff:7e:fe:d2:5a:2f:e8: 80:ce:ae:d4:be:19:56:66:5b:f0:4f:1d:61:54:2a: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:58:9F:CE:85:BF:96:52:8A:83:D9:23:86:41:8A:E9:38:E1:DD:D9 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BFifzoW_llKKg9kjhkGK6Tjh3dk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.192.0/18 Signature Algorithm: sha256WithRSAEncryption 36:44:f2:c7:a9:95:1d:29:b1:96:41:ba:36:60:26:83:aa:b1: 36:12:4a:8e:8b:08:d1:c9:17:b9:ad:92:ec:3f:fa:47:24:c2: 83:76:fd:83:4d:87:37:78:eb:67:d5:34:b7:f5:d8:39:36:1b: 0a:c5:16:83:ff:e1:5e:a0:cb:6c:bd:e8:90:58:33:23:05:07: a5:aa:f7:16:29:23:60:9f:2e:2c:e6:45:61:1d:ad:f5:32:3a: 70:a4:39:49:39:32:b2:81:c1:9a:27:31:68:26:c3:c0:09:b8: 5c:fb:8c:08:b8:1b:5d:09:4e:2f:08:0e:3e:ae:77:fc:c5:c3: 5f:8c:a4:85:c9:62:d4:c9:3c:5d:10:bc:96:e9:51:c3:15:ec: 38:71:c7:49:2c:d6:fa:4d:39:24:5a:c3:34:47:23:13:87:32: 16:16:34:ff:ac:1d:7f:f9:8b:22:4b:89:56:9e:21:3e:a0:16: 64:ef:b3:5a:f4:c6:36:12:51:51:cc:9d:e6:6e:35:93:56:1f: 14:b3:a0:e7:34:a1:92:9f:d7:da:37:cd:31:11:b5:b5:5d:ec: b6:30:2f:91:09:a8:7d:89:40:4d:ea:19:02:f3:99:03:f2:55: 6e:64:fd:51:05:4b:74:ef:31:4c:4e:15:e2:70:4e:68:71:8c: 3f:9a:53:b5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTExMDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA0NTg5RkNFODVCRjk2 NTI4QTgzRDkyMzg2NDE4QUU5MzhFMURERDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeATNMDgb7258bJsl9LyXDmXwSbT2uqZwcR7tcao0XEwFpBhnI LHQ2CdxcAm7vXQO8bNfpu7DcdE/E30660B3NG/8/hsHnT3Q6pSV9K/4m47m0tkEo 1e17dEk2BfwZKv7r7NXxpVT6gCf+VwYf8vpXl8U7dHDzSUSpOz6WrvCFYEfrX20d E3e9Lgaq5xEckE/zhQtWEry2Sii0j+pW4sqpYwXHCY7x41DA0RmS9n4tjU7Ilfa6 CC21GzqlXHJwCDokPy9Nk7wP0NuYCBiGitOcldLeuYOlSHrssSxPw22UaPDc/0ne K03+/37+0lov6IDOrtS+GVZmW/BPHWFUKnLXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUBFifzoW/llKKg9kjhkGK6Tjh3dkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0JGaWZ6b1dfbGxLS2c5a2poa0dLNlRq aDNkay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSysAwDQYJ KoZIhvcNAQELBQADggEBADZE8seplR0psZZBujZgJoOqsTYSSo6LCNHJF7mtkuw/ +kckwoN2/YNNhzd462fVNLf12Dk2GwrFFoP/4V6gy2y96JBYMyMFB6Wq9xYpI2Cf LizmRWEdrfUyOnCkOUk5MrKBwZonMWgmw8AJuFz7jAi4G10JTi8IDj6ud/zFw1+M pIXJYtTJPF0QvJbpUcMV7Dhxx0ks1vpNOSRawzRHIxOHMhYWNP+sHX/5iyJLiVae IT6gFmTvs1r0xjYSUVHMneZuNZNWHxSzoOc0oZKf19o3zTERtbVd7LYwL5EJqH2J QE3qGQLzmQPyVW5k/VEFS3TvMUxOFeJwTmhxjD+aU7U= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org