$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/nfNniIRbxvm2Jb5QaW6RHFMpuWg.roa File: nfNniIRbxvm2Jb5QaW6RHFMpuWg.roa (raw, json) Hash identifier: A505BDGr73WTN0Vk/PyP0eW/eo+lo6QhTqx4j6lbtL8= Subject key identifier: 9D:F3:67:88:84:5B:C6:F9:B6:25:BE:50:69:6E:91:1C:53:29:B9:68 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C4E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nfNniIRbxvm2Jb5QaW6RHFMpuWg.roa Signing time: Mon 15 Jan 2024 21:08:57 +0000 ROA not before: Mon 15 Jan 2024 21:08:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 203.207.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:08:57 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9DF36788845BC6F9B625BE50696E911C5329B968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:36:4e:96:7d:dc:30:0b:aa:df:f3:f2:36: ad:42:02:fb:62:96:48:01:0e:2f:da:bd:b0:ee:f9: ce:69:38:56:78:28:8c:11:a0:ee:9d:50:66:98:47: 82:29:b8:20:cf:b2:07:6e:cd:e8:11:67:61:51:d7: 1e:4d:e5:be:ee:11:e6:ec:c6:cc:fe:67:ca:c7:4c: b6:45:54:37:b3:0f:ee:d6:b9:18:7c:32:fb:59:ab: 3a:c3:76:1a:58:e5:8f:b5:86:24:e4:f8:d2:96:dd: 3b:62:0f:3d:14:f5:d8:82:c2:0e:b0:0c:cf:0b:b8: ff:14:c5:96:24:31:f9:c5:48:b4:2d:bd:6b:47:3a: 80:ae:ed:6c:21:8c:f1:d6:50:3a:d0:f6:1f:86:37: 34:c6:92:0f:ae:f2:6f:eb:be:72:74:1d:fd:d4:ad: 86:ea:c9:12:fe:ac:a1:fc:bd:49:c3:27:81:ef:d3: 71:f7:dc:e7:42:90:12:8c:cc:1e:e6:2f:e7:f8:2f: 94:62:d6:7d:bc:e1:0c:40:54:fc:a8:ce:f0:14:fd: 47:a3:87:ed:49:43:5a:2e:60:9a:f0:df:4b:ec:c5: 7e:f4:7c:12:12:10:6e:d5:84:8e:bd:95:78:e1:4c: 80:33:17:3e:13:0b:f0:9c:ca:dc:fa:c6:46:c2:63: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F3:67:88:84:5B:C6:F9:B6:25:BE:50:69:6E:91:1C:53:29:B9:68 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nfNniIRbxvm2Jb5QaW6RHFMpuWg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.207.44.0/22 Signature Algorithm: sha256WithRSAEncryption bb:6a:bd:32:66:c7:e9:9f:1e:48:d1:3f:e5:e8:0c:c3:0c:a6: 3c:c4:fd:eb:25:6d:6d:49:56:43:d3:54:db:4a:45:a8:ca:78: bf:da:d9:76:74:f7:a1:65:ff:1a:9e:44:72:18:cc:72:1b:4b: ba:37:dd:61:e8:15:62:a3:68:f7:c2:18:70:d2:69:66:0b:b2: 30:6e:7b:f7:9d:79:96:b8:74:8a:44:e2:c4:ce:57:9a:bb:44: 54:0c:4f:55:33:a5:b6:8c:7a:00:0a:87:a8:c5:c2:1f:3c:38: 89:25:a3:9d:7e:b8:a8:e5:63:1c:52:e1:e8:87:89:5a:1c:05: 0a:7a:53:39:db:bf:c0:19:60:1c:51:55:5c:e4:07:28:8d:6b: 68:20:8f:70:53:c4:00:82:a7:ce:80:46:08:99:07:d3:c3:6e: aa:22:c8:50:a9:80:70:d3:d4:06:f3:72:ca:b5:8f:4c:02:4a: c7:fc:eb:2a:e9:44:dd:e0:6f:fc:12:f9:c5:4a:2b:3e:56:95: c6:08:f9:3a:cb:4b:ed:3e:82:c8:b5:14:1e:b5:ba:79:46:7d: 5b:77:ab:d3:31:be:f3:84:43:a0:a5:53:be:66:47:db:44:4b: 40:16:94:53:83:02:46:01:83:9b:ab:9b:47:9d:3f:a5:9a:73: cb:30:61:70 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA4NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlERjM2Nzg4ODQ1QkM2 RjlCNjI1QkU1MDY5NkU5MTFDNTMyOUI5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC35TZOln3cMAuq3/PyNq1CAvtilkgBDi/avbDu+c5pOFZ4KIwR oO6dUGaYR4IpuCDPsgduzegRZ2FR1x5N5b7uEebsxsz+Z8rHTLZFVDezD+7WuRh8 MvtZqzrDdhpY5Y+1hiTk+NKW3TtiDz0U9diCwg6wDM8LuP8UxZYkMfnFSLQtvWtH OoCu7WwhjPHWUDrQ9h+GNzTGkg+u8m/rvnJ0Hf3UrYbqyRL+rKH8vUnDJ4Hv03H3 3OdCkBKMzB7mL+f4L5Ri1n284QxAVPyozvAU/Uejh+1JQ1ouYJrw30vsxX70fBIS EG7VhI69lXjhTIAzFz4TC/Ccytz6xkbCY33tAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUnfNniIRbxvm2Jb5QaW6RHFMpuWgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL25mTm5pSVJieHZtMkpiNVFhVzZSSEZN cHVXZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLzywwDQYJ KoZIhvcNAQELBQADggEBALtqvTJmx+mfHkjRP+XoDMMMpjzE/eslbW1JVkPTVNtK RajKeL/a2XZ096Fl/xqeRHIYzHIbS7o33WHoFWKjaPfCGHDSaWYLsjBue/edeZa4 dIpE4sTOV5q7RFQMT1UzpbaMegAKh6jFwh88OIklo51+uKjlYxxS4eiHiVocBQp6 Uznbv8AZYBxRVVzkByiNa2ggj3BTxACCp86ARgiZB9PDbqoiyFCpgHDT1Abzcsq1 j0wCSsf86yrpRN3gb/wS+cVKKz5WlcYI+TrLS+0+gsi1FB61unlGfVt3q9MxvvOE Q6ClU75mR9tES0AWlFODAkYBg5urm0edP6Wac8swYXA= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org