$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-mDaPmd8TCGO63H4krFHqwF9xr4.roa File: -mDaPmd8TCGO63H4krFHqwF9xr4.roa (raw, json) Hash identifier: QO36esN67um8b5wuxujl46uW1M+0eM77DZzm2dCz8Tg= Subject key identifier: FA:60:DA:3E:67:7C:4C:21:8E:EB:71:F8:92:B1:47:AB:01:7D:C6:BE Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CAA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-mDaPmd8TCGO63H4krFHqwF9xr4.roa Signing time: Mon 15 Jan 2024 21:10:35 +0000 ROA not before: Mon 15 Jan 2024 21:10:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 210.201.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:35 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FA60DA3E677C4C218EEB71F892B147AB017DC6BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:0f:c7:4e:61:9e:aa:79:2b:c8:be:0a:27: 68:10:81:62:84:85:67:56:d2:b6:bc:0e:a7:53:25: 55:a5:46:72:65:0c:65:85:ae:ac:e0:b1:16:b8:7b: fe:1a:34:33:df:fa:73:df:0f:ba:ba:00:96:1b:db: 18:60:9f:51:89:6e:c6:4c:33:15:81:a3:cf:56:b0: e0:9f:4c:65:24:93:f5:04:d6:e8:49:ae:f9:46:86: b4:90:17:78:fd:2b:ee:fd:de:4d:d2:e5:e9:10:bd: 1a:ae:6c:ab:29:0a:67:76:48:bf:c4:98:a6:7d:3e: e6:12:93:02:81:55:ed:37:86:dc:da:5f:12:97:23: 7b:32:e7:02:46:69:6f:7d:6c:d1:14:05:cc:79:99: 2d:38:94:9f:54:a1:23:5b:4a:c0:68:c7:ec:60:44: 9b:e5:e1:55:0b:52:16:3b:e6:1a:6f:d8:17:f2:66: fc:fa:22:9d:ba:7a:3a:88:d1:d5:fe:bc:26:1e:5f: 4c:a6:c0:31:63:6c:0b:8d:c2:b4:c4:e3:11:d0:5f: bf:36:f9:29:3e:1b:94:4a:aa:91:ee:7c:22:14:fa: 8f:e7:f6:43:a5:64:f0:9a:6b:d7:f9:8b:8d:c6:4b: 72:4a:4d:5f:c3:71:95:f2:92:40:cb:4b:ca:76:e3: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:60:DA:3E:67:7C:4C:21:8E:EB:71:F8:92:B1:47:AB:01:7D:C6:BE X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-mDaPmd8TCGO63H4krFHqwF9xr4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.128.0/18 Signature Algorithm: sha256WithRSAEncryption 01:90:97:a6:41:a5:d7:6d:52:37:e7:82:4f:75:9e:b7:53:3b: 39:1e:e2:38:53:f1:83:af:f5:03:8b:32:69:78:68:62:b8:4d: 6e:23:25:8a:7b:22:3e:b8:4b:ce:b4:60:9d:dd:a0:55:f9:e4: a1:c9:76:f0:71:be:b9:74:57:2d:99:c4:d7:66:ca:3c:dd:09: 10:9e:d0:0d:85:14:33:d4:4e:a0:26:94:b0:36:e7:b5:d6:11: b2:b7:db:6a:0d:2e:4c:62:50:ba:ba:06:35:99:6d:d6:f8:13: 34:66:49:7c:af:c2:83:20:0c:d4:86:73:24:88:f4:61:69:14: 2e:9b:87:f4:9f:65:0d:e4:84:fc:82:97:00:75:d0:9c:9e:94: cb:64:8f:f4:f8:db:02:f2:1e:f0:c3:77:82:8d:db:0a:cf:4d: 73:a7:fd:db:84:45:ad:f7:b1:3f:a3:31:68:9c:69:64:08:75: 3e:e3:a2:dc:dd:7a:85:e2:7e:30:e8:5c:03:3d:d0:61:ff:82: 3d:e6:98:b3:39:02:d5:91:b9:01:8e:73:0f:78:49:40:22:66: 3f:64:1e:39:27:3d:81:15:da:b5:26:35:60:95:c4:91:10:68: 05:90:6f:8f:95:00:6b:54:a9:8e:56:0b:08:94:96:a1:64:07: 33:8d:c4:dc -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZBNjBEQTNFNjc3QzRD MjE4RUVCNzFGODkyQjE0N0FCMDE3REM2QkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiNg/HTmGeqnkryL4KJ2gQgWKEhWdW0ra8DqdTJVWlRnJlDGWF rqzgsRa4e/4aNDPf+nPfD7q6AJYb2xhgn1GJbsZMMxWBo89WsOCfTGUkk/UE1uhJ rvlGhrSQF3j9K+793k3S5ekQvRqubKspCmd2SL/EmKZ9PuYSkwKBVe03htzaXxKX I3sy5wJGaW99bNEUBcx5mS04lJ9UoSNbSsBox+xgRJvl4VULUhY75hpv2BfyZvz6 Ip26ejqI0dX+vCYeX0ymwDFjbAuNwrTE4xHQX782+Sk+G5RKqpHufCIU+o/n9kOl ZPCaa9f5i43GS3JKTV/DcZXykkDLS8p240ipAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU+mDaPmd8TCGO63H4krFHqwF9xr4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULy1tRGFQbWQ4VENHTzYzSDRrckZIcXdG OXhyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyYAwDQYJ KoZIhvcNAQELBQADggEBAAGQl6ZBpddtUjfngk91nrdTOzke4jhT8YOv9QOLMml4 aGK4TW4jJYp7Ij64S860YJ3doFX55KHJdvBxvrl0Vy2ZxNdmyjzdCRCe0A2FFDPU TqAmlLA257XWEbK322oNLkxiULq6BjWZbdb4EzRmSXyvwoMgDNSGcySI9GFpFC6b h/SfZQ3khPyClwB10JyelMtkj/T42wLyHvDDd4KN2wrPTXOn/duERa33sT+jMWic aWQIdT7jotzdeoXifjDoXAM90GH/gj3mmLM5AtWRuQGOcw94SUAiZj9kHjknPYEV 2rUmNWCVxJEQaAWQb4+VAGtUqY5WCwiUlqFkBzONxNw= -----END CERTIFICATE-----Generated at Sun Jun 2 19:20:43 2024 by rpki-client on console-fra.rpki-client.org