$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/tdAgD7YCw14dwI68JYhgg_8TyrM.roa File: tdAgD7YCw14dwI68JYhgg_8TyrM.roa (raw, json) Hash identifier: hj1USJ5ku4DRFmx97xhn71JXKWFZ9bb7PZ1QJPc2zC8= Subject key identifier: B5:D0:20:0F:B6:02:C3:5E:1D:C0:8E:BC:25:88:60:83:FF:13:CA:B3 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D32 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tdAgD7YCw14dwI68JYhgg_8TyrM.roa Signing time: Mon 15 Jan 2024 21:25:14 +0000 ROA not before: Mon 15 Jan 2024 21:25:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7539 IP address blocks: 210.200.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:25:14 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B5D0200FB602C35E1DC08EBC25886083FF13CAB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:c8:90:88:68:f4:d9:cb:bd:cd:03:5b:f5: a6:f7:79:1a:cd:6f:cf:98:27:de:26:24:16:58:d1: ac:c3:e0:5a:3b:7d:b2:58:4a:d2:c8:36:ce:17:97: a1:56:c5:df:90:61:5a:86:63:28:65:61:9b:73:f2: 15:fd:0b:21:b0:cc:48:1a:75:82:dc:de:74:56:f3: 60:70:4e:fc:f8:d9:7d:63:e8:f8:aa:1e:59:a8:95: b7:db:28:53:47:88:21:a2:26:59:6a:e4:d9:33:d6: aa:35:c8:77:d3:05:03:b0:64:ba:e9:7a:77:f8:7c: 6f:46:d6:8f:4d:46:80:9f:89:37:f8:bd:76:0b:d3: dd:a2:a9:c7:8a:4d:dc:2b:90:b6:e5:00:9f:8a:ba: 9a:c6:73:56:97:40:bb:d3:21:65:9e:65:1f:ee:d4: f5:61:21:f9:1c:64:e5:17:d5:51:8b:b6:52:35:3c: 11:87:6e:01:df:7d:84:48:5b:15:97:42:60:56:6f: 8f:ab:b0:0e:a9:df:4a:b5:c4:9f:95:85:83:85:49: 74:fc:c9:28:a2:2f:a2:db:68:f5:cd:32:ff:07:60: 7f:3a:ab:ee:3b:dd:d8:03:cd:ff:fd:8a:08:e5:5e: 0e:da:60:ba:e0:8e:7b:43:fb:3a:8e:75:97:c0:ab: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D0:20:0F:B6:02:C3:5E:1D:C0:8E:BC:25:88:60:83:FF:13:CA:B3 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/tdAgD7YCw14dwI68JYhgg_8TyrM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.32.0/20 Signature Algorithm: sha256WithRSAEncryption b7:d8:d9:4e:e7:a4:d2:83:37:a8:34:3a:70:63:4d:90:7b:68: 52:6c:53:c0:dd:59:68:1c:bf:9d:f8:48:e8:46:f2:0c:35:49: 27:e8:25:e9:37:4a:c3:00:1d:7a:2e:5a:61:a9:30:9f:50:d7: 59:01:44:2a:02:de:17:40:d4:a3:58:0e:d6:c2:ca:cf:61:67: 29:13:bc:91:1e:3d:8f:68:f6:97:bc:54:3d:c8:23:6e:50:4f: 43:92:0a:0c:3a:aa:4f:ef:11:a6:d1:57:7b:9e:18:c1:20:99: ec:c1:86:16:b6:b7:53:e6:9e:3c:83:e8:67:1b:19:60:50:42: 13:9d:ab:7f:20:2c:e6:a1:2c:3f:81:33:72:d4:17:8d:8e:f1: 4a:03:6b:63:45:d4:5f:2c:79:11:f3:6b:c2:30:81:ef:f6:be: 61:a6:9a:81:27:ed:e9:18:2f:61:24:4c:1b:aa:6d:f9:1d:64: f7:96:f1:53:0d:fa:8d:2b:4b:b6:72:a4:b3:42:95:45:c7:f9: 68:2f:56:56:62:e3:52:ec:0f:80:2e:96:c8:4d:6d:66:c1:ee: a2:18:9b:31:7a:d4:ae:eb:6c:f3:de:9b:6e:a6:2f:27:d2:d1: 53:ed:e8:71:5f:d7:96:41:dc:c4:da:8e:f7:b4:a8:32:95:13: 47:9c:6b:dd -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI1MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI1RDAyMDBGQjYwMkMz NUUxREMwOEVCQzI1ODg2MDgzRkYxM0NBQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl7siQiGj02cu9zQNb9ab3eRrNb8+YJ94mJBZY0azD4Fo7fbJY StLINs4Xl6FWxd+QYVqGYyhlYZtz8hX9CyGwzEgadYLc3nRW82BwTvz42X1j6Piq HlmolbfbKFNHiCGiJllq5Nkz1qo1yHfTBQOwZLrpenf4fG9G1o9NRoCfiTf4vXYL 092iqceKTdwrkLblAJ+KuprGc1aXQLvTIWWeZR/u1PVhIfkcZOUX1VGLtlI1PBGH bgHffYRIWxWXQmBWb4+rsA6p30q1xJ+VhYOFSXT8ySiiL6LbaPXNMv8HYH86q+47 3dgDzf/9igjlXg7aYLrgjntD+zqOdZfAqwWfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUtdAgD7YCw14dwI68JYhgg/8TyrMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3RkQWdEN1lDdzE0ZHdJNjhKWWhnZ184 VHlyTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSyCAwDQYJ KoZIhvcNAQELBQADggEBALfY2U7npNKDN6g0OnBjTZB7aFJsU8DdWWgcv534SOhG 8gw1SSfoJek3SsMAHXouWmGpMJ9Q11kBRCoC3hdA1KNYDtbCys9hZykTvJEePY9o 9pe8VD3II25QT0OSCgw6qk/vEabRV3ueGMEgmezBhha2t1PmnjyD6GcbGWBQQhOd q38gLOahLD+BM3LUF42O8UoDa2NF1F8seRHza8Iwge/2vmGmmoEn7ekYL2EkTBuq bfkdZPeW8VMN+o0rS7ZypLNClUXH+WgvVlZi41LsD4AulshNbWbB7qIYmzF61K7r bPPem26mLyfS0VPt6HFf15ZB3MTajve0qDKVE0eca90= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:39 2024 by rpki-client on console-fra.rpki-client.org