$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/TbOBgLvFDSZEgP5qb1OEukgU9Lg.roa File: TbOBgLvFDSZEgP5qb1OEukgU9Lg.roa (raw, json) Hash identifier: 0p8L0DC7AKtoJO4xZSYqBXzGboGWzuSu8pOwLPm68g4= Subject key identifier: 4D:B3:81:80:BB:C5:0D:26:44:80:FE:6A:6F:53:84:BA:48:14:F4:B8 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0CE1 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/TbOBgLvFDSZEgP5qb1OEukgU9Lg.roa Signing time: Fri 01 Sep 2023 09:39:52 +0000 ROA not before: Fri 01 Sep 2023 09:39:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38843 IP address blocks: 223.27.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Sep 1 09:39:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4DB38180BBC50D264480FE6A6F5384BA4814F4B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:cd:40:56:eb:78:cd:83:aa:7b:60:aa:4a: c6:ed:2c:4d:eb:1b:d5:3d:fe:34:a5:a5:ac:80:39: 00:f7:4e:fe:c4:00:f7:01:0b:49:2a:84:13:3b:19: 6a:be:89:a1:db:48:78:8c:9a:0e:52:91:e8:b0:39: c9:23:f2:73:f8:68:96:e7:c4:ef:d9:73:29:33:95: d2:0c:90:73:7c:91:34:a9:aa:a6:6a:da:c9:d0:d4: 32:28:3d:ca:92:0c:c5:f7:36:f7:1c:fc:10:08:e2: a9:4d:ca:7a:e2:2f:05:87:df:9b:00:1c:15:00:27: a8:01:2e:4f:8e:b3:66:7b:e5:75:96:13:91:5f:2f: dd:07:32:02:5e:e0:b4:be:88:6f:ad:37:a6:7d:b8: 86:12:aa:95:39:7b:f6:e2:7b:4d:dc:79:af:e4:a0: e8:f2:3e:70:60:90:cb:73:c1:45:d2:1b:55:66:3c: af:e3:3e:23:5a:b3:c0:08:03:9e:1f:7c:ab:27:97: 2c:16:9f:6d:6f:71:a8:51:01:22:44:d7:48:72:38: 18:d6:bf:cf:09:d6:a7:dd:a8:61:e4:26:41:8e:92: aa:d8:bb:c3:88:cc:ad:1e:3c:87:60:d6:28:e8:e7: 1e:3f:92:85:ed:b0:81:d4:04:a0:d7:7c:2d:bd:03: 59:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B3:81:80:BB:C5:0D:26:44:80:FE:6A:6F:53:84:BA:48:14:F4:B8 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/TbOBgLvFDSZEgP5qb1OEukgU9Lg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.48.0/20 Signature Algorithm: sha256WithRSAEncryption 38:91:9d:84:8f:d6:f9:2b:4f:e1:17:42:b9:5d:e9:e4:f9:53: 02:bf:0d:9f:15:df:95:ed:93:53:01:2b:0e:5c:52:ab:fe:8b: f6:fc:a3:ff:8c:55:27:77:ff:fe:21:06:cf:6a:cc:87:5c:26: c7:1f:ec:ad:b9:2e:e7:e8:ee:a1:64:3e:4a:4d:aa:03:f5:24: 06:98:18:fd:8e:0b:95:b4:83:3a:6c:ae:57:dd:47:57:29:94: f3:b9:0c:6f:cb:ca:58:53:14:84:8f:22:28:ab:3d:9e:fd:53: c4:16:8b:2b:6b:0e:1b:ff:a1:a6:e1:59:e6:7c:fc:cd:e7:81: d4:dd:70:4c:0f:d1:9d:3a:27:f9:fe:87:24:4c:22:da:6f:12: 16:3c:a4:22:19:83:ce:f4:23:b7:ed:dc:88:34:4b:64:e9:c0: f5:89:ec:f1:5d:1f:e7:f2:e6:da:67:0d:91:5f:f4:be:61:5b: 18:36:00:fd:bf:09:5f:1b:26:e1:6d:c0:1b:61:08:59:c0:bf: 80:77:25:cf:0f:3c:2b:c9:a2:68:81:ab:f3:b4:54:ad:7b:6d: 50:5a:15:dd:64:35:81:5c:8d:ff:c0:38:7d:88:4e:33:83:5d: da:5a:93:1a:3a:24:f6:94:2e:d4:8f:1f:ad:be:6c:96:b7:4f: 7f:87:72:51 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw OTM5NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDREQjM4MTgwQkJDNTBE MjY0NDgwRkU2QTZGNTM4NEJBNDgxNEY0QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxDs1AVut4zYOqe2CqSsbtLE3rG9U9/jSlpayAOQD3Tv7EAPcB C0kqhBM7GWq+iaHbSHiMmg5SkeiwOckj8nP4aJbnxO/ZcykzldIMkHN8kTSpqqZq 2snQ1DIoPcqSDMX3Nvcc/BAI4qlNynriLwWH35sAHBUAJ6gBLk+Os2Z75XWWE5Ff L90HMgJe4LS+iG+tN6Z9uIYSqpU5e/bie03cea/koOjyPnBgkMtzwUXSG1VmPK/j PiNas8AIA54ffKsnlywWn21vcahRASJE10hyOBjWv88J1qfdqGHkJkGOkqrYu8OI zK0ePIdg1ijo5x4/koXtsIHUBKDXfC29A1n1AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUTbOBgLvFDSZEgP5qb1OEukgU9LgwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vVGJPQmdMdkZEU1pFZ1A1cWIxT0V1 a2dVOUxnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBN8bMDAN BgkqhkiG9w0BAQsFAAOCAQEAOJGdhI/W+StP4RdCuV3p5PlTAr8NnxXfle2TUwEr DlxSq/6L9vyj/4xVJ3f//iEGz2rMh1wmxx/srbku5+juoWQ+Sk2qA/UkBpgY/Y4L lbSDOmyuV91HVymU87kMb8vKWFMUhI8iKKs9nv1TxBaLK2sOG/+hpuFZ5nz8zeeB 1N1wTA/RnTon+f6HJEwi2m8SFjykIhmDzvQjt+3ciDRLZOnA9Yns8V0f5/Lm2mcN kV/0vmFbGDYA/b8JXxsm4W3AG2EIWcC/gHclzw88K8miaIGr87RUrXttUFoV3WQ1 gVyN/8A4fYhOM4Nd2lqTGjok9pQu1I8frb5slrdPf4dyUQ== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:02 2024 by rpki-client on console-fra.rpki-client.org