$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/TYTG3OqCFO4w61C__AtWpFGMjJE.roa File: TYTG3OqCFO4w61C__AtWpFGMjJE.roa (raw, json) Hash identifier: /J7aREFV692E9N4KEXIgSHY8NM6xC/Y2d2B4CuWNCc0= Subject key identifier: 4D:84:C6:DC:EA:82:14:EE:30:EB:50:BF:FC:0B:56:A4:51:8C:8C:91 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C5C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TYTG3OqCFO4w61C__AtWpFGMjJE.roa Signing time: Mon 15 Jan 2024 21:09:11 +0000 ROA not before: Mon 15 Jan 2024 21:09:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131142 IP address blocks: 203.79.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3164 (0xc5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:11 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4D84C6DCEA8214EE30EB50BFFC0B56A4518C8C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:1d:55:30:9e:cd:c8:39:7a:af:8d:4d:c6: ba:b5:4d:83:9f:e4:65:0e:ac:59:15:69:9f:df:ea: 0e:3e:ee:d0:23:0f:f9:f7:64:b6:e7:83:a5:b7:7b: 71:79:d0:f1:63:3f:6b:fc:8c:8d:81:db:79:bf:7c: f8:ee:a0:a0:e6:e1:88:1c:2b:74:4c:c8:15:a3:79: ee:a2:c2:ef:02:93:7d:f8:ca:7a:39:8f:f7:fb:c6: 30:cd:55:6f:ac:e8:fa:27:b5:a2:c2:19:ba:92:d0: 61:62:f8:8a:c4:66:d2:69:fa:a3:dc:62:90:97:fb: 70:ff:b2:d1:8b:fd:e8:96:f6:60:56:58:30:02:b2: b6:95:e5:a8:89:2e:f3:cb:0b:5f:6b:e1:a8:b1:a8: 58:53:35:2c:85:ac:70:53:d5:97:55:68:a4:e3:59: 80:2a:ac:f0:7d:d6:46:f7:40:a0:66:eb:98:6f:53: f6:33:1f:26:91:93:3f:3c:7c:ad:95:2e:31:7e:44: c1:e5:70:25:31:39:74:4d:71:37:27:ba:bb:f2:a1: 71:d5:8c:49:14:6f:e7:19:37:4c:a0:48:db:9d:23: eb:31:56:6b:95:5c:f8:ee:ba:96:be:64:9b:2e:1b: 0e:bc:02:8d:3c:fd:63:6b:5b:b7:02:fb:98:52:2c: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:84:C6:DC:EA:82:14:EE:30:EB:50:BF:FC:0B:56:A4:51:8C:8C:91 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/TYTG3OqCFO4w61C__AtWpFGMjJE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.204.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:1b:87:03:10:ab:79:76:45:c8:60:ea:57:57:1d:ff:4c:6d: 18:8f:3e:72:45:10:8f:11:2f:7b:32:50:a4:b4:40:7b:e6:6c: af:2a:44:61:cb:a0:99:59:e0:8c:60:7e:03:dc:d8:1d:b9:65: 04:2e:5d:e4:9d:7d:99:43:12:58:45:08:95:d9:47:18:b6:83: 2a:bb:02:ef:aa:48:52:68:e9:bc:2d:02:6d:41:eb:d0:ec:30: f5:da:5e:06:df:d4:99:0a:73:d3:b7:34:c7:c8:2d:26:8c:a8: 50:60:44:33:37:3b:ad:de:9b:45:37:55:fb:69:7c:f0:a3:3a: b0:62:ec:c7:11:0d:b6:de:e9:b0:9f:69:44:f9:e3:3a:25:ac: 07:25:3b:7d:11:b5:06:1a:a2:d9:a2:01:7c:5d:62:bb:8e:ae: ad:01:5e:1e:64:8d:22:dc:22:47:6a:c7:bf:0f:ec:23:66:fd: 80:af:eb:39:3a:4d:a7:ba:a5:04:93:5c:ed:fe:81:b0:62:61: 5d:35:73:56:37:7b:b7:16:95:56:fd:06:bc:44:88:7d:b4:02: ee:cf:4d:48:6c:f9:82:33:7a:44:7b:d4:9a:cf:3b:d5:d9:68: 29:d2:58:52:86:c4:b2:18:bf:e6:a2:ba:01:b5:bd:e3:da:d0: 25:dc:a3:c2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDFwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDREODRDNkRDRUE4MjE0 RUUzMEVCNTBCRkZDMEI1NkE0NTE4QzhDOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8jx1VMJ7NyDl6r41Nxrq1TYOf5GUOrFkVaZ/f6g4+7tAjD/n3 ZLbng6W3e3F50PFjP2v8jI2B23m/fPjuoKDm4YgcK3RMyBWjee6iwu8Ck334yno5 j/f7xjDNVW+s6PontaLCGbqS0GFi+IrEZtJp+qPcYpCX+3D/stGL/eiW9mBWWDAC sraV5aiJLvPLC19r4aixqFhTNSyFrHBT1ZdVaKTjWYAqrPB91kb3QKBm65hvU/Yz HyaRkz88fK2VLjF+RMHlcCUxOXRNcTcnurvyoXHVjEkUb+cZN0ygSNudI+sxVmuV XPjuupa+ZJsuGw68Ao08/WNrW7cC+5hSLDkpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUTYTG3OqCFO4w61C//AtWpFGMjJEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1RZVEczT3FDRk80dzYxQ19fQXRXcEZH TWpKRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLT8wwDQYJ KoZIhvcNAQELBQADggEBAEsbhwMQq3l2Rchg6ldXHf9MbRiPPnJFEI8RL3syUKS0 QHvmbK8qRGHLoJlZ4IxgfgPc2B25ZQQuXeSdfZlDElhFCJXZRxi2gyq7Au+qSFJo 6bwtAm1B69DsMPXaXgbf1JkKc9O3NMfILSaMqFBgRDM3O63em0U3VftpfPCjOrBi 7McRDbbe6bCfaUT54zolrAclO30RtQYaotmiAXxdYruOrq0BXh5kjSLcIkdqx78P 7CNm/YCv6zk6Tae6pQSTXO3+gbBiYV01c1Y3e7cWlVb9BrxEiH20Au7PTUhs+YIz ekR71JrPO9XZaCnSWFKGxLIYv+aiugG1vePa0CXco8I= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org