$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/N1h7BdJp0OuCvx2x0tck6etOKWc.roa File: N1h7BdJp0OuCvx2x0tck6etOKWc.roa (raw, json) Hash identifier: X9JKA/VEgTjEEn52PUBwChPI0tUH56HFqMor9YiVT5U= Subject key identifier: 37:58:7B:05:D2:69:D0:EB:82:BF:1D:B1:D2:D7:24:E9:EB:4E:29:67 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D80 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N1h7BdJp0OuCvx2x0tck6etOKWc.roa Signing time: Mon 15 Jan 2024 21:28:59 +0000 ROA not before: Mon 15 Jan 2024 21:28:59 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.63.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:28:59 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=37587B05D269D0EB82BF1DB1D2D724E9EB4E2967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:a4:fb:af:62:8b:d7:82:e6:fc:06:19:a7: 11:3d:9d:77:b8:46:48:26:ba:a4:33:6a:c6:7d:9a: 51:2b:70:82:55:66:80:13:db:fc:92:cf:3d:50:ca: ed:1c:7b:10:0c:18:39:a6:f5:29:df:da:fc:06:44: f8:52:39:49:b3:02:fe:c3:55:0a:bf:e0:73:e6:c5: cc:5c:63:14:97:ad:c2:76:e5:35:b5:63:e2:ad:9f: 1f:05:8d:76:06:a3:00:47:56:42:d5:2d:1d:c6:3c: db:4b:56:e1:7e:20:0f:6c:6b:58:ee:95:10:3b:71: a7:a0:5d:19:81:cd:d4:35:7f:0f:b5:8b:78:e6:23: 5e:47:fe:ff:a3:37:e6:7a:19:01:49:ea:ab:55:ad: 86:5d:b8:3e:21:23:df:66:49:45:d9:06:cd:e4:71: a6:eb:44:da:27:87:a9:3f:23:f2:b3:0d:e9:a8:29: 4b:80:fb:2f:e3:8c:b1:ca:d0:76:3e:42:29:ac:37: 0f:24:b5:24:cd:21:6b:7a:a5:f7:2d:45:cc:59:3b: 2f:9c:83:fa:01:3d:3b:36:9a:23:e4:82:81:7e:9a: 34:60:3c:eb:99:6d:42:19:aa:c5:a2:d4:0d:a3:b3: e8:c1:57:86:08:6c:f4:74:54:89:36:bb:98:ac:e4: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:58:7B:05:D2:69:D0:EB:82:BF:1D:B1:D2:D7:24:E9:EB:4E:29:67 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/N1h7BdJp0OuCvx2x0tck6etOKWc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.253.0/24 Signature Algorithm: sha256WithRSAEncryption 18:a2:99:05:29:9b:05:ae:3c:c4:43:92:74:33:2a:00:1a:bc: 87:b2:84:35:c1:ba:e6:68:fd:5b:ce:a5:da:81:df:8d:ed:54: 0b:59:96:11:26:e6:26:21:9b:6f:82:a4:f2:6a:6c:a1:0c:06: 54:7b:3a:01:03:d7:eb:d3:e6:c4:af:d4:c9:ef:52:56:fd:13: 3f:98:b5:f5:b9:b4:54:b1:76:01:69:26:29:a7:86:3a:94:02: 1d:46:00:eb:36:d8:40:09:aa:3d:97:a0:46:cb:f6:2b:ee:c5: 3d:b4:b8:2e:84:60:78:aa:2f:9a:fc:1e:28:01:d4:2d:e9:64: 9d:ec:da:60:03:fb:26:0a:b4:52:85:5f:e3:89:28:f2:43:73: 4a:f0:e3:ed:7b:9e:f3:83:1b:7d:35:ff:2c:90:27:70:65:65: 10:32:c8:8f:9f:5d:2d:9f:ec:d4:53:25:54:6e:85:b0:31:2f: 31:e9:e3:e0:11:9c:ea:47:07:69:10:58:0c:37:7e:07:b9:d6: d0:1f:bf:e5:97:de:e5:a6:3f:80:fb:50:80:e9:5f:bc:fc:93: 9b:e2:25:e3:04:03:f3:18:11:e7:e6:3d:71:91:f3:fd:67:13: b7:4d:7b:be:b5:53:02:86:0b:e3:1d:70:67:1a:72:f3:1e:22: 2c:62:ae:57 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI4NTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM3NTg3QjA1RDI2OUQw RUI4MkJGMURCMUQyRDcyNEU5RUI0RTI5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjxaT7r2KL14Lm/AYZpxE9nXe4RkgmuqQzasZ9mlErcIJVZoAT 2/ySzz1Qyu0cexAMGDmm9Snf2vwGRPhSOUmzAv7DVQq/4HPmxcxcYxSXrcJ25TW1 Y+Ktnx8FjXYGowBHVkLVLR3GPNtLVuF+IA9sa1julRA7caegXRmBzdQ1fw+1i3jm I15H/v+jN+Z6GQFJ6qtVrYZduD4hI99mSUXZBs3kcabrRNonh6k/I/KzDemoKUuA +y/jjLHK0HY+QimsNw8ktSTNIWt6pfctRcxZOy+cg/oBPTs2miPkgoF+mjRgPOuZ bUIZqsWi1A2js+jBV4YIbPR0VIk2u5is5LQ3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUN1h7BdJp0OuCvx2x0tck6etOKWcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL04xaDdCZEpwME91Q3Z4MngwdGNrNmV0 T0tXYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSP/0wDQYJ KoZIhvcNAQELBQADggEBABiimQUpmwWuPMRDknQzKgAavIeyhDXBuuZo/VvOpdqB 343tVAtZlhEm5iYhm2+CpPJqbKEMBlR7OgED1+vT5sSv1MnvUlb9Ez+YtfW5tFSx dgFpJimnhjqUAh1GAOs22EAJqj2XoEbL9ivuxT20uC6EYHiqL5r8HigB1C3pZJ3s 2mAD+yYKtFKFX+OJKPJDc0rw4+17nvODG301/yyQJ3BlZRAyyI+fXS2f7NRTJVRu hbAxLzHp4+ARnOpHB2kQWAw3fge51tAfv+WX3uWmP4D7UIDpX7z8k5viJeMEA/MY EefmPXGR8/1nE7dNe761UwKGC+MdcGcacvMeIixirlc= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org