$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6BC7a_IlG1q74Ndz_k4a2W1rX0A.roa File: 6BC7a_IlG1q74Ndz_k4a2W1rX0A.roa (raw, json) Hash identifier: eq6poeoesFX70UeDvyQVs7Tpnc3piY3uInZq4Pp6bBw= Subject key identifier: E8:10:BB:6B:F2:25:1B:5A:BB:E0:D7:73:FE:4E:1A:D9:6D:6B:5F:40 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 10C3 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6BC7a_IlG1q74Ndz_k4a2W1rX0A.roa Signing time: Mon 26 Aug 2024 05:16:46 +0000 ROA not before: Mon 26 Aug 2024 05:16:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 222.156.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4291 (0x10c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E810BB6BF2251B5ABBE0D773FE4E1AD96D6B5F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:ae:80:f5:1e:d2:3c:d2:f3:3b:20:09:13: ba:ee:05:09:35:0b:d3:26:3a:ff:8a:8e:c6:ad:fe: e4:e1:0e:c0:02:72:cc:56:e0:bf:cf:b1:e5:7a:89: 8d:19:c1:ef:07:cd:9a:c5:b2:f7:1a:3a:ba:03:06: d7:24:db:58:90:4d:35:22:52:6e:06:f0:18:85:d5: d2:21:1f:c0:d3:49:ad:a2:4b:15:cc:f5:82:00:c3: b8:23:f8:6d:72:27:f7:2f:ab:ae:5d:57:1f:95:48: a6:d0:c2:9d:e3:06:17:aa:09:47:f5:ba:ba:61:8e: 45:83:1d:69:dd:db:0b:50:06:68:82:da:17:0f:8f: 57:60:82:c2:51:18:98:c0:6d:ed:00:03:d5:b7:d8: 40:f8:7d:70:5e:7d:03:bb:9b:fb:f6:08:9d:cd:4b: 79:a9:6f:53:5a:c4:43:c2:f5:13:87:31:74:46:00: ef:c5:94:ae:5d:89:2f:a2:5c:c2:e3:c1:a5:fd:bb: ce:6c:18:1b:90:84:f7:8f:93:09:21:46:d8:cf:dc: de:99:00:7e:a7:e9:74:36:7e:ee:0c:f9:52:18:a2: 53:65:59:5b:01:19:ce:50:e8:e0:97:3e:51:0b:f2: 0d:fd:cf:fd:17:48:c9:bf:b0:7a:70:89:46:83:3d: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:10:BB:6B:F2:25:1B:5A:BB:E0:D7:73:FE:4E:1A:D9:6D:6B:5F:40 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6BC7a_IlG1q74Ndz_k4a2W1rX0A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.156.0.0/16 Signature Algorithm: sha256WithRSAEncryption cc:cf:df:72:aa:9b:79:f6:df:9c:92:96:70:34:91:7d:8d:e3: 3e:e6:f9:19:8b:e1:2f:c1:5b:dd:ce:d8:59:15:7f:75:5b:87: 40:85:3c:27:ab:28:33:1a:46:5a:48:27:05:75:21:2d:2c:51: b7:77:a1:d0:75:0b:06:bc:c9:af:ae:fd:ee:d3:19:31:c8:aa: 31:58:52:d2:f8:ca:09:d4:fa:82:7b:ba:dd:7e:46:d3:c4:46: ce:a5:3e:32:dc:f9:af:0d:c5:3f:ca:13:d3:7e:e6:43:d4:4a: 2a:b0:0c:44:1c:a7:70:26:da:b4:ca:f6:f2:79:ae:5d:7e:10: d9:91:01:cf:5b:6f:11:b2:9c:c2:cb:03:66:41:15:bc:ad:26: 66:90:e6:f0:e1:b6:57:75:f7:de:86:22:3b:49:cf:e7:a4:e3: 5f:8a:e3:4b:c7:66:03:67:44:83:0e:e0:38:08:f3:cc:ea:2a: 40:72:17:71:21:86:12:04:c5:99:1f:e1:60:b0:63:74:7f:37: d0:7a:0a:cf:d6:f2:48:f6:1d:a5:00:78:1d:c2:7a:21:11:d5: 80:b6:9f:b0:ac:71:48:5d:12:d7:f3:e0:c7:32:3f:ab:0e:67: 7a:fc:d2:81:a4:5b:10:3c:30:91:70:53:54:0e:ea:59:0a:0f: 19:6f:1e:87 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICEMMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4MTBCQjZCRjIyNTFC NUFCQkUwRDc3M0ZFNEUxQUQ5NkQ2QjVGNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpmK6A9R7SPNLzOyAJE7ruBQk1C9MmOv+Kjsat/uThDsACcsxW 4L/PseV6iY0Zwe8HzZrFsvcaOroDBtck21iQTTUiUm4G8BiF1dIhH8DTSa2iSxXM 9YIAw7gj+G1yJ/cvq65dVx+VSKbQwp3jBheqCUf1urphjkWDHWnd2wtQBmiC2hcP j1dggsJRGJjAbe0AA9W32ED4fXBefQO7m/v2CJ3NS3mpb1NaxEPC9ROHMXRGAO/F lK5diS+iXMLjwaX9u85sGBuQhPePkwkhRtjP3N6ZAH6n6XQ2fu4M+VIYolNlWVsB Gc5Q6OCXPlEL8g39z/0XSMm/sHpwiUaDPTetAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQU6BC7a/IlG1q74Ndz/k4a2W1rX0AwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZCQzdhX0lsRzFxNzROZHpfazRhMlcx clgwQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDenDANBgkq hkiG9w0BAQsFAAOCAQEAzM/fcqqbefbfnJKWcDSRfY3jPub5GYvhL8Fb3c7YWRV/ dVuHQIU8J6soMxpGWkgnBXUhLSxRt3eh0HULBrzJr6797tMZMciqMVhS0vjKCdT6 gnu63X5G08RGzqU+Mtz5rw3FP8oT037mQ9RKKrAMRByncCbatMr28nmuXX4Q2ZEB z1tvEbKcwssDZkEVvK0mZpDm8OG2V3X33oYiO0nP56TjX4rjS8dmA2dEgw7gOAjz zOoqQHIXcSGGEgTFmR/hYLBjdH830HoKz9bySPYdpQB4HcJ6IRHVgLafsKxxSF0S 1/PgxzI/qw5nevzSgaRbEDwwkXBTVA7qWQoPGW8ehw== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:04 2024 by rpki-client on console-ams.rpki-client.org