$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/6zlGCRWK-iLKT-cbf_kqzi-7Vcs.roa File: 6zlGCRWK-iLKT-cbf_kqzi-7Vcs.roa (raw, json) Hash identifier: g5U8ugaQeUi8I7zAjc6DPE1OJ8EfL4RrVHMq2EJjEHo= Subject key identifier: EB:39:46:09:15:8A:FA:22:CA:4F:E7:1B:7F:F9:2A:CE:2F:BB:55:CB Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CA4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6zlGCRWK-iLKT-cbf_kqzi-7Vcs.roa Signing time: Mon 15 Jan 2024 21:10:28 +0000 ROA not before: Mon 15 Jan 2024 21:10:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 210.201.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:28 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EB394609158AFA22CA4FE71B7FF92ACE2FBB55CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:1e:0b:94:e0:16:ba:b0:94:f0:17:8d:f6: f6:2c:c5:e6:a4:26:79:9e:01:68:0b:53:26:64:5c: 28:be:20:19:9f:47:d0:1f:f9:8e:e5:7d:53:39:87: a2:0e:27:64:d1:58:cb:78:35:14:86:e5:0f:5e:06: 00:64:3f:87:1f:a6:31:58:74:a2:ab:2f:c2:ba:ed: 25:ec:ef:fb:67:fd:d4:b3:30:57:a0:cc:e7:c3:df: 52:f2:02:aa:9d:ea:47:e6:86:e2:fc:60:a1:d8:1c: c0:34:5a:47:db:06:b6:08:54:69:1a:af:8e:46:35: 2e:b5:75:ec:8b:48:7d:e1:97:88:ae:3f:45:0d:87: 9a:d1:71:c2:3c:ca:a2:1c:a6:fa:b6:20:de:75:de: a8:40:b6:51:66:38:44:be:49:72:ab:d6:a7:59:7b: 02:56:f5:4a:34:12:e6:52:97:f7:19:77:fd:2f:e4: a7:0d:ea:7e:a9:02:7c:78:d4:0d:90:0d:00:44:12: 75:5c:a5:77:d2:e8:b0:89:1f:d0:cb:29:b4:8b:9b: d3:16:08:c0:29:c3:e7:84:6c:ee:bd:f9:d7:3d:f1: c7:6d:2f:70:2d:cb:b6:53:36:92:b8:62:c9:6d:29: e3:f1:15:c1:5e:5b:30:c0:15:9b:d5:5a:00:3c:af: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:46:09:15:8A:FA:22:CA:4F:E7:1B:7F:F9:2A:CE:2F:BB:55:CB X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/6zlGCRWK-iLKT-cbf_kqzi-7Vcs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.76.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:c0:b8:78:ba:93:d7:a0:41:28:2b:17:97:f3:c8:4d:97:73: 0b:36:d3:fb:80:e7:e3:ed:af:90:4a:7e:e8:e3:4a:e1:3f:06: 0f:58:f4:70:a1:db:73:b4:45:25:63:3b:70:b3:be:a5:9a:59: 09:21:f9:9a:af:c8:2a:35:35:a1:4e:38:4c:ed:94:e3:fb:7a: d2:8e:7c:5a:a6:b5:49:74:fa:85:ca:46:ee:b1:27:9b:2b:f7: 8b:16:02:1e:3c:ff:cf:7d:10:c5:b8:20:1d:a9:44:83:3d:7b: e9:bc:2d:72:b5:0e:90:a8:8b:f3:e0:33:12:e9:a7:4e:b3:aa: df:c9:40:67:22:7a:48:a5:73:71:e1:92:68:9f:42:9c:fd:65: da:ba:46:c2:75:b5:16:75:40:d7:70:37:72:c9:a7:0f:16:64: ab:63:08:5f:8d:1f:a4:4f:60:da:b1:89:01:85:6c:2e:66:49: b9:a9:36:db:2e:13:dc:e2:0a:9e:63:06:dc:2e:d3:c1:db:28: 3b:e0:f3:e4:8f:1c:2c:b8:6c:f6:59:27:30:91:ed:7c:25:ab: 8b:25:84:ad:ad:49:b9:03:c0:ba:0c:72:50:c0:ba:00:49:86: 10:a6:22:6c:a7:16:e1:ad:e0:5d:0a:7f:4d:79:39:22:77:e0: 0d:f9:b6:5e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVCMzk0NjA5MTU4QUZB MjJDQTRGRTcxQjdGRjkyQUNFMkZCQjU1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAeB4LlOAWurCU8BeN9vYsxeakJnmeAWgLUyZkXCi+IBmfR9Af +Y7lfVM5h6IOJ2TRWMt4NRSG5Q9eBgBkP4cfpjFYdKKrL8K67SXs7/tn/dSzMFeg zOfD31LyAqqd6kfmhuL8YKHYHMA0WkfbBrYIVGkar45GNS61deyLSH3hl4iuP0UN h5rRccI8yqIcpvq2IN513qhAtlFmOES+SXKr1qdZewJW9Uo0EuZSl/cZd/0v5KcN 6n6pAnx41A2QDQBEEnVcpXfS6LCJH9DLKbSLm9MWCMApw+eEbO69+dc98cdtL3At y7ZTNpK4YsltKePxFcFeWzDAFZvVWgA8r0wTAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU6zlGCRWK+iLKT+cbf/kqzi+7VcswHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzZ6bEdDUldLLWlMS1QtY2JmX2txemkt N1Zjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyUwwDQYJ KoZIhvcNAQELBQADggEBADvAuHi6k9egQSgrF5fzyE2Xcws20/uA5+Ptr5BKfujj SuE/Bg9Y9HCh23O0RSVjO3CzvqWaWQkh+ZqvyCo1NaFOOEztlOP7etKOfFqmtUl0 +oXKRu6xJ5sr94sWAh48/899EMW4IB2pRIM9e+m8LXK1DpCoi/PgMxLpp06zqt/J QGciekilc3HhkmifQpz9Zdq6RsJ1tRZ1QNdwN3LJpw8WZKtjCF+NH6RPYNqxiQGF bC5mSbmpNtsuE9ziCp5jBtwu08HbKDvg8+SPHCy4bPZZJzCR7Xwlq4slhK2tSbkD wLoMclDAugBJhhCmImynFuGt4F0Kf015OSJ34A35tl4= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org