$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/zADRtgEb1IOHrddYP9SgDdTih8Q.roa File: zADRtgEb1IOHrddYP9SgDdTih8Q.roa (raw, json) Hash identifier: NnZo+R3MGiF5je5QRJ5Sa2v7U3HjA4EMdgYuCPZMvvY= Subject key identifier: CC:00:D1:B6:01:1B:D4:83:87:AD:D7:58:3F:D4:A0:0D:D4:E2:87:C4 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0BAD Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zADRtgEb1IOHrddYP9SgDdTih8Q.roa Signing time: Fri 01 Sep 2023 08:50:52 +0000 ROA not before: Fri 01 Sep 2023 08:50:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9674 IP address blocks: 210.241.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2989 (0xbad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Sep 1 08:50:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CC00D1B6011BD48387ADD7583FD4A00DD4E287C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:97:24:90:00:37:54:ca:99:59:e2:fb:b0:bb: 26:e5:70:36:0a:16:08:6d:c6:88:a7:dd:13:b2:be: 20:c9:11:a1:ba:5e:2a:79:2b:1c:eb:1c:16:72:06: 6b:68:16:b9:fe:fe:b5:11:08:a6:f6:f6:a7:78:05: 99:f1:af:be:68:d1:52:8e:1b:b3:06:5f:e7:05:d2: cb:02:39:99:46:19:01:54:3a:05:a5:92:ca:7b:ca: f5:8f:0c:d7:f5:73:57:9f:16:c2:2a:9b:66:cc:19: ac:97:99:4d:71:8d:5f:e2:88:7b:35:a4:ea:32:b6: 2d:92:ef:1b:79:af:6a:04:3b:88:43:2e:d5:b1:b4: 5e:88:e9:05:0a:4a:2a:19:cc:d7:1c:a5:7f:7c:be: dd:c9:49:34:43:b6:77:62:b6:0f:be:d4:1f:5f:c1: eb:e0:cf:dc:0d:41:f0:2c:6d:1a:e1:78:5f:a7:db: fb:b8:7b:75:90:ce:0d:63:04:eb:6a:3f:35:9f:3b: 3a:30:7b:0e:bd:a5:ff:63:35:14:1d:c5:d9:5a:ce: 2c:f2:77:0a:e8:30:b5:91:2c:76:63:2b:a3:e8:8b: 70:fd:68:3c:26:8a:2b:c2:b6:61:74:f6:a9:fa:7f: 41:8e:07:27:89:42:80:fb:d8:77:30:6a:2a:79:8d: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:00:D1:B6:01:1B:D4:83:87:AD:D7:58:3F:D4:A0:0D:D4:E2:87:C4 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/zADRtgEb1IOHrddYP9SgDdTih8Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.241.192.0/19 Signature Algorithm: sha256WithRSAEncryption 6e:b7:5b:a3:97:1d:0d:af:ad:01:64:76:74:9e:53:75:1e:45: 2e:4c:06:58:d9:5d:4b:48:9a:d4:b6:cf:c3:09:69:09:ae:f9: 03:02:d9:dc:b0:0d:c7:4b:9f:35:a8:f0:8f:dd:94:52:94:1a: 5b:67:a5:d5:10:60:a5:73:df:35:b8:bc:2e:60:62:c9:10:28: 44:5a:fd:1e:fc:39:22:39:c2:d4:cc:87:ea:d5:40:72:e8:0b: e4:97:4c:0b:4d:11:cf:ac:c4:77:93:53:f8:8e:31:f3:8f:15: 94:22:5c:6d:0d:d0:71:cd:9a:fd:64:49:5b:c3:f1:83:91:28: 0e:45:78:9b:5f:97:03:fd:24:d4:a5:60:9a:1e:2f:a6:bd:7b: be:0d:3e:b8:ae:d9:8d:6c:8d:a1:21:d2:02:57:d2:a0:51:ce: a7:c3:a9:a6:d9:fa:d6:97:66:ec:c8:39:12:2b:c9:7e:a4:d4: f7:51:4c:8a:6f:f5:f7:b5:4d:64:e5:e4:fb:81:72:56:fc:68: 27:e7:91:4a:32:da:5e:36:a8:d5:6e:6e:e0:4d:f0:bf:c0:ff: 47:05:5b:83:33:9e:1e:4e:69:83:f9:b3:d0:6e:f2:53:ea:5e: f1:b8:30:8e:46:d0:35:98:46:59:3d:f3:0c:f4:64:3f:43:35: 26:34:4c:ea -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICC60wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yMzA5MDEw ODUwNTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENDMDBEMUI2MDExQkQ0 ODM4N0FERDc1ODNGRDRBMDBERDRFMjg3QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDplySQADdUyplZ4vuwuyblcDYKFghtxoin3ROyviDJEaG6Xip5 KxzrHBZyBmtoFrn+/rURCKb29qd4BZnxr75o0VKOG7MGX+cF0ssCOZlGGQFUOgWl ksp7yvWPDNf1c1efFsIqm2bMGayXmU1xjV/iiHs1pOoyti2S7xt5r2oEO4hDLtWx tF6I6QUKSioZzNccpX98vt3JSTRDtnditg++1B9fwevgz9wNQfAsbRrheF+n2/u4 e3WQzg1jBOtqPzWfOzowew69pf9jNRQdxdlazizydwroMLWRLHZjK6Poi3D9aDwm iivCtmF09qn6f0GOByeJQoD72Hcwaip5jaTPAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUzADRtgEb1IOHrddYP9SgDdTih8QwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3pBRFJ0Z0ViMUlPSHJkZFlQOVNnRGRU aWg4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS8cAwDQYJ KoZIhvcNAQELBQADggEBAG63W6OXHQ2vrQFkdnSeU3UeRS5MBljZXUtImtS2z8MJ aQmu+QMC2dywDcdLnzWo8I/dlFKUGltnpdUQYKVz3zW4vC5gYskQKERa/R78OSI5 wtTMh+rVQHLoC+SXTAtNEc+sxHeTU/iOMfOPFZQiXG0N0HHNmv1kSVvD8YORKA5F eJtflwP9JNSlYJoeL6a9e74NPriu2Y1sjaEh0gJX0qBRzqfDqabZ+taXZuzIORIr yX6k1PdRTIpv9fe1TWTl5PuBclb8aCfnkUoy2l42qNVubuBN8L/A/0cFW4Mznh5O aYP5s9Bu8lPqXvG4MI5G0DWYRlk98wz0ZD9DNSY0TOo= -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:33 2024 by rpki-client on console-ams.rpki-client.org