$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/exzvNrHsxRovkL2EzR7w0AJ9fyc.roa File: exzvNrHsxRovkL2EzR7w0AJ9fyc.roa (raw, json) Hash identifier: 44l5R59Cl9O3ydoio9qzbsOVH64XhCIoCwdtUWqrPdU= Subject key identifier: 7B:1C:EF:36:B1:EC:C5:1A:2F:90:BD:84:CD:1E:F0:D0:02:7D:7F:27 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0E08 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/exzvNrHsxRovkL2EzR7w0AJ9fyc.roa Signing time: Wed 24 Jan 2024 06:16:35 +0000 ROA not before: Wed 24 Jan 2024 06:16:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 219.91.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3592 (0xe08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 24 06:16:35 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7B1CEF36B1ECC51A2F90BD84CD1EF0D0027D7F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:00:4e:c5:70:50:f2:09:13:38:78:9f:bc: 12:37:98:7f:9c:10:b0:fa:8a:e2:80:a7:e6:27:b2: a8:ab:4d:b9:74:4c:59:a3:69:0e:e7:de:83:60:0f: cc:7e:50:67:c8:02:76:78:01:ee:ba:e2:0a:b6:69: 2b:8c:1b:78:4a:0b:1c:ef:35:2c:16:b2:ab:b2:e3: af:56:17:77:6f:8f:7a:78:34:b6:01:2d:f1:b3:db: bd:6a:bb:14:c1:6c:f1:30:3a:37:e4:19:58:df:9c: ea:b2:e7:28:4c:8c:4c:44:ce:19:f0:1a:3b:28:5f: 87:0c:43:d6:9c:be:32:19:74:2d:b7:02:b0:ff:ec: 59:7c:a3:ab:d1:09:83:27:6d:07:cd:a5:27:4a:01: 5b:76:9c:57:0e:c8:4c:c9:70:20:75:2e:b5:bd:5e: da:c8:f0:2b:97:3c:69:eb:97:ed:30:3c:8b:6f:00: 71:f8:b1:8d:6f:09:08:74:4f:c3:f2:61:81:e7:26: 8b:d1:fb:52:a6:82:15:5f:3b:9b:5e:dc:39:72:db: c1:04:09:4e:e6:71:f1:b0:a0:d5:56:ce:80:05:bd: 20:cd:29:94:06:c6:41:66:8c:47:d1:fe:ac:fc:7d: c9:20:2e:a3:e1:d7:5c:08:bb:2a:10:d6:f4:97:77: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1C:EF:36:B1:EC:C5:1A:2F:90:BD:84:CD:1E:F0:D0:02:7D:7F:27 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/exzvNrHsxRovkL2EzR7w0AJ9fyc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.91.0.0/17 Signature Algorithm: sha256WithRSAEncryption 92:14:4e:fc:bc:08:10:9c:18:04:e4:45:e0:3d:0f:e2:66:50: 99:1a:87:12:2f:81:6d:85:4a:7f:0d:0f:d2:37:06:68:e0:99: bf:5a:5b:27:75:a7:d0:f4:7f:67:14:3e:65:6b:e1:0d:9d:72: 77:fb:10:a9:05:aa:41:b2:0e:9f:7d:9d:c7:13:70:05:31:69: 73:7a:ae:66:06:1b:13:56:6f:0a:c5:35:3e:90:69:83:3d:e8: 20:33:85:1d:18:ae:e3:34:ea:5f:6e:1c:de:39:d9:92:3a:63: 0c:15:e5:f5:b7:85:dc:e5:16:83:2d:fe:0d:a4:70:3f:74:6f: 4b:8a:ba:4c:e0:19:40:5e:2b:5d:2a:5d:62:a6:b1:c3:46:2f: 50:18:df:98:86:ce:d1:df:79:a8:ef:d7:e4:cd:f6:d5:ea:8a: d0:ab:dc:30:54:a1:5c:58:9b:14:be:15:b4:bd:0f:0c:30:f0: 06:92:9e:e8:85:ce:76:86:2a:d0:31:46:a0:db:20:3f:1d:94: 9b:e7:1b:7d:a2:73:06:30:1a:b6:24:f1:67:57:bb:a3:c2:75: f5:48:68:a3:66:8a:b0:eb:ac:59:18:c4:4a:a0:8c:f8:2c:47: c8:2a:82:8a:bc:9a:8b:af:4c:09:e9:ab:50:88:2e:66:b0:32: a6:6a:84:d1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDggwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMjQw NjE2MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdCMUNFRjM2QjFFQ0M1 MUEyRjkwQkQ4NENEMUVGMEQwMDI3RDdGMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUEABOxXBQ8gkTOHifvBI3mH+cELD6iuKAp+YnsqirTbl0TFmj aQ7n3oNgD8x+UGfIAnZ4Ae664gq2aSuMG3hKCxzvNSwWsquy469WF3dvj3p4NLYB LfGz271quxTBbPEwOjfkGVjfnOqy5yhMjExEzhnwGjsoX4cMQ9acvjIZdC23ArD/ 7Fl8o6vRCYMnbQfNpSdKAVt2nFcOyEzJcCB1LrW9XtrI8CuXPGnrl+0wPItvAHH4 sY1vCQh0T8PyYYHnJovR+1KmghVfO5te3Dly28EECU7mcfGwoNVWzoAFvSDNKZQG xkFmjEfR/qz8fckgLqPh11wIuyoQ1vSXdxHTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUexzvNrHsxRovkL2EzR7w0AJ9fycwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2V4enZOckhzeFJvdmtMMkV6Ujd3MEFK OWZ5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfbWwAwDQYJ KoZIhvcNAQELBQADggEBAJIUTvy8CBCcGATkReA9D+JmUJkahxIvgW2FSn8ND9I3 Bmjgmb9aWyd1p9D0f2cUPmVr4Q2dcnf7EKkFqkGyDp99nccTcAUxaXN6rmYGGxNW bwrFNT6QaYM96CAzhR0YruM06l9uHN452ZI6YwwV5fW3hdzlFoMt/g2kcD90b0uK ukzgGUBeK10qXWKmscNGL1AY35iGztHfeajv1+TN9tXqitCr3DBUoVxYmxS+FbS9 Dwww8AaSnuiFznaGKtAxRqDbID8dlJvnG32icwYwGrYk8WdXu6PCdfVIaKNmirDr rFkYxEqgjPgsR8gqgoq8mouvTAnpq1CILmawMqZqhNE= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org