$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Ji9smiqyEDroUb8w73N0fne7lTE.roa File: Ji9smiqyEDroUb8w73N0fne7lTE.roa (raw, json) Hash identifier: QR0Q5L8JDRpvRPH7RQ6BovgqklNDfVY+FY0AfoLoODw= Subject key identifier: 26:2F:6C:9A:2A:B2:10:3A:E8:51:BF:30:EF:73:74:7E:77:BB:95:31 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C58 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ji9smiqyEDroUb8w73N0fne7lTE.roa Signing time: Mon 15 Jan 2024 21:09:07 +0000 ROA not before: Mon 15 Jan 2024 21:09:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 203.79.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:07 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=262F6C9A2AB2103AE851BF30EF73747E77BB9531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:4f:85:d8:6d:c3:da:6d:92:82:4f:bc:62: 0d:e5:42:91:2f:ee:22:da:ae:e2:cd:35:97:6a:e8: cb:e6:06:17:38:2a:50:80:e5:00:c5:27:ea:bb:5c: b6:0a:64:c1:51:d7:82:32:d5:95:89:36:a6:74:0a: 2b:d1:ef:b0:6d:ce:6e:f7:6d:58:5d:c8:d3:2d:23: 16:f0:99:1e:99:a7:ff:5b:7c:83:96:6a:7a:27:cd: ac:b0:3d:8a:f0:cc:2c:64:e8:e9:ba:32:e2:d7:d5: 47:ed:51:de:6a:64:a9:50:ad:b3:a9:67:6c:32:af: 92:24:4b:78:a0:57:b5:8a:24:a9:d4:36:17:31:ee: 9f:ac:c3:4d:d9:ec:a1:eb:09:5e:29:be:0d:82:7f: ed:14:a1:07:67:cb:97:fc:a9:f6:cf:b6:c4:51:6b: 66:a8:dc:c5:32:f3:59:cb:d8:56:01:28:36:26:ed: 06:f2:d4:d4:36:b8:fd:78:71:2e:86:5d:a4:77:7b: 93:00:7e:77:7e:02:c8:af:d9:c2:69:11:7d:d3:7a: 1e:d2:16:3f:10:8b:97:c1:a6:df:7c:d5:f2:6f:06: f2:c6:52:bd:5b:05:d2:bd:72:8b:d6:b1:c5:ac:60: b1:81:7e:21:29:f9:64:d2:e3:62:0a:59:00:62:1c: a8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2F:6C:9A:2A:B2:10:3A:E8:51:BF:30:EF:73:74:7E:77:BB:95:31 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ji9smiqyEDroUb8w73N0fne7lTE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.196.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:b9:75:f9:5b:cb:51:84:dd:b5:9d:4e:be:71:65:45:ff:d0: 19:c0:a2:57:f0:1c:95:3a:5b:e6:1e:bd:cd:72:62:84:49:42: 48:5e:93:bc:a7:96:99:b3:90:80:d5:e5:8a:c0:7c:2a:39:3f: 6f:d9:88:2d:4f:22:cd:71:a8:17:94:39:0a:64:63:7d:77:7a: 6d:28:cf:e6:10:e7:20:52:81:9d:fb:df:8f:f0:88:ff:2e:99: f4:cd:00:39:9b:64:41:6f:7f:a6:f0:75:b2:24:ed:c8:74:9a: 8a:2e:a7:1a:17:ba:17:b9:c6:0c:88:8d:cc:c8:42:77:2d:56: 90:21:73:bd:73:02:90:83:6e:73:27:f9:e9:a5:f3:65:eb:04: ff:a0:db:6b:81:76:a3:0a:10:27:ce:c7:40:8c:68:d5:31:b8: fe:11:da:ad:12:48:af:5c:1e:51:2a:b3:3e:9b:f0:f1:0c:32: aa:76:6c:05:3a:11:6a:e1:45:41:f9:7d:64:cf:25:7f:db:53: 6e:1b:d1:cb:d4:0c:2b:06:ef:0d:3a:ef:bc:da:80:0b:d1:a8: 8f:7a:1b:02:4c:68:35:14:5e:87:5d:90:9a:30:e7:90:68:ca: 66:55:e2:b1:76:6b:9b:24:e1:dd:1f:e6:c7:a5:1e:49:6f:d9: d4:15:de:61 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI2MkY2QzlBMkFCMjEw M0FFODUxQkYzMEVGNzM3NDdFNzdCQjk1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+uE+F2G3D2m2Sgk+8Yg3lQpEv7iLaruLNNZdq6MvmBhc4KlCA 5QDFJ+q7XLYKZMFR14Iy1ZWJNqZ0CivR77Btzm73bVhdyNMtIxbwmR6Zp/9bfIOW anonzaywPYrwzCxk6Om6MuLX1UftUd5qZKlQrbOpZ2wyr5IkS3igV7WKJKnUNhcx 7p+sw03Z7KHrCV4pvg2Cf+0UoQdny5f8qfbPtsRRa2ao3MUy81nL2FYBKDYm7Qby 1NQ2uP14cS6GXaR3e5MAfnd+Asiv2cJpEX3Teh7SFj8Qi5fBpt981fJvBvLGUr1b BdK9covWscWsYLGBfiEp+WTS42IKWQBiHKjTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUJi9smiqyEDroUb8w73N0fne7lTEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0ppOXNtaXF5RURyb1ViOHc3M04wZm5l N2xURS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLT8QwDQYJ KoZIhvcNAQELBQADggEBAFu5dflby1GE3bWdTr5xZUX/0BnAolfwHJU6W+Yevc1y YoRJQkhek7ynlpmzkIDV5YrAfCo5P2/ZiC1PIs1xqBeUOQpkY313em0oz+YQ5yBS gZ3734/wiP8umfTNADmbZEFvf6bwdbIk7ch0mooupxoXuhe5xgyIjczIQnctVpAh c71zApCDbnMn+eml82XrBP+g22uBdqMKECfOx0CMaNUxuP4R2q0SSK9cHlEqsz6b 8PEMMqp2bAU6EWrhRUH5fWTPJX/bU24b0cvUDCsG7w0677zagAvRqI96GwJMaDUU XoddkJow55BoymZV4rF2a5sk4d0f5selHklv2dQV3mE= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org