$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/nwuF90ZQPZlD7VsxSaNP1caTPOE.roa File: nwuF90ZQPZlD7VsxSaNP1caTPOE.roa (raw, json) Hash identifier: h6g6WdIHMGqQysm/vxCjJ/MGzxKwg4IJ7sNSK6Gg2gI= Subject key identifier: 9F:0B:85:F7:46:50:3D:99:43:ED:5B:31:49:A3:4F:D5:C6:93:3C:E1 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0BB2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nwuF90ZQPZlD7VsxSaNP1caTPOE.roa Signing time: Fri 01 Sep 2023 08:50:53 +0000 ROA not before: Fri 01 Sep 2023 08:50:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9674 IP address blocks: 103.122.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Sep 1 08:50:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9F0B85F746503D9943ED5B3149A34FD5C6933CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:9f:53:8a:f7:e3:2c:5f:83:61:1c:86:ca: 7d:7c:6e:c7:90:8a:e3:23:18:16:8b:2d:5d:d1:1f: db:4f:61:f1:c3:d5:44:a3:57:e1:1c:ab:3f:bd:fb: 89:5a:eb:41:bf:6a:ff:e8:76:40:51:42:08:01:45: b3:1e:23:be:5f:c7:ee:8a:bf:bc:4e:d5:55:71:bc: e5:50:01:a1:22:93:e7:99:6b:53:3e:35:d8:76:e2: 96:28:ff:4a:83:ac:b8:fc:4b:12:6e:77:4f:f4:4a: f7:17:cb:ca:5c:60:8c:d0:92:e0:ea:c4:92:7c:e6: 11:2d:8e:2f:bf:51:a0:d1:7b:8a:7c:cc:35:33:8f: 5f:7b:7c:20:f1:15:b1:94:d5:42:59:9b:64:2a:98: 38:b4:6d:05:8c:c4:a9:77:5b:ea:a3:93:5a:5e:cc: af:71:c9:64:5c:0e:13:23:d8:91:97:1c:70:cf:77: 04:33:37:08:1e:b0:df:96:d4:04:49:1b:2e:33:e4: 76:54:ba:87:81:28:df:71:df:c6:8d:64:f1:c5:e4: 70:72:f9:35:9f:be:a1:ba:a9:fd:82:7e:a3:ed:39: a2:fc:e3:a8:99:19:d6:a2:9a:c0:e7:58:e7:05:8f: b9:89:0f:5a:c0:49:67:43:e3:b9:ff:df:f8:72:5d: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0B:85:F7:46:50:3D:99:43:ED:5B:31:49:A3:4F:D5:C6:93:3C:E1 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/nwuF90ZQPZlD7VsxSaNP1caTPOE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.122.148.0/22 Signature Algorithm: sha256WithRSAEncryption 34:33:d8:8a:e0:88:e9:0f:3a:0f:87:32:bb:d1:4c:72:77:2b: c2:e5:74:0d:80:00:d9:8a:d5:20:c8:a1:45:08:0d:a9:bd:34: 60:50:2c:ea:b9:21:eb:11:46:1a:76:40:28:fe:2a:e2:03:21: 0e:fe:27:f1:3d:17:b9:cf:75:99:0f:43:74:37:b8:8c:ed:c3: 83:19:41:ff:d3:4f:0f:f6:ac:69:ec:1f:4a:f4:44:1b:6e:ef: cc:cb:38:c7:9b:53:92:cb:88:64:de:ff:b7:84:64:cc:db:3e: c9:a2:e0:ce:00:40:81:b2:74:58:bd:12:6c:5f:c4:80:e8:05: 64:5a:b0:32:e1:68:0a:e9:61:42:82:be:37:7c:c7:c6:d5:02: d1:49:c7:c8:76:f9:c1:3c:2d:36:89:0d:10:6f:d9:c3:ee:3b: d0:51:74:bb:0e:5b:21:00:ff:15:57:62:fa:66:c8:fa:2c:00: 0f:d4:65:22:72:96:c7:ff:1d:43:90:f7:b6:eb:2a:54:0c:c7: 54:48:8e:5e:db:6c:1b:64:13:0d:fa:41:83:87:17:67:c0:74: 6e:ab:01:87:e9:3a:d9:5f:4a:0f:e2:8b:89:58:53:86:7f:33: 3a:f1:44:80:32:2e:4f:9f:f2:fb:24:1d:b6:be:7b:6d:06:dc: 37:26:41:ec -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yMzA5MDEw ODUwNTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlGMEI4NUY3NDY1MDNE OTk0M0VENUIzMTQ5QTM0RkQ1QzY5MzNDRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ1Z9TivfjLF+DYRyGyn18bseQiuMjGBaLLV3RH9tPYfHD1USj V+Ecqz+9+4la60G/av/odkBRQggBRbMeI75fx+6Kv7xO1VVxvOVQAaEik+eZa1M+ Ndh24pYo/0qDrLj8SxJud0/0SvcXy8pcYIzQkuDqxJJ85hEtji+/UaDRe4p8zDUz j197fCDxFbGU1UJZm2QqmDi0bQWMxKl3W+qjk1pezK9xyWRcDhMj2JGXHHDPdwQz NwgesN+W1ARJGy4z5HZUuoeBKN9x38aNZPHF5HBy+TWfvqG6qf2CfqPtOaL846iZ GdaimsDnWOcFj7mJD1rASWdD47n/3/hyXU9TAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUnwuF90ZQPZlD7VsxSaNP1caTPOEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL253dUY5MFpRUFpsRDdWc3hTYU5QMWNh VFBPRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnepQwDQYJ KoZIhvcNAQELBQADggEBADQz2IrgiOkPOg+HMrvRTHJ3K8LldA2AANmK1SDIoUUI Dam9NGBQLOq5IesRRhp2QCj+KuIDIQ7+J/E9F7nPdZkPQ3Q3uIztw4MZQf/TTw/2 rGnsH0r0RBtu78zLOMebU5LLiGTe/7eEZMzbPsmi4M4AQIGydFi9EmxfxIDoBWRa sDLhaArpYUKCvjd8x8bVAtFJx8h2+cE8LTaJDRBv2cPuO9BRdLsOWyEA/xVXYvpm yPosAA/UZSJylsf/HUOQ97brKlQMx1RIjl7bbBtkEw36QYOHF2fAdG6rAYfpOtlf Sg/ii4lYU4Z/MzrxRIAyLk+f8vskHba+e20G3DcmQew= -----END CERTIFICATE-----Generated at Mon May 20 08:58:20 2024 by rpki-client on console-ams.rpki-client.org