$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/7xGD3jwHdiuWvfa0Fo7ueyoZjc0.roa File: 7xGD3jwHdiuWvfa0Fo7ueyoZjc0.roa (raw, json) Hash identifier: nhONAJi5Neh9RPEZD9a/QsmKKzt6o3TnVlnAoI3/Gzk= Subject key identifier: EF:11:83:DE:3C:07:76:2B:96:BD:F6:B4:16:8E:EE:7B:2A:19:8D:CD Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C9C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7xGD3jwHdiuWvfa0Fo7ueyoZjc0.roa Signing time: Mon 15 Jan 2024 21:10:19 +0000 ROA not before: Mon 15 Jan 2024 21:10:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 210.201.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3228 (0xc9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:19 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=EF1183DE3C07762B96BDF6B4168EEE7B2A198DCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:91:68:e8:95:25:04:07:65:4b:f9:23:48: 9a:1c:87:05:d4:0f:9f:dd:89:7d:fa:ed:0e:5e:24: 3a:d0:e2:62:dc:4a:42:e1:79:a9:91:af:8d:54:74: 8d:31:1d:39:ee:c2:12:da:2e:ad:e9:01:be:7c:6e: 4a:44:a5:8d:a2:77:7d:aa:01:7b:94:e8:7f:95:4f: 1f:ee:a0:bb:d8:70:8f:68:2f:0f:49:12:f5:df:fb: 58:a2:d3:52:65:05:1c:3f:7b:3b:ac:6d:c2:b3:f1: 24:bf:70:86:08:1d:97:ca:2d:16:67:a8:49:a2:6e: 19:c9:9b:82:cf:63:00:5d:b3:dd:6a:5e:1e:76:b0: 15:b5:09:71:1b:f0:39:fe:c1:96:97:5a:09:87:b7: cd:0d:cb:e9:5d:f7:e3:1e:80:c0:47:fe:02:58:68: 79:2e:55:33:46:9f:2e:ea:be:84:9f:09:02:ee:55: da:ec:a2:38:4e:f4:51:66:1c:a9:b3:40:4f:f6:d4: 25:c4:b2:58:b6:d8:72:3a:46:db:18:d4:74:51:dd: 1c:08:e3:b6:c3:51:92:f6:2b:eb:e5:42:72:94:2d: bf:d3:68:b3:d0:3c:ec:c7:5c:fb:a7:17:0d:7b:d8: 1e:b9:0c:39:1b:6d:4d:4c:73:0b:4c:fc:38:98:1e: 0a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:11:83:DE:3C:07:76:2B:96:BD:F6:B4:16:8E:EE:7B:2A:19:8D:CD X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7xGD3jwHdiuWvfa0Fo7ueyoZjc0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.201.60.0/23 Signature Algorithm: sha256WithRSAEncryption b5:17:9a:b9:2c:6a:52:e0:68:da:fd:40:3e:eb:38:c3:ed:6d: db:66:03:9c:83:d6:83:48:0a:47:da:9b:26:9a:3e:e1:d7:8c: 5f:2b:a0:b7:0c:bc:37:a8:de:b9:8c:1e:28:10:52:69:dc:7f: 5c:03:74:5c:f5:4d:22:f2:f4:56:e4:30:9b:cb:38:82:1d:d4: e2:1b:31:86:dc:52:d9:9d:ea:07:41:a5:38:7b:8f:2b:e1:f1: ef:2e:9e:b5:75:f6:38:b3:00:e4:5f:aa:c6:71:33:56:1e:86: 0d:54:b8:4f:d1:58:5e:70:ee:96:1f:e2:9d:4f:14:63:a1:8d: 37:92:e8:78:b4:49:e0:d1:16:97:41:d7:d2:73:36:65:78:02: 33:43:cb:02:9b:d4:7f:69:63:ab:21:68:e4:56:08:0c:b2:69: c6:f5:ad:20:13:c6:ee:72:60:9b:9d:b0:8c:94:8d:e8:1b:6c: eb:66:19:1c:d8:b1:61:5d:cf:96:d5:42:76:d2:63:f5:9e:20: 0e:b4:45:6f:ac:77:e0:fc:35:28:1b:29:19:24:44:50:07:47: 39:84:f5:1e:ca:b8:c1:64:59:b7:90:54:22:0e:94:a5:9a:2f: 70:a9:f2:de:cb:b2:78:3e:ee:bd:2f:9f:29:75:03:1d:18:aa: 8d:49:d7:f1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVGMTE4M0RFM0MwNzc2 MkI5NkJERjZCNDE2OEVFRTdCMkExOThEQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDuJFo6JUlBAdlS/kjSJochwXUD5/diX367Q5eJDrQ4mLcSkLh eamRr41UdI0xHTnuwhLaLq3pAb58bkpEpY2id32qAXuU6H+VTx/uoLvYcI9oLw9J EvXf+1ii01JlBRw/ezusbcKz8SS/cIYIHZfKLRZnqEmibhnJm4LPYwBds91qXh52 sBW1CXEb8Dn+wZaXWgmHt80Ny+ld9+MegMBH/gJYaHkuVTNGny7qvoSfCQLuVdrs ojhO9FFmHKmzQE/21CXEsli22HI6RtsY1HRR3RwI47bDUZL2K+vlQnKULb/TaLPQ POzHXPunFw172B65DDkbbU1McwtM/DiYHgrJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU7xGD3jwHdiuWvfa0Fo7ueyoZjc0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzd4R0QzandIZGl1V3ZmYTBGbzd1ZXlv WmpjMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSyTwwDQYJ KoZIhvcNAQELBQADggEBALUXmrksalLgaNr9QD7rOMPtbdtmA5yD1oNICkfamyaa PuHXjF8roLcMvDeo3rmMHigQUmncf1wDdFz1TSLy9FbkMJvLOIId1OIbMYbcUtmd 6gdBpTh7jyvh8e8unrV19jizAORfqsZxM1Yehg1UuE/RWF5w7pYf4p1PFGOhjTeS 6Hi0SeDRFpdB19JzNmV4AjNDywKb1H9pY6shaORWCAyyacb1rSATxu5yYJudsIyU jegbbOtmGRzYsWFdz5bVQnbSY/WeIA60RW+sd+D8NSgbKRkkRFAHRzmE9R7KuMFk WbeQVCIOlKWaL3Cp8t7Lsng+7r0vnyl1Ax0Yqo1J1/E= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org