$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/umIYLBWH0AIHcLKb4pMIYYOi9O8.roa File: umIYLBWH0AIHcLKb4pMIYYOi9O8.roa (raw, json) Hash identifier: zf7BVLgDzR9AZ5cW0SCDVPBd7a2f3U5sHIP9i+zSX+4= Subject key identifier: BA:62:18:2C:15:87:D0:02:07:70:B2:9B:E2:93:08:61:83:A2:F4:EF Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C68 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/umIYLBWH0AIHcLKb4pMIYYOi9O8.roa Signing time: Mon 15 Jan 2024 21:09:24 +0000 ROA not before: Mon 15 Jan 2024 21:09:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 203.79.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:24 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BA62182C1587D0020770B29BE293086183A2F4EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:df:35:60:b5:74:ef:9a:61:8e:23:9e:41:97: 5f:c9:6b:49:9c:9c:84:7e:ec:61:0a:d3:5f:8d:39: 2c:26:b9:84:e0:b5:7c:18:38:be:7f:e5:88:d9:62: 12:14:8d:e4:cc:d9:a7:7a:b5:e7:cb:5a:73:cc:59: 6a:b7:d4:2d:c7:33:32:a4:20:ea:cf:a0:2c:e8:35: df:9c:f6:58:98:b1:1d:45:12:16:80:b5:31:25:d0: 76:0b:f1:c2:38:e9:63:35:92:6c:17:38:3d:1b:be: d4:f0:36:3c:8c:f0:88:8d:f8:75:b2:48:ce:1b:ea: 60:4d:6b:ea:5b:51:df:5c:0c:ce:24:3c:5d:2d:6a: eb:68:4b:f1:b7:4c:8b:ff:0c:d4:fc:d3:54:41:8d: 88:24:5a:a7:fd:ea:f7:91:03:2e:fd:ea:78:4a:8c: 76:52:f1:0a:45:e6:0f:a4:20:2e:26:8d:bf:db:2d: 76:bd:57:a8:1c:2d:d7:5c:0b:b1:b7:ae:cc:c5:20: b9:e7:bb:d9:1d:6a:a5:a4:55:b8:af:53:aa:87:e0: e0:f0:b6:11:d2:ab:26:24:95:67:a2:e3:2e:06:fc: 46:b0:20:b0:4e:d4:2b:f1:9d:86:16:5f:09:df:0c: 71:73:da:6e:be:15:f9:38:b2:5d:21:47:74:db:72: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:18:2C:15:87:D0:02:07:70:B2:9B:E2:93:08:61:83:A2:F4:EF X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/umIYLBWH0AIHcLKb4pMIYYOi9O8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.232.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:0c:3f:79:d6:ae:6c:d4:26:28:ac:77:5d:b4:0f:83:1f:47: ab:86:95:6d:b0:87:c1:cd:4e:95:91:ad:b8:db:0b:87:ff:02: 8d:8d:b4:ba:51:18:67:5d:99:fd:28:1a:31:9c:12:37:08:bd: 41:bb:6d:69:1a:27:37:e8:7f:bc:54:08:b9:e7:8b:f0:52:39: 30:8f:1b:e1:23:1a:dd:20:10:a6:9e:3b:b5:ba:23:67:75:93: 9d:91:d8:69:10:74:e2:13:73:d1:c6:aa:92:1e:a5:66:a5:38: 76:0b:79:6a:1d:50:98:62:52:83:3e:3b:5e:3d:2a:4e:bc:62: 97:39:9c:81:7e:a0:c6:82:01:63:d0:3a:dc:15:47:b1:67:c4: 2c:be:af:53:ed:3e:a5:4e:5e:7b:be:68:79:a0:5d:6e:38:e9: 7c:5b:db:99:d1:79:a1:48:8c:f7:85:00:d1:6e:bb:35:66:fc: 37:d0:25:40:de:4e:fa:45:89:ac:f8:68:45:c5:bd:7e:40:2d: 19:68:f8:7e:cd:70:20:e3:6e:c7:2b:fb:97:72:96:8b:f3:99: f7:90:47:df:a4:f2:d8:50:49:2a:e6:8c:2f:b9:2f:eb:bc:3f: 73:f9:29:3c:56:33:d2:c9:46:4c:e4:06:37:76:03:fb:6f:01: a0:2f:8b:61 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJBNjIxODJDMTU4N0Qw MDIwNzcwQjI5QkUyOTMwODYxODNBMkY0RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ3zVgtXTvmmGOI55Bl1/Ja0mcnIR+7GEK01+NOSwmuYTgtXwY OL5/5YjZYhIUjeTM2ad6tefLWnPMWWq31C3HMzKkIOrPoCzoNd+c9liYsR1FEhaA tTEl0HYL8cI46WM1kmwXOD0bvtTwNjyM8IiN+HWySM4b6mBNa+pbUd9cDM4kPF0t autoS/G3TIv/DNT801RBjYgkWqf96veRAy796nhKjHZS8QpF5g+kIC4mjb/bLXa9 V6gcLddcC7G3rszFILnnu9kdaqWkVbivU6qH4ODwthHSqyYklWei4y4G/EawILBO 1CvxnYYWXwnfDHFz2m6+Ffk4sl0hR3Tbcv0pAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUumIYLBWH0AIHcLKb4pMIYYOi9O8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3VtSVlMQldIMEFJSGNMS2I0cE1JWVlP aTlPOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPLT+gwDQYJ KoZIhvcNAQELBQADggEBAC4MP3nWrmzUJiisd120D4MfR6uGlW2wh8HNTpWRrbjb C4f/Ao2NtLpRGGddmf0oGjGcEjcIvUG7bWkaJzfof7xUCLnni/BSOTCPG+EjGt0g EKaeO7W6I2d1k52R2GkQdOITc9HGqpIepWalOHYLeWodUJhiUoM+O149Kk68Ypc5 nIF+oMaCAWPQOtwVR7FnxCy+r1PtPqVOXnu+aHmgXW446Xxb25nReaFIjPeFANFu uzVm/DfQJUDeTvpFiaz4aEXFvX5ALRlo+H7NcCDjbscr+5dylovzmfeQR9+k8thQ SSrmjC+5L+u8P3P5KTxWM9LJRkzkBjd2A/tvAaAvi2E= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org