$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Zqzb4pl0-rLR7GbAq-WiQy-6VOQ.roa File: Zqzb4pl0-rLR7GbAq-WiQy-6VOQ.roa (raw, json) Hash identifier: ACb5Ulqsqu+HK3G4P7/efdLPqC4FKmPBVtVsjlv1xz0= Subject key identifier: 66:AC:DB:E2:99:74:FA:B2:D1:EC:66:C0:AB:E5:A2:43:2F:BA:54:E4 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D3C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Zqzb4pl0-rLR7GbAq-WiQy-6VOQ.roa Signing time: Mon 15 Jan 2024 21:25:28 +0000 ROA not before: Mon 15 Jan 2024 21:25:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 219.91.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3388 (0xd3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:25:28 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=66ACDBE29974FAB2D1EC66C0ABE5A2432FBA54E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:94:19:1e:aa:dc:75:87:5c:ba:73:a2:af: 11:bf:0d:da:2b:91:9e:31:d0:60:a7:b8:a6:88:73: ca:62:1a:2e:f0:41:3b:ab:49:24:e4:cf:6b:e8:15: 74:81:87:4a:ac:d0:c6:a2:17:cd:27:40:9c:fc:8f: 77:28:d7:7c:01:e7:e0:06:7a:c5:21:32:c5:5b:55: 0c:3e:f2:38:9d:2b:ec:d4:b5:59:01:a3:e1:de:b4: 9e:8f:6c:a7:dc:9f:f4:db:a2:f6:7a:63:f1:e1:24: 61:19:03:5c:03:33:63:19:fa:44:2d:8c:21:ff:96: 59:11:18:3a:e1:cb:cf:8b:5e:c9:3e:32:55:8f:ae: cb:b3:72:3a:13:de:f8:5d:46:ad:c5:61:11:a5:10: b2:8a:b0:5c:75:6c:2d:5f:f2:ec:c3:a7:f8:af:ac: 41:67:0c:a6:ca:ad:21:62:5c:3d:38:a0:8e:1b:26: 9a:f4:03:9d:47:61:7f:a8:d3:84:d3:35:b9:69:da: ec:2d:d6:5f:3f:d6:6d:af:a8:e6:79:48:9a:2b:24: 33:97:76:3d:af:9e:55:5e:a1:9a:48:2b:e7:29:8f: 32:c3:56:b4:17:cb:0c:02:5a:36:7d:94:ec:80:b8: 5a:bb:b3:92:6b:86:d0:3a:ff:59:e5:ad:a1:42:e7: cc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AC:DB:E2:99:74:FA:B2:D1:EC:66:C0:AB:E5:A2:43:2F:BA:54:E4 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Zqzb4pl0-rLR7GbAq-WiQy-6VOQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.0.0/18 Signature Algorithm: sha256WithRSAEncryption 85:bf:3b:ce:63:ae:83:3b:67:91:8e:9c:f3:b3:71:6a:8a:b1: 67:f0:e5:f3:65:7b:1a:ce:35:a9:1e:5c:56:d4:45:2b:34:a4: ce:9d:d2:63:a2:11:26:2e:38:2c:25:7b:ba:ff:bc:1b:b7:f4: 81:b5:f6:2c:25:f8:e5:b2:c4:b8:2b:69:8d:30:41:54:83:28: 97:8f:4f:b4:1d:a0:61:77:74:14:dc:d6:ec:29:ec:ce:05:67: bb:a6:15:d4:42:cf:7d:f2:73:fe:66:07:ab:23:91:bf:d4:22: cd:71:9e:64:b4:1f:87:bd:01:b1:33:3c:5c:33:52:58:d8:c7: 52:10:46:ee:b6:f1:61:91:ad:f5:25:23:57:19:c3:5c:3b:29: 53:69:23:e5:82:27:cb:2e:ae:96:94:b8:6f:0d:f4:f8:91:40: a2:50:dd:2b:51:45:e5:34:b8:a5:fd:52:96:9d:0e:64:61:02: 8a:57:fa:83:b2:14:b0:4b:98:4f:92:38:12:25:06:6b:61:fb: 47:51:76:0b:70:64:24:4a:8f:6e:33:46:b5:a0:dd:b2:b1:10: 88:8e:e2:be:39:55:59:16:36:47:8c:74:db:18:72:cd:6e:ea: 13:f9:4e:ff:d7:cc:8c:f0:fc:25:e7:60:64:3c:7e:21:df:75: 12:6d:98:6c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDTwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI1MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY2QUNEQkUyOTk3NEZB QjJEMUVDNjZDMEFCRTVBMjQzMkZCQTU0RTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBq5QZHqrcdYdcunOirxG/DdorkZ4x0GCnuKaIc8piGi7wQTur SSTkz2voFXSBh0qs0MaiF80nQJz8j3co13wB5+AGesUhMsVbVQw+8jidK+zUtVkB o+HetJ6PbKfcn/TbovZ6Y/HhJGEZA1wDM2MZ+kQtjCH/llkRGDrhy8+LXsk+MlWP rsuzcjoT3vhdRq3FYRGlELKKsFx1bC1f8uzDp/ivrEFnDKbKrSFiXD04oI4bJpr0 A51HYX+o04TTNblp2uwt1l8/1m2vqOZ5SJorJDOXdj2vnlVeoZpIK+cpjzLDVrQX ywwCWjZ9lOyAuFq7s5JrhtA6/1nlraFC58wdAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZqzb4pl0+rLR7GbAq+WiQy+6VOQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1pxemI0cGwwLXJMUjdHYkFxLVdpUXkt NlZPUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbbWwAwDQYJ KoZIhvcNAQELBQADggEBAIW/O85jroM7Z5GOnPOzcWqKsWfw5fNlexrONakeXFbU RSs0pM6d0mOiESYuOCwle7r/vBu39IG19iwl+OWyxLgraY0wQVSDKJePT7QdoGF3 dBTc1uwp7M4FZ7umFdRCz33yc/5mB6sjkb/UIs1xnmS0H4e9AbEzPFwzUljYx1IQ Ru628WGRrfUlI1cZw1w7KVNpI+WCJ8surpaUuG8N9PiRQKJQ3StRReU0uKX9Upad DmRhAopX+oOyFLBLmE+SOBIlBmth+0dRdgtwZCRKj24zRrWg3bKxEIiO4r45VVkW NkeMdNsYcs1u6hP5Tv/XzIzw/CXnYGQ8fiHfdRJtmGw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org