$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Tu_XH8BK2DpToFcqaP0lSE4NqW4.roa File: Tu_XH8BK2DpToFcqaP0lSE4NqW4.roa (raw, json) Hash identifier: ORVJBhgZWUtZnV81qgPDUqVVTwXt/D0dCU8mV87d01w= Subject key identifier: 4E:EF:D7:1F:C0:4A:D8:3A:53:A0:57:2A:68:FD:25:48:4E:0D:A9:6E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C8A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Tu_XH8BK2DpToFcqaP0lSE4NqW4.roa Signing time: Mon 15 Jan 2024 21:10:00 +0000 ROA not before: Mon 15 Jan 2024 21:10:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 210.200.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:00 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4EEFD71FC04AD83A53A0572A68FD25484E0DA96E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:03:d9:02:70:3f:0a:ed:fd:ef:ac:dd:c7: e0:17:2c:be:93:df:da:68:f6:f1:c8:9b:fd:25:5e: bf:92:e4:6b:17:02:29:6a:67:72:22:82:e1:eb:00: db:ca:f1:ae:97:66:eb:f3:d4:10:9a:f4:19:9f:fb: d7:17:9e:19:9b:7b:6e:fd:4f:e7:d2:cf:66:9e:ba: c5:00:8c:a7:48:c4:01:6e:54:72:30:cc:18:da:a1: 3b:1b:b7:69:c7:3b:6c:4a:3b:04:c7:e6:58:e0:ad: 8c:61:38:5f:e6:ce:cf:cf:f7:92:e9:ec:bb:f1:39: f5:8b:d7:bd:24:5b:7f:3e:97:91:ba:23:09:2f:d9: 57:7e:4f:e3:a0:9a:ae:04:ac:5a:63:c6:b2:3a:7f: f6:89:59:56:60:3a:87:19:b3:20:1d:8b:93:6b:4d: 18:b1:b4:af:52:2e:62:39:12:bd:d0:06:fd:5a:73: 68:d8:09:f7:f5:59:3a:86:91:42:b7:c2:96:45:2d: dc:9d:de:e4:21:5d:26:05:22:6a:69:8c:21:a4:22: e7:2a:3f:d9:10:b1:d9:78:48:73:34:b7:b6:dd:17: 1e:77:26:b4:78:aa:fe:aa:b2:15:6a:f1:4e:05:8b: 3d:94:04:c8:a0:1e:13:e4:d7:0d:33:45:52:30:ca: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EF:D7:1F:C0:4A:D8:3A:53:A0:57:2A:68:FD:25:48:4E:0D:A9:6E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Tu_XH8BK2DpToFcqaP0lSE4NqW4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.106.0/24 Signature Algorithm: sha256WithRSAEncryption 42:3b:86:76:4e:c3:c6:95:d1:81:b5:f2:f5:5d:5f:c6:bf:7b: 23:30:2f:d8:8c:05:d1:fc:fe:ad:0d:ed:5b:bc:97:7a:45:6e: 62:b1:8f:5f:b6:39:fc:3f:82:98:e9:d2:0a:4e:f4:da:6e:42: b1:51:9b:ef:75:ad:2c:8b:6e:71:d8:d9:0d:6f:a2:7b:1e:93: ad:82:31:9d:9c:29:a6:89:9a:1b:60:53:40:0e:aa:b5:75:f8: ae:90:8a:63:0f:81:be:16:e5:50:48:71:fa:77:bf:e3:42:91: 8a:2f:d8:a9:1e:3d:36:9e:7e:c1:90:d7:d5:e1:ca:04:8e:66: e5:72:be:be:a3:83:a4:09:d0:05:70:da:6c:e5:bb:13:af:9a: e7:51:63:9b:12:61:bc:c2:0d:d1:44:86:86:9c:18:48:45:9e: 0c:be:19:4a:76:68:cc:be:b4:35:02:a1:34:a6:2e:10:9a:20: b2:b5:8f:95:58:59:e1:a6:db:5a:72:9d:30:4f:b6:cf:d2:7c: 3f:12:e5:0f:9f:c0:cc:5f:4e:f0:5d:d2:81:d0:6f:43:dc:da: ba:6c:a5:8b:10:a9:e1:14:02:57:40:b4:b2:70:b6:67:04:f7: 22:22:89:5b:67:3b:bd:a3:d9:a4:0d:7b:84:b3:1f:8f:bc:51: a4:62:28:2a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRFRUZENzFGQzA0QUQ4 M0E1M0EwNTcyQTY4RkQyNTQ4NEUwREE5NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYDgPZAnA/Cu3976zdx+AXLL6T39po9vHIm/0lXr+S5GsXAilq Z3IiguHrANvK8a6XZuvz1BCa9Bmf+9cXnhmbe279T+fSz2aeusUAjKdIxAFuVHIw zBjaoTsbt2nHO2xKOwTH5ljgrYxhOF/mzs/P95Lp7LvxOfWL170kW38+l5G6Iwkv 2Vd+T+Ogmq4ErFpjxrI6f/aJWVZgOocZsyAdi5NrTRixtK9SLmI5Er3QBv1ac2jY Cff1WTqGkUK3wpZFLdyd3uQhXSYFImppjCGkIucqP9kQsdl4SHM0t7bdFx53JrR4 qv6qshVq8U4Fiz2UBMigHhPk1w0zRVIwygYnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUTu/XH8BK2DpToFcqaP0lSE4NqW4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1R1X1hIOEJLMkRwVG9GY3FhUDBsU0U0 TnFXNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyGowDQYJ KoZIhvcNAQELBQADggEBAEI7hnZOw8aV0YG18vVdX8a/eyMwL9iMBdH8/q0N7Vu8 l3pFbmKxj1+2Ofw/gpjp0gpO9NpuQrFRm+91rSyLbnHY2Q1vonsek62CMZ2cKaaJ mhtgU0AOqrV1+K6QimMPgb4W5VBIcfp3v+NCkYov2KkePTaefsGQ19XhygSOZuVy vr6jg6QJ0AVw2mzluxOvmudRY5sSYbzCDdFEhoacGEhFngy+GUp2aMy+tDUCoTSm LhCaILK1j5VYWeGm21pynTBPts/SfD8S5Q+fwMxfTvBd0oHQb0Pc2rpspYsQqeEU AldAtLJwtmcE9yIiiVtnO72j2aQNe4SzH4+8UaRiKCo= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org