$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/C5gmNnVrZtqNOY0eGsgfKJXbnkE.roa File: C5gmNnVrZtqNOY0eGsgfKJXbnkE.roa (raw, json) Hash identifier: A/Hqc4jW0ABBo2z1TpijYZikaE5nS2QVEXlxDGKvTak= Subject key identifier: 0B:98:26:36:75:6B:66:DA:8D:39:8D:1E:1A:C8:1F:28:95:DB:9E:41 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C70 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/C5gmNnVrZtqNOY0eGsgfKJXbnkE.roa Signing time: Mon 15 Jan 2024 21:09:32 +0000 ROA not before: Mon 15 Jan 2024 21:09:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.200.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:32 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0B982636756B66DA8D398D1E1AC81F2895DB9E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:22:cc:91:8f:e2:3d:46:ca:6b:ff:6b:db: e5:7b:71:13:58:d3:fc:5d:25:1b:b0:a2:9e:ea:bf: bb:fe:30:b8:1d:e7:6c:4c:93:8a:85:03:5f:cd:60: 12:e4:8b:30:4e:51:d5:74:a0:5a:39:5b:d7:79:67: e7:48:9e:88:12:27:e2:b1:9c:42:a1:f7:68:6d:42: 08:1f:7f:07:3f:03:a6:b3:af:04:a3:5b:3d:ac:e1: 25:32:be:f8:f5:19:b8:75:4a:d3:a7:29:9a:98:59: 4c:e0:04:5c:d0:be:bc:a8:22:16:16:e4:df:9b:58: 30:05:e9:35:07:3a:4e:87:5d:76:78:94:8c:87:4c: cd:94:30:36:fb:52:cf:ff:c4:d6:e2:28:d5:e2:82: 5c:2a:3d:45:fc:47:48:8d:47:4a:da:65:dd:87:9c: 79:c8:bd:25:1a:86:3f:85:9a:e5:1e:fc:b9:d7:76: 10:da:c6:47:f5:f9:f7:65:3e:9f:02:08:ac:6f:e3: f3:77:5d:d6:64:cb:5d:30:79:bc:61:90:62:4e:e7: 3f:f7:a3:f0:52:42:4e:08:5b:39:4a:d0:47:2c:cb: 46:d3:ca:7b:fd:49:ab:b6:35:ba:47:4f:7c:46:b7: e6:70:9e:aa:14:81:ed:cd:67:2e:6b:d9:47:b0:55: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:98:26:36:75:6B:66:DA:8D:39:8D:1E:1A:C8:1F:28:95:DB:9E:41 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/C5gmNnVrZtqNOY0eGsgfKJXbnkE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.0.0/16 Signature Algorithm: sha256WithRSAEncryption c9:f6:10:b4:2f:41:57:a0:47:29:dd:cd:f4:58:00:cd:15:a8: df:cc:8d:80:f7:a3:ea:55:4e:ae:af:08:73:7e:ff:43:9d:35: 61:f4:11:7d:0c:a0:ca:76:00:f8:1f:fe:31:e9:51:18:96:7d: f3:50:5e:08:15:07:35:65:1b:34:c1:8d:61:6b:5d:97:2b:5a: 08:d9:c6:7c:69:64:d9:ee:e3:84:b8:3a:b1:e5:42:29:0c:1b: e9:1c:b6:f6:76:d7:96:c6:cc:26:32:d7:fc:ff:07:56:a0:05: 19:c2:77:48:98:82:63:f2:31:68:f0:07:a4:5f:20:c9:98:39: 44:0e:56:4f:87:b1:e5:8d:c7:8c:87:03:aa:2d:02:77:df:96: d8:b3:09:9f:b4:88:c5:11:22:18:17:92:c4:c3:4a:ca:06:d8: 9b:d5:03:8f:8f:f7:49:ec:80:a5:c6:98:07:3a:1f:4a:9f:8b: 69:98:c4:9a:cd:4b:8a:ab:f4:4b:c8:5e:e2:b2:24:c2:e5:50: 30:b5:ba:cc:82:cf:7b:42:2b:de:a5:41:d4:4e:53:1d:ec:42: 4f:c2:5a:86:f5:d1:a5:56:9f:56:c5:e5:f6:8f:67:10:bf:1f: 8e:c4:23:ec:83:7b:0e:05:e1:7f:3d:1e:37:40:71:b1:0e:62: 0c:67:54:8b -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBCOTgyNjM2NzU2QjY2 REE4RDM5OEQxRTFBQzgxRjI4OTVEQjlFNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGgiLMkY/iPUbKa/9r2+V7cRNY0/xdJRuwop7qv7v+MLgd52xM k4qFA1/NYBLkizBOUdV0oFo5W9d5Z+dInogSJ+KxnEKh92htQggffwc/A6azrwSj Wz2s4SUyvvj1Gbh1StOnKZqYWUzgBFzQvryoIhYW5N+bWDAF6TUHOk6HXXZ4lIyH TM2UMDb7Us//xNbiKNXiglwqPUX8R0iNR0raZd2HnHnIvSUahj+FmuUe/LnXdhDa xkf1+fdlPp8CCKxv4/N3XdZky10webxhkGJO5z/3o/BSQk4IWzlK0Ecsy0bTynv9 Sau2NbpHT3xGt+ZwnqoUge3NZy5r2UewVdD7AgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUC5gmNnVrZtqNOY0eGsgfKJXbnkEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0M1Z21OblZyWnRxTk9ZMGVHc2dmS0pY Ym5rRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSyDANBgkq hkiG9w0BAQsFAAOCAQEAyfYQtC9BV6BHKd3N9FgAzRWo38yNgPej6lVOrq8Ic37/ Q501YfQRfQygynYA+B/+MelRGJZ981BeCBUHNWUbNMGNYWtdlytaCNnGfGlk2e7j hLg6seVCKQwb6Ry29nbXlsbMJjLX/P8HVqAFGcJ3SJiCY/IxaPAHpF8gyZg5RA5W T4ex5Y3HjIcDqi0Cd9+W2LMJn7SIxREiGBeSxMNKygbYm9UDj4/3SeyApcaYBzof Sp+LaZjEms1Liqv0S8he4rIkwuVQMLW6zILPe0Ir3qVB1E5THexCT8JahvXRpVaf VsXl9o9nEL8fjsQj7IN7DgXhfz0eN0BxsQ5iDGdUiw== -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org