$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/aR1uol9uFor5p5ul_gj-9WYxutg.roa File: aR1uol9uFor5p5ul_gj-9WYxutg.roa (raw, json) Hash identifier: tBMUCWeeBFA7CFWHwUcyaVKy3kaYcTp4EqC86y5ikuo= Subject key identifier: 69:1D:6E:A2:5F:6E:16:8A:F9:A7:9B:A5:FE:08:FE:F5:66:31:BA:D8 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C7E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aR1uol9uFor5p5ul_gj-9WYxutg.roa Signing time: Mon 15 Jan 2024 21:09:47 +0000 ROA not before: Mon 15 Jan 2024 21:09:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 210.200.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:47 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=691D6EA25F6E168AF9A79BA5FE08FEF56631BAD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:6a:d0:17:77:ff:73:04:11:28:45:42:cd: fc:a9:cd:9c:e5:51:9b:04:13:da:55:b1:e8:6c:04: cd:ac:8c:a9:6e:2e:f6:48:e4:4d:c6:bb:c3:23:7b: 0b:e2:d8:54:89:e6:be:08:64:30:62:7b:a0:3a:22: 33:73:97:68:a4:81:00:b5:72:72:2b:e1:c4:6d:73: d7:69:f2:01:3b:cf:8d:07:22:9d:9a:78:b6:b1:c6: 7d:ef:fc:f0:df:ab:c6:af:f3:86:97:de:64:1a:75: c6:00:cb:0e:e5:b5:41:5d:b7:e4:82:10:ed:dd:8f: e5:92:3d:3b:d1:c9:a9:17:94:9f:69:e5:33:b8:ec: 6d:59:b8:e1:bd:90:db:d7:74:a0:d0:21:fd:19:96: f1:f1:c6:72:e1:90:e2:c7:c0:02:ec:ec:19:9b:2c: b8:c3:7a:21:4f:48:8e:dd:51:7c:f4:a8:53:02:4b: 2d:65:6e:66:5a:02:93:9a:bb:94:57:0b:f2:a3:74: 85:9a:86:3d:39:8a:fb:21:b7:43:82:a2:98:aa:be: 22:ab:1c:b5:69:7f:ec:2e:f4:42:e0:ec:14:e0:dc: 23:c4:ec:53:9f:1c:17:4e:00:a7:2f:d5:50:fd:45: 18:3b:e7:05:ff:32:74:b6:f5:e4:69:97:b3:55:f8: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1D:6E:A2:5F:6E:16:8A:F9:A7:9B:A5:FE:08:FE:F5:66:31:BA:D8 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/aR1uol9uFor5p5ul_gj-9WYxutg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.64.0/18 Signature Algorithm: sha256WithRSAEncryption 9a:7c:b1:bd:66:3b:45:4f:8a:4d:b6:0a:95:18:b5:a8:24:95: 98:96:db:c6:ef:5a:3c:96:12:fe:80:1d:f9:00:f3:54:6f:a4: 28:b0:09:f8:6f:68:f2:2d:44:6a:b3:7c:18:f0:50:65:9c:f1: 8e:42:9e:5c:f5:5f:55:7f:33:77:82:7c:56:75:3d:66:71:d8: 6a:ae:d8:27:73:db:ae:50:7b:52:a4:ad:56:f1:ce:0f:90:56: ea:31:f3:13:4b:a2:b5:b6:e6:98:cb:e0:8b:be:67:cb:ec:f2: cc:31:8c:67:e8:9e:8a:97:e2:ac:7b:f2:55:ce:53:6a:ef:d2: 19:4e:7f:3f:09:e0:00:96:54:d3:1d:08:b4:47:33:2b:ef:de: fb:f2:c5:75:90:a5:6d:7d:f6:ea:8c:08:4b:47:3b:c6:09:02: b0:50:f7:7f:89:b4:21:45:dd:4f:c5:61:ac:2a:9b:54:26:c7: ee:bb:1c:dd:bf:28:b6:a1:a4:25:fb:01:8e:16:b1:f0:74:f6: c1:f4:0d:eb:3a:93:0b:1d:33:a0:0e:fd:0b:3f:d6:38:90:a0: 93:e3:ca:80:38:fa:bf:b0:d5:ad:31:2f:e6:8b:7a:ed:f1:73: d1:a4:9f:cb:4c:79:8e:68:97:76:e2:8e:8d:39:ba:2d:d8:72: 38:71:7e:f4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY5MUQ2RUEyNUY2RTE2 OEFGOUE3OUJBNUZFMDhGRUY1NjYzMUJBRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSgmrQF3f/cwQRKEVCzfypzZzlUZsEE9pVsehsBM2sjKluLvZI 5E3Gu8Mjewvi2FSJ5r4IZDBie6A6IjNzl2ikgQC1cnIr4cRtc9dp8gE7z40HIp2a eLaxxn3v/PDfq8av84aX3mQadcYAyw7ltUFdt+SCEO3dj+WSPTvRyakXlJ9p5TO4 7G1ZuOG9kNvXdKDQIf0ZlvHxxnLhkOLHwALs7BmbLLjDeiFPSI7dUXz0qFMCSy1l bmZaApOau5RXC/KjdIWahj05ivsht0OCopiqviKrHLVpf+wu9ELg7BTg3CPE7FOf HBdOAKcv1VD9RRg75wX/MnS29eRpl7NV+AaDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUaR1uol9uFor5p5ul/gj+9WYxutgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2FSMXVvbDl1Rm9yNXA1dWxfZ2otOVdZ eHV0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyEAwDQYJ KoZIhvcNAQELBQADggEBAJp8sb1mO0VPik22CpUYtagklZiW28bvWjyWEv6AHfkA 81RvpCiwCfhvaPItRGqzfBjwUGWc8Y5Cnlz1X1V/M3eCfFZ1PWZx2Gqu2Cdz265Q e1KkrVbxzg+QVuox8xNLorW25pjL4Iu+Z8vs8swxjGfonoqX4qx78lXOU2rv0hlO fz8J4ACWVNMdCLRHMyvv3vvyxXWQpW199uqMCEtHO8YJArBQ93+JtCFF3U/FYawq m1Qmx+67HN2/KLahpCX7AY4WsfB09sH0Des6kwsdM6AO/Qs/1jiQoJPjyoA4+r+w 1a0xL+aLeu3xc9Gkn8tMeY5ol3bijo05ui3YcjhxfvQ= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:43 2024 by rpki-client on console-ams.rpki-client.org