$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/M55AlZ05OpDF7zMGwQbGMpIQFFE.roa File: M55AlZ05OpDF7zMGwQbGMpIQFFE.roa (raw, json) Hash identifier: wCGtizWuhcmSXPPwvDXZhyaf8JqOqVuHrN/i3fQnMcI= Subject key identifier: 33:9E:40:95:9D:39:3A:90:C5:EF:33:06:C1:06:C6:32:92:10:14:51 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CA8 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/M55AlZ05OpDF7zMGwQbGMpIQFFE.roa Signing time: Mon 15 Jan 2024 21:10:33 +0000 ROA not before: Mon 15 Jan 2024 21:10:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 210.201.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:33 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=339E40959D393A90C5EF3306C106C63292101451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:e6:7c:73:cd:52:fb:db:a2:5a:44:a8:83: 06:2f:db:e9:50:a8:04:f0:98:0e:9d:fe:bd:6f:2d: aa:a4:e3:d8:33:1a:80:3c:c5:e6:20:5f:ca:af:85: 68:18:f7:26:b4:9b:a3:cd:73:26:42:39:ba:03:7c: 6f:2e:e7:65:58:f3:5a:a8:e5:ef:a0:54:03:23:60: 1a:cf:ea:c9:4e:eb:92:89:80:14:c4:d6:41:2a:0b: ad:be:6a:58:60:35:f6:90:4d:32:03:38:55:9d:d0: b5:fe:bf:a7:fb:70:50:20:85:05:0a:d3:76:fc:1b: 62:0b:d7:e0:ea:60:f6:af:b8:59:41:3e:0b:b3:5f: 46:df:9f:0a:ff:ec:2f:58:4a:39:ab:53:8b:5f:4f: 37:ba:3d:bc:ac:05:ef:e3:fb:2a:f3:fa:2a:79:91: 7e:78:c9:9a:49:17:87:51:3d:ed:b5:2b:1a:c7:a9: 68:5c:65:65:9c:c7:42:d8:01:9b:79:96:0f:ad:41: 2a:71:b1:26:e1:a1:dd:8a:9f:7f:4b:aa:67:b0:56: a9:a5:0a:4a:71:c0:72:af:5f:fc:73:e9:7a:77:c0: 38:f0:14:04:88:e7:36:d0:98:e3:c4:08:c4:e5:39: ce:28:27:6d:38:27:4c:90:6b:38:04:44:90:d2:20: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9E:40:95:9D:39:3A:90:C5:EF:33:06:C1:06:C6:32:92:10:14:51 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/M55AlZ05OpDF7zMGwQbGMpIQFFE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.80.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:2b:9f:16:a6:03:46:15:80:64:0a:ab:bf:20:ae:2b:3f:9e: d0:bf:6e:a7:d4:d0:c1:57:55:45:51:a9:eb:44:83:eb:3f:69: 9f:66:a9:af:ec:0c:18:6d:e5:7e:94:04:54:ae:a6:d6:40:a2: 6e:c8:aa:f1:c7:3a:13:68:ac:b1:cf:60:6e:5a:27:40:b9:91: 93:e6:73:68:5d:04:28:0e:98:b2:aa:b8:43:a0:47:db:07:bb: 06:c4:72:0e:c4:cc:99:3b:5e:8b:38:b8:5f:64:ee:86:65:72: 2c:99:de:d0:39:f7:3b:d4:32:94:eb:dc:ca:c3:f1:5b:2a:7f: ee:f2:10:f9:9e:25:24:59:64:6d:73:fe:31:21:32:6f:37:34: 41:96:4e:e7:39:e7:b8:a5:91:8e:0d:47:9a:18:25:39:3d:aa: 93:2f:ab:dd:e3:74:f6:8a:46:22:a9:7b:52:51:bf:a8:2a:c3: 9d:68:be:c9:f1:02:a1:87:30:2b:8d:07:16:05:e3:72:99:38: 28:c3:91:df:56:c1:ae:e0:64:52:5f:39:d8:44:5b:9c:89:a2: df:c2:76:f2:89:eb:b0:4d:90:7e:e2:11:08:10:fa:08:ca:4a: 62:72:52:58:31:39:5f:f2:d1:12:31:a2:dc:24:63:9e:90:38: f5:fa:56:f4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMzOUU0MDk1OUQzOTNB OTBDNUVGMzMwNkMxMDZDNjMyOTIxMDE0NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMjeZ8c81S+9uiWkSogwYv2+lQqATwmA6d/r1vLaqk49gzGoA8 xeYgX8qvhWgY9ya0m6PNcyZCOboDfG8u52VY81qo5e+gVAMjYBrP6slO65KJgBTE 1kEqC62+alhgNfaQTTIDOFWd0LX+v6f7cFAghQUK03b8G2IL1+DqYPavuFlBPguz X0bfnwr/7C9YSjmrU4tfTze6PbysBe/j+yrz+ip5kX54yZpJF4dRPe21KxrHqWhc ZWWcx0LYAZt5lg+tQSpxsSbhod2Kn39LqmewVqmlCkpxwHKvX/xz6Xp3wDjwFASI 5zbQmOPECMTlOc4oJ204J0yQazgERJDSIIvTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUM55AlZ05OpDF7zMGwQbGMpIQFFEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL001NUFsWjA1T3BERjd6TUd3UWJHTXBJ UUZGRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyVAwDQYJ KoZIhvcNAQELBQADggEBAHornxamA0YVgGQKq78gris/ntC/bqfU0MFXVUVRqetE g+s/aZ9mqa/sDBht5X6UBFSuptZAom7IqvHHOhNorLHPYG5aJ0C5kZPmc2hdBCgO mLKquEOgR9sHuwbEcg7EzJk7Xos4uF9k7oZlciyZ3tA59zvUMpTr3MrD8Vsqf+7y EPmeJSRZZG1z/jEhMm83NEGWTuc557ilkY4NR5oYJTk9qpMvq93jdPaKRiKpe1JR v6gqw51ovsnxAqGHMCuNBxYF43KZOCjDkd9Wwa7gZFJfOdhEW5yJot/CdvKJ67BN kH7iEQgQ+gjKSmJyUlgxOV/y0RIxotwkY56QOPX6VvQ= -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:33 2024 by rpki-client on console-ams.rpki-client.org