$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/JKzWwgOzJ4H05jar1cWvBR02jqA.roa File: JKzWwgOzJ4H05jar1cWvBR02jqA.roa (raw, json) Hash identifier: 9Tn+GestXjtjSHOwHgmQyEpEtMuxlDyLNkyZy/+3isU= Subject key identifier: 24:AC:D6:C2:03:B3:27:81:F4:E6:36:AB:D5:C5:AF:05:1D:36:8E:A0 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C34 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JKzWwgOzJ4H05jar1cWvBR02jqA.roa Signing time: Mon 15 Jan 2024 21:08:31 +0000 ROA not before: Mon 15 Jan 2024 21:08:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131591 IP address blocks: 101.136.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:08:31 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=24ACD6C203B32781F4E636ABD5C5AF051D368EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:51:ba:24:dd:46:68:79:3b:c3:95:da:c3: 5a:a9:a0:56:ff:88:8c:5b:d8:27:2e:28:c1:15:59: 19:d5:9b:3b:1d:e0:69:60:9d:c3:ac:aa:4a:c2:b7: 1d:e3:1d:fd:b0:ca:db:51:f1:e9:7a:a1:04:48:9d: 23:9b:c8:26:2b:e7:aa:33:15:a1:97:27:a8:b3:6b: 3d:e5:d8:d8:e3:2c:63:a8:7d:27:8a:94:9a:9f:f1: b4:50:15:23:7c:6d:f1:c1:1b:e6:a3:b9:e4:3a:ed: 3c:96:b3:94:cd:bc:7b:ed:9b:eb:0f:c1:a7:b2:a1: 08:63:72:34:c2:2d:ea:77:81:fc:b3:c4:6a:b1:27: 8c:be:01:cf:cc:66:70:fd:3d:79:01:5e:d0:d0:fd: 42:9a:28:fb:e3:77:33:40:9b:e4:02:f2:78:2a:0f: d9:3d:b6:f9:b4:31:bd:5e:45:84:5e:fe:fb:91:8f: 86:33:b7:fe:30:4c:bb:35:d8:a2:ec:8b:10:68:b7: 8c:5b:1f:99:0a:5e:2e:80:b7:7f:37:df:58:4e:13: 36:28:63:f9:3a:12:65:06:8b:c0:90:1e:55:59:7a: c2:9d:64:40:b7:2b:8c:4a:4e:83:a8:d3:b0:64:b4: 19:5b:1a:f4:ec:32:50:6e:07:93:66:e9:64:31:1c: 55:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AC:D6:C2:03:B3:27:81:F4:E6:36:AB:D5:C5:AF:05:1D:36:8E:A0 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JKzWwgOzJ4H05jar1cWvBR02jqA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 101.136.0.0/14 Signature Algorithm: sha256WithRSAEncryption bc:13:25:c3:f9:8a:65:cc:7b:0d:3c:3f:af:f3:af:3d:1d:3b: 2a:85:dc:70:f8:0d:6e:f1:b3:16:b3:91:50:5e:b7:be:79:f9: b9:b9:4b:b4:de:cf:6f:de:f9:2e:4a:8d:8a:1d:e3:b5:22:3b: 04:b8:ac:c9:b7:36:8a:f6:3a:56:b2:33:20:a2:e6:0c:70:cc: 06:0b:b4:28:23:5a:88:3c:02:40:f1:46:7a:18:40:ef:67:aa: 38:c0:c2:5b:18:d0:eb:4c:1b:90:0a:62:7a:ce:c9:f3:98:11: 3f:52:ee:6f:77:02:dc:ba:ea:46:ab:1a:fb:29:8b:4b:03:36: 30:19:2c:9b:58:bd:53:c2:01:89:8e:d1:c6:d6:5a:86:4d:3a: 0d:a5:dc:b2:a6:3c:72:e2:28:11:9f:f4:5c:4c:d9:b9:1a:5b: f5:4b:cc:7f:d5:42:80:c5:2d:47:24:40:35:a3:fb:5c:8e:65: 6a:71:c7:1a:9a:88:45:ea:d0:1c:61:ca:34:b7:b2:8a:0b:f3: 43:4a:12:e0:5e:50:73:ba:62:4b:24:83:e1:f3:61:03:6c:e8: bc:db:50:d3:fe:a7:9d:8f:4c:62:00:1f:60:84:cd:09:7f:d0: 14:34:f1:b4:95:04:e0:8d:bb:be:1c:ae:b3:b2:d6:7e:3e:b0: 75:d7:e9:63 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA4MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI0QUNENkMyMDNCMzI3 ODFGNEU2MzZBQkQ1QzVBRjA1MUQzNjhFQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuRFG6JN1GaHk7w5Xaw1qpoFb/iIxb2CcuKMEVWRnVmzsd4Glg ncOsqkrCtx3jHf2wyttR8el6oQRInSObyCYr56ozFaGXJ6izaz3l2NjjLGOofSeK lJqf8bRQFSN8bfHBG+ajueQ67TyWs5TNvHvtm+sPwaeyoQhjcjTCLep3gfyzxGqx J4y+Ac/MZnD9PXkBXtDQ/UKaKPvjdzNAm+QC8ngqD9k9tvm0Mb1eRYRe/vuRj4Yz t/4wTLs12KLsixBot4xbH5kKXi6At38331hOEzYoY/k6EmUGi8CQHlVZesKdZEC3 K4xKToOo07BktBlbGvTsMlBuB5Nm6WQxHFVrAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUJKzWwgOzJ4H05jar1cWvBR02jqAwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0pLeld3Z096SjRIMDVqYXIxY1d2QlIw MmpxQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJliDANBgkq hkiG9w0BAQsFAAOCAQEAvBMlw/mKZcx7DTw/r/OvPR07KoXccPgNbvGzFrORUF63 vnn5ublLtN7Pb975LkqNih3jtSI7BLisybc2ivY6VrIzIKLmDHDMBgu0KCNaiDwC QPFGehhA72eqOMDCWxjQ60wbkApies7J85gRP1Lub3cC3LrqRqsa+ymLSwM2MBks m1i9U8IBiY7RxtZahk06DaXcsqY8cuIoEZ/0XEzZuRpb9UvMf9VCgMUtRyRANaP7 XI5lanHHGpqIRerQHGHKNLeyigvzQ0oS4F5Qc7piSySD4fNhA2zovNtQ0/6nnY9M YgAfYITNCX/QFDTxtJUE4I27vhyus7LWfj6wddfpYw== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:43 2024 by rpki-client on console-ams.rpki-client.org