$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Z-uwah9lJ34O1m3rpnKdfbS5lE8.roa File: Z-uwah9lJ34O1m3rpnKdfbS5lE8.roa (raw, json) Hash identifier: jEvHXAKkp382pmqPaD5+Q/StCVL+MIHAHNBoyy8yTRQ= Subject key identifier: 67:EB:B0:6A:1F:65:27:7E:0E:D6:6D:EB:A6:72:9D:7D:B4:B9:94:4F Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DD2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z-uwah9lJ34O1m3rpnKdfbS5lE8.roa Signing time: Mon 15 Jan 2024 21:34:49 +0000 ROA not before: Mon 15 Jan 2024 21:34:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 124.219.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3538 (0xdd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:34:49 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=67EBB06A1F65277E0ED66DEBA6729D7DB4B9944F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:3a:c4:9a:a8:1f:69:95:aa:32:49:88:7a: ca:7f:6a:f6:f7:2c:2a:e1:13:40:a4:60:4b:51:8d: 35:cf:f7:15:c4:1d:ab:11:d9:c5:12:9e:38:cc:73: 37:fe:d5:65:4b:89:f9:da:58:45:1a:e1:ff:85:b5: ca:ed:cb:de:cf:fd:58:7b:61:77:50:b6:b8:36:d6: 0e:44:84:60:7a:22:87:c8:89:2e:2b:b2:72:f4:87: 04:78:a4:af:86:0c:4e:44:5e:3f:4f:fa:15:a2:fe: 53:e3:d1:1b:7d:7e:2f:22:94:4f:99:86:91:78:d7: 24:f9:70:e1:bf:0e:e0:1f:81:7c:d6:e7:4c:68:ea: 18:79:a2:c3:04:a6:8e:c8:53:21:51:af:e3:03:3c: ef:59:af:78:27:82:22:b8:01:0e:18:2e:0d:e1:6b: b9:5b:ce:80:b1:a2:49:1b:5c:93:c1:91:bc:9d:02: b4:c1:7e:10:a7:93:35:88:2c:89:f7:20:72:46:9f: be:4d:1e:7c:74:0d:2c:8d:c6:95:2f:fe:5a:0e:7e: 31:45:67:73:fb:19:ba:77:66:03:f6:b7:01:c3:2b: 7d:41:3a:19:9f:6a:8b:fa:24:5f:7e:55:2c:3a:a3: ac:e5:6e:d9:33:71:e2:0a:c2:b6:41:f4:01:d4:5f: 3e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EB:B0:6A:1F:65:27:7E:0E:D6:6D:EB:A6:72:9D:7D:B4:B9:94:4F X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z-uwah9lJ34O1m3rpnKdfbS5lE8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.219.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0c:af:52:b9:53:23:d0:1f:06:bc:d6:be:e6:09:78:a7:bb:b1: e4:ef:58:ab:dd:5d:47:8a:2b:10:f0:cb:e2:fa:88:ba:f1:9c: 90:f7:ae:4a:85:fd:65:6e:f7:6a:4a:a7:0b:aa:dd:6b:a3:47: 1d:d7:95:3a:83:2b:21:c7:89:b9:05:e1:31:22:ea:cf:ee:1b: 4f:b1:c5:40:88:c3:54:c8:0c:17:fb:5b:9d:65:fb:a0:ad:e8: 69:91:74:1b:45:4b:e7:c2:85:87:fc:b0:25:e0:a9:bc:11:04: fd:f9:9c:c6:49:4e:f6:51:e7:93:1f:fa:36:85:36:30:19:19: 64:93:2f:d1:ac:9c:d4:d5:3c:c1:88:c2:a9:30:bd:8b:61:38: d6:a1:48:d4:26:f8:92:64:f8:6a:ac:71:2c:91:4d:a0:17:4d: 7f:da:08:ed:7d:f2:e9:ab:7f:8d:d8:d5:11:85:d4:78:80:73: 8a:89:49:a1:1f:2f:f4:2a:92:60:c6:1c:6d:02:9b:f7:a5:e9: 7f:89:e0:26:ff:61:45:ac:7f:00:8f:da:38:be:fb:8e:63:7a: 32:21:08:90:d7:dc:dc:db:c9:5d:76:09:c3:e9:9c:d6:42:88: d4:6e:4e:10:70:bf:dc:6e:ba:d5:5c:56:3c:d3:83:29:61:ee: dc:7c:c8:ea -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDdIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM0NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY3RUJCMDZBMUY2NTI3 N0UwRUQ2NkRFQkE2NzI5RDdEQjRCOTk0NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDalDrEmqgfaZWqMkmIesp/avb3LCrhE0CkYEtRjTXP9xXEHasR 2cUSnjjMczf+1WVLifnaWEUa4f+Ftcrty97P/Vh7YXdQtrg21g5EhGB6IofIiS4r snL0hwR4pK+GDE5EXj9P+hWi/lPj0Rt9fi8ilE+ZhpF41yT5cOG/DuAfgXzW50xo 6hh5osMEpo7IUyFRr+MDPO9Zr3gngiK4AQ4YLg3ha7lbzoCxokkbXJPBkbydArTB fhCnkzWILIn3IHJGn75NHnx0DSyNxpUv/loOfjFFZ3P7Gbp3ZgP2twHDK31BOhmf aov6JF9+VSw6o6zlbtkzceIKwrZB9AHUXz5ZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZ+uwah9lJ34O1m3rpnKdfbS5lE8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1otdXdhaDlsSjM0TzFtM3JwbktkZmJT NWxFOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd82wAwDQYJ KoZIhvcNAQELBQADggEBAAyvUrlTI9AfBrzWvuYJeKe7seTvWKvdXUeKKxDwy+L6 iLrxnJD3rkqF/WVu92pKpwuq3WujRx3XlTqDKyHHibkF4TEi6s/uG0+xxUCIw1TI DBf7W51l+6Ct6GmRdBtFS+fChYf8sCXgqbwRBP35nMZJTvZR55Mf+jaFNjAZGWST L9GsnNTVPMGIwqkwvYthONahSNQm+JJk+GqscSyRTaAXTX/aCO198umrf43Y1RGF 1HiAc4qJSaEfL/QqkmDGHG0Cm/el6X+J4Cb/YUWsfwCP2ji++45jejIhCJDX3Nzb yV12CcPpnNZCiNRuThBwv9xuutVcVjzTgylh7tx8yOo= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:39 2024 by rpki-client on console-fra.rpki-client.org