$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/OVO2TpmA6z3HyNh3LwRnN9E_4MY.roa File: OVO2TpmA6z3HyNh3LwRnN9E_4MY.roa (raw, json) Hash identifier: A4JA25oMQjTaNe+/ApV9OscN5zCCoVkCQVhbTDKDmbg= Subject key identifier: 39:53:B6:4E:99:80:EB:3D:C7:C8:D8:77:2F:04:67:37:D1:3F:E0:C6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0E22 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OVO2TpmA6z3HyNh3LwRnN9E_4MY.roa Signing time: Mon 26 Feb 2024 07:39:02 +0000 ROA not before: Mon 26 Feb 2024 07:39:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 22787 IP address blocks: 210.58.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3618 (0xe22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Feb 26 07:39:02 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3953B64E9980EB3DC7C8D8772F046737D13FE0C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:09:99:28:d9:af:9e:69:cf:f9:aa:59:2c:81: 64:5e:cf:8f:fa:69:61:63:18:37:53:9e:65:9d:5f: 19:7d:d1:06:d1:fd:30:48:99:b3:c0:7a:0d:d5:9f: 7a:84:54:6a:11:bd:fd:c3:22:23:9a:1d:61:b6:6a: c5:7e:40:e1:47:67:dd:2e:e3:2f:1b:fd:15:50:db: b1:57:44:07:f1:f9:e5:02:c8:bd:d4:b8:bb:30:13: 6b:6d:99:dd:b4:e0:15:b9:30:cd:f8:c6:38:9d:74: 15:ee:05:5e:ef:7b:c1:82:02:ef:74:c0:55:e4:f4: 9a:46:b3:ee:99:40:0b:06:4a:28:2c:b2:d8:1a:f3: b1:33:92:b6:5e:42:fc:59:15:eb:d1:10:91:cb:c5: 88:d7:a5:84:99:f4:58:46:e5:b2:68:05:e5:83:18: ee:37:6b:36:cf:02:e0:2b:c0:03:28:c5:41:cf:d3: 2f:5c:07:c8:65:db:fb:b3:73:90:ea:e6:fb:9e:7c: 4b:7e:db:d6:74:2b:d0:6d:60:cd:d4:16:09:0c:fb: dc:e6:eb:24:57:46:ae:9e:1c:7d:66:4b:46:7a:1a: 29:c7:b0:7c:78:be:5e:16:dd:13:db:e9:83:ac:57: 6b:59:c3:50:5d:61:57:89:e8:17:d4:89:2e:4a:d7: 63:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:53:B6:4E:99:80:EB:3D:C7:C8:D8:77:2F:04:67:37:D1:3F:E0:C6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OVO2TpmA6z3HyNh3LwRnN9E_4MY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.90.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:f8:7f:c3:b4:e3:c1:5f:47:2f:35:e6:01:bc:6e:68:e6:cf: 87:0d:99:f2:7d:4a:96:d4:4f:f8:48:17:d2:20:2f:89:ee:c6: 52:e8:30:8b:e9:30:3a:60:a3:47:40:c4:9a:b8:3e:9a:83:95: 01:8f:4d:61:17:4d:e8:ea:d3:58:e1:41:f2:75:d2:fc:48:aa: 48:b8:ce:ea:ee:d9:3f:d1:95:49:1c:f8:bd:d2:a5:ec:77:a8: 44:98:66:85:18:3c:aa:13:a5:f5:8b:0d:6f:8a:6b:1f:30:68: fa:be:70:21:f5:d9:3a:08:38:81:7a:e7:53:e4:a9:8a:58:3e: 8a:75:f5:94:c5:3d:d3:77:d0:de:da:7b:3f:5c:89:4d:49:ca: 0d:f8:2b:c1:27:5f:d2:90:db:bb:d3:17:b3:c6:a9:72:c4:ab: e0:19:c4:c6:48:6e:1a:9f:48:fb:cb:b9:21:c4:46:39:50:c4: 76:10:d2:13:fd:46:fd:1a:ab:2a:c7:e2:f2:a8:7f:bf:3d:c7: b7:7b:ed:6e:ae:01:6b:8c:21:69:c2:da:33:da:d9:42:d1:e4: 89:54:e2:dc:bb:3d:51:9f:d7:fd:18:e1:09:e3:cf:16:47:f2: b8:b2:bf:1a:52:c2:c8:92:80:14:5c:4d:c9:15:5f:b4:ce:76: f8:a3:65:95 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAyMjYw NzM5MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM5NTNCNjRFOTk4MEVC M0RDN0M4RDg3NzJGMDQ2NzM3RDEzRkUwQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkCZko2a+eac/5qlksgWRez4/6aWFjGDdTnmWdXxl90QbR/TBI mbPAeg3Vn3qEVGoRvf3DIiOaHWG2asV+QOFHZ90u4y8b/RVQ27FXRAfx+eUCyL3U uLswE2ttmd204BW5MM34xjiddBXuBV7ve8GCAu90wFXk9JpGs+6ZQAsGSigsstga 87EzkrZeQvxZFevREJHLxYjXpYSZ9FhG5bJoBeWDGO43azbPAuArwAMoxUHP0y9c B8hl2/uzc5Dq5vuefEt+29Z0K9BtYM3UFgkM+9zm6yRXRq6eHH1mS0Z6GinHsHx4 vl4W3RPb6YOsV2tZw1BdYVeJ6BfUiS5K12OpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUOVO2TpmA6z3HyNh3LwRnN9E/4MYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL09WTzJUcG1BNnozSHlOaDNMd1JuTjlF XzRNWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSOlowDQYJ KoZIhvcNAQELBQADggEBAJr4f8O048FfRy815gG8bmjmz4cNmfJ9SpbUT/hIF9Ig L4nuxlLoMIvpMDpgo0dAxJq4PpqDlQGPTWEXTejq01jhQfJ10vxIqki4zuru2T/R lUkc+L3Spex3qESYZoUYPKoTpfWLDW+Kax8waPq+cCH12ToIOIF651PkqYpYPop1 9ZTFPdN30N7aez9ciU1Jyg34K8EnX9KQ27vTF7PGqXLEq+AZxMZIbhqfSPvLuSHE RjlQxHYQ0hP9Rv0aqyrH4vKof789x7d77W6uAWuMIWnC2jPa2ULR5IlU4ty7PVGf 1/0Y4QnjzxZH8riyvxpSwsiSgBRcTckVX7TOdvijZZU= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org