$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/EY1TT6d1np67lRqAoKmBEM32ApM.roa File: EY1TT6d1np67lRqAoKmBEM32ApM.roa (raw, json) Hash identifier: 0qbf5k9SfXdM6F2per+EO7YglsI77PxtK58LMvr397g= Subject key identifier: 11:8D:53:4F:A7:75:9E:9E:BB:95:1A:80:A0:A9:81:10:CD:F6:02:93 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DF0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/EY1TT6d1np67lRqAoKmBEM32ApM.roa Signing time: Mon 15 Jan 2024 21:35:34 +0000 ROA not before: Mon 15 Jan 2024 21:35:34 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 124.218.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:35:34 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=118D534FA7759E9EBB951A80A0A98110CDF60293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:ee:fb:60:ae:c0:b7:23:b9:46:b8:a5:c6: 65:fd:ae:cb:69:52:12:f8:e6:86:ce:7a:d6:89:1b: 80:fa:58:a1:ef:0c:82:cd:54:c8:5f:9d:37:6e:ef: 7e:0d:27:07:ee:9c:d7:2d:67:1d:3e:53:73:73:a0: c8:c0:79:59:0b:d6:31:90:c0:63:47:5f:97:53:ee: 15:b0:4f:ec:12:8c:57:7b:c0:35:e4:5a:27:4e:44: e8:6b:ac:f4:4a:5d:53:34:4f:65:e4:ea:b0:78:e9: 9b:95:ea:d8:8c:54:be:84:80:4f:91:3c:78:f8:82: bb:54:08:a6:5a:80:93:e4:98:b8:21:12:3a:22:2f: 51:af:39:b6:32:8c:a2:fe:84:e9:63:c9:29:70:7c: 32:c2:53:ab:d4:15:cf:15:01:c9:ef:64:80:7e:17: 51:a4:d5:fd:2a:0f:a4:22:2e:fd:81:00:cd:39:29: a5:7e:71:c4:9e:9b:57:2b:23:bb:b3:87:9e:b2:14: e3:c3:a9:50:80:f8:33:43:23:20:0c:ac:b0:c3:36: 4c:44:30:6b:82:b4:f1:1c:13:d9:ff:47:2b:d5:3e: a0:64:f3:72:35:85:e5:f0:8a:78:32:d6:e2:79:4f: bd:bd:9c:40:da:53:f3:13:d4:0a:00:b0:25:75:cb: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8D:53:4F:A7:75:9E:9E:BB:95:1A:80:A0:A9:81:10:CD:F6:02:93 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/EY1TT6d1np67lRqAoKmBEM32ApM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.177.0/24 Signature Algorithm: sha256WithRSAEncryption 27:d6:e2:74:be:88:a0:08:c7:b2:0f:4a:a7:c2:d6:e3:4d:d7: b4:b1:2e:99:8f:1d:00:bd:db:e8:4d:8b:3b:7b:00:d7:b2:fc: 29:6b:10:d3:94:d7:b2:d5:98:1d:5b:8b:1b:4c:af:5a:b6:05: 28:59:9e:70:fb:ec:1e:55:5b:9f:7e:0b:41:03:24:28:d3:53: ac:fb:f0:c5:da:c1:ba:ed:39:41:c9:38:fa:ed:bc:1d:18:ef: 68:b1:10:36:18:17:69:d4:33:c5:63:7b:7b:b4:6b:5d:b3:4c: cc:e3:62:96:28:a0:4c:5d:23:f1:fe:a4:2f:6b:a1:ad:37:8c: f8:ab:2f:77:3e:19:6b:ba:8b:fd:e9:ba:60:08:d3:2c:1c:64: ec:cd:c4:a3:6b:0c:45:39:0e:0c:a4:ff:27:d8:28:32:ae:df: bf:71:1c:51:84:75:ad:f7:f4:a7:1b:68:dc:d4:e7:13:b3:82: 41:3f:3e:62:42:4a:a2:92:4e:95:3f:98:6d:70:b9:12:18:a7: cd:18:c0:fc:a3:ec:1e:54:a4:0f:d7:22:50:99:34:b7:be:8c: d7:65:a5:0e:3c:fa:1f:47:0e:69:28:cb:be:c1:9c:67:52:04: 4c:1e:fc:f3:01:ad:01:7a:33:2d:1d:8d:5c:71:e1:c0:fa:96: 12:23:8a:8c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM1MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDExOEQ1MzRGQTc3NTlF OUVCQjk1MUE4MEEwQTk4MTEwQ0RGNjAyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3Gu77YK7AtyO5RrilxmX9rstpUhL45obOetaJG4D6WKHvDILN VMhfnTdu734NJwfunNctZx0+U3NzoMjAeVkL1jGQwGNHX5dT7hWwT+wSjFd7wDXk WidOROhrrPRKXVM0T2Xk6rB46ZuV6tiMVL6EgE+RPHj4grtUCKZagJPkmLghEjoi L1GvObYyjKL+hOljySlwfDLCU6vUFc8VAcnvZIB+F1Gk1f0qD6QiLv2BAM05KaV+ ccSem1crI7uzh56yFOPDqVCA+DNDIyAMrLDDNkxEMGuCtPEcE9n/RyvVPqBk83I1 heXwingy1uJ5T729nEDaU/MT1AoAsCV1y6B7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUEY1TT6d1np67lRqAoKmBEM32ApMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0VZMVRUNmQxbnA2N2xScUFvS21CRU0z MkFwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82rEwDQYJ KoZIhvcNAQELBQADggEBACfW4nS+iKAIx7IPSqfC1uNN17SxLpmPHQC92+hNizt7 ANey/ClrENOU17LVmB1bixtMr1q2BShZnnD77B5VW59+C0EDJCjTU6z78MXawbrt OUHJOPrtvB0Y72ixEDYYF2nUM8Vje3u0a12zTMzjYpYooExdI/H+pC9roa03jPir L3c+GWu6i/3pumAI0ywcZOzNxKNrDEU5Dgyk/yfYKDKu379xHFGEda339KcbaNzU 5xOzgkE/PmJCSqKSTpU/mG1wuRIYp80YwPyj7B5UpA/XIlCZNLe+jNdlpQ48+h9H Dmkoy77BnGdSBEwe/PMBrQF6My0djVxx4cD6lhIjiow= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org