$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/8hp-VTC6JxVS63EMsH2yYXKsjD0.roa File: 8hp-VTC6JxVS63EMsH2yYXKsjD0.roa (raw, json) Hash identifier: yG9vJBi3OqZOhmilROIiLOP3hWSslbjXoE0oSu+m5ks= Subject key identifier: F2:1A:7E:55:30:BA:27:15:52:EB:71:0C:B0:7D:B2:61:72:AC:8C:3D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D5C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8hp-VTC6JxVS63EMsH2yYXKsjD0.roa Signing time: Mon 15 Jan 2024 21:26:10 +0000 ROA not before: Mon 15 Jan 2024 21:26:10 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131584 IP address blocks: 210.203.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3420 (0xd5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:26:10 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F21A7E5530BA271552EB710CB07DB26172AC8C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:56:f4:f3:4d:2e:c6:da:94:fb:35:39:4b:e2: 7b:fa:d1:56:23:77:51:cb:cd:f2:2f:1a:10:f8:ff: 06:3a:3d:f2:4b:e7:84:17:b4:43:6e:0f:1a:65:ac: dd:aa:f7:bd:29:72:cf:2d:21:37:e0:23:b4:9a:bd: 75:fc:50:ca:b9:ab:63:75:8b:92:8d:3f:67:f0:81: 42:ea:0e:c5:27:26:1a:31:36:3f:61:e3:d9:68:95: 10:9a:09:0d:d5:b4:3c:20:60:dc:7d:14:84:1e:9c: f3:5a:6e:55:33:80:8d:c8:3e:df:da:85:61:4b:ca: 6f:91:19:19:72:fc:f8:f0:04:f4:ec:a7:43:b3:3d: b3:ca:70:e3:7b:7b:e8:ab:c9:89:da:75:c1:67:a7: 4e:0b:27:0b:28:33:68:e7:12:1e:58:c9:b4:96:b3: f7:18:e5:85:b1:b3:2c:58:d9:f1:e2:b2:eb:0c:2e: d9:61:9b:94:36:0e:ed:7c:6d:d8:b7:96:7f:3a:e8: 40:31:ce:62:d9:d8:0a:65:a2:7a:85:97:a4:d4:ec: ce:00:44:ae:10:d0:fe:7d:53:67:b2:ca:05:2c:44: 73:ef:87:18:b9:99:e3:32:16:dd:d2:14:da:71:69: 53:cb:e9:90:59:77:76:b6:99:f6:a4:5e:b1:3d:88: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1A:7E:55:30:BA:27:15:52:EB:71:0C:B0:7D:B2:61:72:AC:8C:3D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/8hp-VTC6JxVS63EMsH2yYXKsjD0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.203.48.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:20:71:bb:ea:8c:0d:23:50:df:da:d0:26:4a:c5:84:37:77: cd:ac:c5:94:55:23:20:91:f0:0f:55:0a:56:1e:21:a9:9f:e7: 7e:7d:20:ed:55:a2:47:2f:b4:84:bc:a6:2b:67:44:19:8e:cf: 9a:5a:6b:ae:98:ee:77:c7:14:7a:da:f7:59:44:70:03:3f:83: e3:86:e5:2c:b6:42:db:9a:fd:44:a6:1f:fc:12:f8:78:84:01: d8:5d:16:85:0a:86:87:99:64:39:34:7d:18:6c:13:dc:85:95: 28:2c:c9:61:91:8d:79:5b:ab:b2:19:32:25:6a:59:96:7a:80: e6:3d:66:26:99:80:45:dd:03:fe:7b:7f:3b:c3:12:f3:cc:26: 70:d7:b5:93:39:f1:5e:d3:a6:ed:42:37:71:9a:66:95:b6:dc: 02:4a:58:1d:6d:8e:0a:f1:76:91:c7:47:c3:57:8a:dd:55:b2: b6:10:9f:e0:98:8f:14:c8:48:d0:be:ee:e6:07:d1:b4:16:91: e6:e2:78:dd:9b:1a:b9:33:1e:70:5c:c9:39:de:8f:96:4e:48: 55:81:a0:af:b1:5c:6e:ab:6f:99:58:f6:2f:a5:ab:ab:9c:f2: dd:e8:87:fa:ee:f4:1f:e8:65:7d:21:94:b5:e1:ea:11:55:90: a0:e6:dd:4b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI2MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYyMUE3RTU1MzBCQTI3 MTU1MkVCNzEwQ0IwN0RCMjYxNzJBQzhDM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2VvTzTS7G2pT7NTlL4nv60VYjd1HLzfIvGhD4/wY6PfJL54QX tENuDxplrN2q970pcs8tITfgI7SavXX8UMq5q2N1i5KNP2fwgULqDsUnJhoxNj9h 49lolRCaCQ3VtDwgYNx9FIQenPNablUzgI3IPt/ahWFLym+RGRly/PjwBPTsp0Oz PbPKcON7e+iryYnadcFnp04LJwsoM2jnEh5YybSWs/cY5YWxsyxY2fHisusMLtlh m5Q2Du18bdi3ln866EAxzmLZ2AplonqFl6TU7M4ARK4Q0P59U2eyygUsRHPvhxi5 meMyFt3SFNpxaVPL6ZBZd3a2mfakXrE9iLfhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU8hp+VTC6JxVS63EMsH2yYXKsjD0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzhocC1WVEM2SnhWUzYzRU1zSDJ5WVhL c2pEMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATSyzAwDQYJ KoZIhvcNAQELBQADggEBAI4gcbvqjA0jUN/a0CZKxYQ3d82sxZRVIyCR8A9VClYe Iamf5359IO1VokcvtIS8pitnRBmOz5paa66Y7nfHFHra91lEcAM/g+OG5Sy2Qtua /USmH/wS+HiEAdhdFoUKhoeZZDk0fRhsE9yFlSgsyWGRjXlbq7IZMiVqWZZ6gOY9 ZiaZgEXdA/57fzvDEvPMJnDXtZM58V7Tpu1CN3GaZpW23AJKWB1tjgrxdpHHR8NX it1VsrYQn+CYjxTISNC+7uYH0bQWkebieN2bGrkzHnBcyTnej5ZOSFWBoK+xXG6r b5lY9i+lq6uc8t3oh/ru9B/oZX0hlLXh6hFVkKDm3Us= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org