$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/3lsyDcC1tzgU4dKt0sbjRIetWXQ.roa File: 3lsyDcC1tzgU4dKt0sbjRIetWXQ.roa (raw, json) Hash identifier: ng0x7/Qc3kD/ORQQr1ZeVZGvSySfUgWqttuH2SvDo+M= Subject key identifier: DE:5B:32:0D:C0:B5:B7:38:14:E1:D2:AD:D2:C6:E3:44:87:AD:59:74 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0CD9 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3lsyDcC1tzgU4dKt0sbjRIetWXQ.roa Signing time: Fri 01 Sep 2023 09:39:50 +0000 ROA not before: Fri 01 Sep 2023 09:39:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38843 IP address blocks: 124.150.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Sep 1 09:39:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DE5B320DC0B5B73814E1D2ADD2C6E34487AD5974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:64:2b:44:11:f9:35:f9:5b:a3:bb:b3:81: c5:71:d4:b0:39:08:06:5c:69:7d:50:87:e7:1e:4a: b7:e5:55:ed:51:86:6c:7f:3c:ce:83:74:59:3d:50: 39:9d:37:22:89:bd:39:87:3b:c8:04:1e:6f:ef:4a: e1:86:ec:8b:69:73:c8:a3:70:39:13:ca:a8:da:65: 97:9e:c3:85:19:7f:b0:68:da:03:97:ea:86:11:4f: 7d:d1:70:86:84:c2:29:28:87:20:66:8f:24:83:11: 2b:93:17:bb:2d:83:84:55:bf:cc:96:60:cb:83:4d: 97:0b:ea:cb:ad:ed:b1:ab:93:f2:48:35:af:f7:48: 65:35:7f:04:71:8f:71:4d:27:62:a7:ff:8e:a9:ce: 6c:15:f8:9d:64:a9:c3:7c:77:6c:d9:4e:3b:11:85: ee:5f:35:5f:ad:7c:68:22:c6:62:18:7a:6f:bb:89: f3:4a:6e:a2:06:98:7e:82:62:9b:06:df:3c:8d:21: 93:a6:84:f6:b0:74:c3:ee:72:3d:9e:b7:cf:67:9a: 2c:39:4e:80:f8:68:9c:3a:69:eb:c7:f9:f9:d6:cb: 5d:b5:76:1f:4a:60:01:3a:21:8e:c8:ed:0e:eb:66: 9f:3a:4d:50:db:6b:79:f6:56:c4:4d:2a:7f:23:9a: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5B:32:0D:C0:B5:B7:38:14:E1:D2:AD:D2:C6:E3:44:87:AD:59:74 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/3lsyDcC1tzgU4dKt0sbjRIetWXQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.128.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:96:6f:63:92:d0:5e:50:b3:a7:40:bf:55:ce:0b:ab:ce:16: 5a:3d:b6:e3:29:07:72:6c:ea:6b:cf:87:77:3b:53:77:38:38: 4b:de:ab:c9:79:f2:f8:5e:a0:8b:6a:25:94:f5:99:1c:86:e5: ec:65:ca:2e:86:35:2d:d7:0f:51:96:08:2d:28:57:69:1d:c5: b1:67:ac:2d:19:d9:94:f2:af:8d:ce:28:47:85:6c:18:1a:0c: ce:a1:b1:aa:58:6b:a8:85:ce:7e:3c:53:67:6a:c9:1a:7d:cc: 82:f1:36:de:2a:fa:70:5f:f0:9c:b5:ef:49:23:e3:d9:4b:3c: e9:70:42:98:80:a9:69:15:a9:01:80:d1:ca:2a:65:5a:63:16: 36:b6:94:bf:bd:9f:42:27:f7:6b:62:ce:fe:2f:c9:93:d5:c1: af:e9:b1:60:88:4b:33:7c:54:4e:d6:01:f4:55:50:59:7e:ca: 58:4a:b6:26:3d:fa:06:f3:05:0f:0d:8b:e4:f4:a1:5f:be:5e: 10:bc:12:76:ca:9c:e8:b0:29:ab:e1:d6:74:f4:f8:e2:b1:ab: 33:f2:e8:ac:f8:ec:e3:b5:ee:3c:33:55:1d:87:63:1d:fe:e9: 95:17:49:57:48:f1:dd:a5:17:37:f8:b8:64:f6:33:e5:56:f9: 60:f7:26:6a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw OTM5NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERFNUIzMjBEQzBCNUI3 MzgxNEUxRDJBREQyQzZFMzQ0ODdBRDU5NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmCWQrRBH5Nflbo7uzgcVx1LA5CAZcaX1Qh+ceSrflVe1Rhmx/ PM6DdFk9UDmdNyKJvTmHO8gEHm/vSuGG7Itpc8ijcDkTyqjaZZeew4UZf7Bo2gOX 6oYRT33RcIaEwikohyBmjySDESuTF7stg4RVv8yWYMuDTZcL6sut7bGrk/JINa/3 SGU1fwRxj3FNJ2Kn/46pzmwV+J1kqcN8d2zZTjsRhe5fNV+tfGgixmIYem+7ifNK bqIGmH6CYpsG3zyNIZOmhPawdMPucj2et89nmiw5ToD4aJw6aevH+fnWy121dh9K YAE6IY7I7Q7rZp86TVDba3n2VsRNKn8jmmobAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU3lsyDcC1tzgU4dKt0sbjRIetWXQwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vM2xzeURjQzF0emdVNGRLdDBzYmpS SWV0V1hRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3yWgDAN BgkqhkiG9w0BAQsFAAOCAQEAa5ZvY5LQXlCzp0C/Vc4Lq84WWj224ykHcmzqa8+H dztTdzg4S96ryXny+F6gi2ollPWZHIbl7GXKLoY1LdcPUZYILShXaR3FsWesLRnZ lPKvjc4oR4VsGBoMzqGxqlhrqIXOfjxTZ2rJGn3MgvE23ir6cF/wnLXvSSPj2Us8 6XBCmICpaRWpAYDRyiplWmMWNraUv72fQif3a2LO/i/Jk9XBr+mxYIhLM3xUTtYB 9FVQWX7KWEq2Jj36BvMFDw2L5PShX75eELwSdsqc6LApq+HWdPT44rGrM/LorPjs 47XuPDNVHYdjHf7plRdJV0jx3aUXN/i4ZPYz5Vb5YPcmag== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org