$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TSMC/IfiD3mC-71dCAkLlVAaGkKqNa14.roa File: IfiD3mC-71dCAkLlVAaGkKqNa14.roa (raw, json) Hash identifier: GBzPWpIdGiSXhYlLpLEoixlc3vRx2OAUJViykhnObro= Subject key identifier: 21:F8:83:DE:60:BE:EF:57:42:02:42:E5:54:06:86:90:AA:8D:6B:5E Certificate issuer: /CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337 Certificate serial: 1198 Authority key identifier: 3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/IfiD3mC-71dCAkLlVAaGkKqNa14.roa Signing time: Fri 01 Sep 2023 10:01:49 +0000 ROA not before: Fri 01 Sep 2023 10:01:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 23675 IP address blocks: 202.126.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4504 (0x1198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A6BE8FAD78E95C4690ED99991FA79DF75F3D337 Validity Not Before: Sep 1 10:01:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=21F883DE60BEEF57420242E554068690AA8D6B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:c2:c7:d7:67:ce:17:e1:b4:d5:ba:18:7d: bb:2e:dd:50:f7:a5:91:14:a1:c3:70:d7:b7:48:05: ed:b7:d8:a5:66:fe:07:8c:4e:30:78:90:6f:7f:f9: de:62:d8:18:76:08:b9:0b:48:6b:99:b8:5d:aa:27: a8:c9:44:78:10:3a:97:2c:84:d1:94:6b:bf:d7:8f: c5:8c:5b:f6:f0:52:c0:f7:e7:26:1c:db:2f:59:64: b2:c3:0d:69:5f:f6:04:48:2d:a1:bb:75:59:85:23: 76:36:05:8d:1c:f6:df:94:94:a1:b3:fd:eb:9d:6b: 02:b6:ea:7a:5b:be:cd:07:82:67:8f:1d:b3:10:50: 61:d0:e2:0c:12:41:e5:8e:d2:56:0c:9f:dd:d3:d0: 44:74:80:c9:05:63:a5:24:ed:4f:08:91:a6:f0:40: 10:5d:1a:18:0a:ac:0f:39:85:d1:d0:fc:c1:bd:fb: 79:ae:26:46:a8:95:9b:ac:57:18:a3:53:e3:63:7f: e7:5d:6e:e3:42:af:45:f6:0d:1e:38:38:90:37:03: 0a:08:d4:e5:1e:72:b4:6e:08:8b:49:dc:b4:82:6d: c0:88:a6:03:c1:d3:19:eb:7a:d4:f1:88:f8:f7:6a: 1d:4f:2c:36:80:67:b2:7f:55:06:2e:82:4b:d4:e3: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F8:83:DE:60:BE:EF:57:42:02:42:E5:54:06:86:90:AA:8D:6B:5E X509v3 Authority Key Identifier: keyid:3A:6B:E8:FA:D7:8E:95:C4:69:0E:D9:99:91:FA:79:DF:75:F3:D3:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/Omvo-teOlcRpDtmZkfp533Xz0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Omvo-teOlcRpDtmZkfp533Xz0zc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TSMC/IfiD3mC-71dCAkLlVAaGkKqNa14.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.126.64.0/20 Signature Algorithm: sha256WithRSAEncryption 55:b6:36:99:99:8b:58:fa:9f:13:35:ff:ae:c1:28:6c:6a:b5: 9b:dc:44:b0:1d:f5:b6:30:50:74:84:1a:3a:a6:6b:8c:58:62: 45:6b:07:44:ec:0b:45:68:e9:dc:c4:c8:6f:53:a9:be:bf:0c: 4f:25:e4:7b:3e:93:be:cb:a9:58:68:02:db:ef:16:3c:43:f2: 60:d7:4e:08:92:e7:4c:53:b2:68:06:71:65:54:93:a1:01:d8: ea:d5:8a:78:50:4e:4c:79:cf:8f:68:31:c1:2c:5b:11:0b:f1: fc:ec:85:85:74:74:c9:d3:fc:ed:62:b3:6e:46:06:c2:24:65: 1f:9b:e8:5f:c2:99:5f:24:a9:21:ae:1b:21:29:40:f2:f9:be: 09:13:86:95:de:ca:f3:42:b4:b0:da:30:5c:9e:23:8e:c6:35: 94:56:41:d1:c0:ea:9b:bb:12:7b:17:12:53:94:0a:e4:97:91: 14:38:31:99:ce:42:99:08:5d:33:ac:e6:4e:98:7d:5c:7f:ca: af:2d:46:7c:20:cb:de:07:af:44:90:b9:eb:5f:7c:57:65:1c: 20:6c:87:e4:7b:b0:10:68:be:b4:f9:18:4b:02:ac:c5:d1:ef: a0:9d:a6:07:5f:90:92:81:c2:8d:ff:4c:ad:76:d5:9c:c5:9b: 62:b4:ee:52 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0E2 QkU4RkFENzhFOTVDNDY5MEVEOTk5OTFGQTc5REY3NUYzRDMzNzAeFw0yMzA5MDEx MDAxNDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIxRjg4M0RFNjBCRUVG NTc0MjAyNDJFNTU0MDY4NjkwQUE4RDZCNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCV5sLH12fOF+G01boYfbsu3VD3pZEUocNw17dIBe232KVm/geM TjB4kG9/+d5i2Bh2CLkLSGuZuF2qJ6jJRHgQOpcshNGUa7/Xj8WMW/bwUsD35yYc 2y9ZZLLDDWlf9gRILaG7dVmFI3Y2BY0c9t+UlKGz/eudawK26npbvs0HgmePHbMQ UGHQ4gwSQeWO0lYMn93T0ER0gMkFY6Uk7U8IkabwQBBdGhgKrA85hdHQ/MG9+3mu JkaolZusVxijU+Njf+ddbuNCr0X2DR44OJA3AwoI1OUecrRuCItJ3LSCbcCIpgPB 0xnretTxiPj3ah1PLDaAZ7J/VQYugkvU42rPAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUIfiD3mC+71dCAkLlVAaGkKqNa14wHwYDVR0jBBgwFoAUOmvo+teOlcRpDtmZ kfp533Xz0zcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFNNQy9P bXZvLXRlT2xjUnBEdG1aa2ZwNTMzWHowemMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L09tdm8tdGVPbGNScER0bVprZnA1MzNYejB6Yy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RTTUMvSWZpRDNtQy03MWRDQWtMbFZBYUdr S3FOYTE0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMp+QDAN BgkqhkiG9w0BAQsFAAOCAQEAVbY2mZmLWPqfEzX/rsEobGq1m9xEsB31tjBQdIQa OqZrjFhiRWsHROwLRWjp3MTIb1Opvr8MTyXkez6TvsupWGgC2+8WPEPyYNdOCJLn TFOyaAZxZVSToQHY6tWKeFBOTHnPj2gxwSxbEQvx/OyFhXR0ydP87WKzbkYGwiRl H5voX8KZXySpIa4bISlA8vm+CROGld7K80K0sNowXJ4jjsY1lFZB0cDqm7sSexcS U5QK5JeRFDgxmc5CmQhdM6zmTph9XH/Kry1GfCDL3gevRJC56198V2UcIGyH5Huw EGi+tPkYSwKsxdHvoJ2mB1+QkoHCjf9MrXbVnMWbYrTuUg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:53 2024 by rpki-client on console-ams.rpki-client.org