$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/DKmDH3CPqWL9aJPtmyT3MjGFgKM.roa File: DKmDH3CPqWL9aJPtmyT3MjGFgKM.roa (raw, json) Hash identifier: N99exl+fbRtrRRx1Fh7vEIViTTVqBNgtpggjJ7oFzCQ= Subject key identifier: 0C:A9:83:1F:70:8F:A9:62:FD:68:93:ED:9B:24:F7:32:31:85:80:A3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D30 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DKmDH3CPqWL9aJPtmyT3MjGFgKM.roa Signing time: Mon 15 Jan 2024 21:25:12 +0000 ROA not before: Mon 15 Jan 2024 21:25:12 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 210.200.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3376 (0xd30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:25:12 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0CA9831F708FA962FD6893ED9B24F732318580A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:c8:e3:a6:04:2c:3a:0d:a2:73:79:bf:ad: 07:14:bd:fb:74:e4:e5:53:e9:1d:3a:43:be:b2:4e: e0:b9:83:7b:9c:13:de:67:94:52:26:7f:29:c1:37: e5:55:27:1f:2f:70:e7:6a:b0:ff:bd:58:a4:51:99: b2:d0:b0:ab:32:f5:c5:ef:5c:f1:ed:6b:05:6b:b8: 7f:a3:6f:32:9e:a5:5a:1e:53:a7:fc:e6:56:bd:24: 01:de:f2:d6:ed:26:17:eb:fb:8c:37:98:f8:32:ce: ab:34:b3:71:5a:7b:b1:5b:44:8b:da:84:b1:4b:39: 67:12:b5:b6:b7:5c:de:ad:8e:87:d8:89:b7:9e:e1: af:0d:ef:94:a7:9c:30:0e:c8:0b:ba:e9:b1:93:13: 27:f8:e2:aa:e0:eb:5e:b9:79:e1:7e:60:2e:ec:d6: c5:e1:7b:91:64:05:cc:04:7e:30:90:1f:ba:f2:c7: 01:7a:7d:a4:09:e6:da:22:34:17:c9:3c:96:74:b2: 08:90:a4:51:4c:41:67:45:1a:12:e5:93:48:12:2b: b4:5a:5a:2e:54:50:d0:bc:1f:99:92:ec:38:0e:11: b5:c5:c7:13:90:2f:d1:0d:9f:97:ad:ea:6f:cc:5b: 6b:31:66:be:25:a6:d4:89:d0:70:97:0d:ba:dc:e5: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A9:83:1F:70:8F:A9:62:FD:68:93:ED:9B:24:F7:32:31:85:80:A3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DKmDH3CPqWL9aJPtmyT3MjGFgKM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.0.0/19 Signature Algorithm: sha256WithRSAEncryption 14:6a:ac:27:ba:d4:23:bb:9a:d2:5c:f9:af:f3:f1:36:52:14: b8:88:e2:5e:2d:9a:4d:4a:42:e4:32:64:25:65:e6:12:f6:7d: 04:ec:8d:da:a9:01:e1:d9:f1:20:fb:bd:60:de:4d:d5:32:ea: 27:5f:2b:fc:d1:db:73:a0:d2:da:fa:9e:ad:9a:aa:4d:d0:db: 7d:54:d3:56:f9:03:cc:54:d1:10:c8:18:88:09:81:a1:1a:5f: 95:15:69:c5:c5:d0:cd:3b:b2:88:17:58:1c:9d:db:e2:15:78: 11:da:82:36:91:09:bb:5d:52:bd:3a:b6:c9:6a:9b:a4:41:97: bb:37:fd:ed:c2:1a:97:90:4e:6b:6b:6a:9e:0a:c7:4b:9d:5b: 42:61:41:b3:b9:c3:09:75:7d:15:60:a3:b6:17:41:b3:ac:1e: b0:88:8e:32:02:da:c0:4f:1e:b3:47:5f:ac:e7:c2:d2:48:a2: cc:cc:8c:af:09:bd:ad:18:4d:d3:16:cd:cf:ea:67:48:58:68: d6:9b:62:36:78:83:1c:ba:70:54:c5:bc:6d:e4:f0:fe:0c:6b: 90:aa:e8:d2:12:2d:7e:27:cf:47:ad:44:73:f8:d9:4b:4d:51: 09:bb:8c:28:06:1c:4d:ba:1c:dc:73:00:df:8c:59:a0:f6:bb: 46:c0:83:97 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI1MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBDQTk4MzFGNzA4RkE5 NjJGRDY4OTNFRDlCMjRGNzMyMzE4NTgwQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9DcjjpgQsOg2ic3m/rQcUvft05OVT6R06Q76yTuC5g3ucE95n lFImfynBN+VVJx8vcOdqsP+9WKRRmbLQsKsy9cXvXPHtawVruH+jbzKepVoeU6f8 5la9JAHe8tbtJhfr+4w3mPgyzqs0s3Fae7FbRIvahLFLOWcStba3XN6tjofYibee 4a8N75SnnDAOyAu66bGTEyf44qrg6165eeF+YC7s1sXhe5FkBcwEfjCQH7ryxwF6 faQJ5toiNBfJPJZ0sgiQpFFMQWdFGhLlk0gSK7RaWi5UUNC8H5mS7DgOEbXFxxOQ L9ENn5et6m/MW2sxZr4lptSJ0HCXDbrc5RJ9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUDKmDH3CPqWL9aJPtmyT3MjGFgKMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0RLbURIM0NQcVdMOWFKUHRteVQzTWpH RmdLTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSyAAwDQYJ KoZIhvcNAQELBQADggEBABRqrCe61CO7mtJc+a/z8TZSFLiI4l4tmk1KQuQyZCVl 5hL2fQTsjdqpAeHZ8SD7vWDeTdUy6idfK/zR23Og0tr6nq2aqk3Q231U01b5A8xU 0RDIGIgJgaEaX5UVacXF0M07sogXWByd2+IVeBHagjaRCbtdUr06tslqm6RBl7s3 /e3CGpeQTmtrap4Kx0udW0JhQbO5wwl1fRVgo7YXQbOsHrCIjjIC2sBPHrNHX6zn wtJIoszMjK8Jva0YTdMWzc/qZ0hYaNabYjZ4gxy6cFTFvG3k8P4Ma5Cq6NISLX4n z0etRHP42UtNUQm7jCgGHE26HNxzAN+MWaD2u0bAg5c= -----END CERTIFICATE-----Generated at Mon May 20 22:04:47 2024 by rpki-client on console-fra.rpki-client.org