$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/FTJfJ0QSFn3byFNupq7S1CNPC8s.roa File: FTJfJ0QSFn3byFNupq7S1CNPC8s.roa (raw, json) Hash identifier: X7EdtyTSz9kwqomaQG97Ll2HxzrXwbBYF2PbtKSRCgg= Subject key identifier: 15:32:5F:27:44:12:16:7D:DB:C8:53:6E:A6:AE:D2:D4:23:4F:0B:CB Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0BAC Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/FTJfJ0QSFn3byFNupq7S1CNPC8s.roa Signing time: Tue 28 Nov 2023 06:06:44 +0000 ROA not before: Tue 28 Nov 2023 06:06:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 39.1.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 10:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2988 (0xbac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Nov 28 06:06:44 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=15325F274412167DDBC8536EA6AED2D4234F0BCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:ee:a0:c5:64:f4:ce:d8:11:31:81:b1:0a: 88:b0:ac:bc:ab:e0:35:6a:b2:20:01:6e:10:ef:e5: 51:f2:a3:53:1b:5e:4f:7a:e4:97:02:f6:4e:ff:a1: 40:95:52:fd:99:af:69:32:7e:c8:53:c4:d0:1e:41: 9d:be:f2:e7:38:dd:12:5a:b6:82:5a:ac:4d:db:06: 12:e3:f2:b6:e7:46:0a:11:d2:60:97:af:b4:42:85: 82:72:97:1e:5f:c8:f5:c2:7f:a7:41:cc:81:e2:20: d8:06:00:be:7a:ef:1b:8b:15:84:2e:23:8b:6c:60: 70:9d:b0:7a:64:64:54:75:89:dd:4a:a4:1b:2f:d2: f8:e2:7a:3f:ab:10:c1:28:0d:d3:b6:c8:77:af:03: bf:c3:bd:62:22:d9:3b:85:7a:50:ec:ab:3c:12:1f: 38:e3:cd:83:da:3b:2b:9f:03:81:20:af:40:33:d7: 43:0b:17:98:79:2c:8f:17:7a:ed:5a:e4:a0:99:0e: 13:e5:0f:28:79:a9:26:94:b8:bc:22:e7:fa:58:5e: 6d:9e:0e:5b:81:ff:bc:10:e1:e0:10:7f:af:df:6c: ea:bd:d2:ad:db:fd:66:73:ee:bf:20:c4:87:3d:35: f8:fb:b2:5c:85:99:ae:dc:3c:d3:5b:b3:1d:37:3b: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:32:5F:27:44:12:16:7D:DB:C8:53:6E:A6:AE:D2:D4:23:4F:0B:CB X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/FTJfJ0QSFn3byFNupq7S1CNPC8s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 39.1.16.0/20 Signature Algorithm: sha256WithRSAEncryption 96:da:b9:85:c0:4a:32:6e:75:ca:80:53:65:ef:46:75:8f:e5: 4f:e5:db:ea:ef:8a:e5:a9:e2:13:cc:3b:9c:e7:f3:f9:28:45: d6:89:8a:8f:ab:8d:ba:ee:dd:48:cc:37:6c:46:a2:7d:08:ba: d8:a0:36:7b:43:dc:a1:28:96:93:5b:cc:7c:e3:67:1d:18:eb: db:6a:68:69:94:47:a9:a8:e2:16:40:99:49:da:66:7d:57:09: 0f:7e:8f:4f:6a:37:34:c5:e8:e3:a2:a3:ab:88:e7:0d:41:a4: 18:a9:e3:65:b4:c0:0a:f8:9a:f2:79:21:aa:e7:20:37:10:d0: 8c:d9:02:ed:9c:7b:17:d0:1d:7c:93:3d:54:77:03:04:86:f1: 94:95:0d:39:a2:78:47:1b:37:2f:ba:4e:c0:aa:71:b3:b9:0c: 7e:77:87:9e:c6:31:99:51:7f:7d:b7:0b:93:44:0b:f3:7e:1b: ce:7f:ae:b2:55:d3:01:0d:72:00:82:34:e4:2e:56:8e:78:27: c3:eb:af:68:84:bb:a2:2e:28:68:be:17:34:43:78:c7:d6:62: c5:75:aa:1e:76:79:6c:06:aa:15:03:4a:90:4a:b5:d7:70:12: 14:be:be:ad:60:c6:f0:28:78:d8:29:19:55:26:5e:4b:a6:28: 1e:51:40:07 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yMzExMjgw NjA2NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE1MzI1RjI3NDQxMjE2 N0REQkM4NTM2RUE2QUVEMkQ0MjM0RjBCQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI0+6gxWT0ztgRMYGxCoiwrLyr4DVqsiABbhDv5VHyo1MbXk96 5JcC9k7/oUCVUv2Zr2kyfshTxNAeQZ2+8uc43RJatoJarE3bBhLj8rbnRgoR0mCX r7RChYJylx5fyPXCf6dBzIHiINgGAL567xuLFYQuI4tsYHCdsHpkZFR1id1KpBsv 0vjiej+rEMEoDdO2yHevA7/DvWIi2TuFelDsqzwSHzjjzYPaOyufA4Egr0Az10ML F5h5LI8Xeu1a5KCZDhPlDyh5qSaUuLwi5/pYXm2eDluB/7wQ4eAQf6/fbOq90q3b /WZz7r8gxIc9Nfj7slyFma7cPNNbsx03O7b1AgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUFTJfJ0QSFn3byFNupq7S1CNPC8swHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9GVEpmSjBRU0ZuM2J5Rk51cHE3 UzFDTlBDOHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJwEQ MA0GCSqGSIb3DQEBCwUAA4IBAQCW2rmFwEoybnXKgFNl70Z1j+VP5dvq74rlqeIT zDuc5/P5KEXWiYqPq4267t1IzDdsRqJ9CLrYoDZ7Q9yhKJaTW8x842cdGOvbamhp lEepqOIWQJlJ2mZ9VwkPfo9Pajc0xejjoqOriOcNQaQYqeNltMAK+JryeSGq5yA3 ENCM2QLtnHsX0B18kz1UdwMEhvGUlQ05onhHGzcvuk7AqnGzuQx+d4eexjGZUX99 twuTRAvzfhvOf66yVdMBDXIAgjTkLlaOeCfD669ohLuiLihovhc0Q3jH1mLFdaoe dnlsBqoVA0qQSrXXcBIUvr6tYMbwKHjYKRlVJl5LpigeUUAH -----END CERTIFICATE-----Generated at Sat Jun 1 15:05:03 2024 by rpki-client on console-fra.rpki-client.org