$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GATAiaBbWJKNRl13KZvWJwaMwwY.roa File: GATAiaBbWJKNRl13KZvWJwaMwwY.roa (raw, json) Hash identifier: y0VAAN5+3vuRxwb+C2Almc7bepAfUukK/xIDoZUGXHY= Subject key identifier: 18:04:C0:89:A0:5B:58:92:8D:46:5D:77:29:9B:D6:27:06:8C:C3:06 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CA0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GATAiaBbWJKNRl13KZvWJwaMwwY.roa Signing time: Mon 15 Jan 2024 21:10:24 +0000 ROA not before: Mon 15 Jan 2024 21:10:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.201.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:24 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1804C089A05B58928D465D77299BD627068CC306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:c8:21:6c:a7:39:67:cb:c4:98:11:95:53: 6c:aa:8f:ca:30:0c:00:14:1c:4f:00:45:c0:1f:b3: d8:c5:88:11:db:eb:0f:ce:0f:39:a8:c3:a8:d0:c9: 2b:eb:5d:6f:bf:ed:23:ea:b6:3b:92:7e:48:53:b2: 68:31:16:91:64:69:88:be:ac:89:7b:24:d5:09:5b: e3:e1:6b:9b:17:34:2d:50:5d:81:fb:7b:f4:28:0a: 31:3d:19:12:ac:f6:db:71:1c:42:7b:65:52:f5:61: b6:f1:1c:a4:7e:9f:d1:a4:3c:0a:6e:1a:53:6d:e9: 9c:36:72:18:f5:24:73:6d:64:4c:b3:3c:6f:eb:9d: 24:e3:a9:4a:b6:5d:fc:03:02:62:c4:f9:7a:68:6b: 7e:ed:ee:70:0e:9c:b9:fb:c5:99:9c:45:dd:61:85: 98:cf:9b:c8:55:d3:3f:94:6d:0b:58:b6:50:a3:6e: 11:27:b1:95:b8:38:45:9b:02:ae:64:0c:08:a5:83: fa:65:0e:1a:d8:2a:2d:0b:31:cc:46:ab:b4:fc:84: 8a:31:c0:0b:4b:ee:9b:f6:a7:9a:15:99:33:51:7c: ad:53:b5:97:5f:6b:27:7f:92:76:0f:0a:ba:91:68: 5f:c6:2d:e8:4d:d3:39:ad:97:11:52:aa:25:4a:cb: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:04:C0:89:A0:5B:58:92:8D:46:5D:77:29:9B:D6:27:06:8C:C3:06 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GATAiaBbWJKNRl13KZvWJwaMwwY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.72.0/23 Signature Algorithm: sha256WithRSAEncryption c9:6e:df:c0:74:47:d8:79:dc:5d:f2:21:39:18:a5:69:58:b3: 44:75:67:e8:a2:b2:6f:d5:5d:70:cb:76:a2:58:c6:2a:6a:0c: eb:47:3d:db:bf:2f:fc:4d:07:2d:5d:7d:77:f2:97:c8:31:af: 88:cf:f8:90:64:bf:8f:ed:57:81:ba:4d:de:63:01:41:dd:36: 50:82:e9:28:63:e8:18:55:48:c2:5d:3d:1a:02:ee:47:e7:79: 79:f7:41:3f:b1:c5:49:c3:14:c1:9d:32:42:81:df:dd:66:a0: 67:78:80:4d:19:58:7f:45:4c:88:8d:f8:db:fd:de:86:f5:60: 17:4e:d3:4d:7c:4f:7a:ed:c7:0a:af:fb:d6:4b:b6:d7:af:84: ce:3c:6d:56:bc:7b:9d:20:bd:25:b3:af:ce:2a:37:e9:1a:1b: 18:c2:d2:da:f8:94:58:ea:6f:27:98:a4:9c:99:2e:b5:e2:c6: 46:8c:f7:de:69:72:db:b0:07:4b:f9:06:76:70:92:5c:94:20: 93:b1:71:1c:32:78:35:3e:04:e3:ab:fa:c9:8b:fe:3f:ad:71: 01:fd:15:f0:01:54:d8:cb:17:71:83:23:b1:5a:7d:20:b4:93: 7b:47:96:ad:b3:7d:71:1d:de:dc:af:f0:65:2c:d2:0d:2c:77: 48:3f:dc:44 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE4MDRDMDg5QTA1QjU4 OTI4RDQ2NUQ3NzI5OUJENjI3MDY4Q0MzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTssghbKc5Z8vEmBGVU2yqj8owDAAUHE8ARcAfs9jFiBHb6w/O Dzmow6jQySvrXW+/7SPqtjuSfkhTsmgxFpFkaYi+rIl7JNUJW+Pha5sXNC1QXYH7 e/QoCjE9GRKs9ttxHEJ7ZVL1YbbxHKR+n9GkPApuGlNt6Zw2chj1JHNtZEyzPG/r nSTjqUq2XfwDAmLE+Xpoa37t7nAOnLn7xZmcRd1hhZjPm8hV0z+UbQtYtlCjbhEn sZW4OEWbAq5kDAilg/plDhrYKi0LMcxGq7T8hIoxwAtL7pv2p5oVmTNRfK1TtZdf ayd/knYPCrqRaF/GLehN0zmtlxFSqiVKyzv/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUGATAiaBbWJKNRl13KZvWJwaMwwYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0dBVEFpYUJiV0pLTlJsMTNLWnZXSndh TXd3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSyUgwDQYJ KoZIhvcNAQELBQADggEBAMlu38B0R9h53F3yITkYpWlYs0R1Z+iism/VXXDLdqJY xipqDOtHPdu/L/xNBy1dfXfyl8gxr4jP+JBkv4/tV4G6Td5jAUHdNlCC6Shj6BhV SMJdPRoC7kfneXn3QT+xxUnDFMGdMkKB391moGd4gE0ZWH9FTIiN+Nv93ob1YBdO 0018T3rtxwqv+9ZLttevhM48bVa8e50gvSWzr84qN+kaGxjC0tr4lFjqbyeYpJyZ LrXixkaM995pctuwB0v5BnZwklyUIJOxcRwyeDU+BOOr+smL/j+tcQH9FfABVNjL F3GDI7FafSC0k3tHlq2zfXEd3tyv8GUs0g0sd0g/3EQ= -----END CERTIFICATE-----Generated at Sun Jun 2 19:20:43 2024 by rpki-client on console-fra.rpki-client.org