$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_iC0hQcDuA9P2YVvmPcSBMtUgyU.roa File: _iC0hQcDuA9P2YVvmPcSBMtUgyU.roa (raw, json) Hash identifier: FiHFMZ8zPnZkhdGrEXjNsS9oXac7FZZnQX7dBjc7xgk= Subject key identifier: FE:20:B4:85:07:03:B8:0F:4F:D9:85:6F:98:F7:12:04:CB:54:83:25 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DD4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_iC0hQcDuA9P2YVvmPcSBMtUgyU.roa Signing time: Mon 15 Jan 2024 21:34:52 +0000 ROA not before: Mon 15 Jan 2024 21:34:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 203.201.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3540 (0xdd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:34:52 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FE20B4850703B80F4FD9856F98F71204CB548325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:c4:b1:7d:76:26:be:2b:e0:9c:59:70:94: ce:82:2a:b7:bb:26:8f:ba:f3:f1:ec:98:f3:6d:8e: 22:06:56:d7:a0:fc:58:c4:f1:56:43:76:fe:d2:c5: e1:b1:47:d4:04:ac:ae:17:8e:c1:cd:64:7a:43:17: df:c4:85:5a:e1:fd:9c:3c:98:0a:9e:0f:74:08:c2: 31:ed:21:8e:6a:cf:b7:7e:4a:e1:ce:a2:68:60:56: 57:8f:28:ad:95:e7:fc:19:d4:b3:1d:c4:7e:42:2c: c4:c0:bf:f9:82:a1:9b:61:62:bd:c7:3c:f2:53:9d: bb:f0:49:5f:35:e2:d3:5f:90:e9:01:7b:69:eb:00: 7f:95:82:f3:8d:82:39:ad:7d:24:e1:90:40:2a:26: b1:b4:be:bb:51:36:c7:a2:f4:e3:8d:40:6a:8a:98: ef:99:9b:6c:42:b8:25:16:f7:6e:97:a0:45:db:c3: 82:db:61:bc:19:5f:92:3d:4c:32:57:1e:84:ea:11: 39:01:5a:84:14:9b:77:a0:ae:f6:98:df:87:1e:d1: 8d:60:1b:1c:f7:21:38:26:fe:56:cc:48:9b:0a:2f: c0:ea:d2:7f:03:1f:8f:92:0e:ff:a1:c6:ce:48:bc: 06:cc:44:f8:ee:e8:18:ff:30:54:79:da:26:1d:b9: 0e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:20:B4:85:07:03:B8:0F:4F:D9:85:6F:98:F7:12:04:CB:54:83:25 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_iC0hQcDuA9P2YVvmPcSBMtUgyU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.201.32.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:b9:ff:57:fe:50:c1:3b:cf:18:f9:cb:ff:d8:f5:30:bc:1d: bc:c8:e8:71:af:16:9e:06:86:b6:f6:87:20:cf:d2:99:ac:1c: 8a:56:49:41:e1:10:9a:34:61:9e:63:3d:3e:d6:68:98:51:31: f1:9b:21:cb:5b:73:3a:c7:b4:cc:e8:50:53:17:58:44:d3:8e: 4a:f4:75:3e:f0:84:f7:e9:62:bb:2b:2d:c3:b6:5b:e3:97:ec: 3e:51:29:39:f3:3f:d5:b9:b9:a8:89:dd:6b:ad:c5:49:52:8e: 97:81:fa:61:ce:c3:9a:5e:61:6a:a3:5f:7a:f9:93:84:ab:d1: 2e:3a:88:6c:f5:a8:07:fb:78:33:9a:54:72:da:39:6c:08:8b: 39:a1:c4:9e:47:73:12:06:ba:35:99:8d:c2:13:40:01:df:0a: bc:79:10:e9:b6:e8:05:e1:3a:dd:d1:25:33:af:17:d8:e4:6f: dd:70:0c:81:47:0a:04:27:45:23:e4:5b:0e:d6:05:12:b4:9c: 8e:fa:f5:04:17:f1:0f:ec:e1:aa:a5:9f:49:a2:a2:46:43:b5: c0:c5:fc:1b:47:ee:ee:45:31:94:6f:85:71:3c:d5:3c:30:c3: 83:92:aa:55:6c:ce:ee:97:6c:a4:04:0f:87:08:c6:bb:9e:41: 3d:21:be:82 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM0NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFMjBCNDg1MDcwM0I4 MEY0RkQ5ODU2Rjk4RjcxMjA0Q0I1NDgzMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhlcSxfXYmvivgnFlwlM6CKre7Jo+68/HsmPNtjiIGVteg/FjE 8VZDdv7SxeGxR9QErK4XjsHNZHpDF9/EhVrh/Zw8mAqeD3QIwjHtIY5qz7d+SuHO omhgVlePKK2V5/wZ1LMdxH5CLMTAv/mCoZthYr3HPPJTnbvwSV814tNfkOkBe2nr AH+VgvONgjmtfSThkEAqJrG0vrtRNsei9OONQGqKmO+Zm2xCuCUW926XoEXbw4Lb YbwZX5I9TDJXHoTqETkBWoQUm3egrvaY34ce0Y1gGxz3ITgm/lbMSJsKL8Dq0n8D H4+SDv+hxs5IvAbMRPju6Bj/MFR52iYduQ5FAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU/iC0hQcDuA9P2YVvmPcSBMtUgyUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL19pQzBoUWNEdUE5UDJZVnZtUGNTQk10 VWd5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLySAwDQYJ KoZIhvcNAQELBQADggEBAFy5/1f+UME7zxj5y//Y9TC8HbzI6HGvFp4Ghrb2hyDP 0pmsHIpWSUHhEJo0YZ5jPT7WaJhRMfGbIctbczrHtMzoUFMXWETTjkr0dT7whPfp YrsrLcO2W+OX7D5RKTnzP9W5uaiJ3WutxUlSjpeB+mHOw5peYWqjX3r5k4Sr0S46 iGz1qAf7eDOaVHLaOWwIizmhxJ5HcxIGujWZjcITQAHfCrx5EOm26AXhOt3RJTOv F9jkb91wDIFHCgQnRSPkWw7WBRK0nI769QQX8Q/s4aqln0miokZDtcDF/BtH7u5F MZRvhXE81Twww4OSqlVszu6XbKQED4cIxrueQT0hvoI= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org