$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/kTYKNVjsK10haJSJhpmvco1IMVw.roa File: kTYKNVjsK10haJSJhpmvco1IMVw.roa (raw, json) Hash identifier: bFMj5mpqX9l4Ii/aajUtCVwtyKUQG4McdwWu2Q43iRo= Subject key identifier: 91:36:0A:35:58:EC:2B:5D:21:68:94:89:86:99:AF:72:8D:48:31:5C Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D2C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kTYKNVjsK10haJSJhpmvco1IMVw.roa Signing time: Mon 15 Jan 2024 21:25:07 +0000 ROA not before: Mon 15 Jan 2024 21:25:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 210.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3372 (0xd2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:25:07 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=91360A3558EC2B5D216894898699AF728D48315C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:b6:bc:07:8c:65:76:f0:3d:4d:7d:59:51: ac:6c:28:58:c4:07:66:a0:4d:02:45:a4:36:39:13: 07:73:39:37:35:33:6d:cd:3d:fe:0c:73:2d:06:10: 4b:01:32:c8:5f:c3:15:19:9b:0a:f8:04:4c:df:46: 1a:f5:1a:40:eb:d4:e7:54:20:09:ef:6d:9a:60:50: e2:d8:7c:4a:99:4a:46:a4:34:c0:7f:c5:c6:f6:e4: 93:de:1a:71:16:e1:97:25:77:06:fa:0c:e7:df:7a: fe:e3:b6:e7:f9:28:23:50:ea:43:8b:3e:9f:69:45: a7:7e:6b:4d:2a:77:c4:e8:05:e4:65:34:99:db:1f: d9:3e:f9:f7:d7:76:d4:3a:3f:0d:90:c1:1d:21:4c: 9a:39:39:15:4c:48:a5:ec:9c:15:20:d4:27:40:6d: 32:9e:df:96:9a:71:0d:38:cf:2b:b7:3e:e8:05:47: 72:1f:30:c9:aa:cc:3c:64:f1:ac:79:29:12:50:c7: 16:da:e4:0f:22:77:d2:0f:58:62:cb:6a:cb:34:f3: cd:fc:fb:ac:d1:71:f8:39:15:91:6f:0d:21:b6:9e: 91:9f:63:d5:9c:d1:50:7f:ad:b3:12:ba:c3:65:3b: 13:64:88:44:0c:22:af:48:d7:39:76:a9:48:2c:ca: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:36:0A:35:58:EC:2B:5D:21:68:94:89:86:99:AF:72:8D:48:31:5C X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/kTYKNVjsK10haJSJhpmvco1IMVw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5f:1b:83:2f:b1:77:53:96:12:5a:1b:74:f5:67:46:70:2c:82: 27:7b:95:55:b7:d0:c7:25:03:36:1f:59:e3:1c:4b:0d:bf:82: 28:17:26:24:06:32:d2:37:2b:a1:c0:a9:6e:f7:ac:0c:6d:5d: 99:e0:2a:0e:a9:86:9c:b7:d4:e2:55:1e:b4:06:83:9d:83:2b: 1d:2a:6e:8c:4e:50:60:15:88:9b:e5:0a:9d:c4:c1:0b:e6:91: 86:4f:95:82:66:4f:76:13:f2:1e:04:cd:cd:39:09:f9:0e:25: 04:b1:a1:42:d3:f0:b8:3b:51:e5:2b:cf:da:21:e6:86:d7:a0: d0:01:3f:46:49:4d:f0:59:e7:dc:cd:ef:9e:39:f6:e5:5c:12: c2:24:0d:f1:84:80:55:be:e3:30:87:d0:56:d6:2f:3e:6d:e8: f0:a4:3e:0c:bc:5a:53:5d:76:e6:b0:f6:2a:8c:e1:e2:02:0b: 2a:60:d0:24:2a:07:6b:1c:dd:68:ae:a9:ed:02:ac:a5:42:f9: 80:63:73:cf:98:59:fa:66:e4:73:75:42:04:ba:63:35:6e:97: 3f:c7:38:99:a2:6b:38:9c:aa:9f:6d:63:8d:cd:3d:6f:e8:87: 81:9d:df:bc:81:13:52:16:c7:6c:95:8d:6c:a9:0e:d8:d5:04: 8e:c9:b4:fa -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDSwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI1MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkxMzYwQTM1NThFQzJC NUQyMTY4OTQ4OTg2OTlBRjcyOEQ0ODMxNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN+7a8B4xldvA9TX1ZUaxsKFjEB2agTQJFpDY5EwdzOTc1M23N Pf4Mcy0GEEsBMshfwxUZmwr4BEzfRhr1GkDr1OdUIAnvbZpgUOLYfEqZSkakNMB/ xcb25JPeGnEW4Zcldwb6DOffev7jtuf5KCNQ6kOLPp9pRad+a00qd8ToBeRlNJnb H9k++ffXdtQ6Pw2QwR0hTJo5ORVMSKXsnBUg1CdAbTKe35aacQ04zyu3PugFR3If MMmqzDxk8ax5KRJQxxba5A8id9IPWGLLass08838+6zRcfg5FZFvDSG2npGfY9Wc 0VB/rbMSusNlOxNkiEQMIq9I1zl2qUgsyji/AgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUkTYKNVjsK10haJSJhpmvco1IMVwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2tUWUtOVmpzSzEwaGFKU0pocG12Y28x SU1Wdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDSVTANBgkq hkiG9w0BAQsFAAOCAQEAXxuDL7F3U5YSWht09WdGcCyCJ3uVVbfQxyUDNh9Z4xxL Db+CKBcmJAYy0jcrocCpbvesDG1dmeAqDqmGnLfU4lUetAaDnYMrHSpujE5QYBWI m+UKncTBC+aRhk+VgmZPdhPyHgTNzTkJ+Q4lBLGhQtPwuDtR5SvP2iHmhteg0AE/ RklN8Fnn3M3vnjn25VwSwiQN8YSAVb7jMIfQVtYvPm3o8KQ+DLxaU1125rD2Kozh 4gILKmDQJCoHaxzdaK6p7QKspUL5gGNzz5hZ+mbkc3VCBLpjNW6XP8c4maJrOJyq n21jjc09b+iHgZ3fvIETUhbHbJWNbKkO2NUEjsm0+g== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:43 2024 by rpki-client on console-ams.rpki-client.org