$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/E-WzRpY3V_2bwZKJeVs-GTGT5ic.roa File: E-WzRpY3V_2bwZKJeVs-GTGT5ic.roa (raw, json) Hash identifier: Awrz0efGYP0zwEHW2Ma/uO7LIHyvFoT5qKTTy2siZ1k= Subject key identifier: 13:E5:B3:46:96:37:57:FD:9B:C1:92:89:79:5B:3E:19:31:93:E6:27 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D46 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/E-WzRpY3V_2bwZKJeVs-GTGT5ic.roa Signing time: Mon 15 Jan 2024 21:25:41 +0000 ROA not before: Mon 15 Jan 2024 21:25:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131142 IP address blocks: 223.22.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:25:41 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=13E5B346963757FD9BC19289795B3E193193E627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:d3:f0:11:51:b1:61:86:74:4f:08:8a:0a: 6a:1b:bc:f1:1a:11:2b:2a:37:16:25:44:c4:7f:8c: db:61:99:a5:c0:8e:50:fe:ff:a7:9a:d5:66:1f:74: 44:f3:55:b4:97:9a:30:6a:e7:c2:ad:35:d4:31:d8: d1:93:43:c0:d6:49:e5:a5:20:f4:c9:32:1f:9d:23: 25:ba:32:6a:2e:9e:41:3e:f2:db:a5:25:46:6e:7f: 79:8f:44:f9:aa:04:39:dc:7e:1f:12:2d:73:f4:e1: ee:96:be:73:64:27:43:83:71:57:ab:cb:0f:05:35: 94:d5:14:10:33:ab:ae:5b:ff:7e:25:30:13:9d:e2: a3:71:04:8c:8d:f0:fa:ad:87:5c:f9:ac:5a:92:69: e8:8d:58:36:16:43:0f:f8:7f:6e:5e:fe:6a:c2:72: 87:3b:80:b6:8d:a0:fe:07:9e:88:a2:62:2c:80:1a: 2c:9f:8d:a7:5a:8c:2c:02:22:39:96:c1:87:b8:85: 9a:5d:a1:d9:aa:7a:60:e4:56:06:5d:13:e3:03:a5: 4b:5b:38:8b:31:27:f6:ab:8e:eb:4a:35:53:41:68: 1f:93:3c:4c:6e:5a:07:6a:93:95:ec:de:a1:71:4a: d8:d8:72:9a:7a:78:0e:66:e3:7e:df:45:80:64:88: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:B3:46:96:37:57:FD:9B:C1:92:89:79:5B:3E:19:31:93:E6:27 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/E-WzRpY3V_2bwZKJeVs-GTGT5ic.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.252.0/22 Signature Algorithm: sha256WithRSAEncryption cb:d9:d5:31:8b:1c:11:f2:0e:40:42:34:dc:64:b5:b4:6f:73: a9:c6:36:37:ce:1d:44:c7:5c:af:08:2b:ae:6e:80:2b:25:27: e0:61:ea:3b:a3:68:8c:91:67:3c:c2:4a:e2:63:b3:64:5a:ad: 41:dc:38:97:16:89:d8:be:bd:7f:59:59:17:a3:9c:12:42:61: 2e:0a:9f:c8:74:54:12:b6:9f:76:4e:c6:07:dc:14:9d:c4:61: 18:39:44:70:2c:9c:ee:ee:16:0c:66:4f:3b:b3:4d:cb:07:88: ad:80:87:ac:bd:20:56:63:0b:9d:51:19:64:f8:5a:4e:5c:47: 6d:2a:bf:40:c8:ef:4c:e0:56:2d:ca:bc:a5:1e:71:16:1c:99: 10:04:2f:46:99:cd:c9:65:16:dd:bb:3c:a5:25:d0:49:00:b5: 05:98:df:79:97:34:cf:18:e2:7b:c1:94:cf:24:6c:e2:78:ea: ed:ad:c2:59:91:8e:67:0a:d2:f9:ab:a8:19:2c:de:7f:be:9a: 9a:c1:29:28:b4:55:2c:87:db:f3:41:ba:42:ac:4e:98:d0:39: b3:a9:b5:20:73:31:f9:c5:e5:e8:6e:6a:3e:11:11:aa:3b:23: 76:98:35:05:25:5f:53:bd:d5:94:80:45:a2:d2:f8:22:b7:9c: df:9d:4b:46 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI1NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDEzRTVCMzQ2OTYzNzU3 RkQ5QkMxOTI4OTc5NUIzRTE5MzE5M0U2MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJI9PwEVGxYYZ0TwiKCmobvPEaESsqNxYlRMR/jNthmaXAjlD+ /6ea1WYfdETzVbSXmjBq58KtNdQx2NGTQ8DWSeWlIPTJMh+dIyW6MmounkE+8tul JUZuf3mPRPmqBDncfh8SLXP04e6WvnNkJ0ODcVeryw8FNZTVFBAzq65b/34lMBOd 4qNxBIyN8Pqth1z5rFqSaeiNWDYWQw/4f25e/mrCcoc7gLaNoP4HnoiiYiyAGiyf jadajCwCIjmWwYe4hZpdodmqemDkVgZdE+MDpUtbOIsxJ/arjutKNVNBaB+TPExu Wgdqk5Xs3qFxStjYcpp6eA5m437fRYBkiIJxAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUE+WzRpY3V/2bwZKJeVs+GTGT5icwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0UtV3pScFkzVl8yYndaS0plVnMtR1RH VDVpYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALfFvwwDQYJ KoZIhvcNAQELBQADggEBAMvZ1TGLHBHyDkBCNNxktbRvc6nGNjfOHUTHXK8IK65u gCslJ+Bh6jujaIyRZzzCSuJjs2RarUHcOJcWidi+vX9ZWRejnBJCYS4Kn8h0VBK2 n3ZOxgfcFJ3EYRg5RHAsnO7uFgxmTzuzTcsHiK2Ah6y9IFZjC51RGWT4Wk5cR20q v0DI70zgVi3KvKUecRYcmRAEL0aZzcllFt27PKUl0EkAtQWY33mXNM8Y4nvBlM8k bOJ46u2twlmRjmcK0vmrqBks3n++mprBKSi0VSyH2/NBukKsTpjQObOptSBzMfnF 5ehuaj4REao7I3aYNQUlX1O91ZSARaLS+CK3nN+dS0Y= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org