$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Shj-ctTJVI3cQ5uL24F-O70GT-4.roa File: Shj-ctTJVI3cQ5uL24F-O70GT-4.roa (raw, json) Hash identifier: +ZPWCVd5iVsL+saF2eo12LuNI6KLawmR2M2N5B+p/Fs= Subject key identifier: 4A:18:FE:72:D4:C9:54:8D:DC:43:9B:8B:DB:81:7E:3B:BD:06:4F:EE Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D6C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Shj-ctTJVI3cQ5uL24F-O70GT-4.roa Signing time: Mon 15 Jan 2024 21:26:31 +0000 ROA not before: Mon 15 Jan 2024 21:26:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 22787 IP address blocks: 210.58.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3436 (0xd6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:26:31 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4A18FE72D4C9548DDC439B8BDB817E3BBD064FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a4:aa:9e:10:6f:fc:36:ca:34:1c:44:4d:8c: d1:3e:e2:9f:15:b7:a3:8c:49:67:8c:a9:d9:7d:79: 53:4c:31:2a:a7:96:02:63:01:91:15:77:4d:33:91: 1c:40:92:86:17:3f:e0:fc:13:4e:bb:eb:2a:19:11: af:2f:e7:8c:a8:86:a8:d9:2e:fe:bb:dc:07:b9:3b: 76:c8:79:3f:85:59:65:77:29:de:5f:21:da:eb:9b: ac:c3:63:68:ce:93:25:ea:1e:d1:e8:99:5d:6d:c2: 5e:c3:f1:f2:4a:a7:87:0e:ea:dd:83:13:b0:09:bd: b5:f1:07:86:53:71:52:91:17:da:75:52:93:71:1a: 09:2a:51:be:da:62:da:03:cd:bc:a2:8e:a9:02:9a: 50:21:3d:78:7a:a5:93:b9:2e:9d:d5:8a:a0:96:74: 69:23:7b:de:bd:fb:ac:91:1c:ea:a0:be:89:74:c4: 9a:f8:dc:e3:1e:23:93:d5:7d:06:b1:62:b1:6f:da: 4a:52:a4:c6:8b:d9:f0:dd:61:4a:bb:20:f8:c1:c5: 34:ac:15:ba:26:7c:e5:ec:30:91:77:53:65:82:c9: 1e:a1:5a:60:06:40:39:39:25:c8:c3:dc:84:b7:91: de:1f:ab:34:c4:db:68:62:dd:54:f5:9f:7e:82:55: 80:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:18:FE:72:D4:C9:54:8D:DC:43:9B:8B:DB:81:7E:3B:BD:06:4F:EE X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Shj-ctTJVI3cQ5uL24F-O70GT-4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.58.91.0/24 Signature Algorithm: sha256WithRSAEncryption 65:0c:21:4d:89:2f:af:c6:a7:9d:7d:d2:ac:a3:ab:bc:79:37: 3c:e1:02:30:de:48:b6:d5:19:61:0c:59:38:e1:5a:a5:af:a0: b6:26:b1:9b:92:82:14:2b:d2:36:6e:99:ad:c9:8d:f9:80:f6: cc:0e:aa:ac:12:48:c5:37:d6:51:b3:0c:85:9c:7a:87:ba:67: 07:c0:f6:20:90:62:22:93:a9:b7:14:d1:c5:c1:41:64:c1:7b: 41:54:99:03:3d:a9:b3:1a:16:d9:1f:f9:ad:a8:93:9a:e2:b1: 9d:21:92:3e:ec:58:f2:03:4d:49:58:7e:77:19:9f:fa:60:65: e2:96:23:ae:49:cb:ba:08:ed:ed:4c:8f:cf:80:cd:fe:b0:a3: ed:91:5a:f3:13:04:47:de:ce:6b:48:61:5b:8a:dd:7a:8f:ef: c7:99:4f:02:87:87:ac:f1:6e:90:17:c9:31:12:26:38:9c:f9: cb:69:1b:9d:03:34:2e:ba:6e:52:cc:27:33:b8:03:8a:b8:ec: 88:6a:c8:29:62:ce:68:9e:a9:45:8b:c6:7d:9b:b1:b8:5a:fa: c5:60:a0:8a:a0:16:e6:bc:3c:d8:61:72:11:24:23:f3:ee:d6: 63:08:68:a4:b0:8e:76:a7:83:4f:c1:57:95:14:20:77:a3:35: 75:2e:45:0e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI2MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRBMThGRTcyRDRDOTU0 OEREQzQzOUI4QkRCODE3RTNCQkQwNjRGRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDppKqeEG/8Nso0HERNjNE+4p8Vt6OMSWeMqdl9eVNMMSqnlgJj AZEVd00zkRxAkoYXP+D8E0676yoZEa8v54yohqjZLv673Ae5O3bIeT+FWWV3Kd5f Idrrm6zDY2jOkyXqHtHomV1twl7D8fJKp4cO6t2DE7AJvbXxB4ZTcVKRF9p1UpNx GgkqUb7aYtoDzbyijqkCmlAhPXh6pZO5Lp3ViqCWdGkje969+6yRHOqgvol0xJr4 3OMeI5PVfQaxYrFv2kpSpMaL2fDdYUq7IPjBxTSsFbomfOXsMJF3U2WCyR6hWmAG QDk5JcjD3IS3kd4fqzTE22hi3VT1n36CVYCjAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUShj+ctTJVI3cQ5uL24F+O70GT+4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Noai1jdFRKVkkzY1E1dUwyNEYtTzcw R1QtNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSOlswDQYJ KoZIhvcNAQELBQADggEBAGUMIU2JL6/Gp5190qyjq7x5NzzhAjDeSLbVGWEMWTjh WqWvoLYmsZuSghQr0jZuma3JjfmA9swOqqwSSMU31lGzDIWceoe6ZwfA9iCQYiKT qbcU0cXBQWTBe0FUmQM9qbMaFtkf+a2ok5risZ0hkj7sWPIDTUlYfncZn/pgZeKW I65Jy7oI7e1Mj8+Azf6wo+2RWvMTBEfezmtIYVuK3XqP78eZTwKHh6zxbpAXyTES Jjic+ctpG50DNC66blLMJzO4A4q47IhqyClizmieqUWLxn2bsbha+sVgoIqgFua8 PNhhchEkI/Pu1mMIaKSwjnang0/BV5UUIHejNXUuRQ4= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org