$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6gX9dezWvfTkIYO_juRyBeB-R9U.roa File: 6gX9dezWvfTkIYO_juRyBeB-R9U.roa (raw, json) Hash identifier: J2zWZc3wIqOb/JvwmwWgVqsKWlDthaR/041Al5RQ4zs= Subject key identifier: EA:05:FD:75:EC:D6:BD:F4:E4:21:83:BF:8E:E4:72:05:E0:7E:47:D5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CDC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6gX9dezWvfTkIYO_juRyBeB-R9U.roa Signing time: Mon 15 Jan 2024 21:22:16 +0000 ROA not before: Mon 15 Jan 2024 21:22:16 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24155 IP address blocks: 210.63.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:22:16 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EA05FD75ECD6BDF4E42183BF8EE47205E07E47D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:16:04:2f:33:ed:d2:14:34:ee:8c:76:e5: 1f:1d:19:02:19:a3:41:e4:8a:7d:2c:e9:d6:18:d3: 45:77:8b:99:2f:92:ea:e9:e8:d9:db:62:7f:77:4f: b9:2d:93:66:b2:53:d6:e1:08:f0:a0:91:6e:ec:17: 61:14:c8:be:41:fe:7d:41:54:a7:06:3b:12:47:d1: bb:e7:e8:c9:8c:90:c4:16:22:8b:28:74:2a:f7:16: 79:00:69:a7:05:25:22:a0:09:2d:d7:fa:52:fb:11: fb:ae:e2:28:26:fd:20:01:26:a3:4e:d6:24:44:76: b5:10:bd:d4:67:0c:c6:21:df:a7:b6:37:b8:f2:a9: 9b:58:e6:80:d9:28:41:2c:a4:3f:7e:6c:9f:34:bf: 77:ad:e1:ef:8e:ec:0f:9a:51:d6:57:6c:5c:21:9f: 89:d2:47:ba:fd:08:9b:9f:3f:e1:98:68:98:53:d2: 48:0d:0d:0d:79:7c:dd:4e:e4:a4:eb:83:76:3f:67: 23:c3:bf:8a:df:ab:2f:27:24:71:5d:51:64:30:e3: fb:ba:49:92:75:a9:7f:9f:45:c9:88:41:81:ec:19: 2b:4e:f3:ff:13:cc:30:ae:83:b0:23:0e:94:e8:76: 41:62:66:b4:37:80:29:c5:d0:e0:49:b5:3a:6e:9e: ec:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:05:FD:75:EC:D6:BD:F4:E4:21:83:BF:8E:E4:72:05:E0:7E:47:D5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6gX9dezWvfTkIYO_juRyBeB-R9U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.224.0/21 Signature Algorithm: sha256WithRSAEncryption 91:42:c1:70:fb:3e:9d:59:2f:c9:d5:cd:2f:4b:e3:1e:32:be: c5:58:3f:e4:4d:6d:21:77:0f:fe:29:5c:84:2e:b3:f8:4e:38: d6:bd:3f:cb:2d:31:40:c1:22:59:8b:1a:5b:e6:19:da:d3:bc: 03:3d:ca:b1:1b:da:e0:fd:45:1b:c6:cf:92:2d:33:1c:50:e5: 5d:e9:19:38:22:2c:66:4d:0a:49:fb:72:d4:e9:1c:29:52:04: 04:15:c1:a0:6d:f7:4c:e6:02:a2:76:9b:f6:9c:23:a6:da:d7: 1a:49:d7:22:82:38:b1:ef:5f:00:8b:74:bb:03:05:ba:d4:b6: f3:fb:d6:48:15:e4:70:44:02:85:20:28:b5:03:17:a2:00:26: bb:16:0d:d4:fd:b8:fc:57:83:23:55:74:7d:ff:94:01:55:ec: 55:a4:32:cf:74:ec:98:97:3b:89:85:a6:ad:5f:82:37:f7:7c: 57:37:17:f1:fe:93:82:42:6f:3d:fc:c3:99:1b:3a:f7:ec:d0: 97:25:8b:36:8f:ad:54:4b:d8:98:e1:e7:76:28:e2:80:44:7f: 82:11:d9:f7:d9:c1:7f:46:47:7c:6e:ee:7f:7d:f7:d6:59:bc: 6a:6b:cd:6c:d0:7d:93:f3:4e:c4:fa:6c:35:2d:5e:94:78:b3: 4c:b4:e3:9e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTIyMTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVBMDVGRDc1RUNENkJE RjRFNDIxODNCRjhFRTQ3MjA1RTA3RTQ3RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFpRYELzPt0hQ07ox25R8dGQIZo0Hkin0s6dYY00V3i5kvkurp 6NnbYn93T7ktk2ayU9bhCPCgkW7sF2EUyL5B/n1BVKcGOxJH0bvn6MmMkMQWIoso dCr3FnkAaacFJSKgCS3X+lL7Efuu4igm/SABJqNO1iREdrUQvdRnDMYh36e2N7jy qZtY5oDZKEEspD9+bJ80v3et4e+O7A+aUdZXbFwhn4nSR7r9CJufP+GYaJhT0kgN DQ15fN1O5KTrg3Y/ZyPDv4rfqy8nJHFdUWQw4/u6SZJ1qX+fRcmIQYHsGStO8/8T zDCug7AjDpTodkFiZrQ3gCnF0OBJtTpunuyTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU6gX9dezWvfTkIYO/juRyBeB+R9UwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZnWDlkZXpXdmZUa0lZT19qdVJ5QmVC LVI5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSP+AwDQYJ KoZIhvcNAQELBQADggEBAJFCwXD7Pp1ZL8nVzS9L4x4yvsVYP+RNbSF3D/4pXIQu s/hOONa9P8stMUDBIlmLGlvmGdrTvAM9yrEb2uD9RRvGz5ItMxxQ5V3pGTgiLGZN Ckn7ctTpHClSBAQVwaBt90zmAqJ2m/acI6ba1xpJ1yKCOLHvXwCLdLsDBbrUtvP7 1kgV5HBEAoUgKLUDF6IAJrsWDdT9uPxXgyNVdH3/lAFV7FWkMs907JiXO4mFpq1f gjf3fFc3F/H+k4JCbz38w5kbOvfs0JclizaPrVRL2Jjh53Yo4oBEf4IR2ffZwX9G R3xu7n9999ZZvGprzWzQfZPzTsT6bDUtXpR4s0y0454= -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:33 2024 by rpki-client on console-ams.rpki-client.org