$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iSdIGltMy-DEwKGZT_dA_EinrHk.roa File: iSdIGltMy-DEwKGZT_dA_EinrHk.roa (raw, json) Hash identifier: /mIEKxvcc1uaxkwb40jDqDh95G9uuZOOFtPZbht5RqE= Subject key identifier: 89:27:48:1A:5B:4C:CB:E0:C4:C0:A1:99:4F:F7:40:FC:48:A7:AC:79 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C8E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iSdIGltMy-DEwKGZT_dA_EinrHk.roa Signing time: Mon 15 Jan 2024 21:10:04 +0000 ROA not before: Mon 15 Jan 2024 21:10:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 210.200.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3214 (0xc8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:04 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8927481A5B4CCBE0C4C0A1994FF740FC48A7AC79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:f8:6f:f1:54:5b:10:6a:e5:9f:5a:f5:a6: c6:39:ab:ff:35:95:1e:60:58:18:3e:a7:2c:f5:93: ab:4d:cf:84:79:da:ee:ce:9b:3c:7d:07:f7:c6:90: 25:d4:90:d1:3c:7d:7a:bd:a9:e6:74:dc:c5:79:f9: 44:be:ee:cf:73:aa:0d:cf:89:b3:d5:ff:48:c2:99: 7c:5e:98:9d:e6:83:ef:d2:7e:f2:2b:cb:d5:7f:85: b7:f5:3a:5e:4d:f3:47:bf:27:4f:d5:89:55:97:1d: bc:94:67:31:86:a4:05:94:f0:28:4e:f4:b8:2a:b0: 11:a4:22:f6:46:c8:14:45:93:2c:aa:eb:ad:14:c5: 5b:ad:c0:27:20:9f:a0:0d:4f:ad:88:8b:de:84:ed: 8e:e4:67:f4:4c:42:9c:9c:be:39:29:b9:c2:b5:f1: 6e:0a:bb:04:03:45:ed:e3:37:93:e6:69:c7:00:77: 81:73:c9:26:5b:6e:2d:00:89:3c:e6:ba:21:0c:16: c2:a6:46:16:b6:61:4d:50:a7:ee:cc:57:16:41:a5: bb:e5:16:aa:9f:97:f4:de:5d:78:18:70:09:ae:18: 3c:b0:cf:7d:76:f7:b9:49:61:2a:63:fd:b1:aa:0b: 52:f0:cf:f7:7a:c2:28:87:8c:11:4b:12:64:ae:ab: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:27:48:1A:5B:4C:CB:E0:C4:C0:A1:99:4F:F7:40:FC:48:A7:AC:79 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iSdIGltMy-DEwKGZT_dA_EinrHk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.128.0/18 Signature Algorithm: sha256WithRSAEncryption 5d:73:ef:08:36:a7:31:8e:ce:82:f6:09:bd:5b:43:69:12:3f: c3:e9:33:0a:b9:9d:b8:ae:27:57:78:cb:93:a8:2f:5c:d6:69: f8:70:cb:99:f8:84:e9:7d:4c:2b:24:0e:ef:d1:68:1c:76:9b: 64:0e:b8:e1:b0:83:8f:85:e8:c5:cf:1e:63:11:b0:16:e6:02: e1:98:51:e0:88:99:7a:0a:94:bb:c5:2e:72:58:65:b4:ba:3b: 74:fc:6f:bf:81:a4:10:0b:8a:2d:cf:c3:5e:c6:a1:16:22:8d: 58:fb:8b:7b:e5:a0:c4:82:24:0c:1d:7c:fb:cc:63:cf:25:91: 00:a1:63:c9:5e:57:44:79:66:dd:68:06:b0:f9:ee:57:ac:d5: 66:94:9d:ec:5d:a5:fe:a0:38:a6:9f:47:10:07:c7:9e:2d:cb: fc:70:d0:1f:a5:8f:f2:8f:46:75:cf:50:92:07:88:57:34:eb: 4c:1b:44:d4:2d:1c:57:92:fc:48:f9:95:9f:25:b5:66:05:75: 72:10:2b:de:2a:81:7f:98:1a:5e:56:84:fa:53:3c:2f:2c:ac: b1:93:9e:08:81:3e:98:75:21:e9:ec:a1:76:90:ea:b0:67:93: ce:ab:ac:ad:08:71:19:e4:0b:82:6e:42:b4:2d:9b:53:63:3e: 08:92:49:9d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg5Mjc0ODFBNUI0Q0NC RTBDNEMwQTE5OTRGRjc0MEZDNDhBN0FDNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtY/hv8VRbEGrln1r1psY5q/81lR5gWBg+pyz1k6tNz4R52u7O mzx9B/fGkCXUkNE8fXq9qeZ03MV5+US+7s9zqg3PibPV/0jCmXxemJ3mg+/SfvIr y9V/hbf1Ol5N80e/J0/ViVWXHbyUZzGGpAWU8ChO9LgqsBGkIvZGyBRFkyyq660U xVutwCcgn6ANT62Ii96E7Y7kZ/RMQpycvjkpucK18W4KuwQDRe3jN5PmaccAd4Fz ySZbbi0AiTzmuiEMFsKmRha2YU1Qp+7MVxZBpbvlFqqfl/TeXXgYcAmuGDywz312 97lJYSpj/bGqC1Lwz/d6wiiHjBFLEmSuq24LAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUiSdIGltMy+DEwKGZT/dA/EinrHkwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2lTZElHbHRNeS1ERXdLR1pUX2RBX0Vp bnJIay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyIAwDQYJ KoZIhvcNAQELBQADggEBAF1z7wg2pzGOzoL2Cb1bQ2kSP8PpMwq5nbiuJ1d4y5Oo L1zWafhwy5n4hOl9TCskDu/RaBx2m2QOuOGwg4+F6MXPHmMRsBbmAuGYUeCImXoK lLvFLnJYZbS6O3T8b7+BpBALii3Pw17GoRYijVj7i3vloMSCJAwdfPvMY88lkQCh Y8leV0R5Zt1oBrD57les1WaUnexdpf6gOKafRxAHx54ty/xw0B+lj/KPRnXPUJIH iFc060wbRNQtHFeS/Ej5lZ8ltWYFdXIQK94qgX+YGl5WhPpTPC8srLGTngiBPph1 IensoXaQ6rBnk86rrK0IcRnkC4JuQrQtm1NjPgiSSZ0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org