$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/w5QJQjbDArCvLIUZfmAwLuiO84o.roa File: w5QJQjbDArCvLIUZfmAwLuiO84o.roa (raw, json) Hash identifier: bYedepLpQbk2SjweWE3XkQFBiOF+npq3ByiJWmFc9hY= Subject key identifier: C3:94:09:42:36:C3:02:B0:AF:2C:85:19:7E:60:30:2E:E8:8E:F3:8A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CBC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/w5QJQjbDArCvLIUZfmAwLuiO84o.roa Signing time: Mon 15 Jan 2024 21:10:55 +0000 ROA not before: Mon 15 Jan 2024 21:10:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 210.202.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:55 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C394094236C302B0AF2C85197E60302EE88EF38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:7f:98:c3:84:eb:14:d5:76:2c:76:03:19: fa:36:da:3c:67:ea:33:32:c0:b0:ff:0b:74:55:32: cb:d6:36:0e:3d:e9:a5:f9:50:bc:48:42:78:f3:99: e1:70:7d:86:c2:ca:4f:ba:6d:da:f4:d7:8b:49:19: 62:37:51:a3:38:67:0e:47:13:23:8d:5a:1e:f5:59: da:fd:34:77:eb:dd:d9:95:99:f2:0a:a7:a8:a9:0b: 19:1c:62:d3:63:06:9e:f6:27:e2:39:d3:db:03:17: 7b:4c:f8:c8:ec:15:04:27:5b:9b:11:f8:27:61:b3: 5b:34:11:f6:f1:ce:71:eb:f1:cd:d7:64:bd:90:07: 59:6c:67:94:b2:96:2f:40:58:94:43:24:35:b2:2b: 5e:0c:33:f0:8d:00:a5:11:23:de:59:aa:0d:cf:e3: d7:8c:63:77:8a:13:6c:08:81:3a:16:b7:15:f9:af: c8:6a:33:15:76:e2:e0:bc:97:15:f2:84:a9:b5:8b: b2:94:65:2f:98:61:7a:80:d4:e4:ff:30:a9:78:ed: 17:fc:9a:a9:e2:57:86:67:61:d9:ef:4e:93:28:15: 4b:4c:56:c0:08:ca:44:f8:e0:5e:71:7e:42:8b:d4: 79:39:cb:33:77:e2:1e:af:11:7b:38:6d:42:f8:6f: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:94:09:42:36:C3:02:B0:AF:2C:85:19:7E:60:30:2E:E8:8E:F3:8A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/w5QJQjbDArCvLIUZfmAwLuiO84o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.202.96.0/20 Signature Algorithm: sha256WithRSAEncryption 25:9d:ec:82:67:f7:77:30:af:1e:35:3f:4c:f0:aa:a5:34:be: d5:3c:e2:b3:8a:4b:45:50:f0:84:6c:a4:8e:7f:be:0c:ce:ba: 16:26:3e:ce:d5:a0:4f:ae:04:35:21:7a:ec:1d:59:18:d2:0c: 22:59:6b:7a:09:a5:bf:97:9b:ed:46:55:de:bc:75:ec:6e:e0: b3:b8:6a:f2:cb:62:dc:11:29:04:1a:98:bb:d2:2c:95:b1:f4: 3c:5a:8d:01:10:e0:ea:0b:d5:c1:e6:9d:21:5e:6d:f7:53:8d: e8:43:b2:63:e6:e1:95:f0:f5:3f:2d:0c:e3:30:3f:d6:7f:e2: 13:b7:cb:3b:6e:77:9b:63:f8:ef:bd:cf:94:fd:6c:63:ab:7a: db:68:8d:15:5b:80:f8:dd:98:10:14:0a:12:ca:29:e9:38:2f: 2a:63:17:d6:45:1e:95:3f:66:73:a2:8d:63:b1:71:f1:96:b2: 25:4c:a1:37:1b:26:61:42:6b:86:ee:e9:b0:c8:43:1a:34:73: 76:0d:3f:18:93:eb:76:81:d5:c4:af:c9:01:7e:b7:e0:08:d6: 14:99:0a:8c:26:42:3e:0c:a2:3d:86:4e:b6:c2:15:de:02:ab: 1a:47:38:5e:e5:7e:a4:12:31:e8:f3:c8:73:8b:a5:ea:43:9e: c2:4b:58:9a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwNTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMzOTQwOTQyMzZDMzAy QjBBRjJDODUxOTdFNjAzMDJFRTg4RUYzOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkJX+Yw4TrFNV2LHYDGfo22jxn6jMywLD/C3RVMsvWNg496aX5 ULxIQnjzmeFwfYbCyk+6bdr014tJGWI3UaM4Zw5HEyONWh71Wdr9NHfr3dmVmfIK p6ipCxkcYtNjBp72J+I509sDF3tM+MjsFQQnW5sR+Cdhs1s0EfbxznHr8c3XZL2Q B1lsZ5Syli9AWJRDJDWyK14MM/CNAKURI95Zqg3P49eMY3eKE2wIgToWtxX5r8hq MxV24uC8lxXyhKm1i7KUZS+YYXqA1OT/MKl47Rf8mqniV4ZnYdnvTpMoFUtMVsAI ykT44F5xfkKL1Hk5yzN34h6vEXs4bUL4b23lAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUw5QJQjbDArCvLIUZfmAwLuiO84owHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3c1UUpRamJEQXJDdkxJVVpmbUF3THVp Tzg0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSymAwDQYJ KoZIhvcNAQELBQADggEBACWd7IJn93cwrx41P0zwqqU0vtU84rOKS0VQ8IRspI5/ vgzOuhYmPs7VoE+uBDUheuwdWRjSDCJZa3oJpb+Xm+1GVd68dexu4LO4avLLYtwR KQQamLvSLJWx9DxajQEQ4OoL1cHmnSFebfdTjehDsmPm4ZXw9T8tDOMwP9Z/4hO3 yztud5tj+O+9z5T9bGOrettojRVbgPjdmBAUChLKKek4LypjF9ZFHpU/ZnOijWOx cfGWsiVMoTcbJmFCa4bu6bDIQxo0c3YNPxiT63aB1cSvyQF+t+AI1hSZCowmQj4M oj2GTrbCFd4CqxpHOF7lfqQSMejzyHOLpepDnsJLWJo= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:39 2024 by rpki-client on console-fra.rpki-client.org