$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8K6WvpZqSZsX6wieDaV8xxiOXo4.roa File: 8K6WvpZqSZsX6wieDaV8xxiOXo4.roa (raw, json) Hash identifier: jS+ZdQ4124azjsC9cTNlKvw5yJKqZvG8iS2Jm4J7pUY= Subject key identifier: F0:AE:96:BE:96:6A:49:9B:17:EB:08:9E:0D:A5:7C:C7:18:8E:5E:8E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0E3B Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8K6WvpZqSZsX6wieDaV8xxiOXo4.roa Signing time: Wed 27 Mar 2024 05:51:52 +0000 ROA not before: Wed 27 Mar 2024 05:51:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131601 IP address blocks: 210.203.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3643 (0xe3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Mar 27 05:51:52 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F0AE96BE966A499B17EB089E0DA57CC7188E5E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:ba:09:77:fc:dc:96:f1:cc:67:2a:05:a5: 1f:7b:2d:1b:c2:cb:d7:8e:66:24:2c:6c:f3:e1:88: 7d:1a:af:9c:91:95:3f:77:f7:9d:82:3a:6b:36:2f: d7:dd:44:b4:4b:01:db:14:47:5f:90:c1:e6:59:37: ef:e7:e2:0d:6d:40:fd:c1:9e:57:53:bb:2c:37:43: 29:23:b3:fd:dd:64:94:49:14:16:21:9b:33:ee:09: ef:ae:22:7d:50:f2:4d:a0:5e:a4:07:e1:94:fc:e4: 64:46:da:d6:99:cc:b4:52:49:53:e7:1c:ce:e7:7f: d5:3d:0d:87:aa:f5:08:13:32:22:7d:fb:9d:12:0a: fd:65:28:5d:73:87:85:20:8c:7f:c0:bc:c8:cc:1b: 0f:e5:e1:5a:60:14:ce:f4:48:eb:ef:15:88:41:9e: 0a:09:1b:41:b1:ba:51:62:f1:aa:dc:9e:ee:0f:86: 51:21:6a:90:13:af:6d:db:43:c1:83:82:92:c8:d7: 60:7d:81:a7:7c:90:af:9a:7d:44:59:a4:6f:f5:4b: 69:f5:1d:83:0c:76:ca:74:14:f9:7f:81:27:b3:e4: 0e:86:0e:f2:e9:29:77:a5:f9:64:cd:06:86:40:a7: c0:dc:59:ef:24:d2:64:54:c2:4c:f4:74:68:5f:ae: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AE:96:BE:96:6A:49:9B:17:EB:08:9E:0D:A5:7C:C7:18:8E:5E:8E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8K6WvpZqSZsX6wieDaV8xxiOXo4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.20.0/22 Signature Algorithm: sha256WithRSAEncryption 72:bb:e0:e1:d4:e8:99:f1:f4:31:88:40:6d:2a:89:e5:10:14: 1f:df:78:75:48:9d:d2:3c:5b:1f:dc:1b:da:36:7f:30:85:62: bc:c2:0f:03:c2:9e:41:cd:a2:75:45:40:78:f4:cb:8a:ab:3a: 43:a3:9e:f8:f4:ee:ac:7c:23:b8:7e:4b:fb:c6:a8:0d:84:cc: a8:2d:47:44:99:b3:6c:c8:0e:71:51:f9:6f:55:5f:b8:d8:e5: fd:98:19:6e:6d:74:97:48:51:81:6c:db:aa:88:b3:ee:23:9e: 86:5b:d4:9b:a5:fa:6c:05:73:7c:9e:4a:bb:40:2c:ef:ec:40: 53:4a:fb:55:a1:86:59:11:c4:c9:b4:72:ee:64:ba:24:c3:f1: 32:ae:65:17:1f:d8:46:ff:e3:3e:5b:a5:2b:c8:ba:c9:61:c0: dd:42:bd:86:b2:66:e5:67:d1:5b:a7:8c:f2:a3:de:aa:68:1e: a7:98:f8:bb:89:d1:93:fe:12:1c:7f:17:30:07:2b:8d:44:b2: 60:bb:e9:73:85:33:d9:7d:6a:18:92:ab:7d:17:38:54:af:47: 7e:a2:eb:3f:55:5f:1f:69:fb:6e:12:48:f2:b0:0b:1f:88:01: b9:ca:27:36:50:92:dd:38:e3:70:bd:69:a4:41:26:fb:04:26: 89:63:97:70 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAzMjcw NTUxNTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYwQUU5NkJFOTY2QTQ5 OUIxN0VCMDg5RTBEQTU3Q0M3MTg4RTVFOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuv7oJd/zclvHMZyoFpR97LRvCy9eOZiQsbPPhiH0ar5yRlT93 952COms2L9fdRLRLAdsUR1+QweZZN+/n4g1tQP3BnldTuyw3Qykjs/3dZJRJFBYh mzPuCe+uIn1Q8k2gXqQH4ZT85GRG2taZzLRSSVPnHM7nf9U9DYeq9QgTMiJ9+50S Cv1lKF1zh4UgjH/AvMjMGw/l4VpgFM70SOvvFYhBngoJG0GxulFi8arcnu4PhlEh apATr23bQ8GDgpLI12B9gad8kK+afURZpG/1S2n1HYMMdsp0FPl/gSez5A6GDvLp KXel+WTNBoZAp8DcWe8k0mRUwkz0dGhfriN3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU8K6WvpZqSZsX6wieDaV8xxiOXo4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzhLNld2cFpxU1pzWDZ3aWVEYVY4eHhp T1hvNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSyxQwDQYJ KoZIhvcNAQELBQADggEBAHK74OHU6Jnx9DGIQG0qieUQFB/feHVIndI8Wx/cG9o2 fzCFYrzCDwPCnkHNonVFQHj0y4qrOkOjnvj07qx8I7h+S/vGqA2EzKgtR0SZs2zI DnFR+W9VX7jY5f2YGW5tdJdIUYFs26qIs+4jnoZb1Jul+mwFc3yeSrtALO/sQFNK +1WhhlkRxMm0cu5kuiTD8TKuZRcf2Eb/4z5bpSvIuslhwN1CvYayZuVn0VunjPKj 3qpoHqeY+LuJ0ZP+Ehx/FzAHK41EsmC76XOFM9l9ahiSq30XOFSvR36i6z9VXx9p +24SSPKwCx+IAbnKJzZQkt0443C9aaRBJvsEJoljl3A= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org