$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/BvKeJ5EhQu7halgho3tHz70MX4A.roa File: BvKeJ5EhQu7halgho3tHz70MX4A.roa (raw, json) Hash identifier: ttOegono45f/InUJkBHhEDyomrkn+Xze35LAD+kBi2M= Subject key identifier: 06:F2:9E:27:91:21:42:EE:E1:6A:58:21:A3:7B:47:CF:BD:0C:5F:80 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CDA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BvKeJ5EhQu7halgho3tHz70MX4A.roa Signing time: Mon 15 Jan 2024 21:12:15 +0000 ROA not before: Mon 15 Jan 2024 21:12:15 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 210.63.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3290 (0xcda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:12:15 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=06F29E27912142EEE16A5821A37B47CFBD0C5F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:72:c9:f5:96:08:1e:76:4f:66:ba:1e:13: 88:d1:a4:0c:22:f4:29:c8:f3:d0:7e:97:25:6a:a8: de:b7:b5:80:b2:55:f0:1c:99:73:2e:87:38:18:ac: fe:fd:66:47:87:2e:f6:1d:9b:14:ce:a6:21:0d:88: c5:16:ec:72:7e:dc:35:58:21:81:bc:e2:93:22:d9: 1d:f8:b6:38:9b:50:8e:69:fe:f7:77:d1:82:53:c2: 77:67:f4:a5:00:54:b0:aa:90:dd:64:cb:97:c3:12: f5:de:1e:26:40:de:b2:9c:5c:50:0e:3d:2d:c0:5d: 5d:e5:f2:99:92:12:0f:df:22:e1:d9:6b:86:43:fb: a0:e6:14:0d:a3:2b:6d:a6:90:40:df:8f:49:d0:5a: 87:f6:e2:c9:41:bd:02:ad:42:f4:4a:8f:f1:6e:7f: 59:2a:c6:0c:e8:ba:b6:3d:72:ee:e9:f7:a9:5a:9d: 6d:e1:fa:46:3a:21:e4:6b:13:93:df:0e:55:9d:53: 15:dd:0c:d8:55:cb:21:97:ca:9f:7e:a8:df:5e:5d: 17:fd:a8:04:50:a5:ef:db:65:0a:6f:9a:c5:fb:46: 17:29:7b:bf:5a:92:92:7a:da:80:b3:8b:23:7b:f3: c5:b0:59:28:44:28:69:92:67:1b:29:31:c7:71:01: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:9E:27:91:21:42:EE:E1:6A:58:21:A3:7B:47:CF:BD:0C:5F:80 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/BvKeJ5EhQu7halgho3tHz70MX4A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.220.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:3c:de:20:ba:4b:65:a0:b6:08:c5:02:85:1e:20:22:cd:99: 5e:a8:ee:71:15:7f:4b:66:f4:7c:35:3c:ad:00:f6:2e:e2:2b: 90:ac:33:72:a9:02:e8:83:14:1c:d1:0f:e2:f8:4b:5e:78:93: a4:81:18:e2:2e:ee:f5:d5:e4:66:b1:89:99:b8:98:00:f0:17: 20:5e:98:e7:1e:64:0e:ba:81:bc:c6:84:28:5c:b1:df:51:c9: de:11:54:db:f3:0c:00:67:47:ed:aa:55:de:1f:e9:e3:72:03: 1e:d2:21:f5:bf:39:66:73:36:2c:c1:34:c7:0d:51:2c:8e:08: 96:6c:1d:84:22:be:6d:21:a0:89:2e:25:3d:e7:74:3f:2f:a9: f1:0f:f1:35:19:57:2d:ec:63:8c:d7:9b:17:2c:0b:69:12:e7: d6:04:1e:1a:6a:d4:54:0b:95:1f:e2:d5:9d:39:27:45:94:8a: a2:fb:0c:f2:00:f6:8e:d5:19:94:67:79:10:07:cd:c5:27:27: 9c:14:34:49:e5:ca:74:df:db:f9:1e:7b:99:1e:bf:93:f8:a9: 75:cf:e3:fd:6c:f5:a1:41:05:72:34:ae:bd:da:e6:cc:cb:d2: 16:77:de:36:6e:ba:d6:ca:29:06:70:50:41:b7:ef:a7:a0:91: 43:74:ea:c9 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEyMTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA2RjI5RTI3OTEyMTQy RUVFMTZBNTgyMUEzN0I0N0NGQkQwQzVGODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2y3LJ9ZYIHnZPZroeE4jRpAwi9CnI89B+lyVqqN63tYCyVfAc mXMuhzgYrP79ZkeHLvYdmxTOpiENiMUW7HJ+3DVYIYG84pMi2R34tjibUI5p/vd3 0YJTwndn9KUAVLCqkN1ky5fDEvXeHiZA3rKcXFAOPS3AXV3l8pmSEg/fIuHZa4ZD +6DmFA2jK22mkEDfj0nQWof24slBvQKtQvRKj/Fuf1kqxgzourY9cu7p96lanW3h +kY6IeRrE5PfDlWdUxXdDNhVyyGXyp9+qN9eXRf9qARQpe/bZQpvmsX7Rhcpe79a kpJ62oCziyN788WwWShEKGmSZxspMcdxASBpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUBvKeJ5EhQu7halgho3tHz70MX4AwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0J2S2VKNUVoUXU3aGFsZ2hvM3RIejcw TVg0QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSP9wwDQYJ KoZIhvcNAQELBQADggEBAC883iC6S2WgtgjFAoUeICLNmV6o7nEVf0tm9Hw1PK0A 9i7iK5CsM3KpAuiDFBzRD+L4S154k6SBGOIu7vXV5GaxiZm4mADwFyBemOceZA66 gbzGhChcsd9Ryd4RVNvzDABnR+2qVd4f6eNyAx7SIfW/OWZzNizBNMcNUSyOCJZs HYQivm0hoIkuJT3ndD8vqfEP8TUZVy3sY4zXmxcsC2kS59YEHhpq1FQLlR/i1Z05 J0WUiqL7DPIA9o7VGZRneRAHzcUnJ5wUNEnlynTf2/kee5kev5P4qXXP4/1s9aFB BXI0rr3a5szL0hZ33jZuutbKKQZwUEG376egkUN06sk= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org