$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-2EHIQAditndfyLmShOk9SU11Q0.roa File: -2EHIQAditndfyLmShOk9SU11Q0.roa (raw, json) Hash identifier: AD/vC20LPlk1tgM11+Oa2jApJZ/WAfVsLXaAHbuvkao= Subject key identifier: FB:61:07:21:00:1D:8A:D9:DD:7F:22:E6:4A:13:A4:F5:25:35:D5:0D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D04 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-2EHIQAditndfyLmShOk9SU11Q0.roa Signing time: Mon 15 Jan 2024 21:24:17 +0000 ROA not before: Mon 15 Jan 2024 21:24:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131591 IP address blocks: 223.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3332 (0xd04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:24:17 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FB610721001D8AD9DD7F22E64A13A4F52535D50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:25:b7:06:57:de:9c:61:0a:60:af:20:f7: 22:67:81:13:3a:fb:26:8b:ea:7d:83:9b:28:bd:b1: a5:55:ea:d3:51:62:3e:89:e2:2e:34:e9:4b:72:5d: 4c:5a:97:bd:f5:99:91:3f:75:73:7b:9c:8c:28:6a: 36:dd:89:6a:b7:a9:7f:2d:d8:86:89:b2:48:bd:5e: 98:b1:3a:bd:46:2c:50:4d:06:98:c6:cd:be:01:13: 09:24:91:61:72:72:e1:4c:50:7f:e8:59:a2:8d:c8: dd:fc:11:cd:83:12:b8:3e:b2:52:89:9b:02:9b:05: ad:58:ea:f1:de:92:61:33:71:43:1b:65:4c:fc:04: da:0c:73:0a:80:97:a7:af:dd:b9:08:f6:e9:9a:0e: 85:ad:14:07:17:1e:6e:ff:84:21:83:9a:2a:6b:1e: 6b:b9:e4:f3:6d:d6:d1:05:5e:36:6c:a2:dc:ae:89: 85:7b:fd:20:94:9b:fb:3d:62:70:59:a9:dc:51:f6: 0a:49:5e:10:bb:c3:24:4a:a1:01:44:ed:62:fb:77: a5:d7:db:36:8d:41:8d:48:2e:6f:08:40:f0:13:4d: 29:91:87:6a:e4:42:fa:75:34:89:69:f4:7b:c6:8c: 0c:10:c1:bc:10:dd:b7:8f:25:f6:bb:13:e0:f9:a3: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:61:07:21:00:1D:8A:D9:DD:7F:22:E6:4A:13:A4:F5:25:35:D5:0D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-2EHIQAditndfyLmShOk9SU11Q0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption a5:76:94:b7:bf:72:04:db:06:da:36:2f:13:9d:a2:14:2a:39: 39:4c:66:17:c4:f1:fc:30:e8:4f:3f:c8:fb:f9:8f:7d:4c:c4: 03:06:b6:32:8d:70:e5:60:31:ad:1d:28:38:43:ad:d3:3a:f5: b9:96:45:7a:87:b6:0c:61:7a:77:5e:62:c2:95:3b:28:8e:f5: fd:6d:8f:f4:f5:ee:5f:e8:88:ad:72:70:a0:b2:10:ee:2d:09: 6f:cf:8f:be:d3:73:9a:26:5a:cf:54:45:13:ce:62:ce:5b:e2: 84:b0:8e:ab:8a:eb:8a:34:86:1c:12:26:ec:e3:68:f2:92:ef: dc:21:4f:86:eb:28:cd:10:c0:52:c8:3c:6f:59:e4:c7:d8:db: 5e:0f:1e:b5:03:06:00:b1:0f:31:2d:16:6f:2c:13:cc:7b:1c: 3e:bc:f7:5c:63:fe:8d:f2:ff:27:85:a8:7b:2a:a4:17:2f:95: 33:a7:8c:2d:f8:f3:eb:80:26:b6:e3:93:30:cb:c4:af:4d:8d: 3e:f5:b0:19:ce:da:a0:ce:2c:0e:29:e3:ab:4b:ad:84:f2:65: ef:0c:77:2c:ff:b3:cb:09:e6:c6:87:d0:29:21:d3:67:6c:e4: bf:1b:b9:9f:27:64:38:39:4e:f3:97:ce:b3:58:a5:64:f8:96: fc:63:4e:41 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI0MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZCNjEwNzIxMDAxRDhB RDlERDdGMjJFNjRBMTNBNEY1MjUzNUQ1MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl7SW3BlfenGEKYK8g9yJngRM6+yaL6n2Dmyi9saVV6tNRYj6J 4i406UtyXUxal731mZE/dXN7nIwoajbdiWq3qX8t2IaJski9XpixOr1GLFBNBpjG zb4BEwkkkWFycuFMUH/oWaKNyN38Ec2DErg+slKJmwKbBa1Y6vHekmEzcUMbZUz8 BNoMcwqAl6ev3bkI9umaDoWtFAcXHm7/hCGDmiprHmu55PNt1tEFXjZsotyuiYV7 /SCUm/s9YnBZqdxR9gpJXhC7wyRKoQFE7WL7d6XX2zaNQY1ILm8IQPATTSmRh2rk Qvp1NIlp9HvGjAwQwbwQ3bePJfa7E+D5o081AgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQU+2EHIQAditndfyLmShOk9SU11Q0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy0yRUhJUUFkaXRuZGZ5TG1TaE9rOVNV MTFRMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDfFjANBgkq hkiG9w0BAQsFAAOCAQEApXaUt79yBNsG2jYvE52iFCo5OUxmF8Tx/DDoTz/I+/mP fUzEAwa2Mo1w5WAxrR0oOEOt0zr1uZZFeoe2DGF6d15iwpU7KI71/W2P9PXuX+iI rXJwoLIQ7i0Jb8+PvtNzmiZaz1RFE85izlvihLCOq4rrijSGHBIm7ONo8pLv3CFP husozRDAUsg8b1nkx9jbXg8etQMGALEPMS0WbywTzHscPrz3XGP+jfL/J4Woeyqk Fy+VM6eMLfjz64AmtuOTMMvEr02NPvWwGc7aoM4sDinjq0uthPJl7wx3LP+zywnm xofQKSHTZ2zkvxu5nydkODlO85fOs1ilZPiW/GNOQQ== -----END CERTIFICATE-----Generated at Sun Jun 2 21:48:26 2024 by rpki-client on console-ams.rpki-client.org