$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/pGDwLsjXg57uX_D2k72qzZqHLxc.roa File: pGDwLsjXg57uX_D2k72qzZqHLxc.roa (raw, json) Hash identifier: B0qp8cd5w1j1AhIpYMIPgYCZOkvI0Mvtk0gdaHgfvHA= Subject key identifier: A4:60:F0:2E:C8:D7:83:9E:EE:5F:F0:F6:93:BD:AA:CD:9A:87:2F:17 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C60 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pGDwLsjXg57uX_D2k72qzZqHLxc.roa Signing time: Mon 15 Jan 2024 21:09:15 +0000 ROA not before: Mon 15 Jan 2024 21:09:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 203.79.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:15 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A460F02EC8D7839EEE5FF0F693BDAACD9A872F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e3:e9:97:d1:e8:1b:6d:d4:a4:d8:58:3a:9e: 72:d5:7a:77:fb:b8:db:16:26:0d:cd:f4:7e:11:ab: 97:de:39:e5:21:19:db:6e:c9:8e:03:a5:cf:e7:83: 66:e7:f8:df:fe:c1:05:19:16:c8:fd:22:db:6e:0b: a4:bb:43:a5:99:92:cd:14:5b:23:0d:45:54:9a:8f: 20:00:dc:57:37:bf:0e:f6:66:c5:c9:1e:a4:45:23: e6:c5:00:57:8c:86:ce:e4:dc:49:79:f7:9f:43:68: 55:25:04:dd:da:94:96:9d:84:06:a6:8b:d2:5a:c0: 7f:74:59:5e:25:3e:68:e8:0a:ac:96:d1:11:b5:ee: b5:9c:05:82:97:dc:fc:89:b9:e1:af:82:6c:02:0e: b4:f5:0b:78:d4:9f:0d:0a:61:33:b0:af:78:ec:75: 0e:0a:33:69:86:b6:bd:34:1f:84:23:e3:aa:fb:26: 40:d0:e3:54:38:df:1c:e2:9e:51:8e:11:d0:51:16: ac:aa:57:a0:76:73:4b:aa:09:97:1a:7d:5a:96:7f: 0a:7a:e3:af:d7:d5:3c:70:a0:84:8d:0e:a7:89:e0: 7b:c3:94:da:7c:63:18:9e:e5:c1:95:54:94:56:05: c6:8d:03:e4:77:0e:a0:9d:39:ed:74:5a:57:9e:10: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:60:F0:2E:C8:D7:83:9E:EE:5F:F0:F6:93:BD:AA:CD:9A:87:2F:17 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pGDwLsjXg57uX_D2k72qzZqHLxc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.208.0/21 Signature Algorithm: sha256WithRSAEncryption a5:c9:2c:ff:6d:c5:2d:87:b1:35:36:f8:60:c3:8a:e6:f7:17: 0f:ae:d9:fc:b3:20:56:02:a1:d0:51:44:94:66:e1:6e:da:df: c3:0a:46:c6:ed:b0:09:2b:b0:a0:57:3b:65:e6:cf:df:db:9d: 2e:ce:ac:e7:7a:36:0b:22:24:87:1e:f6:e0:f0:a5:2e:48:53: c0:3e:c3:7b:b1:e0:1b:d7:6d:5c:3e:05:72:1f:45:8d:7b:a2: 11:35:0a:64:fb:ec:3b:2b:93:ef:4a:a5:ef:45:37:36:d4:76: f6:74:d9:68:0a:c2:78:2e:c3:57:e3:5e:14:43:46:d3:37:4c: 2c:f9:ea:fb:2d:ba:20:a7:72:b3:a9:47:56:c5:cd:c9:f9:d4: cf:53:22:72:5e:1d:59:99:68:40:fb:6d:84:e5:2b:d0:9e:86: 51:5e:f1:64:0e:be:65:83:94:26:b1:a6:79:3c:36:52:92:89: 05:38:c1:27:e3:f7:50:9b:67:9d:7b:e3:2a:cc:5a:19:99:97: 7f:8e:62:8f:d3:a1:06:9c:86:11:62:31:4b:d4:fe:a9:80:bd: db:ec:3f:5c:91:de:b5:25:44:d1:c8:fb:48:83:da:8c:3e:90: e3:18:52:c9:20:fa:6d:6a:d8:0f:eb:e4:3a:f2:e8:02:6a:fc: c9:91:74:7c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE0NjBGMDJFQzhENzgz OUVFRTVGRjBGNjkzQkRBQUNEOUE4NzJGMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD54+mX0egbbdSk2Fg6nnLVenf7uNsWJg3N9H4Rq5feOeUhGdtu yY4Dpc/ng2bn+N/+wQUZFsj9IttuC6S7Q6WZks0UWyMNRVSajyAA3Fc3vw72ZsXJ HqRFI+bFAFeMhs7k3El5959DaFUlBN3alJadhAami9JawH90WV4lPmjoCqyW0RG1 7rWcBYKX3PyJueGvgmwCDrT1C3jUnw0KYTOwr3jsdQ4KM2mGtr00H4Qj46r7JkDQ 41Q43xzinlGOEdBRFqyqV6B2c0uqCZcafVqWfwp646/X1TxwoISNDqeJ4HvDlNp8 Yxie5cGVVJRWBcaNA+R3DqCdOe10WleeEOuJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUpGDwLsjXg57uX/D2k72qzZqHLxcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3BHRHdMc2pYZzU3dVhfRDJrNzJxelpx SEx4Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPLT9AwDQYJ KoZIhvcNAQELBQADggEBAKXJLP9txS2HsTU2+GDDiub3Fw+u2fyzIFYCodBRRJRm 4W7a38MKRsbtsAkrsKBXO2Xmz9/bnS7OrOd6NgsiJIce9uDwpS5IU8A+w3ux4BvX bVw+BXIfRY17ohE1CmT77Dsrk+9Kpe9FNzbUdvZ02WgKwnguw1fjXhRDRtM3TCz5 6vstuiCncrOpR1bFzcn51M9TInJeHVmZaED7bYTlK9CehlFe8WQOvmWDlCaxpnk8 NlKSiQU4wSfj91CbZ5174yrMWhmZl3+OYo/ToQachhFiMUvU/qmAvdvsP1yR3rUl RNHI+0iD2ow+kOMYUskg+m1q2A/r5Dry6AJq/MmRdHw= -----END CERTIFICATE-----Generated at Mon May 20 08:58:20 2024 by rpki-client on console-ams.rpki-client.org