$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/Yhd64sOaDiZCoMSEo89K1fMqhnA.roa File: Yhd64sOaDiZCoMSEo89K1fMqhnA.roa (raw, json) Hash identifier: KB3wyZG/ZoSM1r3vIdzMAWwP0pKZnMF5KS3FnxPO/eg= Subject key identifier: 62:17:7A:E2:C3:9A:0E:26:42:A0:C4:84:A3:CF:4A:D5:F3:2A:86:70 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0CD1 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Yhd64sOaDiZCoMSEo89K1fMqhnA.roa Signing time: Fri 01 Sep 2023 09:39:48 +0000 ROA not before: Fri 01 Sep 2023 09:39:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38843 IP address blocks: 223.27.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3281 (0xcd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Sep 1 09:39:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=62177AE2C39A0E2642A0C484A3CF4AD5F32A8670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fb:87:de:d0:11:4e:cf:f5:f1:6d:e6:13:bd: 80:7b:5a:55:5b:23:e9:eb:fc:81:a2:9c:28:7e:64: 91:fe:10:d7:1b:f6:e5:0e:43:c3:b1:b3:ef:a3:1c: 9d:30:eb:2b:ec:71:99:3b:de:e7:7a:b3:2d:42:a2: 92:ea:e4:f0:41:c0:e0:6e:bd:86:6f:e6:10:7c:b2: 90:e2:7e:30:68:a3:c1:98:18:19:94:64:a9:f8:50: 72:45:a1:b0:8a:11:27:31:2a:5d:81:7f:71:98:0f: ff:34:d4:59:18:48:dd:99:91:01:8a:b6:5f:32:64: 2c:5a:25:cb:22:38:21:62:9b:a0:af:6a:7b:7e:a0: 79:80:0f:53:bd:b3:79:de:40:a4:28:bf:2b:38:18: c3:7f:4a:7f:7f:cc:92:b5:3d:59:f0:76:11:71:dd: ba:db:87:c0:ce:6d:d4:6e:f9:a7:5b:31:68:60:48: 2a:ea:50:6d:2e:3a:31:05:00:4e:72:67:68:3a:21: 66:54:2b:73:c0:6b:39:72:d1:ac:f7:bb:49:43:de: 1e:6c:99:1c:d3:0b:19:77:c2:a3:05:b8:8f:b6:de: 6d:70:ae:c6:ad:68:1d:e8:9e:1e:de:f3:85:22:f0: e4:1a:30:db:47:fe:8c:c6:84:f8:7e:9c:84:54:9b: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:17:7A:E2:C3:9A:0E:26:42:A0:C4:84:A3:CF:4A:D5:F3:2A:86:70 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Yhd64sOaDiZCoMSEo89K1fMqhnA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.45.0/24 Signature Algorithm: sha256WithRSAEncryption 81:20:0b:0b:9e:76:8a:3c:42:8b:01:66:92:64:75:65:67:27: 72:0c:10:75:1a:71:30:a9:51:fa:65:3e:5d:2b:de:13:ba:38: b1:1e:05:48:81:05:32:ab:96:ea:2a:7e:08:5f:76:4d:2b:89: 0c:d1:17:ae:fc:26:18:6b:0a:e9:78:12:db:e2:ad:9d:c4:8e: 71:36:44:e1:b9:a3:b5:20:ec:84:07:5e:b4:07:d1:ce:4e:be: 71:a7:04:a2:f2:52:d9:80:ad:c2:2e:22:77:82:e9:d5:0b:cd: 08:03:29:f1:6f:40:c5:50:ae:41:65:da:d3:4c:ae:60:d0:0c: 0b:d8:6f:e8:4c:05:b4:a9:16:7e:f6:7f:3d:4c:c7:ff:a2:b9: b6:46:5f:5b:5c:b9:aa:70:33:d6:f8:ae:f7:58:36:49:21:39: 40:41:07:bc:4e:30:2e:3b:98:87:39:a2:d0:3e:36:93:24:b6: 3b:0f:93:ce:16:e2:3d:b8:52:eb:47:09:f3:96:92:ff:79:ac: 2d:4d:61:bb:fd:87:4c:51:c2:09:09:1f:a0:c5:e9:4a:46:6d: f1:9a:2d:f2:ab:14:0d:b9:f1:8e:cc:df:0a:24:3c:48:33:c9: 4c:74:18:9c:92:15:82:ec:5a:5e:70:f5:6e:11:f0:59:69:f0: 01:71:a3:1a -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw OTM5NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYyMTc3QUUyQzM5QTBF MjY0MkEwQzQ4NEEzQ0Y0QUQ1RjMyQTg2NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDd+4fe0BFOz/XxbeYTvYB7WlVbI+nr/IGinCh+ZJH+ENcb9uUO Q8Oxs++jHJ0w6yvscZk73ud6sy1CopLq5PBBwOBuvYZv5hB8spDifjBoo8GYGBmU ZKn4UHJFobCKEScxKl2Bf3GYD/801FkYSN2ZkQGKtl8yZCxaJcsiOCFim6Cvant+ oHmAD1O9s3neQKQovys4GMN/Sn9/zJK1PVnwdhFx3brbh8DObdRu+adbMWhgSCrq UG0uOjEFAE5yZ2g6IWZUK3PAazly0az3u0lD3h5smRzTCxl3wqMFuI+23m1wrsat aB3onh7e84Ui8OQaMNtH/ozGhPh+nIRUm9PjAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUYhd64sOaDiZCoMSEo89K1fMqhnAwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vWWhkNjRzT2FEaVpDb01TRW84OUsx Zk1xaG5BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bLTAN BgkqhkiG9w0BAQsFAAOCAQEAgSALC552ijxCiwFmkmR1ZWcncgwQdRpxMKlR+mU+ XSveE7o4sR4FSIEFMquW6ip+CF92TSuJDNEXrvwmGGsK6XgS2+KtncSOcTZE4bmj tSDshAdetAfRzk6+cacEovJS2YCtwi4id4Lp1QvNCAMp8W9AxVCuQWXa00yuYNAM C9hv6EwFtKkWfvZ/PUzH/6K5tkZfW1y5qnAz1viu91g2SSE5QEEHvE4wLjuYhzmi 0D42kyS2Ow+TzhbiPbhS60cJ85aS/3msLU1hu/2HTFHCCQkfoMXpSkZt8Zot8qsU DbnxjszfCiQ8SDPJTHQYnJIVguxaXnD1bhHwWWnwAXGjGg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org