$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/D6ZUrHA96dA2EnrGO2PBOCHmdng.roa File: D6ZUrHA96dA2EnrGO2PBOCHmdng.roa (raw, json) Hash identifier: 9ddfvtLLdcuSt29YfA0h4vrGJRQNIl2xWCgWcxkYis4= Subject key identifier: 0F:A6:54:AC:70:3D:E9:D0:36:12:7A:C6:3B:63:C1:38:21:E6:76:78 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C46 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/D6ZUrHA96dA2EnrGO2PBOCHmdng.roa Signing time: Mon 15 Jan 2024 21:08:49 +0000 ROA not before: Mon 15 Jan 2024 21:08:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 202.178.128.0/17 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3142 (0xc46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:08:49 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0FA654AC703DE9D036127AC63B63C13821E67678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e4:3b:66:68:83:e0:28:5b:2d:55:90:7c:ce: 92:9f:cd:dc:98:12:51:9a:d0:d4:eb:45:4e:48:18: d8:eb:a5:39:e9:72:af:22:32:27:4e:b0:16:7d:a4: 08:5f:05:a1:fc:e1:10:e3:86:99:5c:d9:e1:b0:22: 26:ec:a5:4f:e9:37:29:ad:39:95:db:fb:87:6d:d3: f3:91:6e:e7:d1:32:0d:a0:f8:e9:31:ce:30:b2:69: f6:9d:8e:bc:3f:42:c8:d9:81:20:7c:6d:84:08:a1: af:b3:f4:83:06:78:52:8c:3f:b8:fd:44:47:47:66: 92:44:12:e2:83:ff:bf:a3:0f:23:65:ce:da:c5:9a: 6e:75:e7:74:36:21:41:76:d7:ab:fe:2d:a6:89:d4: 85:6a:26:b5:80:96:7b:74:f1:43:0b:c0:89:3e:e8: 62:ef:12:1a:d9:46:4a:c4:7b:42:8c:8d:bc:48:d0: 93:52:cb:a2:dd:8f:6f:f6:e1:cb:2c:fb:21:18:42: 1d:9b:ab:cd:5c:18:f4:5e:b2:22:30:60:1e:2d:cc: 92:f8:5b:04:f4:d9:4b:bd:47:27:3b:88:1a:21:7b: bc:36:94:0a:21:c8:a8:b8:72:ec:be:18:d3:e7:d5: 64:38:f5:93:a4:6c:12:a6:3e:84:01:66:27:fa:63: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A6:54:AC:70:3D:E9:D0:36:12:7A:C6:3B:63:C1:38:21:E6:76:78 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/D6ZUrHA96dA2EnrGO2PBOCHmdng.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.178.128.0/17 Signature Algorithm: sha256WithRSAEncryption 3c:04:0f:15:66:0e:4b:ad:7d:b5:3f:bf:2d:f6:ba:e5:b5:2b: 0d:a4:f6:96:96:94:26:02:63:47:6f:72:c5:3f:1d:7d:38:dc: f8:ac:a3:5a:06:7a:9b:1f:26:b7:9f:99:ea:35:5d:c9:45:f8: 8d:63:29:85:0b:fc:12:2e:4f:0b:b6:a5:f3:96:7c:94:d6:99: a2:81:d5:d3:41:b6:b0:93:1b:fd:4d:0e:27:bd:93:7d:ca:49: 32:f4:e9:e4:0f:b9:54:03:4e:63:d3:0f:be:8f:a4:1a:ae:5b: c0:ac:47:67:7e:40:95:5f:cc:25:03:ee:c9:7a:32:da:47:5c: 66:ef:69:c0:c6:24:a3:de:1f:fb:32:c3:33:78:f0:f4:4a:f8: fc:9d:5e:9d:35:11:2a:b9:94:9c:97:6e:6a:81:c6:46:ab:05: 45:42:f7:8c:41:59:74:0e:e6:59:ea:aa:46:bb:28:87:ca:5e: a5:08:d8:23:ca:97:33:d2:58:17:b2:d8:a4:50:be:13:8c:81: 9a:5d:b2:f9:ff:c2:b0:86:ac:8a:d0:73:92:8e:5d:7e:75:6c: 0a:f0:bc:97:c9:74:37:fb:60:bb:00:0f:fc:97:7f:dd:57:c7: e8:9b:ea:53:13:08:20:1a:99:1d:d6:48:c8:e1:f6:d7:6c:76: e3:19:56:df -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA4NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBGQTY1NEFDNzAzREU5 RDAzNjEyN0FDNjNCNjNDMTM4MjFFNjc2NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDh5DtmaIPgKFstVZB8zpKfzdyYElGa0NTrRU5IGNjrpTnpcq8i MidOsBZ9pAhfBaH84RDjhplc2eGwIibspU/pNymtOZXb+4dt0/ORbufRMg2g+Okx zjCyafadjrw/QsjZgSB8bYQIoa+z9IMGeFKMP7j9REdHZpJEEuKD/7+jDyNlztrF mm5153Q2IUF216v+LaaJ1IVqJrWAlnt08UMLwIk+6GLvEhrZRkrEe0KMjbxI0JNS y6Ldj2/24css+yEYQh2bq81cGPResiIwYB4tzJL4WwT02Uu9Ryc7iBohe7w2lAoh yKi4cuy+GNPn1WQ49ZOkbBKmPoQBZif6Y0oXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUD6ZUrHA96dA2EnrGO2PBOCHmdngwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0Q2WlVySEE5NmRBMkVuckdPMlBCT0NI bWRuZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfKsoAwDQYJ KoZIhvcNAQELBQADggEBADwEDxVmDkutfbU/vy32uuW1Kw2k9paWlCYCY0dvcsU/ HX043Piso1oGepsfJrefmeo1XclF+I1jKYUL/BIuTwu2pfOWfJTWmaKB1dNBtrCT G/1NDie9k33KSTL06eQPuVQDTmPTD76PpBquW8CsR2d+QJVfzCUD7sl6MtpHXGbv acDGJKPeH/sywzN48PRK+PydXp01ESq5lJyXbmqBxkarBUVC94xBWXQO5lnqqka7 KIfKXqUI2CPKlzPSWBey2KRQvhOMgZpdsvn/wrCGrIrQc5KOXX51bArwvJfJdDf7 YLsAD/yXf91Xx+ib6lMTCCAamR3WSMjh9tdsduMZVt8= -----END CERTIFICATE-----Generated at Mon May 20 22:04:47 2024 by rpki-client on console-fra.rpki-client.org