$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6XUrOBv22nG3oK4sXA3p9lxVEUQ.roa File: 6XUrOBv22nG3oK4sXA3p9lxVEUQ.roa (raw, json) Hash identifier: vI5ZfY0rqWg2MU4LOJejiQJwUm5mD6JLI0AF6I99smg= Subject key identifier: E9:75:2B:38:1B:F6:DA:71:B7:A0:AE:2C:5C:0D:E9:F6:5C:55:11:44 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DE0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6XUrOBv22nG3oK4sXA3p9lxVEUQ.roa Signing time: Mon 15 Jan 2024 21:35:10 +0000 ROA not before: Mon 15 Jan 2024 21:35:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 124.218.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3552 (0xde0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:35:10 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E9752B381BF6DA71B7A0AE2C5C0DE9F65C551144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9a:0e:53:2b:c8:7c:65:e4:58:50:80:3f:fa: fa:d3:df:d8:5c:a9:b7:d6:21:c1:5a:78:4a:68:f6: 3c:1b:6b:da:ee:67:58:a0:89:62:65:ca:10:fb:30: 23:45:0e:a9:c4:cd:6c:63:da:9b:7c:85:8a:21:ac: e2:a4:03:59:a1:97:31:74:fc:78:7b:8d:5d:fe:d2: 7f:3e:4a:33:07:b9:09:25:73:16:fc:5b:48:8c:53: de:e3:7d:c1:be:e3:f8:11:84:fc:eb:72:f6:b9:cb: e6:72:63:bd:a5:7a:7f:c1:d1:f0:18:df:e0:6b:6d: b1:02:32:fd:10:09:d1:ba:83:1f:15:b7:d3:86:00: 38:62:2d:eb:79:ee:d8:9e:cd:ca:8c:f3:cd:3d:a8: 57:7c:d4:85:cc:12:d7:82:6e:f8:2a:d4:b7:ba:04: c5:cf:c6:40:e7:17:4f:7f:cb:a6:c5:ae:53:f3:21: e4:13:7e:60:c6:d2:eb:c2:d0:d8:ff:79:11:b1:4a: c6:0b:93:b6:be:cf:f0:ab:13:f9:cf:21:22:d0:36: e4:ee:79:48:bd:b6:ae:ff:20:d8:e9:8d:00:14:6f: d8:f3:59:a7:dc:c1:12:bb:76:24:d4:d2:a3:48:a2: a5:3a:3c:4e:dd:6c:7d:da:9f:ba:74:60:2e:cc:a0: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:75:2B:38:1B:F6:DA:71:B7:A0:AE:2C:5C:0D:E9:F6:5C:55:11:44 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6XUrOBv22nG3oK4sXA3p9lxVEUQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.120.0/21 Signature Algorithm: sha256WithRSAEncryption 48:17:96:c4:cc:ee:7c:97:20:b9:7d:3f:79:b5:b7:24:09:20: 41:7f:4d:f8:8f:74:6c:1c:db:51:45:7a:e8:73:c0:cd:b3:dd: 23:fe:d6:47:01:5d:ef:d2:16:41:3d:85:cc:9f:6d:9f:2c:de: 9b:c0:28:75:d9:9d:96:6f:33:c0:1d:8d:16:74:fb:79:70:f2: fa:ac:60:b0:70:7e:5c:d5:0b:e2:e1:f0:fa:e7:ac:8b:b4:e8: 76:dd:83:41:ad:a5:21:76:e8:80:8b:32:cb:80:75:c8:7f:55: 87:54:92:1f:ff:81:0d:13:2d:be:8f:e2:aa:13:c0:e9:4a:67: f9:7f:ad:fa:e8:5c:ac:53:74:4d:78:ca:64:c4:07:8e:d6:49: b1:3a:38:f5:67:f6:c8:b1:8f:b4:59:37:5d:f6:df:29:60:f6: 34:af:18:3a:aa:20:ef:92:d3:27:4c:52:c0:87:44:9f:c8:77: ab:8f:8b:7e:fc:e8:2d:5d:1c:34:bb:e3:0d:31:a2:f4:52:40: d6:fc:ed:17:b9:c3:8c:3a:3a:c5:3e:e9:91:55:b5:68:8f:c0: 9b:ed:b6:44:d8:23:66:8c:e8:89:c4:cf:b6:0a:48:26:9c:60: 66:d3:b2:9b:e9:ce:5d:09:e9:cb:dc:07:dc:88:0d:4f:25:f2: 5d:6b:be:b0 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM1MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU5NzUyQjM4MUJGNkRB NzFCN0EwQUUyQzVDMERFOUY2NUM1NTExNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXmg5TK8h8ZeRYUIA/+vrT39hcqbfWIcFaeEpo9jwba9ruZ1ig iWJlyhD7MCNFDqnEzWxj2pt8hYohrOKkA1mhlzF0/Hh7jV3+0n8+SjMHuQklcxb8 W0iMU97jfcG+4/gRhPzrcva5y+ZyY72len/B0fAY3+BrbbECMv0QCdG6gx8Vt9OG ADhiLet57tiezcqM8809qFd81IXMEteCbvgq1Le6BMXPxkDnF09/y6bFrlPzIeQT fmDG0uvC0Nj/eRGxSsYLk7a+z/CrE/nPISLQNuTueUi9tq7/INjpjQAUb9jzWafc wRK7diTU0qNIoqU6PE7dbH3an7p0YC7MoDrxAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU6XUrOBv22nG3oK4sXA3p9lxVEUQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZYVXJPQnYyMm5HM29LNHNYQTNwOWx4 VkVVUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82ngwDQYJ KoZIhvcNAQELBQADggEBAEgXlsTM7nyXILl9P3m1tyQJIEF/TfiPdGwc21FFeuhz wM2z3SP+1kcBXe/SFkE9hcyfbZ8s3pvAKHXZnZZvM8AdjRZ0+3lw8vqsYLBwflzV C+Lh8PrnrIu06Hbdg0GtpSF26ICLMsuAdch/VYdUkh//gQ0TLb6P4qoTwOlKZ/l/ rfroXKxTdE14ymTEB47WSbE6OPVn9sixj7RZN1323ylg9jSvGDqqIO+S0ydMUsCH RJ/Id6uPi3786C1dHDS74w0xovRSQNb87Re5w4w6OsU+6ZFVtWiPwJvttkTYI2aM 6InEz7YKSCacYGbTspvpzl0J6cvcB9yIDU8l8l1rvrA= -----END CERTIFICATE-----Generated at Sun Jun 2 19:20:43 2024 by rpki-client on console-fra.rpki-client.org