$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/OkfeEHtA8VOFjWTQwqEyQq_5oYM.roa File: OkfeEHtA8VOFjWTQwqEyQq_5oYM.roa (raw, json) Hash identifier: xlPCzF6mKmywlTzINLMqFI0husU+vYbB10Qc2mUtBzk= Subject key identifier: 3A:47:DE:10:7B:40:F1:53:85:8D:64:D0:C2:A1:32:42:AF:F9:A1:83 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CB0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OkfeEHtA8VOFjWTQwqEyQq_5oYM.roa Signing time: Mon 15 Jan 2024 21:10:41 +0000 ROA not before: Mon 15 Jan 2024 21:10:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.202.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:41 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3A47DE107B40F153858D64D0C2A13242AFF9A183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:3b:59:99:3e:ac:a5:a4:3b:52:35:3a:21: 9a:ba:3e:31:de:3d:33:bd:5a:e2:34:50:4e:26:70: 1b:a6:a3:b9:40:2b:1d:3e:fa:cb:f4:64:96:76:2a: 21:29:b1:9b:ab:ca:73:b4:6c:63:e1:35:30:74:ad: b9:8d:0a:3e:4e:d1:68:69:af:e7:f3:61:48:cf:cc: 08:89:b8:bb:22:e7:c4:02:d2:a7:24:04:0b:96:8e: a9:95:6d:a4:bc:63:ca:99:66:e5:f7:b7:68:b3:8f: da:c2:4b:f2:a5:95:fd:7b:91:f0:e4:3d:6b:e3:d7: 54:94:d5:3d:f0:72:07:05:f7:43:1a:0b:b9:2c:ca: 80:99:d5:33:a6:03:6e:52:83:fb:2d:60:ad:cb:1e: 2a:29:45:ef:68:36:10:eb:d5:b7:28:32:f1:d8:70: 92:37:c5:21:43:8e:f4:96:5b:f6:14:2c:a3:3a:8a: 82:8b:e1:6b:41:09:c7:ed:93:71:d5:62:01:c3:58: c6:ad:0d:9d:91:ae:4e:a2:21:0e:a1:0e:4a:29:b5: 65:ad:d2:21:07:91:fa:7e:41:51:c6:9a:a3:1c:7e: 73:0c:10:9b:b6:9a:1e:21:4b:9b:99:7d:5f:93:d9: 53:37:eb:88:aa:e4:1b:fe:9c:c5:ff:f1:a0:50:79: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:47:DE:10:7B:40:F1:53:85:8D:64:D0:C2:A1:32:42:AF:F9:A1:83 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/OkfeEHtA8VOFjWTQwqEyQq_5oYM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.0.0/19 Signature Algorithm: sha256WithRSAEncryption 7e:05:15:a5:93:15:b0:da:53:2d:b9:b4:85:f1:38:10:e7:3b: 2a:36:f4:0c:0f:de:c6:9c:8e:d7:d8:c3:4b:fe:cc:a9:d1:6d: 0a:ea:b5:37:cd:4d:5f:74:f8:4a:54:5c:a6:11:83:b2:84:e8: b9:75:96:be:f4:e1:6e:66:c1:59:47:78:87:c0:e3:53:fa:31: 8c:a9:45:ee:55:80:90:2e:11:73:66:b8:56:0b:fd:7f:f4:9d: 83:75:bc:ba:e5:b6:e2:0b:3d:f6:22:b4:54:87:f3:91:cd:3d: e1:47:34:69:17:e4:48:11:2b:7e:a1:7e:ca:d6:71:dc:0f:85: ab:54:67:95:dc:d4:01:0f:b8:18:5a:7d:30:2f:bc:8a:45:f4: 38:64:4b:3f:11:76:6d:fa:c0:e6:9d:7f:56:b2:f8:20:80:bf: ba:be:9e:b3:3f:0b:e4:b5:5e:1c:ff:8d:c3:be:96:12:a1:df: 90:9b:c4:66:2b:ec:11:e3:17:87:c8:e3:2f:ca:54:a8:f9:7f: 3a:91:9f:bf:55:79:71:e3:37:78:b7:be:a5:da:e5:21:a8:43: 29:f7:71:9f:f4:ea:2b:ec:21:b8:c4:98:4d:05:42:15:e8:e0: c8:4a:e4:05:9f:ff:6f:3d:49:15:4a:ff:63:f8:96:b1:dd:0d: e5:8a:4d:73 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwNDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNBNDdERTEwN0I0MEYx NTM4NThENjREMEMyQTEzMjQyQUZGOUExODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0ljtZmT6spaQ7UjU6IZq6PjHePTO9WuI0UE4mcBumo7lAKx0+ +sv0ZJZ2KiEpsZurynO0bGPhNTB0rbmNCj5O0Whpr+fzYUjPzAiJuLsi58QC0qck BAuWjqmVbaS8Y8qZZuX3t2izj9rCS/Kllf17kfDkPWvj11SU1T3wcgcF90MaC7ks yoCZ1TOmA25Sg/stYK3LHiopRe9oNhDr1bcoMvHYcJI3xSFDjvSWW/YULKM6ioKL 4WtBCcftk3HVYgHDWMatDZ2Rrk6iIQ6hDkoptWWt0iEHkfp+QVHGmqMcfnMMEJu2 mh4hS5uZfV+T2VM364iq5Bv+nMX/8aBQeV/tAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUOkfeEHtA8VOFjWTQwqEyQq/5oYMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL09rZmVFSHRBOFZPRmpXVFF3cUV5UXFf NW9ZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSygAwDQYJ KoZIhvcNAQELBQADggEBAH4FFaWTFbDaUy25tIXxOBDnOyo29AwP3sacjtfYw0v+ zKnRbQrqtTfNTV90+EpUXKYRg7KE6Ll1lr704W5mwVlHeIfA41P6MYypRe5VgJAu EXNmuFYL/X/0nYN1vLrltuILPfYitFSH85HNPeFHNGkX5EgRK36hfsrWcdwPhatU Z5Xc1AEPuBhafTAvvIpF9DhkSz8Rdm36wOadf1ay+CCAv7q+nrM/C+S1Xhz/jcO+ lhKh35CbxGYr7BHjF4fI4y/KVKj5fzqRn79VeXHjN3i3vqXa5SGoQyn3cZ/06ivs IbjEmE0FQhXo4MhK5AWf/289SRVK/2P4lrHdDeWKTXM= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org