$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/yWZO2AwQALbcIy77MoCsiRVrNnU.roa File: yWZO2AwQALbcIy77MoCsiRVrNnU.roa (raw, json) Hash identifier: rveaSx+3C9vn+1KMi02VtdyLkO95KgRwyN5uGknv/1o= Subject key identifier: C9:66:4E:D8:0C:10:00:B6:DC:23:2E:FB:32:80:AC:89:15:6B:36:75 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0CC9 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/yWZO2AwQALbcIy77MoCsiRVrNnU.roa Signing time: Fri 01 Sep 2023 09:39:46 +0000 ROA not before: Fri 01 Sep 2023 09:39:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38843 IP address blocks: 223.27.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3273 (0xcc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Sep 1 09:39:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C9664ED80C1000B6DC232EFB3280AC89156B3675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:31:c1:56:2d:62:c1:ef:e6:77:55:5b:d4: 89:81:c6:11:a3:3c:a2:79:90:38:f5:73:3a:c3:89: 97:41:14:38:cf:3f:a7:c2:9e:cf:52:9c:49:36:2c: 28:b1:03:71:f3:f8:0a:b7:9e:7a:91:98:dd:28:1b: e8:41:ec:d4:e8:6c:6a:b9:c7:c0:b7:f2:fb:80:2d: b9:99:b8:2d:73:87:ec:24:32:6b:8f:97:b8:6e:b4: a4:1a:8d:ed:4b:c4:76:bf:a9:e2:a9:fd:f4:80:93: 97:34:a0:e9:36:44:e4:a3:6f:f9:0c:bf:ea:e4:36: 53:83:b1:32:59:b9:14:e9:dd:bf:52:7a:3d:90:cc: cc:f3:43:55:89:bf:3a:da:9f:af:30:07:b8:33:75: a3:6d:95:12:bc:61:86:70:f7:f0:3e:fa:e5:ef:86: a2:39:e5:8c:85:6f:10:1d:e7:c0:98:3b:5e:ab:bb: 21:2d:43:52:b2:ef:6b:18:9c:5a:7b:68:7c:e4:7b: 4b:79:d7:60:ad:d1:0b:40:34:35:c3:14:50:8c:40: 65:96:07:6e:54:c3:de:13:8e:5f:16:a1:f6:21:1a: 38:bf:c7:82:be:2c:60:e1:93:e3:75:8d:c6:8c:bb: 17:30:02:76:e6:ab:ed:62:f0:b6:7a:cd:5f:57:5b: f4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:66:4E:D8:0C:10:00:B6:DC:23:2E:FB:32:80:AC:89:15:6B:36:75 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/yWZO2AwQALbcIy77MoCsiRVrNnU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.27.38.0/24 Signature Algorithm: sha256WithRSAEncryption a1:05:fb:6f:05:ee:57:ca:83:ca:16:27:97:46:03:6e:c7:1c: cc:89:a1:4f:ec:02:c6:36:a1:63:d5:d5:81:33:a2:ec:53:67: 5a:60:e1:73:46:9d:f4:5f:4e:17:ec:d6:35:37:c1:5e:f6:a6: 67:0a:b5:55:41:6c:0e:f7:0a:9d:1e:c8:62:e6:bc:fb:ce:10: 93:b1:5a:7b:9b:95:5f:c7:7f:7a:47:53:70:13:93:1b:4a:e5: 24:94:6a:71:7b:a2:ae:ac:15:dc:24:08:78:9f:60:65:f1:c6: 0b:ca:34:3f:6f:86:2b:7f:21:6a:0b:17:f4:b7:b3:2b:09:6f: 74:04:c1:d2:e4:3c:cd:42:d9:90:9d:9c:87:5e:78:2f:bb:b6: b2:93:51:a0:45:b2:f5:70:f2:37:85:15:d7:92:a6:2a:18:1a: a8:83:ed:8e:1c:e8:18:f0:d4:03:64:42:6e:63:e5:0e:0c:03: f8:43:a9:ee:a1:48:ce:15:55:4e:40:2c:01:f9:83:7d:5f:b4: 55:aa:d0:ff:e1:87:dc:b7:f7:04:3f:fd:d0:0d:64:a6:11:e2: c0:65:02:6c:9f:89:29:0f:1b:8d:de:01:a3:9d:7e:d9:ad:c4: 23:db:39:ce:0f:27:62:d8:ef:52:0f:48:8f:95:96:c6:72:77: 41:80:f3:f9 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw OTM5NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM5NjY0RUQ4MEMxMDAw QjZEQzIzMkVGQjMyODBBQzg5MTU2QjM2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFkDHBVi1iwe/md1Vb1ImBxhGjPKJ5kDj1czrDiZdBFDjPP6fC ns9SnEk2LCixA3Hz+Aq3nnqRmN0oG+hB7NTobGq5x8C38vuALbmZuC1zh+wkMmuP l7hutKQaje1LxHa/qeKp/fSAk5c0oOk2ROSjb/kMv+rkNlODsTJZuRTp3b9Sej2Q zMzzQ1WJvzran68wB7gzdaNtlRK8YYZw9/A++uXvhqI55YyFbxAd58CYO16ruyEt Q1Ky72sYnFp7aHzke0t512Ct0QtANDXDFFCMQGWWB25Uw94Tjl8WofYhGji/x4K+ LGDhk+N1jcaMuxcwAnbmq+1i8LZ6zV9XW/RbAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUyWZO2AwQALbcIy77MoCsiRVrNnUwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8veVdaTzJBd1FBTGJjSXk3N01vQ3Np UlZyTm5VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAN8bJjAN BgkqhkiG9w0BAQsFAAOCAQEAoQX7bwXuV8qDyhYnl0YDbscczImhT+wCxjahY9XV gTOi7FNnWmDhc0ad9F9OF+zWNTfBXvamZwq1VUFsDvcKnR7IYua8+84Qk7Fae5uV X8d/ekdTcBOTG0rlJJRqcXuirqwV3CQIeJ9gZfHGC8o0P2+GK38hagsX9LezKwlv dATB0uQ8zULZkJ2ch154L7u2spNRoEWy9XDyN4UV15KmKhgaqIPtjhzoGPDUA2RC bmPlDgwD+EOp7qFIzhVVTkAsAfmDfV+0VarQ/+GH3Lf3BD/90A1kphHiwGUCbJ+J KQ8bjd4Bo51+2a3EI9s5zg8nYtjvUg9Ij5WWxnJ3QYDz+Q== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:42 2024 by rpki-client on console-fra.rpki-client.org