$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/AcdN5sfMacOzFsy2jKvS-sEzz34.roa File: AcdN5sfMacOzFsy2jKvS-sEzz34.roa (raw, json) Hash identifier: hVUq/9E+oFB0qFTz3MKUcBzdT6ZxmAeKDbG2PmkaDd4= Subject key identifier: 01:C7:4D:E6:C7:CC:69:C3:B3:16:CC:B6:8C:AB:D2:FA:C1:33:CF:7E Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D64 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AcdN5sfMacOzFsy2jKvS-sEzz34.roa Signing time: Mon 15 Jan 2024 21:26:20 +0000 ROA not before: Mon 15 Jan 2024 21:26:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131597 IP address blocks: 218.35.32.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3428 (0xd64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:26:20 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=01C74DE6C7CC69C3B316CCB68CABD2FAC133CF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:05:f6:e8:b6:6d:0f:3d:8c:b3:81:ec:5e: b1:5b:ad:8c:12:46:53:8e:fb:d0:cf:96:9e:41:3d: 89:40:c2:cf:ea:6c:7e:35:91:af:71:88:e4:49:4e: 17:b4:25:4f:d6:e0:b9:c3:cd:26:b2:27:8f:53:cd: da:10:36:43:69:71:31:3e:64:fc:39:a6:2b:e2:f0: a6:41:b6:10:73:5c:4c:05:46:ea:68:62:62:18:67: 5f:01:22:87:d2:cc:4f:68:1c:ab:fa:fa:73:69:59: d9:19:4e:23:b9:b5:e5:5c:2c:c9:a6:3f:09:9b:cb: 59:74:e4:e4:c2:55:f6:d6:53:e3:1c:58:8d:55:27: e1:3a:9c:c1:d8:19:0a:49:7c:1e:1d:5f:b5:a7:ee: c0:0d:86:62:4c:90:82:a4:78:82:4d:b3:de:85:fd: c4:38:68:96:7d:85:80:fc:02:22:2a:08:6d:04:87: 78:f7:93:bd:cd:f5:44:d4:f8:92:4d:ed:02:cb:17: 46:45:d0:03:e5:2e:63:68:69:2f:d8:a3:5b:e7:4b: d3:81:99:b5:17:5e:a5:0f:89:f8:d8:e6:e1:17:6e: 7f:a8:15:69:29:2b:77:64:49:7d:55:aa:ab:37:a1: 82:80:8a:d5:83:ea:ad:2c:f4:02:cc:f5:d8:42:a1: 42:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C7:4D:E6:C7:CC:69:C3:B3:16:CC:B6:8C:AB:D2:FA:C1:33:CF:7E X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/AcdN5sfMacOzFsy2jKvS-sEzz34.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.32.0/19 Signature Algorithm: sha256WithRSAEncryption b8:2c:6e:61:81:c5:0e:b1:e6:69:39:c9:ed:ab:7a:89:7e:e1: 20:c1:85:1b:16:c1:c3:1e:98:4e:a1:2e:0b:4e:e7:9c:fd:e2: 93:4b:2d:f2:f8:20:43:29:55:e7:7d:a8:09:48:ae:bf:16:31: f5:ea:72:36:5f:11:8e:93:e3:28:f7:57:2e:1e:04:50:ff:88: b1:21:8f:b6:ff:93:2f:5a:16:46:99:ff:28:dd:e0:7b:60:cc: 92:2a:37:41:94:28:80:fc:7f:b5:86:e5:c4:d1:58:e3:b0:d0: 3e:5e:49:1c:48:fe:e3:d1:9b:90:7a:fe:8f:c1:93:9c:3d:a7: df:bb:90:18:a7:aa:b1:9c:da:24:99:43:1a:45:34:2d:a0:29: 33:a4:50:a1:85:3b:5b:f8:8b:32:31:d3:f4:3f:4a:87:8c:2d: de:d2:d0:fb:4b:b0:6a:42:96:f6:83:ce:56:a4:03:d4:6a:69: f6:f4:7e:98:05:8e:30:c5:51:e5:e6:21:f5:0d:27:b9:78:49: 55:1d:b5:ce:b6:07:2f:d5:16:3b:13:81:da:61:4a:52:1c:12: 03:4b:9f:12:98:77:2a:15:98:f5:07:45:38:31:7a:d1:e3:c5: 77:fc:cd:ea:3f:50:9f:e4:8b:12:66:6c:c6:d9:59:b8:b6:7b: 5a:93:79:9f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDWQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI2MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAxQzc0REU2QzdDQzY5 QzNCMzE2Q0NCNjhDQUJEMkZBQzEzM0NGN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvzQX26LZtDz2Ms4HsXrFbrYwSRlOO+9DPlp5BPYlAws/qbH41 ka9xiORJThe0JU/W4LnDzSayJ49TzdoQNkNpcTE+ZPw5pivi8KZBthBzXEwFRupo YmIYZ18BIofSzE9oHKv6+nNpWdkZTiO5teVcLMmmPwmby1l05OTCVfbWU+McWI1V J+E6nMHYGQpJfB4dX7Wn7sANhmJMkIKkeIJNs96F/cQ4aJZ9hYD8AiIqCG0Eh3j3 k73N9UTU+JJN7QLLF0ZF0APlLmNoaS/Yo1vnS9OBmbUXXqUPifjY5uEXbn+oFWkp K3dkSX1Vqqs3oYKAitWD6q0s9ALM9dhCoULXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUAcdN5sfMacOzFsy2jKvS+sEzz34wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0FjZE41c2ZNYWNPekZzeTJqS3ZTLXNF enozNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXaIyAwDQYJ KoZIhvcNAQELBQADggEBALgsbmGBxQ6x5mk5ye2reol+4SDBhRsWwcMemE6hLgtO 55z94pNLLfL4IEMpVed9qAlIrr8WMfXqcjZfEY6T4yj3Vy4eBFD/iLEhj7b/ky9a FkaZ/yjd4HtgzJIqN0GUKID8f7WG5cTRWOOw0D5eSRxI/uPRm5B6/o/Bk5w9p9+7 kBinqrGc2iSZQxpFNC2gKTOkUKGFO1v4izIx0/Q/SoeMLd7S0PtLsGpClvaDzlak A9Rqafb0fpgFjjDFUeXmIfUNJ7l4SVUdtc62By/VFjsTgdphSlIcEgNLnxKYdyoV mPUHRTgxetHjxXf8zeo/UJ/kixJmbMbZWbi2e1qTeZ8= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:42 2024 by rpki-client on console-ams.rpki-client.org