$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8X2Ruxe7tingtOpJk2d4uDbMA7Y.roa File: 8X2Ruxe7tingtOpJk2d4uDbMA7Y.roa (raw, json) Hash identifier: 0/vtKlJ3H3CunJFEDaE8qW5hMwqgCUjPWKkTKSXuD/w= Subject key identifier: F1:7D:91:BB:17:BB:B6:29:E0:B4:EA:49:93:67:78:B8:36:CC:03:B6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CF2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8X2Ruxe7tingtOpJk2d4uDbMA7Y.roa Signing time: Mon 15 Jan 2024 21:23:55 +0000 ROA not before: Mon 15 Jan 2024 21:23:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 222.156.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:23:55 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F17D91BB17BBB629E0B4EA49936778B836CC03B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:b4:49:86:16:0c:b4:94:97:cb:91:44:ba: 47:6c:2f:ba:4b:36:07:4d:5e:35:2a:ef:7c:5b:df: ef:66:5b:a6:80:1a:6f:8d:ca:34:39:54:5d:a2:a1: f7:02:45:27:bd:b2:f1:b2:99:c0:03:f7:ae:be:a8: 58:99:33:43:27:53:f8:e3:88:e4:9e:e2:66:d5:11: 2b:af:a8:e9:84:4d:67:1f:75:db:fe:09:b2:30:02: 0d:e7:7f:8e:d9:c6:2c:48:00:7f:5e:83:86:58:aa: 64:c4:38:fc:73:37:e2:91:6d:e5:42:98:11:eb:a6: bc:38:be:a1:22:81:a9:ab:86:5d:dd:cd:e4:7c:23: 4a:61:e9:f5:d2:b1:96:d1:6e:b2:f8:84:3e:47:9e: 75:72:4f:68:94:b4:c7:38:64:15:31:25:2f:7c:51: 4e:c6:27:f8:ff:4b:9c:49:b0:76:9e:99:f9:93:b2: 24:df:32:d1:94:e1:0f:8c:ac:2b:e4:c3:d6:df:af: 21:a8:16:fc:93:0a:8a:5f:14:9f:1a:40:31:f6:3b: 1c:68:61:60:4d:18:10:cd:8a:72:89:9f:21:5b:01: 1c:3d:a2:46:a4:3a:6e:19:6c:54:7e:c7:00:2c:a4: f2:2d:99:3b:ce:d9:72:c5:e7:33:d3:4b:4f:3a:14: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7D:91:BB:17:BB:B6:29:E0:B4:EA:49:93:67:78:B8:36:CC:03:B6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8X2Ruxe7tingtOpJk2d4uDbMA7Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.156.0.0/16 Signature Algorithm: sha256WithRSAEncryption 22:f7:c6:e6:73:58:2d:17:47:ee:3b:9d:47:27:19:69:54:9a: 91:f5:ae:5a:cc:d1:f5:a3:1a:bc:55:5e:0c:ee:41:3f:15:bb: 4f:01:7f:14:79:db:90:7a:f9:06:62:93:6b:c3:5a:f2:75:43: bc:97:ed:78:b1:98:df:47:74:3b:02:4e:1e:53:a4:81:95:74: 3c:be:7a:3e:f6:ca:54:e3:bc:42:9b:d3:c9:9a:f8:d7:0c:15: ab:41:b4:e5:5a:9d:ff:36:20:90:8e:76:6a:54:ec:51:1c:ab: 88:20:21:90:ae:92:d4:6d:2d:6f:48:4d:61:20:56:9f:3c:d8: b4:40:d2:4b:f3:8c:1f:52:69:88:f3:1a:d8:39:dd:32:55:db: bd:d6:fe:9d:be:2d:b3:59:dc:da:30:8d:4d:63:fd:d8:71:b6: bc:1c:76:b0:4a:7d:94:10:65:a6:76:a1:d4:b7:60:9b:9d:14: 33:76:0b:a3:5e:2e:fb:8c:f0:d1:3b:0e:19:44:c0:9f:6c:e1: 10:2a:ef:45:e8:9d:69:57:56:60:61:8a:0d:82:33:51:f0:a7: fe:1f:22:c7:c5:23:36:68:7c:fe:f3:18:44:2c:9f:aa:8e:a9: 22:87:43:3a:cd:8b:48:7c:b8:d8:b9:a4:9c:9d:de:58:c9:8d: ab:30:98:9f -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTIzNTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYxN0Q5MUJCMTdCQkI2 MjlFMEI0RUE0OTkzNjc3OEI4MzZDQzAzQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjCbRJhhYMtJSXy5FEukdsL7pLNgdNXjUq73xb3+9mW6aAGm+N yjQ5VF2iofcCRSe9svGymcAD966+qFiZM0MnU/jjiOSe4mbVESuvqOmETWcfddv+ CbIwAg3nf47ZxixIAH9eg4ZYqmTEOPxzN+KRbeVCmBHrprw4vqEigamrhl3dzeR8 I0ph6fXSsZbRbrL4hD5HnnVyT2iUtMc4ZBUxJS98UU7GJ/j/S5xJsHaemfmTsiTf MtGU4Q+MrCvkw9bfryGoFvyTCopfFJ8aQDH2OxxoYWBNGBDNinKJnyFbARw9okak Om4ZbFR+xwAspPItmTvO2XLF5zPTS086FM3FAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQU8X2Ruxe7tingtOpJk2d4uDbMA7YwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzhYMlJ1eGU3dGluZ3RPcEprMmQ0dURi TUE3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDenDANBgkq hkiG9w0BAQsFAAOCAQEAIvfG5nNYLRdH7judRycZaVSakfWuWszR9aMavFVeDO5B PxW7TwF/FHnbkHr5BmKTa8Na8nVDvJfteLGY30d0OwJOHlOkgZV0PL56PvbKVOO8 QpvTyZr41wwVq0G05Vqd/zYgkI52alTsURyriCAhkK6S1G0tb0hNYSBWnzzYtEDS S/OMH1JpiPMa2DndMlXbvdb+nb4ts1nc2jCNTWP92HG2vBx2sEp9lBBlpnah1Ldg m50UM3YLo14u+4zw0TsOGUTAn2zhECrvReidaVdWYGGKDYIzUfCn/h8ix8UjNmh8 /vMYRCyfqo6pIodDOs2LSHy42LmknJ3eWMmNqzCYnw== -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org