$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iOS42_h0w3gPuUrz1QE9bgW1lFw.roa File: iOS42_h0w3gPuUrz1QE9bgW1lFw.roa (raw, json) Hash identifier: MCD8fq3r+Lla/SypB66V4TS9Bj5pgtUcyS0LVcMMbmw= Subject key identifier: 88:E4:B8:DB:F8:74:C3:78:0F:B9:4A:F3:D5:01:3D:6E:05:B5:94:5C Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C86 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iOS42_h0w3gPuUrz1QE9bgW1lFw.roa Signing time: Mon 15 Jan 2024 21:09:55 +0000 ROA not before: Mon 15 Jan 2024 21:09:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 210.200.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:55 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=88E4B8DBF874C3780FB94AF3D5013D6E05B5945C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:76:c9:da:97:7c:5a:41:d1:90:98:3c:41:5c: 6a:d0:42:47:9a:44:e0:80:80:6a:e6:63:5d:ae:02: ee:2b:50:7a:1e:86:be:44:2c:5c:6d:f9:e3:11:c6: 04:74:3d:a8:fd:7d:11:f8:17:cd:c8:1c:f5:2f:d7: f8:c8:9b:9b:b9:c8:a5:fb:67:26:04:a3:08:17:b5: c8:fa:e6:f6:52:a5:86:b2:d7:24:1c:3c:d7:6e:4b: 0e:9d:cd:20:3e:80:f0:0f:9b:54:71:23:c4:a9:a6: 81:15:de:2f:cb:c2:36:50:a6:4d:51:68:38:31:8f: c2:27:8c:49:3c:48:3e:f0:0f:af:9f:bd:e1:5e:d5: 39:dd:cf:23:b1:5c:5c:ae:24:cf:34:63:bb:f3:c4: a8:73:b9:1e:ef:df:89:b9:a5:13:b5:00:fc:7c:a6: 86:52:0e:1c:ac:c0:d8:c0:43:15:6c:d6:63:6d:9d: f8:9f:dc:6b:b0:13:18:77:94:1e:b4:fb:4b:0d:30: cb:52:cb:ef:b7:22:b2:a4:87:e3:fe:69:bd:5d:7c: bc:05:2b:38:3c:6d:de:6d:5e:11:58:74:50:ab:fb: 2a:70:a3:41:ec:8f:57:a2:fa:55:4a:73:b4:12:0d: ba:e7:74:c6:8f:a3:3e:13:ac:ea:55:f3:b2:cf:41: a5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E4:B8:DB:F8:74:C3:78:0F:B9:4A:F3:D5:01:3D:6E:05:B5:94:5C X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iOS42_h0w3gPuUrz1QE9bgW1lFw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.83.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:9f:1a:e7:6d:2e:74:f2:7e:13:c4:87:b1:24:84:a2:60:f7: 7d:5d:d5:56:bb:91:f0:ef:c1:c5:e4:5a:ac:50:b9:e5:bd:b8: 35:c9:f6:d5:78:a2:53:21:86:c0:f9:66:42:b5:eb:e4:40:a4: ba:f4:c9:1d:8d:9f:65:fe:3d:59:3c:81:0f:a0:eb:16:65:42: be:f7:87:3b:b2:f6:41:a9:03:13:a8:e9:c5:83:51:b4:38:e8: 10:82:0e:62:61:31:7b:76:97:a8:45:17:b5:be:7a:fc:6e:cc: 50:06:d9:c1:44:63:27:d7:a8:88:16:ee:b9:e9:4d:ea:4b:14: 99:07:b6:ce:67:91:41:74:b9:3a:24:5a:dc:cd:5e:3a:fc:f4: ea:fe:8e:29:1e:55:2b:92:24:86:37:79:71:f6:3d:ec:2f:88: 53:50:77:98:07:57:b6:50:e0:ad:70:20:79:b4:a4:bb:87:b1: d4:89:ee:c1:ee:49:06:c1:58:67:4a:c5:b7:08:a9:f7:63:6e: 64:1e:c9:22:d5:a6:77:46:1a:23:b3:ae:ea:3d:15:46:62:24: a3:70:64:a7:29:0f:0d:89:89:8f:b4:67:ac:9b:3d:71:87:3c: 81:4f:46:48:98:1e:04:d2:15:ef:fe:4f:de:b5:a2:42:71:b2: 10:e7:e9:ea -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg4RTRCOERCRjg3NEMz NzgwRkI5NEFGM0Q1MDEzRDZFMDVCNTk0NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCidsnal3xaQdGQmDxBXGrQQkeaROCAgGrmY12uAu4rUHoehr5E LFxt+eMRxgR0Paj9fRH4F83IHPUv1/jIm5u5yKX7ZyYEowgXtcj65vZSpYay1yQc PNduSw6dzSA+gPAPm1RxI8SppoEV3i/LwjZQpk1RaDgxj8InjEk8SD7wD6+fveFe 1TndzyOxXFyuJM80Y7vzxKhzuR7v34m5pRO1APx8poZSDhyswNjAQxVs1mNtnfif 3GuwExh3lB60+0sNMMtSy++3IrKkh+P+ab1dfLwFKzg8bd5tXhFYdFCr+ypwo0Hs j1ei+lVKc7QSDbrndMaPoz4TrOpV87LPQaWfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUiOS42/h0w3gPuUrz1QE9bgW1lFwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2lPUzQyX2gwdzNnUHVVcnoxUUU5YmdX MWxGdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADSyFMwDQYJ KoZIhvcNAQELBQADggEBAAufGudtLnTyfhPEh7EkhKJg931d1Va7kfDvwcXkWqxQ ueW9uDXJ9tV4olMhhsD5ZkK16+RApLr0yR2Nn2X+PVk8gQ+g6xZlQr73hzuy9kGp AxOo6cWDUbQ46BCCDmJhMXt2l6hFF7W+evxuzFAG2cFEYyfXqIgW7rnpTepLFJkH ts5nkUF0uTokWtzNXjr89Or+jikeVSuSJIY3eXH2PewviFNQd5gHV7ZQ4K1wIHm0 pLuHsdSJ7sHuSQbBWGdKxbcIqfdjbmQeySLVpndGGiOzruo9FUZiJKNwZKcpDw2J iY+0Z6ybPXGHPIFPRkiYHgTSFe/+T961okJxshDn6eo= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:43 2024 by rpki-client on console-ams.rpki-client.org