$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/B6z-dJplCcYoApiIXDFeYql75KI.roa File: B6z-dJplCcYoApiIXDFeYql75KI.roa (raw, json) Hash identifier: 6TDDqEDLVQBgJ5jmuLxupwbf4lzSAqoe5bvKe7fN9Wk= Subject key identifier: 07:AC:FE:74:9A:65:09:C6:28:02:98:88:5C:31:5E:62:A9:7B:E4:A2 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CE8 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/B6z-dJplCcYoApiIXDFeYql75KI.roa Signing time: Mon 15 Jan 2024 21:23:43 +0000 ROA not before: Mon 15 Jan 2024 21:23:43 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 218.187.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3304 (0xce8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:23:43 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=07ACFE749A6509C6280298885C315E62A97BE4A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:2f:d7:76:06:e4:fb:0f:30:0c:26:01:a0: b9:23:15:22:04:19:c8:36:ba:44:b9:a9:ca:dc:17: 17:20:96:9a:f7:98:e7:6d:a5:e2:e9:ac:d8:a3:da: c3:d4:20:f2:da:2a:34:fa:2e:f8:b9:7a:6b:89:64: 0f:df:a8:dc:83:51:e5:e4:41:78:e9:ba:71:4e:e0: 5b:a3:65:3b:cc:ef:89:c8:88:de:b0:67:4e:3c:76: c7:b8:4b:9c:b6:48:96:28:01:dc:ce:e2:4e:23:22: 65:ce:04:48:c7:4b:6e:eb:00:8f:f7:73:be:99:86: cb:c2:e4:2b:4e:41:95:c6:86:7e:fb:e3:7d:55:0a: de:fa:be:57:70:f2:86:7d:4b:79:a5:35:e8:56:ed: 92:6f:48:a3:71:dc:eb:ed:da:51:c0:a8:bf:a3:f1: a7:62:97:c5:41:3e:a5:63:26:b8:d5:d5:d8:93:8b: 40:e1:90:27:0c:5a:5d:73:11:23:22:72:e0:c7:55: cb:b7:44:81:7a:e7:b8:2a:fd:b0:80:19:21:41:1b: 82:29:f0:53:4a:85:ba:7c:4e:a8:49:67:25:4a:f3: 2d:a0:a7:6a:5c:09:41:e8:f3:3b:7a:1b:5c:9d:70: 84:3e:ab:18:d3:b9:49:bb:4e:76:22:64:f0:20:b6: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AC:FE:74:9A:65:09:C6:28:02:98:88:5C:31:5E:62:A9:7B:E4:A2 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/B6z-dJplCcYoApiIXDFeYql75KI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.187.0.0/16 Signature Algorithm: sha256WithRSAEncryption a8:6f:1e:06:23:0c:65:f0:0b:e3:bb:4c:03:f6:bf:ae:10:86: ca:b2:e4:3e:44:3f:05:c5:93:ed:9f:5a:3b:97:25:5f:cf:e5: 2f:a1:e7:e2:b1:3e:b8:81:47:bc:d6:a7:1a:ae:1d:7a:ca:76: d5:85:96:e5:ca:ff:02:44:b8:2e:93:26:c9:af:08:66:c2:4a: b9:a8:78:48:9f:6c:2f:3e:f4:9e:c3:a6:70:4b:a0:4d:22:0e: 4b:41:c0:09:5a:e8:c8:06:2c:2b:50:f4:03:b4:37:05:25:4f: 64:be:94:e8:00:36:fe:59:d1:a5:53:0e:a4:f5:9b:f3:48:8f: f7:ae:f0:a1:92:3f:90:2b:53:b5:39:6e:77:42:96:1c:30:04: 4c:aa:2c:39:56:22:e2:dc:8b:c6:f7:01:b0:b3:2a:73:d9:af: f4:dd:35:1a:67:79:c2:ed:f5:68:42:cb:87:a4:d8:c3:0c:20: 97:37:38:23:9c:e4:88:a6:5c:f9:43:cc:ee:d8:ce:0a:51:0c: 4a:1b:a4:62:36:47:3c:63:7b:9a:3a:bd:8d:d5:29:97:12:ad: 86:dd:bd:03:a3:05:a3:a5:54:83:16:c7:e5:f1:c4:51:72:e0: b8:ae:90:5e:20:61:35:11:25:a4:ed:01:99:ac:5e:73:80:48: ce:bc:0b:d1 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTIzNDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA3QUNGRTc0OUE2NTA5 QzYyODAyOTg4ODVDMzE1RTYyQTk3QkU0QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDW8i/Xdgbk+w8wDCYBoLkjFSIEGcg2ukS5qcrcFxcglpr3mOdt peLprNij2sPUIPLaKjT6Lvi5emuJZA/fqNyDUeXkQXjpunFO4FujZTvM74nIiN6w Z048dse4S5y2SJYoAdzO4k4jImXOBEjHS27rAI/3c76ZhsvC5CtOQZXGhn77431V Ct76vldw8oZ9S3mlNehW7ZJvSKNx3Ovt2lHAqL+j8adil8VBPqVjJrjV1diTi0Dh kCcMWl1zESMicuDHVcu3RIF657gq/bCAGSFBG4Ip8FNKhbp8TqhJZyVK8y2gp2pc CUHo8zt6G1ydcIQ+qxjTuUm7TnYiZPAgtgrXAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUB6z+dJplCcYoApiIXDFeYql75KIwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0I2ei1kSnBsQ2NZb0FwaUlYREZlWXFs NzVLSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDauzANBgkq hkiG9w0BAQsFAAOCAQEAqG8eBiMMZfAL47tMA/a/rhCGyrLkPkQ/BcWT7Z9aO5cl X8/lL6Hn4rE+uIFHvNanGq4desp21YWW5cr/AkS4LpMmya8IZsJKuah4SJ9sLz70 nsOmcEugTSIOS0HACVroyAYsK1D0A7Q3BSVPZL6U6AA2/lnRpVMOpPWb80iP967w oZI/kCtTtTlud0KWHDAETKosOVYi4tyLxvcBsLMqc9mv9N01Gmd5wu31aELLh6TY wwwglzc4I5zkiKZc+UPM7tjOClEMShukYjZHPGN7mjq9jdUplxKtht29A6MFo6VU gxbH5fHEUXLguK6QXiBhNRElpO0Bmaxec4BIzrwL0Q== -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org