$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Qobn28QqrWlKlrROp-wNTRA-WR8.roa File: Qobn28QqrWlKlrROp-wNTRA-WR8.roa (raw, json) Hash identifier: YRgwFzA13I0km2JuupimTuYbbkQqFCxoFnmxNN0FMwE= Subject key identifier: 42:86:E7:DB:C4:2A:AD:69:4A:96:B4:4E:A7:EC:0D:4D:10:3E:59:1F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D6A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Qobn28QqrWlKlrROp-wNTRA-WR8.roa Signing time: Mon 15 Jan 2024 21:26:28 +0000 ROA not before: Mon 15 Jan 2024 21:26:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131597 IP address blocks: 218.35.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3434 (0xd6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:26:28 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4286E7DBC42AAD694A96B44EA7EC0D4D103E591F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:75:68:89:8a:7a:2d:5c:04:6b:d0:22:48: 90:d0:bd:d6:5d:30:71:b3:e4:55:5a:ff:f9:5a:b3: a7:dc:42:3c:39:b5:75:a5:6f:98:c4:e6:d8:04:b7: dc:74:5d:5a:68:bf:92:d5:02:74:84:be:bc:8d:ca: 51:56:7f:8f:33:9c:1d:a1:47:a8:f5:af:04:7d:55: 1b:8f:78:e4:2a:4b:83:49:4a:15:0b:18:5f:29:87: 38:6c:22:5f:2b:72:cb:3a:bc:53:4a:12:62:01:96: 09:20:f7:8c:88:ff:ab:46:84:39:fa:1a:83:67:72: 7c:c3:1d:7a:fd:17:98:b9:ae:a1:35:6b:ec:93:35: 59:68:31:0e:d6:a6:ca:10:52:ab:d8:92:23:5e:f7: 9b:82:23:b8:20:f8:20:98:93:76:81:b9:51:7e:92: 6b:93:b6:88:7f:37:7c:31:da:0e:5b:a7:6b:e4:25: bf:55:e3:71:49:c7:d0:d2:fe:b2:c3:de:9b:91:af: 5d:02:c3:4b:d2:02:45:a7:36:c2:4b:76:e1:47:34: ea:5f:51:a3:be:38:52:03:2c:cd:e9:f6:e5:08:7f: 2c:5f:37:03:85:61:d9:e4:d3:d5:ae:68:41:da:53: 1a:bd:e1:f6:eb:37:bd:eb:d6:05:9b:83:f5:dc:ab: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:86:E7:DB:C4:2A:AD:69:4A:96:B4:4E:A7:EC:0D:4D:10:3E:59:1F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Qobn28QqrWlKlrROp-wNTRA-WR8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.64.0/19 Signature Algorithm: sha256WithRSAEncryption 4e:e3:81:c8:1f:29:1c:0a:6c:30:8f:6e:65:77:4f:75:8f:47: 77:29:f7:39:43:1d:d7:d0:2e:b3:0f:d2:0f:40:98:13:4c:2b: 0f:c3:3b:4d:a5:2d:ea:2a:08:a9:7e:9a:8d:e2:61:ac:15:8e: 8e:5b:ff:52:c1:ce:ec:fe:a7:b7:96:c7:95:7b:5f:66:68:6b: a3:b4:ff:3c:a0:ed:58:41:96:79:62:fd:56:07:ef:b3:e9:34: 00:ab:89:93:ea:70:90:22:ff:1c:af:55:7c:bd:b9:f2:e4:89: 83:ba:06:cf:21:6c:a4:97:6a:00:ed:74:b8:f0:1b:4a:81:f4: 28:b2:e6:65:5e:5c:50:df:4f:7e:77:57:63:c5:53:8b:a5:c6: e0:d4:6f:ab:f0:e0:74:24:3f:40:55:48:0d:bb:19:96:17:0b: a7:3c:e6:ae:15:7b:c0:fe:df:6f:2f:a5:e3:3f:5d:96:d5:f0: c5:f5:de:92:67:69:ae:48:ee:e3:7c:49:9f:2d:d3:f6:47:a4: ce:50:cc:31:8c:5c:e6:09:6a:48:ff:a4:a1:2e:df:4d:ce:80: 61:5e:88:2d:30:c9:9a:11:0b:82:d8:61:a6:dc:4d:50:6d:32: 34:20:2c:4c:8e:ea:80:9b:e0:e7:93:3a:db:fb:99:a7:4f:59: db:c7:d3:ed -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI2MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQyODZFN0RCQzQyQUFE Njk0QTk2QjQ0RUE3RUMwRDREMTAzRTU5MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPj3VoiYp6LVwEa9AiSJDQvdZdMHGz5FVa//las6fcQjw5tXWl b5jE5tgEt9x0XVpov5LVAnSEvryNylFWf48znB2hR6j1rwR9VRuPeOQqS4NJShUL GF8phzhsIl8rcss6vFNKEmIBlgkg94yI/6tGhDn6GoNncnzDHXr9F5i5rqE1a+yT NVloMQ7WpsoQUqvYkiNe95uCI7gg+CCYk3aBuVF+kmuTtoh/N3wx2g5bp2vkJb9V 43FJx9DS/rLD3puRr10Cw0vSAkWnNsJLduFHNOpfUaO+OFIDLM3p9uUIfyxfNwOF Ydnk09WuaEHaUxq94fbrN73r1gWbg/Xcq2vBAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUQobn28QqrWlKlrROp+wNTRA+WR8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1FvYm4yOFFxcldsS2xyUk9wLXdOVFJB LVdSOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaI0AwDQYJ KoZIhvcNAQELBQADggEBAE7jgcgfKRwKbDCPbmV3T3WPR3cp9zlDHdfQLrMP0g9A mBNMKw/DO02lLeoqCKl+mo3iYawVjo5b/1LBzuz+p7eWx5V7X2Zoa6O0/zyg7VhB lnli/VYH77PpNACriZPqcJAi/xyvVXy9ufLkiYO6Bs8hbKSXagDtdLjwG0qB9Ciy 5mVeXFDfT353V2PFU4ulxuDUb6vw4HQkP0BVSA27GZYXC6c85q4Ve8D+328vpeM/ XZbV8MX13pJnaa5I7uN8SZ8t0/ZHpM5QzDGMXOYJakj/pKEu303OgGFeiC0wyZoR C4LYYabcTVBtMjQgLEyO6oCb4OeTOtv7madPWdvH0+0= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org