$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/upz9_DSYocvx4zYrYYRQXEoYuHU.roa File: upz9_DSYocvx4zYrYYRQXEoYuHU.roa (raw, json) Hash identifier: H2l+ITMjivfWGJJfYd+2bCQeGIH+Fo72XvBdPJST6ZI= Subject key identifier: BA:9C:FD:FC:34:98:A1:CB:F1:E3:36:2B:61:84:50:5C:4A:18:B8:75 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C4C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/upz9_DSYocvx4zYrYYRQXEoYuHU.roa Signing time: Mon 15 Jan 2024 21:08:55 +0000 ROA not before: Mon 15 Jan 2024 21:08:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24155 IP address blocks: 203.207.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:08:55 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=BA9CFDFC3498A1CBF1E3362B6184505C4A18B875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:73:dc:89:12:4e:b8:85:ae:5a:04:b4:64: 6e:ed:47:b4:51:39:f2:2f:c3:3a:80:20:1b:d9:17: 5d:df:f6:cc:38:aa:f9:c0:d7:62:40:7a:d5:f6:58: 64:4b:cd:74:db:e2:f5:06:c0:4a:42:d0:b7:fd:ae: e1:12:18:e0:d9:eb:c4:45:b7:7d:4b:cf:ed:0d:bd: f2:3f:57:29:d0:15:eb:17:14:f5:dc:2f:90:2b:8a: 30:93:31:a4:ed:97:6d:bd:6d:01:81:66:5c:7f:bf: f5:7e:3d:26:a9:7d:d5:f8:17:50:7b:9c:cb:42:d4: 21:ad:03:c6:fc:6b:dd:0b:90:bf:22:ba:41:aa:0d: 19:ec:ab:9c:c9:7c:1c:ee:0a:16:3e:ee:b3:18:d4: d5:93:b5:c5:f8:fe:2b:55:2c:fa:4f:af:a4:df:96: 0b:7e:a4:6e:86:4d:5e:ef:2c:43:90:4e:c9:02:41: 59:24:56:c2:92:2e:60:c0:9a:e2:11:07:08:a5:49: 79:7b:5a:0f:2d:2e:a6:c0:b7:67:45:b2:91:db:04: 36:3c:50:6c:f7:36:3d:c9:d3:5b:d7:26:bd:76:04: 29:81:b9:17:e7:78:2f:47:5b:70:18:ec:e5:e6:91: 5a:e1:51:fd:24:66:c6:bf:17:08:c3:66:2c:70:15: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9C:FD:FC:34:98:A1:CB:F1:E3:36:2B:61:84:50:5C:4A:18:B8:75 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/upz9_DSYocvx4zYrYYRQXEoYuHU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.207.32.0/20 Signature Algorithm: sha256WithRSAEncryption 94:1f:54:12:6b:52:e8:29:ab:fb:d9:e6:a8:d9:3e:b2:20:a4: 60:8d:e8:f7:c2:e4:55:22:2e:1e:2b:7c:d1:3e:73:00:09:af: 7a:e9:34:3d:d1:d0:ec:f7:70:b7:a2:c9:69:b3:63:d5:68:f2: 8a:cc:48:d9:8e:f3:9c:4a:32:28:cb:d8:7c:4c:90:04:f7:e7: c5:b6:13:9c:8f:c7:1c:9a:d2:85:31:51:a6:08:ba:09:c9:60: fc:00:66:46:99:4e:86:5f:3d:44:27:a3:ee:54:31:66:34:82: 61:66:08:ae:9a:84:80:00:9f:78:6e:69:f7:bc:58:c2:17:e1: 91:ac:48:59:d4:27:27:20:a8:10:8f:c0:b7:c8:0e:b6:4d:0c: e3:df:5b:7b:7f:03:9a:80:d4:81:c8:c4:c1:2e:c4:74:66:cb: f4:39:e5:d2:ac:f0:30:16:35:1d:94:42:a4:3a:f4:c7:71:ec: bb:a3:ad:18:c9:75:8d:b1:d5:7b:e4:b5:34:f6:1d:6c:2c:2a: 86:50:0c:3d:1b:51:60:5d:cb:22:a2:e0:64:b6:d2:30:bd:6b: 31:8e:86:38:40:45:c5:e6:be:c6:e9:ad:d1:bd:c3:2e:f9:a5: 91:3f:f6:04:81:42:5e:92:9f:d1:dd:05:23:10:78:7c:87:d1: cf:eb:98:2a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA4NTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJBOUNGREZDMzQ5OEEx Q0JGMUUzMzYyQjYxODQ1MDVDNEExOEI4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVa3PciRJOuIWuWgS0ZG7tR7RROfIvwzqAIBvZF13f9sw4qvnA 12JAetX2WGRLzXTb4vUGwEpC0Lf9ruESGODZ68RFt31Lz+0NvfI/VynQFesXFPXc L5ArijCTMaTtl229bQGBZlx/v/V+PSapfdX4F1B7nMtC1CGtA8b8a90LkL8iukGq DRnsq5zJfBzuChY+7rMY1NWTtcX4/itVLPpPr6Tflgt+pG6GTV7vLEOQTskCQVkk VsKSLmDAmuIRBwilSXl7Wg8tLqbAt2dFspHbBDY8UGz3Nj3J01vXJr12BCmBuRfn eC9HW3AY7OXmkVrhUf0kZsa/FwjDZixwFdYrAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUupz9/DSYocvx4zYrYYRQXEoYuHUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3VwejlfRFNZb2N2eDR6WXJZWVJRWEVv WXVIVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLzyAwDQYJ KoZIhvcNAQELBQADggEBAJQfVBJrUugpq/vZ5qjZPrIgpGCN6PfC5FUiLh4rfNE+ cwAJr3rpND3R0Oz3cLeiyWmzY9Vo8orMSNmO85xKMijL2HxMkAT358W2E5yPxxya 0oUxUaYIugnJYPwAZkaZToZfPUQno+5UMWY0gmFmCK6ahIAAn3huafe8WMIX4ZGs SFnUJycgqBCPwLfIDrZNDOPfW3t/A5qA1IHIxMEuxHRmy/Q55dKs8DAWNR2UQqQ6 9Mdx7LujrRjJdY2x1XvktTT2HWwsKoZQDD0bUWBdyyKi4GS20jC9azGOhjhARcXm vsbprdG9wy75pZE/9gSBQl6Sn9HdBSMQeHyH0c/rmCo= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org