$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/pIqwevXAJfTNsAqbbWKTj1LXYRY.roa File: pIqwevXAJfTNsAqbbWKTj1LXYRY.roa (raw, json) Hash identifier: eoIT8t+0Sw48wqRknx6D54n6EeMUnuuFeWjn+ygsYOE= Subject key identifier: A4:8A:B0:7A:F5:C0:25:F4:CD:B0:0A:9B:6D:62:93:8F:52:D7:61:16 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D84 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pIqwevXAJfTNsAqbbWKTj1LXYRY.roa Signing time: Mon 15 Jan 2024 21:29:05 +0000 ROA not before: Mon 15 Jan 2024 21:29:05 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.203.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3460 (0xd84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:29:05 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A48AB07AF5C025F4CDB00A9B6D62938F52D76116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:e0:9e:64:74:24:47:43:ee:af:c0:bf:e0: 1e:1b:46:87:68:1b:11:c7:23:96:58:d5:56:ef:14: d8:5a:cf:2f:ea:f0:20:29:85:99:e8:9a:de:a3:75: 0b:17:f0:3e:ee:b0:c3:c2:cf:ef:cf:00:98:6a:7f: 65:ae:19:15:97:52:3f:0f:70:ec:71:0e:a2:b0:20: f5:38:c9:3b:b6:bc:dd:45:3b:37:53:3f:a9:68:ba: 01:b0:04:8f:78:70:9b:55:14:0a:79:5a:c5:79:7f: 94:a6:5c:c6:60:0e:2f:42:fc:e0:7a:46:2a:4a:2a: 5b:3c:8e:93:a0:4b:41:8e:fc:15:32:82:3b:fd:d8: bc:e9:bf:75:d4:d6:12:16:2a:2a:7c:6a:29:53:e1: a0:00:e2:d9:c3:c5:d6:54:21:09:42:94:c8:d9:c6: 19:f6:65:d1:62:28:52:50:af:43:c0:e0:04:e0:cd: a1:fa:83:db:69:07:67:4e:3c:d9:78:42:6f:5c:a5: e8:c5:7d:76:ff:f7:47:81:8c:87:0d:26:ba:17:95: 64:e6:aa:25:56:1a:5e:6c:0e:4b:48:eb:d5:ba:74: 73:bf:a0:cf:e2:4e:3d:c9:65:f6:44:a7:d7:44:8a: 48:99:cd:a4:ef:c2:1a:cc:1a:91:07:80:fe:89:e4: a5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8A:B0:7A:F5:C0:25:F4:CD:B0:0A:9B:6D:62:93:8F:52:D7:61:16 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pIqwevXAJfTNsAqbbWKTj1LXYRY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.20.0/22 Signature Algorithm: sha256WithRSAEncryption b3:ee:7a:3d:01:ea:72:ab:56:f8:a0:a3:3d:77:9f:52:ab:5a: a0:82:53:be:a4:64:39:e4:7e:c7:1b:d1:16:ba:49:10:f0:68: e0:0a:a2:62:c4:cc:eb:81:64:f2:16:05:4e:85:bf:e9:5c:fe: a1:bc:68:bf:f8:9a:b8:41:8b:9d:3f:79:37:79:3e:e3:89:ce: f5:e9:9d:01:d9:22:71:65:fb:97:6a:c3:13:fc:c2:20:8f:ad: 4c:5f:f7:66:6b:6e:0a:b7:dc:2f:18:11:43:4f:63:d9:0c:a8: 0f:b8:81:16:8c:02:cd:c4:be:25:30:ef:5b:62:d7:7d:61:8c: fe:ae:2b:29:0f:40:c9:f0:33:c5:c4:3f:c4:c2:9a:73:67:d6: 15:73:e3:69:6d:2f:e6:65:01:29:5a:ed:aa:df:bb:ea:92:2e: 06:e8:bc:58:94:70:de:cf:05:79:9f:13:c8:a2:d0:a1:0d:d6: 34:85:b3:ea:57:9c:5e:82:20:48:a4:ff:a2:12:25:39:99:da: c9:7c:ef:be:ac:7b:00:3d:19:a1:bb:b4:07:64:1c:c5:f9:d7: ce:0c:82:23:8f:85:2b:1b:77:e6:7d:51:25:e7:34:d7:48:24: c9:5f:d3:9e:92:7c:3f:36:2a:03:98:a4:09:7c:e5:57:71:f1: a0:75:70:d8 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI5MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE0OEFCMDdBRjVDMDI1 RjRDREIwMEE5QjZENjI5MzhGNTJENzYxMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvxOCeZHQkR0Pur8C/4B4bRodoGxHHI5ZY1VbvFNhazy/q8CAp hZnomt6jdQsX8D7usMPCz+/PAJhqf2WuGRWXUj8PcOxxDqKwIPU4yTu2vN1FOzdT P6lougGwBI94cJtVFAp5WsV5f5SmXMZgDi9C/OB6RipKKls8jpOgS0GO/BUygjv9 2Lzpv3XU1hIWKip8ailT4aAA4tnDxdZUIQlClMjZxhn2ZdFiKFJQr0PA4ATgzaH6 g9tpB2dOPNl4Qm9cpejFfXb/90eBjIcNJroXlWTmqiVWGl5sDktI69W6dHO/oM/i Tj3JZfZEp9dEikiZzaTvwhrMGpEHgP6J5KU5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUpIqwevXAJfTNsAqbbWKTj1LXYRYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3BJcXdldlhBSmZUTnNBcWJiV0tUajFM WFlSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyxQwDQYJ KoZIhvcNAQELBQADggEBALPuej0B6nKrVvigoz13n1KrWqCCU76kZDnkfscb0Ra6 SRDwaOAKomLEzOuBZPIWBU6Fv+lc/qG8aL/4mrhBi50/eTd5PuOJzvXpnQHZInFl +5dqwxP8wiCPrUxf92Zrbgq33C8YEUNPY9kMqA+4gRaMAs3EviUw71ti131hjP6u KykPQMnwM8XEP8TCmnNn1hVz42ltL+ZlASla7arfu+qSLgbovFiUcN7PBXmfE8ii 0KEN1jSFs+pXnF6CIEik/6ISJTmZ2sl8776sewA9GaG7tAdkHMX5184MgiOPhSsb d+Z9USXnNNdIJMlf056SfD82KgOYpAl85Vdx8aB1cNg= -----END CERTIFICATE-----Generated at Mon May 20 08:58:20 2024 by rpki-client on console-ams.rpki-client.org