$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/9Lunl7IPZ39CehTHC92juhywzr4.roa File: 9Lunl7IPZ39CehTHC92juhywzr4.roa (raw, json) Hash identifier: cL1rsQWJeEfhulRhHRPqxZUJcH++2Lx8X1DO6R4nlDA= Subject key identifier: F4:BB:A7:97:B2:0F:67:7F:42:7A:14:C7:0B:DD:A3:BA:1C:B0:CE:BE Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DEA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9Lunl7IPZ39CehTHC92juhywzr4.roa Signing time: Mon 15 Jan 2024 21:35:25 +0000 ROA not before: Mon 15 Jan 2024 21:35:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 124.218.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3562 (0xdea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:35:25 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F4BBA797B20F677F427A14C70BDDA3BA1CB0CEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:88:14:e8:e0:5e:2a:85:8e:0b:19:23:f2: 0a:38:3d:e0:00:56:13:60:0c:02:a3:28:85:9b:f8: 52:2c:b2:27:43:ab:61:38:f2:35:24:f4:fd:e4:57: 82:f1:8d:fc:ca:8d:ba:50:43:8e:5e:e6:f7:b3:f1: ea:9e:f8:7c:a2:d3:c6:c7:b1:ce:c7:71:e0:21:b8: 51:23:ed:a2:00:d3:66:52:6a:b2:2e:a1:53:53:e9: b4:ed:f2:c7:b3:4f:7c:a2:29:e0:07:98:36:77:81: cb:0f:9e:0a:c9:4b:ce:d5:29:e0:e2:24:de:d6:28: 9f:35:aa:05:e4:d9:2f:01:f2:27:6b:70:dd:49:96: fe:b5:41:d0:2a:82:70:77:7d:61:e9:11:ad:cf:06: 2f:76:40:8f:d3:a0:26:ac:16:8e:6c:10:fc:12:f6: 83:f9:e5:8f:51:ef:72:9e:b4:b9:70:26:d3:6d:b0: 7a:5d:a1:26:71:ab:2c:7b:76:b0:2b:8a:c6:35:aa: 42:0c:c5:f9:53:37:e1:42:bc:f4:e8:12:85:4d:8c: 0a:a7:88:88:38:3f:cf:7a:f4:1d:cf:fe:48:91:c5: 03:f8:86:2a:80:a7:50:d3:e8:e7:77:a3:76:7b:31: 6e:ac:0f:fa:6f:d0:38:48:ae:8d:52:d4:68:4c:07: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BB:A7:97:B2:0F:67:7F:42:7A:14:C7:0B:DD:A3:BA:1C:B0:CE:BE X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9Lunl7IPZ39CehTHC92juhywzr4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.174.0/24 Signature Algorithm: sha256WithRSAEncryption 50:93:4e:a7:2a:d4:0e:d4:7a:65:35:b3:81:6f:7f:fc:6f:4a: 7d:5b:ea:dd:0c:f7:65:f6:91:27:a7:0d:7c:17:4f:b5:33:d9: 2b:c5:c2:22:aa:2f:59:ad:b9:37:d3:9a:e7:0a:79:15:33:d2: 83:d7:94:46:a4:2b:d7:95:ad:69:be:b3:12:61:f3:1e:f6:0a: 4c:69:67:60:fe:fe:3b:e9:d9:61:32:d1:eb:22:61:7c:bc:1a: 0f:ef:53:f4:2f:42:a4:cb:53:e0:6a:a5:91:3e:81:b5:0b:91: f5:89:49:32:b1:cd:16:f1:3c:9b:bc:92:ab:01:c5:24:c8:ba: 91:3c:2c:68:4a:1e:a2:7a:48:ff:94:48:f0:8f:60:2e:4e:47: f2:d0:90:fc:64:b6:21:5a:ca:71:bb:6d:a0:76:bb:e5:1f:36: e3:69:0e:7f:8c:80:3f:5d:97:33:21:51:65:7d:24:78:23:97: b2:8f:c3:49:72:7c:27:62:be:9e:f4:8e:e9:48:20:98:e5:55: 54:fd:b7:b1:1a:7f:52:98:2b:7c:be:85:87:b5:ec:f7:0c:52: 1b:95:35:a6:0b:06:5d:1a:17:60:22:f4:7c:68:c5:ff:05:b8: b7:0e:d8:d9:a2:d4:c0:d9:66:64:b0:79:84:37:94:59:71:3c: d0:61:e7:e9 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDeowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM1MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY0QkJBNzk3QjIwRjY3 N0Y0MjdBMTRDNzBCRERBM0JBMUNCMENFQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAk4gU6OBeKoWOCxkj8go4PeAAVhNgDAKjKIWb+FIssidDq2E4 8jUk9P3kV4LxjfzKjbpQQ45e5vez8eqe+Hyi08bHsc7HceAhuFEj7aIA02ZSarIu oVNT6bTt8sezT3yiKeAHmDZ3gcsPngrJS87VKeDiJN7WKJ81qgXk2S8B8idrcN1J lv61QdAqgnB3fWHpEa3PBi92QI/ToCasFo5sEPwS9oP55Y9R73KetLlwJtNtsHpd oSZxqyx7drArisY1qkIMxflTN+FCvPToEoVNjAqniIg4P8969B3P/kiRxQP4hiqA p1DT6Od3o3Z7MW6sD/pv0DhIro1S1GhMB9urAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU9Lunl7IPZ39CehTHC92juhywzr4wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzlMdW5sN0lQWjM5Q2VoVEhDOTJqdWh5 d3pyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82q4wDQYJ KoZIhvcNAQELBQADggEBAFCTTqcq1A7UemU1s4Fvf/xvSn1b6t0M92X2kSenDXwX T7Uz2SvFwiKqL1mtuTfTmucKeRUz0oPXlEakK9eVrWm+sxJh8x72CkxpZ2D+/jvp 2WEy0esiYXy8Gg/vU/QvQqTLU+BqpZE+gbULkfWJSTKxzRbxPJu8kqsBxSTIupE8 LGhKHqJ6SP+USPCPYC5OR/LQkPxktiFaynG7baB2u+UfNuNpDn+MgD9dlzMhUWV9 JHgjl7KPw0lyfCdivp70julIIJjlVVT9t7Eaf1KYK3y+hYe17PcMUhuVNaYLBl0a F2Ai9Hxoxf8FuLcO2Nmi1MDZZmSweYQ3lFlxPNBh5+k= -----END CERTIFICATE-----Generated at Sun Jun 2 19:20:43 2024 by rpki-client on console-fra.rpki-client.org