$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dq5rxs3wN8dkig0EJ4ctMguE8ZQ.roa File: dq5rxs3wN8dkig0EJ4ctMguE8ZQ.roa (raw, json) Hash identifier: Oeyhas40XzwCAxF33H/rmOu7XezgOzxqF6Q3NMpuna0= Subject key identifier: 76:AE:6B:C6:CD:F0:37:C7:64:8A:0D:04:27:87:2D:32:0B:84:F1:94 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D82 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dq5rxs3wN8dkig0EJ4ctMguE8ZQ.roa Signing time: Mon 15 Jan 2024 21:29:02 +0000 ROA not before: Mon 15 Jan 2024 21:29:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.201.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3458 (0xd82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:29:02 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=76AE6BC6CDF037C7648A0D0427872D320B84F194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:88:74:63:55:18:b3:63:22:0a:20:8c:a5: 61:28:2f:0e:72:1e:b6:1d:a4:d5:93:c5:28:a5:f4: 88:77:53:72:65:d8:cd:79:7e:64:41:bf:c8:ca:11: 4d:8a:33:ce:17:6f:36:d1:ef:4c:ac:39:c3:ab:dc: ec:b8:3b:55:dc:d1:98:38:0d:b7:70:f0:5e:e3:cd: 22:56:73:4c:bd:1c:ac:36:68:71:35:73:83:ee:7e: 59:98:39:ac:cb:2c:91:fd:e6:3f:b5:57:ca:d5:21: f6:81:80:9a:11:7a:35:c9:13:50:de:52:a4:d8:fd: d5:0d:7b:12:02:7f:d6:d8:98:ed:2d:6c:01:54:80: f1:b8:0f:90:1d:3e:f0:71:f8:f9:5b:91:18:5d:7c: 2e:7d:81:3a:bc:18:f7:44:01:8e:e7:61:d4:38:a9: 5c:a9:25:4a:28:d7:d1:57:5d:3c:e3:c2:26:e8:98: 07:b9:c2:e7:c1:ca:56:0a:8b:4f:f6:e2:9c:15:44: 75:e0:4c:77:ad:44:f2:c7:01:c4:26:ac:68:75:7a: 3e:92:39:4e:5b:f1:74:db:dc:ff:4d:db:51:67:39: a6:21:12:8b:25:40:92:cf:9f:9a:b8:9f:a2:b9:3f: c0:3d:12:b8:02:4a:a8:0d:1f:2f:17:36:80:8a:2c: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AE:6B:C6:CD:F0:37:C7:64:8A:0D:04:27:87:2D:32:0B:84:F1:94 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dq5rxs3wN8dkig0EJ4ctMguE8ZQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.72.0/24 Signature Algorithm: sha256WithRSAEncryption c5:9c:7f:0b:a9:91:be:82:9f:1d:08:07:38:9c:8a:d7:6c:4d: 5e:f3:e2:f9:18:e1:3e:32:99:71:01:00:80:bb:92:c7:14:e6: 15:e5:71:c4:c6:fc:87:a8:f4:4c:36:47:87:ad:78:0d:2c:24: 16:a0:f6:83:d5:4f:e2:73:97:25:36:9e:9f:f0:66:4d:91:fa: 16:80:42:58:9a:c1:8d:63:e8:98:a2:45:db:e1:b2:fa:27:a9: 8d:33:b0:c7:2a:56:26:b4:48:55:da:7d:84:a3:fa:47:39:6f: 92:cf:82:34:d6:81:19:13:a0:25:73:ab:1e:e4:a8:a4:e8:6f: cc:6c:c3:4c:10:ca:f6:1c:ab:76:d6:b3:ec:4b:c3:3e:da:5d: 6d:b0:a5:fd:ee:8b:50:a4:bc:0c:af:cd:c0:9a:12:5b:95:bb: 5c:96:0f:f0:3b:ac:fd:b3:a5:9f:10:66:8a:8b:2e:9f:e8:91: 7d:33:21:33:b0:e1:b5:f9:a7:74:68:32:30:16:5f:9c:5a:f4: 46:18:1c:b0:71:0d:3a:ea:72:6a:0b:0e:a4:01:85:03:7b:ea: f8:3b:b4:4a:28:ef:0c:83:d6:d5:c7:9a:2c:56:9c:42:53:5c: 5b:0c:2e:0f:7a:3d:48:19:52:c3:e3:e0:62:2a:9b:bf:57:c9: b7:d3:c5:7e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI5MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc2QUU2QkM2Q0RGMDM3 Qzc2NDhBMEQwNDI3ODcyRDMyMEI4NEYxOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8xYh0Y1UYs2MiCiCMpWEoLw5yHrYdpNWTxSil9Ih3U3Jl2M15 fmRBv8jKEU2KM84XbzbR70ysOcOr3Oy4O1Xc0Zg4Dbdw8F7jzSJWc0y9HKw2aHE1 c4PuflmYOazLLJH95j+1V8rVIfaBgJoRejXJE1DeUqTY/dUNexICf9bYmO0tbAFU gPG4D5AdPvBx+PlbkRhdfC59gTq8GPdEAY7nYdQ4qVypJUoo19FXXTzjwibomAe5 wufBylYKi0/24pwVRHXgTHetRPLHAcQmrGh1ej6SOU5b8XTb3P9N21FnOaYhEosl QJLPn5q4n6K5P8A9ErgCSqgNHy8XNoCKLGJtAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUdq5rxs3wN8dkig0EJ4ctMguE8ZQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2RxNXJ4czN3Tjhka2lnMEVKNGN0TWd1 RThaUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyUgwDQYJ KoZIhvcNAQELBQADggEBAMWcfwupkb6Cnx0IBzicitdsTV7z4vkY4T4ymXEBAIC7 kscU5hXlccTG/Ieo9Ew2R4eteA0sJBag9oPVT+JzlyU2np/wZk2R+haAQliawY1j 6JiiRdvhsvonqY0zsMcqVia0SFXafYSj+kc5b5LPgjTWgRkToCVzqx7kqKTob8xs w0wQyvYcq3bWs+xLwz7aXW2wpf3ui1CkvAyvzcCaEluVu1yWD/A7rP2zpZ8QZoqL Lp/okX0zITOw4bX5p3RoMjAWX5xa9EYYHLBxDTrqcmoLDqQBhQN76vg7tEoo7wyD 1tXHmixWnEJTXFsMLg96PUgZUsPj4GIqm79XybfTxX4= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org