$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/7UC26TLCbpa9Lr86vOqOLLFzNuE.roa File: 7UC26TLCbpa9Lr86vOqOLLFzNuE.roa (raw, json) Hash identifier: mgl7IVIsWWo0T3i94nE3l8FDyG4E0tqM1D4WhtpsLRk= Subject key identifier: ED:40:B6:E9:32:C2:6E:96:BD:2E:BF:3A:BC:EA:8E:2C:B1:73:36:E1 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C40 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7UC26TLCbpa9Lr86vOqOLLFzNuE.roa Signing time: Mon 15 Jan 2024 21:08:43 +0000 ROA not before: Mon 15 Jan 2024 21:08:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 60.244.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:08:43 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=ED40B6E932C26E96BD2EBF3ABCEA8E2CB17336E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:29:18:fc:c3:8e:1b:42:78:ec:ab:6b:ed: 3a:09:09:36:ac:13:3a:8a:f1:b7:06:7d:88:cb:ed: d2:8f:0f:84:70:de:6d:7e:f8:af:74:58:e6:04:94: 72:d7:79:e9:f9:50:aa:58:9e:c3:53:2c:05:d8:dc: 8e:89:5c:5a:f1:3d:c2:32:51:73:50:b7:20:76:ba: e3:4b:26:2e:3a:47:d4:fe:0a:d4:cf:f9:c3:2c:6d: fd:cf:96:87:76:d8:9a:46:fb:45:06:bf:55:d6:fd: 2a:7d:a9:77:29:f3:03:5e:a4:95:97:d6:33:30:20: 60:98:7c:83:8f:68:36:b6:4b:9a:30:b9:25:88:14: de:fb:f4:5b:4c:8d:64:ed:06:02:82:f8:86:12:96: 75:eb:ba:d2:83:80:a8:38:ce:ff:ea:de:76:fb:38: 3b:0b:87:3f:71:c9:af:b3:06:66:7a:fc:5d:12:46: 77:74:d5:bc:02:40:2f:9a:29:5a:c4:a3:e7:9c:59: 68:73:82:fd:16:20:a7:43:a0:20:7e:26:82:85:68: e5:de:91:81:d0:73:7e:88:41:5a:ca:47:fd:83:cc: 59:c9:a6:5e:11:2d:1a:cc:b4:01:59:95:6a:9b:af: 87:41:5e:fe:72:78:d9:a2:00:d9:67:2d:98:86:03: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:40:B6:E9:32:C2:6E:96:BD:2E:BF:3A:BC:EA:8E:2C:B1:73:36:E1 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7UC26TLCbpa9Lr86vOqOLLFzNuE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.0.0/17 Signature Algorithm: sha256WithRSAEncryption 92:65:3a:5f:ec:df:68:b2:bf:7e:42:06:ae:3b:a1:bd:01:eb: 13:ae:ed:80:8a:18:aa:f6:70:18:a2:df:be:2f:b7:18:b0:b2: 13:6d:87:b5:fa:fc:17:67:c4:a7:56:aa:9d:82:c4:c2:8d:fb: a3:02:7e:80:74:19:38:48:cc:65:2d:2f:fe:25:9c:05:a6:ac: 2b:7d:ac:33:8c:59:77:96:b4:fc:15:8b:4b:8c:d6:66:55:0d: 13:9d:d9:33:67:ba:25:a9:6b:04:d9:06:70:9a:a1:49:90:ef: 51:bc:e2:4c:2e:f3:d7:22:17:48:a9:d6:ec:a6:73:08:46:f8: 0a:e0:f5:41:59:bc:27:9f:ee:a7:a5:f1:69:c7:d7:db:dd:03: 19:a6:39:7e:d0:0b:8f:62:fe:ed:88:ff:c1:9e:08:28:34:54: 02:6a:8c:48:ed:87:0a:20:a3:67:71:25:f7:ce:f8:60:1c:aa: 29:17:1d:89:18:cf:14:41:94:00:6e:02:0f:b5:e1:83:c8:50: 34:ab:c9:3c:5a:0c:50:cc:06:64:23:aa:14:a5:fb:e6:8d:10: 2f:f9:47:2b:a7:ee:0b:0e:0d:60:49:62:3b:df:08:1f:e7:69: b9:5c:77:5f:57:e4:11:8a:e7:c9:5c:b5:54:f6:02:b3:2a:19: 68:ba:8e:d5 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA4NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVENDBCNkU5MzJDMjZF OTZCRDJFQkYzQUJDRUE4RTJDQjE3MzM2RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA8ikY/MOOG0J47Ktr7ToJCTasEzqK8bcGfYjL7dKPD4Rw3m1+ +K90WOYElHLXeen5UKpYnsNTLAXY3I6JXFrxPcIyUXNQtyB2uuNLJi46R9T+CtTP +cMsbf3Plod22JpG+0UGv1XW/Sp9qXcp8wNepJWX1jMwIGCYfIOPaDa2S5owuSWI FN779FtMjWTtBgKC+IYSlnXrutKDgKg4zv/q3nb7ODsLhz9xya+zBmZ6/F0SRnd0 1bwCQC+aKVrEo+ecWWhzgv0WIKdDoCB+JoKFaOXekYHQc36IQVrKR/2DzFnJpl4R LRrMtAFZlWqbr4dBXv5yeNmiANlnLZiGA/3BAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU7UC26TLCbpa9Lr86vOqOLLFzNuEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzdVQzI2VExDYnBhOUxyODZ2T3FPTExG ek51RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc89AAwDQYJ KoZIhvcNAQELBQADggEBAJJlOl/s32iyv35CBq47ob0B6xOu7YCKGKr2cBii374v txiwshNth7X6/BdnxKdWqp2CxMKN+6MCfoB0GThIzGUtL/4lnAWmrCt9rDOMWXeW tPwVi0uM1mZVDROd2TNnuiWpawTZBnCaoUmQ71G84kwu89ciF0ip1uymcwhG+Arg 9UFZvCef7qel8WnH19vdAxmmOX7QC49i/u2I/8GeCCg0VAJqjEjthwogo2dxJffO +GAcqikXHYkYzxRBlABuAg+14YPIUDSryTxaDFDMBmQjqhSl++aNEC/5Ryun7gsO DWBJYjvfCB/nablcd19X5BGK58lctVT2ArMqGWi6jtU= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org