$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Z44jXWmwwaZNespmG1AS-GNAnGk.roa File: Z44jXWmwwaZNespmG1AS-GNAnGk.roa (raw, json) Hash identifier: wm+TiSenTlGa6SUH5f6Jsb7QsuTXZ1SRCn+YGBD66go= Subject key identifier: 67:8E:23:5D:69:B0:C1:A6:4D:7A:CA:66:1B:50:12:F8:63:40:9C:69 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D14 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z44jXWmwwaZNespmG1AS-GNAnGk.roa Signing time: Mon 15 Jan 2024 21:24:37 +0000 ROA not before: Mon 15 Jan 2024 21:24:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 2404:0:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:24:37 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=678E235D69B0C1A64D7ACA661B5012F863409C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:44:c4:f6:3d:58:0b:96:41:45:9e:40:e1: de:1b:0d:d1:1c:74:78:39:f2:97:a1:23:cb:98:11: 26:17:b0:3d:a8:51:81:f9:38:32:86:0e:0b:3c:cd: a6:83:37:1b:ca:b4:85:1d:02:81:97:29:43:c9:e1: 55:0c:c2:f6:d2:64:fc:aa:02:6a:18:5e:2a:ce:16: 3f:2e:b4:e4:7e:e0:f1:2c:7d:fc:fe:b9:2a:11:ec: ff:65:1d:5d:11:0e:4c:86:96:40:f3:89:dc:c2:d7: d5:98:1e:e6:4e:a1:7c:2b:2d:01:61:4b:65:73:a4: 8e:c0:85:91:24:ef:9e:77:fe:91:ea:b5:d8:53:68: 53:4e:51:c5:75:4f:dc:8b:ad:7f:a3:e6:9d:7f:8a: a3:55:02:79:b0:ff:76:87:87:2d:8c:b0:73:ba:21: 6b:d3:74:ea:de:00:9d:62:c6:5d:be:84:92:25:de: 95:e3:24:49:00:d6:62:44:94:3b:b9:ee:03:46:8e: 3a:59:05:db:8d:6f:91:ff:03:5c:38:c8:87:25:ad: 42:f9:7c:3a:b2:e4:93:26:be:0d:b9:57:93:c2:5f: 3f:44:b7:c4:5e:ee:4d:3d:11:b9:58:a6:ef:22:1d: 49:b9:b8:79:7f:64:09:9f:a8:c0:57:7b:96:fb:5d: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8E:23:5D:69:B0:C1:A6:4D:7A:CA:66:1B:50:12:F8:63:40:9C:69 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Z44jXWmwwaZNespmG1AS-GNAnGk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 34:4c:c6:b1:b7:09:f5:44:b0:26:e8:12:db:50:d0:86:9b:e0: f5:5f:83:d8:42:da:9f:ad:8b:d0:cf:fd:38:8d:b8:66:47:fe: 9c:f7:cc:31:c4:1f:b2:21:17:2f:b2:c9:f5:b6:57:ef:64:b2: a9:d8:a4:05:3b:d4:3e:b2:44:df:5f:2c:64:b7:2c:41:a5:76: 1c:c5:6f:98:49:fe:f1:9a:86:6d:a0:76:92:52:08:6b:42:a4: 4f:9d:4d:2b:4f:65:60:76:0a:ec:af:46:3d:40:eb:04:18:40: 57:bd:8b:f6:96:73:b5:a8:dc:2f:e3:47:77:b3:a4:5e:d5:65: 41:6b:cf:f5:ce:61:b9:18:9c:71:75:48:af:3d:be:16:2b:61: a1:ba:fe:71:d3:ee:32:d5:33:20:f5:76:3f:dc:06:a2:af:71: e5:4b:bb:92:18:7f:1e:06:9e:dd:6c:e4:61:21:3c:b8:a8:71: d8:e7:ed:ad:e1:b2:55:d9:74:32:7d:fd:39:a3:af:78:3f:65: 7e:31:51:38:59:95:d1:e7:eb:7e:f2:47:4e:7a:05:29:4d:d8: 76:65:c3:32:65:2d:cb:d9:5a:e3:5a:a8:52:c2:0d:65:63:2c: 68:ac:d1:20:35:68:7b:fa:07:de:e0:e3:77:17:a2:0f:1e:a7: 4a:43:10:50 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI0MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY3OEUyMzVENjlCMEMx QTY0RDdBQ0E2NjFCNTAxMkY4NjM0MDlDNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdTETE9j1YC5ZBRZ5A4d4bDdEcdHg58pehI8uYESYXsD2oUYH5 ODKGDgs8zaaDNxvKtIUdAoGXKUPJ4VUMwvbSZPyqAmoYXirOFj8utOR+4PEsffz+ uSoR7P9lHV0RDkyGlkDzidzC19WYHuZOoXwrLQFhS2VzpI7AhZEk7553/pHqtdhT aFNOUcV1T9yLrX+j5p1/iqNVAnmw/3aHhy2MsHO6IWvTdOreAJ1ixl2+hJIl3pXj JEkA1mJElDu57gNGjjpZBduNb5H/A1w4yIclrUL5fDqy5JMmvg25V5PCXz9Et8Re 7k09EblYpu8iHUm5uHl/ZAmfqMBXe5b7Xe3bAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUZ44jXWmwwaZNespmG1AS+GNAnGkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1o0NGpYV213d2FaTmVzcG1HMUFTLUdO QW5Hay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBAAAIDAN BgkqhkiG9w0BAQsFAAOCAQEANEzGsbcJ9USwJugS21DQhpvg9V+D2ELan62L0M/9 OI24Zkf+nPfMMcQfsiEXL7LJ9bZX72SyqdikBTvUPrJE318sZLcsQaV2HMVvmEn+ 8ZqGbaB2klIIa0KkT51NK09lYHYK7K9GPUDrBBhAV72L9pZztajcL+NHd7OkXtVl QWvP9c5huRiccXVIrz2+Fithobr+cdPuMtUzIPV2P9wGoq9x5Uu7khh/Hgae3Wzk YSE8uKhx2OftreGyVdl0Mn39OaOveD9lfjFROFmV0efrfvJHTnoFKU3YdmXDMmUt y9la41qoUsINZWMsaKzRIDVoe/oH3uDjdxeiDx6nSkMQUA== -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org