$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Ru_Mbn28fK9BycehH82B-K_s0xc.roa File: Ru_Mbn28fK9BycehH82B-K_s0xc.roa (raw, json) Hash identifier: DZ3rKIsZ6EbLbhwnzN6ojepNUFnI79NxjffagtzS9ik= Subject key identifier: 46:EF:CC:6E:7D:BC:7C:AF:41:C9:C7:A1:1F:CD:81:F8:AF:EC:D3:17 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D78 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ru_Mbn28fK9BycehH82B-K_s0xc.roa Signing time: Mon 15 Jan 2024 21:28:47 +0000 ROA not before: Mon 15 Jan 2024 21:28:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.63.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:28:47 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=46EFCC6E7DBC7CAF41C9C7A11FCD81F8AFECD317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:29:64:d5:4e:8d:6d:48:6d:0f:09:7b:f4: 8a:09:77:b1:94:5b:9c:48:7c:77:43:93:97:3f:78: fc:20:25:cf:ea:a7:03:64:ba:0a:a3:9b:41:f3:9d: c9:70:85:85:99:6a:a8:b6:f7:24:ef:d5:d5:81:c7: 31:f4:16:12:2f:0e:12:c2:a9:9d:8a:d9:39:b5:5f: 38:6f:b6:f4:70:bd:ee:df:ad:75:15:cd:6b:16:15: de:1a:48:6d:6c:54:77:56:2a:95:00:50:e5:e2:1f: 3b:1b:ed:b0:84:d7:9a:5d:33:7a:ad:dd:81:cf:d8: db:bb:94:4c:eb:47:47:29:69:60:37:ba:e1:89:e9: 57:c6:10:62:62:7e:65:9f:b1:4c:ed:0d:30:b9:bc: 47:1d:84:35:56:d4:42:54:7a:23:fa:9d:af:e3:08: a7:ff:07:88:a3:4f:cd:5b:66:a7:83:e1:93:38:46: 14:88:10:07:71:93:c5:92:b0:fc:51:ce:1a:c9:db: 5c:3e:2c:88:9e:76:39:2b:4f:fc:a4:3a:16:b1:6a: ee:9c:be:9c:d4:89:e7:cc:f4:0c:68:f2:ed:fe:fd: 10:53:97:aa:cb:f9:6d:3c:14:aa:c3:70:8e:d4:ad: 88:e9:b9:45:aa:a2:f4:29:ed:6f:b3:ce:cb:98:5a: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EF:CC:6E:7D:BC:7C:AF:41:C9:C7:A1:1F:CD:81:F8:AF:EC:D3:17 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Ru_Mbn28fK9BycehH82B-K_s0xc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.200.0/21 Signature Algorithm: sha256WithRSAEncryption 02:87:a9:9c:11:6e:99:b9:d8:ec:50:83:4d:05:8b:c1:ec:7b: 23:d3:aa:47:aa:71:2f:67:50:32:1c:c1:00:b9:ab:62:c4:aa: 73:50:ce:f3:77:b2:e3:f2:46:34:11:f1:86:3e:31:83:e2:2e: f5:e3:3b:36:70:0f:49:2e:b3:2f:34:bf:7f:5b:e3:bd:fb:27: 5d:84:40:1d:20:8f:cc:9c:6e:8c:56:d9:09:9f:de:12:a8:e7: 49:d5:9d:69:50:d9:e1:4d:9c:db:92:c5:9e:e6:c7:9c:4f:27: ec:22:97:e6:95:d0:60:f4:9a:f4:8b:8d:7b:a6:68:6a:49:b2: cc:bc:a4:1c:3c:d2:65:28:4d:50:42:31:06:84:5e:f9:fa:c2: 39:97:ab:c6:62:fa:a5:d9:a1:41:9d:6b:4d:fd:f5:52:f0:91: 12:0b:11:7f:cf:46:e2:67:73:02:06:c1:2a:1b:b1:cf:cd:9f: 31:bc:b7:ed:f8:e5:8c:80:ec:d8:e4:9d:19:75:16:fa:1f:7b: 30:8d:e2:14:a5:28:68:15:a8:38:c7:1b:1d:b4:6c:b6:a7:bb: 76:5f:aa:c2:df:71:dd:d2:2e:78:e5:6e:ec:98:2b:69:cf:b8: 73:96:5b:5c:94:4e:35:be:6a:66:9b:91:69:d2:fc:9f:41:2c: 9f:85:69:e8 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI4NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ2RUZDQzZFN0RCQzdD QUY0MUM5QzdBMTFGQ0Q4MUY4QUZFQ0QzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfjylk1U6NbUhtDwl79IoJd7GUW5xIfHdDk5c/ePwgJc/qpwNk ugqjm0HznclwhYWZaqi29yTv1dWBxzH0FhIvDhLCqZ2K2Tm1XzhvtvRwve7frXUV zWsWFd4aSG1sVHdWKpUAUOXiHzsb7bCE15pdM3qt3YHP2Nu7lEzrR0cpaWA3uuGJ 6VfGEGJifmWfsUztDTC5vEcdhDVW1EJUeiP6na/jCKf/B4ijT81bZqeD4ZM4RhSI EAdxk8WSsPxRzhrJ21w+LIiedjkrT/ykOhaxau6cvpzUiefM9Axo8u3+/RBTl6rL +W08FKrDcI7UrYjpuUWqovQp7W+zzsuYWjfrAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQURu/Mbn28fK9BycehH82B+K/s0xcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1J1X01ibjI4Zks5QnljZWhIODJCLUtf czB4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSP8gwDQYJ KoZIhvcNAQELBQADggEBAAKHqZwRbpm52OxQg00Fi8HseyPTqkeqcS9nUDIcwQC5 q2LEqnNQzvN3suPyRjQR8YY+MYPiLvXjOzZwD0kusy80v39b4737J12EQB0gj8yc boxW2Qmf3hKo50nVnWlQ2eFNnNuSxZ7mx5xPJ+wil+aV0GD0mvSLjXumaGpJssy8 pBw80mUoTVBCMQaEXvn6wjmXq8Zi+qXZoUGda0399VLwkRILEX/PRuJncwIGwSob sc/NnzG8t+345YyA7NjknRl1FvofezCN4hSlKGgVqDjHGx20bLanu3ZfqsLfcd3S LnjlbuyYK2nPuHOWW1yUTjW+amabkWnS/J9BLJ+Faeg= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org