$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dgqsh8J_FgttOdE-Wl6GZmt_Nxc.roa File: dgqsh8J_FgttOdE-Wl6GZmt_Nxc.roa (raw, json) Hash identifier: gZH6wn4FpPZkLFEtv7zFMpsWzLwMZQAJz95NSikvw2c= Subject key identifier: 76:0A:AC:87:C2:7F:16:0B:6D:39:D1:3E:5A:5E:86:66:6B:7F:37:17 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D4C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dgqsh8J_FgttOdE-Wl6GZmt_Nxc.roa Signing time: Mon 15 Jan 2024 21:25:48 +0000 ROA not before: Mon 15 Jan 2024 21:25:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 203.79.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3404 (0xd4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:25:48 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=760AAC87C27F160B6D39D13E5A5E86666B7F3717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:28:d4:94:84:6d:22:dc:89:0c:97:5c:46: 28:86:2a:c9:66:e5:4c:30:f2:c6:d1:0e:49:23:1b: 1c:31:88:de:4a:6c:57:5a:16:d3:28:a0:87:2e:df: 33:49:74:97:fa:dc:da:68:f1:c2:12:76:f0:8c:fa: 07:ce:15:77:b3:90:6c:d8:67:5e:ba:d0:d1:2e:bf: ad:5d:51:c3:58:07:78:df:7f:ee:ab:8b:c7:60:23: 13:e9:b2:26:9b:23:26:cc:2d:42:ea:43:66:e7:41: 08:4f:af:46:6a:d7:d2:23:02:47:18:43:91:9b:ec: 46:ac:89:fc:c9:68:f3:a1:ab:35:70:45:c1:e3:67: 5c:68:b8:69:56:72:4d:46:bd:56:5a:38:0a:8f:ac: 4a:46:cf:35:bf:59:e5:b1:a6:9d:de:1d:63:5a:b0: 90:4a:37:2d:c0:f6:65:59:44:86:23:82:85:5c:85: 5b:d3:61:1e:92:41:0c:48:df:21:77:36:32:8a:60: be:d8:ce:fd:f6:18:b5:f8:24:f4:f7:e5:95:27:1c: e0:b1:93:86:72:46:85:6f:61:de:2a:4b:27:0d:61: 79:71:62:bc:d7:f3:64:e0:ca:aa:b1:b1:e6:19:66: f0:cb:32:6e:30:95:6e:d7:cc:7a:9a:ca:1a:35:56: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0A:AC:87:C2:7F:16:0B:6D:39:D1:3E:5A:5E:86:66:6B:7F:37:17 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dgqsh8J_FgttOdE-Wl6GZmt_Nxc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.251.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:c1:38:21:af:b8:2d:62:da:83:c8:78:5f:57:d6:e7:8e:a2: 2e:d4:7a:0d:a7:c4:15:63:5c:b7:fe:76:68:ae:4c:77:3a:fa: 2c:08:90:da:0a:c6:bc:5b:03:9e:a8:49:c6:37:49:ec:d6:93: 8f:36:d0:f0:03:f6:4d:35:a7:8c:88:0a:8a:9c:45:de:96:d7: 3d:5d:de:61:14:18:d5:fc:96:86:fd:54:e0:f5:d1:64:97:2d: ea:4d:ed:4a:50:57:39:63:42:4e:e9:a4:f8:b9:b8:5c:44:b5: 10:4a:41:78:53:4a:98:bc:eb:78:27:e5:3b:3e:69:09:17:93: 97:76:fd:4b:81:1b:52:07:8c:10:7e:5d:48:da:48:00:40:3e: a2:31:4f:da:68:65:cc:51:18:3c:9f:32:a7:dc:d4:89:26:f7: 25:48:48:f5:c1:b9:cb:c1:45:56:5b:3a:5b:ac:28:e4:ca:6a: 34:dd:9c:35:81:8b:fb:e3:ca:4e:88:70:88:ea:41:2a:be:d4: c8:a6:f2:85:73:ab:69:96:63:4c:eb:d8:36:cb:c9:32:60:82: d0:22:2b:70:d9:d3:39:17:43:e0:97:df:5f:55:e4:49:73:b6: dc:da:20:ec:20:82:73:85:74:d4:4e:43:77:ca:74:6e:40:5a: f7:42:db:43 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI1NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc2MEFBQzg3QzI3RjE2 MEI2RDM5RDEzRTVBNUU4NjY2NkI3RjM3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcEyjUlIRtItyJDJdcRiiGKslm5Uww8sbRDkkjGxwxiN5KbFda FtMooIcu3zNJdJf63Npo8cISdvCM+gfOFXezkGzYZ1660NEuv61dUcNYB3jff+6r i8dgIxPpsiabIybMLULqQ2bnQQhPr0Zq19IjAkcYQ5Gb7EasifzJaPOhqzVwRcHj Z1xouGlWck1GvVZaOAqPrEpGzzW/WeWxpp3eHWNasJBKNy3A9mVZRIYjgoVchVvT YR6SQQxI3yF3NjKKYL7Yzv32GLX4JPT35ZUnHOCxk4ZyRoVvYd4qSycNYXlxYrzX 82TgyqqxseYZZvDLMm4wlW7XzHqayho1VncRAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUdgqsh8J/FgttOdE+Wl6GZmt/NxcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2RncXNoOEpfRmd0dE9kRS1XbDZHWm10 X054Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLT/swDQYJ KoZIhvcNAQELBQADggEBAE3BOCGvuC1i2oPIeF9X1ueOoi7Ueg2nxBVjXLf+dmiu THc6+iwIkNoKxrxbA56oScY3SezWk4820PAD9k01p4yICoqcRd6W1z1d3mEUGNX8 lob9VOD10WSXLepN7UpQVzljQk7ppPi5uFxEtRBKQXhTSpi863gn5Ts+aQkXk5d2 /UuBG1IHjBB+XUjaSABAPqIxT9poZcxRGDyfMqfc1Ikm9yVISPXBucvBRVZbOlus KOTKajTdnDWBi/vjyk6IcIjqQSq+1Mim8oVzq2mWY0zr2DbLyTJggtAiK3DZ0zkX Q+CX319V5ElzttzaIOwggnOFdNROQ3fKdG5AWvdC20M= -----END CERTIFICATE-----Generated at Mon May 20 22:04:47 2024 by rpki-client on console-fra.rpki-client.org