$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/uMekgn0pq_MNwGgK9PMhnA1ZS5s.roa File: uMekgn0pq_MNwGgK9PMhnA1ZS5s.roa (raw, json) Hash identifier: 08LI1J3XqsA08nzVf9LY338SJHIjMoGOgKfHRX/kK6Q= Subject key identifier: B8:C7:A4:82:7D:29:AB:F3:0D:C0:68:0A:F4:F3:21:9C:0D:59:4B:9B Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0CD6 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/uMekgn0pq_MNwGgK9PMhnA1ZS5s.roa Signing time: Fri 01 Sep 2023 09:39:50 +0000 ROA not before: Fri 01 Sep 2023 09:39:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38843 IP address blocks: 223.27.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Sep 1 09:39:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B8C7A4827D29ABF30DC0680AF4F3219C0D594B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:0d:37:62:20:73:9b:02:ac:16:8d:e0:86: c1:45:60:c0:11:8d:61:e5:90:23:c1:b8:e8:ac:2e: 49:9c:ac:a5:f8:b2:9c:72:5f:8d:65:86:46:25:53: 20:77:81:85:d5:c1:03:7c:0b:ad:2c:45:c8:b7:d4: 2f:01:c1:8e:e7:33:f3:09:a3:66:0c:7c:e5:93:d0: c1:ec:b7:b7:9d:68:8d:63:67:a5:c7:13:63:d3:f5: 57:f4:76:10:de:50:a4:13:e3:62:ba:e7:ce:26:53: bd:64:63:b2:86:8e:e2:be:26:58:ca:c1:67:d4:ce: 01:89:4a:10:ea:d2:4c:e4:c6:d2:3a:c3:f0:45:78: f2:7b:19:f8:0b:d9:e4:d9:4d:7a:e7:d3:b2:83:83: e8:39:76:e2:39:a6:9a:f0:f2:13:af:41:d8:ba:61: 3b:5d:5f:36:19:6e:13:88:ab:90:32:ba:bd:1e:3b: 64:6f:af:f5:55:af:38:08:7b:ca:52:bb:49:41:46: 87:d6:a7:1c:5c:93:f7:36:7f:bf:ba:17:ce:a1:7b: 53:e7:48:f8:50:c5:20:59:8a:d7:5a:31:4a:84:fd: 93:2e:f9:77:11:e6:7e:d2:34:06:67:5d:43:e6:f7: 82:b4:25:4e:c8:e3:ef:ce:7f:fa:c9:96:1d:86:1b: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C7:A4:82:7D:29:AB:F3:0D:C0:68:0A:F4:F3:21:9C:0D:59:4B:9B X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/uMekgn0pq_MNwGgK9PMhnA1ZS5s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.44.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:49:3c:ed:b5:f5:c2:9a:ea:8a:f4:13:66:96:d4:e9:96:db: 19:e9:4a:ba:8c:4f:6c:63:93:7e:b2:0a:99:71:7f:66:dc:4e: 65:da:f8:2f:df:70:b1:a3:02:d4:44:cd:47:5e:f7:11:af:e0: 8d:57:46:76:14:e4:74:e2:4e:d3:be:25:64:98:7e:d9:e6:65: 44:2e:57:b9:cd:1a:44:f0:51:cf:5c:dd:9e:56:c9:4e:7d:ae: a6:34:63:09:ea:a4:29:2d:32:14:9b:64:87:62:a2:60:53:40: 99:6f:42:45:d0:87:dd:91:35:f6:d2:3f:8b:5b:e8:e5:7d:92: d4:36:e2:09:d8:a5:12:a4:cd:76:16:75:0d:8e:bd:7c:bb:87: 76:6d:3c:47:a2:e5:da:e0:df:b5:1c:45:ec:52:1d:b8:90:c7: d6:ec:4a:84:4a:3b:13:3d:09:33:cf:a1:8b:8a:29:79:c0:a7: 9e:c6:85:71:8f:ef:44:f0:6a:a3:bf:ee:43:5a:3b:9e:11:fb: b6:7e:e0:19:f0:22:06:ed:3c:3f:66:4a:d2:f7:a9:0e:7d:d4: ed:0a:e9:a0:e9:bb:cb:06:4e:d1:f3:66:d1:b1:bd:b6:83:c9: 63:5d:64:ad:27:d1:76:24:ec:f4:30:f0:ec:a0:70:b0:a1:06: 30:9f:e1:e8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw OTM5NTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI4QzdBNDgyN0QyOUFC RjMwREMwNjgwQUY0RjMyMTlDMEQ1OTRCOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQSw03YiBzmwKsFo3ghsFFYMARjWHlkCPBuOisLkmcrKX4spxy X41lhkYlUyB3gYXVwQN8C60sRci31C8BwY7nM/MJo2YMfOWT0MHst7edaI1jZ6XH E2PT9Vf0dhDeUKQT42K6584mU71kY7KGjuK+JljKwWfUzgGJShDq0kzkxtI6w/BF ePJ7GfgL2eTZTXrn07KDg+g5duI5pprw8hOvQdi6YTtdXzYZbhOIq5Ayur0eO2Rv r/VVrzgIe8pSu0lBRofWpxxck/c2f7+6F86he1PnSPhQxSBZitdaMUqE/ZMu+XcR 5n7SNAZnXUPm94K0JU7I4+/Of/rJlh2GG8h5AgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUuMekgn0pq/MNwGgK9PMhnA1ZS5swHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vdU1la2duMHBxX01Od0dnSzlQTWhu QTFaUzVzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAt8bLDAN BgkqhkiG9w0BAQsFAAOCAQEAK0k87bX1wprqivQTZpbU6ZbbGelKuoxPbGOTfrIK mXF/ZtxOZdr4L99wsaMC1ETNR173Ea/gjVdGdhTkdOJO074lZJh+2eZlRC5Xuc0a RPBRz1zdnlbJTn2upjRjCeqkKS0yFJtkh2KiYFNAmW9CRdCH3ZE19tI/i1vo5X2S 1DbiCdilEqTNdhZ1DY69fLuHdm08R6Ll2uDftRxF7FIduJDH1uxKhEo7Ez0JM8+h i4opecCnnsaFcY/vRPBqo7/uQ1o7nhH7tn7gGfAiBu08P2ZK0vepDn3U7QrpoOm7 ywZO0fNm0bG9toPJY11krSfRdiTs9DDw7KBwsKEGMJ/h6A== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:03 2024 by rpki-client on console-fra.rpki-client.org