$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/2XQzhGnLVFHNzeitnTJzzu85Slo.roa File: 2XQzhGnLVFHNzeitnTJzzu85Slo.roa (raw, json) Hash identifier: 9SsNDYzNhjbiyWPgKxcb8mkQmkg/q2AzJSzrsZNndlE= Subject key identifier: D9:74:33:84:69:CB:54:51:CD:CD:E8:AD:9D:32:73:CE:EF:39:4A:5A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0E4A Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2XQzhGnLVFHNzeitnTJzzu85Slo.roa Signing time: Tue 16 Apr 2024 09:16:25 +0000 ROA not before: Tue 16 Apr 2024 09:16:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 218.34.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3658 (0xe4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Apr 16 09:16:25 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D974338469CB5451CDCDE8AD9D3273CEEF394A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2e:73:49:1c:94:9a:ce:88:ff:4f:f8:e9:26: 45:da:1b:79:b3:30:7a:ea:3f:7d:4a:34:5c:58:01: ad:22:94:1d:39:42:ad:8f:01:a2:4c:1d:c5:45:c4: 8e:4d:03:f3:6a:b5:f4:07:60:c9:5a:b4:f6:b5:64: bb:d5:6d:a8:4b:52:6d:23:c8:2b:40:19:96:ea:0c: a1:5a:64:ed:15:5b:40:f5:86:54:d8:1c:43:52:8d: db:4e:52:f3:cf:04:48:6d:c7:ce:21:c9:b3:c7:4c: 3e:15:80:5f:d0:56:e2:e3:7f:2d:86:1c:8c:d4:f2: dc:c2:f7:81:0a:12:60:50:02:8f:ff:bf:76:c7:92: 52:3e:98:4a:48:65:0e:0b:f0:f3:72:b8:10:41:4f: 7b:4e:5f:71:a9:c1:c4:2d:cf:29:55:ca:83:81:c4: 97:16:a3:28:9e:d7:5b:05:71:2f:c2:21:0e:fe:7d: 28:fd:76:7d:c8:79:72:9b:6e:05:be:88:de:9d:73: 25:f9:0a:96:66:04:69:6d:89:2c:4a:fc:63:7e:66: f4:c1:d2:67:5d:d7:50:79:a2:d6:5f:f9:40:c0:58: 86:61:3d:22:f5:37:51:26:dd:af:a9:48:06:78:52: 4b:5b:9f:1f:ed:88:ce:d0:fd:54:7b:b8:a2:9d:98: 84:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:74:33:84:69:CB:54:51:CD:CD:E8:AD:9D:32:73:CE:EF:39:4A:5A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/2XQzhGnLVFHNzeitnTJzzu85Slo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.96.0/21 Signature Algorithm: sha256WithRSAEncryption 69:10:7d:bc:33:2c:eb:d2:d1:3a:7a:06:73:11:ad:e6:93:b4: a5:74:37:a8:0a:86:5a:35:11:81:a6:23:da:1e:54:1f:5f:34: 82:8c:dd:41:5e:b2:fa:1d:e9:be:77:c1:1f:9c:98:1d:cd:c5: ca:94:f3:e3:1b:f4:bf:13:e0:67:0d:35:4b:fe:65:b9:e4:10: 73:a7:fa:5f:ba:15:9b:05:0d:3e:c2:e1:ce:3f:a8:54:85:06: a9:01:80:16:38:31:58:82:38:8b:ec:77:43:6c:03:83:6f:65: b7:95:6f:1b:a7:8f:54:c8:82:df:6e:27:5e:bf:15:80:85:3b: 2c:bf:26:e2:d7:fc:50:f4:49:b6:81:ee:4a:ad:4f:cd:2c:ac: 1b:04:64:33:7b:8a:70:c1:e6:29:4c:9f:cb:55:07:91:30:57: fc:26:79:7f:e7:38:e2:3d:b3:f9:1b:37:43:99:fb:cf:56:f7: 58:ba:de:cf:f7:23:47:74:09:73:63:a6:9f:d0:7d:80:07:b7: 1c:d3:5b:6d:0e:f7:fa:f1:b1:dd:0e:e9:c3:0a:51:4d:96:43: ae:70:3a:44:29:c7:75:e8:a4:f0:ab:c1:22:2d:f0:11:22:71: 6b:40:9f:ab:01:2b:bd:70:5d:77:81:a4:23:e1:9c:14:0b:b3: ce:8a:aa:38 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA0MTYw OTE2MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQ5NzQzMzg0NjlDQjU0 NTFDRENERThBRDlEMzI3M0NFRUYzOTRBNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkLnNJHJSazoj/T/jpJkXaG3mzMHrqP31KNFxYAa0ilB05Qq2P AaJMHcVFxI5NA/NqtfQHYMlatPa1ZLvVbahLUm0jyCtAGZbqDKFaZO0VW0D1hlTY HENSjdtOUvPPBEhtx84hybPHTD4VgF/QVuLjfy2GHIzU8tzC94EKEmBQAo//v3bH klI+mEpIZQ4L8PNyuBBBT3tOX3GpwcQtzylVyoOBxJcWoyie11sFcS/CIQ7+fSj9 dn3IeXKbbgW+iN6dcyX5CpZmBGltiSxK/GN+ZvTB0mdd11B5otZf+UDAWIZhPSL1 N1Em3a+pSAZ4Uktbnx/tiM7Q/VR7uKKdmITZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU2XQzhGnLVFHNzeitnTJzzu85SlowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzJYUXpoR25MVkZITnplaXRuVEp6enU4 NVNsby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPaImAwDQYJ KoZIhvcNAQELBQADggEBAGkQfbwzLOvS0Tp6BnMRreaTtKV0N6gKhlo1EYGmI9oe VB9fNIKM3UFesvod6b53wR+cmB3NxcqU8+Mb9L8T4GcNNUv+ZbnkEHOn+l+6FZsF DT7C4c4/qFSFBqkBgBY4MViCOIvsd0NsA4NvZbeVbxunj1TIgt9uJ16/FYCFOyy/ JuLX/FD0SbaB7kqtT80srBsEZDN7inDB5ilMn8tVB5EwV/wmeX/nOOI9s/kbN0OZ +89W91i63s/3I0d0CXNjpp/QfYAHtxzTW20O9/rxsd0O6cMKUU2WQ65wOkQpx3Xo pPCrwSIt8BEicWtAn6sBK71wXXeBpCPhnBQLs86Kqjg= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org