$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/xamI7voun6vBip1eWX0qdQh4LPY.roa File: xamI7voun6vBip1eWX0qdQh4LPY.roa (raw, json) Hash identifier: ai+r4MoV4CYrSJa6L0Dki+NViuGrVMLnvcJaBx+Lwz0= Subject key identifier: C5:A9:88:EE:FA:2E:9F:AB:C1:8A:9D:5E:59:7D:2A:75:08:78:2C:F6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D86 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xamI7voun6vBip1eWX0qdQh4LPY.roa Signing time: Mon 15 Jan 2024 21:29:08 +0000 ROA not before: Mon 15 Jan 2024 21:29:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.203.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3462 (0xd86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:29:08 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C5A988EEFA2E9FABC18A9D5E597D2A7508782CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:26:00:32:d3:07:65:02:30:55:2e:da:87:65: 17:0f:39:0e:c0:69:ae:55:04:15:67:07:8d:f5:d1: 55:c3:eb:d4:27:04:a8:77:2d:46:95:65:e3:b2:8c: e7:df:bc:85:c2:71:ef:28:23:3f:0d:40:14:bc:3b: 66:52:11:39:a6:f5:07:5d:0d:2d:43:95:33:98:e3: eb:49:db:da:86:16:d4:8a:04:72:c7:8c:8d:88:91: 5a:76:1e:bb:99:dc:1a:ec:ce:87:df:0a:fb:8c:47: 2d:c0:3b:13:35:9d:84:c5:48:66:b6:f7:d1:c5:f3: be:22:03:6a:02:0b:b8:bb:9d:7e:2f:21:f5:9e:80: 8f:e6:88:1e:0d:cc:98:23:32:6c:0f:b9:69:52:3a: 93:92:01:a4:6b:1b:6b:d6:29:ac:42:cb:7a:c1:9d: 4a:d8:70:ba:d7:e3:a4:31:05:9c:f7:8e:e1:a4:12: a3:de:20:b5:7c:19:3d:cc:19:63:25:46:ff:dc:74: 31:4a:29:ab:a1:ca:f9:d2:17:ed:32:65:36:f9:e8: 09:d8:37:92:1a:eb:83:cc:24:e7:d8:05:d6:1b:ca: d9:0b:d0:7c:7b:7f:e3:88:d7:5d:50:e3:ce:d5:94: 24:63:c9:f5:d6:71:88:92:c4:39:cf:4d:96:da:57: d0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A9:88:EE:FA:2E:9F:AB:C1:8A:9D:5E:59:7D:2A:75:08:78:2C:F6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xamI7voun6vBip1eWX0qdQh4LPY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.48.0/20 Signature Algorithm: sha256WithRSAEncryption b9:a5:0e:e8:8e:0c:09:13:3f:94:4f:83:df:f7:44:2e:f3:00: e3:42:97:80:8d:d5:7b:c7:f6:c9:75:25:42:66:d6:2d:ad:12: 2b:0f:dc:1b:fb:de:e6:aa:c7:70:ca:b5:39:ba:53:ea:29:cc: b6:8d:95:de:ee:63:c1:c3:76:5d:8f:0a:db:37:3e:a5:3a:ba: 9f:49:3d:60:c0:ec:21:4c:52:f6:c0:d1:af:c1:a7:7f:85:97: 95:25:6f:46:d7:e9:81:8b:a8:75:07:74:9d:3a:21:ab:69:ee: be:21:4c:cd:e0:91:0b:51:dd:1a:08:bb:29:22:54:fd:59:7f: f0:dd:0c:ea:36:7a:9d:29:31:2d:5d:cc:4a:a2:59:1e:a9:60: e0:ce:86:71:6a:ee:00:9a:f9:42:2a:a6:4a:6c:19:9a:e7:cc: 88:1e:1f:e4:5e:3a:9c:eb:77:f2:25:90:a2:50:0f:2f:90:de: 15:53:ec:69:8f:ee:88:e4:4c:29:c3:74:10:00:4e:ba:4a:e4: 7b:a1:63:55:22:a7:b6:dd:03:24:f0:22:ff:87:b3:23:9d:4f: 7f:27:b2:48:c5:ce:a3:5f:6d:bb:b0:43:1c:d1:68:48:a8:0b: 05:b1:38:3d:10:c5:a4:a0:d8:40:16:26:49:0e:be:cb:a6:94: 92:b2:21:5a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI5MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM1QTk4OEVFRkEyRTlG QUJDMThBOUQ1RTU5N0QyQTc1MDg3ODJDRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkJgAy0wdlAjBVLtqHZRcPOQ7Aaa5VBBVnB4310VXD69QnBKh3 LUaVZeOyjOffvIXCce8oIz8NQBS8O2ZSETmm9QddDS1DlTOY4+tJ29qGFtSKBHLH jI2IkVp2HruZ3BrszoffCvuMRy3AOxM1nYTFSGa299HF874iA2oCC7i7nX4vIfWe gI/miB4NzJgjMmwPuWlSOpOSAaRrG2vWKaxCy3rBnUrYcLrX46QxBZz3juGkEqPe ILV8GT3MGWMlRv/cdDFKKauhyvnSF+0yZTb56AnYN5Ia64PMJOfYBdYbytkL0Hx7 f+OI111Q487VlCRjyfXWcYiSxDnPTZbaV9CbAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUxamI7voun6vBip1eWX0qdQh4LPYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3hhbUk3dm91bjZ2QmlwMWVXWDBxZFFo NExQWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSyzAwDQYJ KoZIhvcNAQELBQADggEBALmlDuiODAkTP5RPg9/3RC7zAONCl4CN1XvH9sl1JUJm 1i2tEisP3Bv73uaqx3DKtTm6U+opzLaNld7uY8HDdl2PCts3PqU6up9JPWDA7CFM UvbA0a/Bp3+Fl5Ulb0bX6YGLqHUHdJ06Iatp7r4hTM3gkQtR3RoIuykiVP1Zf/Dd DOo2ep0pMS1dzEqiWR6pYODOhnFq7gCa+UIqpkpsGZrnzIgeH+ReOpzrd/IlkKJQ Dy+Q3hVT7GmP7ojkTCnDdBAATrpK5HuhY1Uip7bdAyTwIv+HsyOdT38nskjFzqNf bbuwQxzRaEioCwWxOD0QxaSg2EAWJkkOvsumlJKyIVo= -----END CERTIFICATE-----Generated at Mon May 20 08:58:20 2024 by rpki-client on console-ams.rpki-client.org