$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/FbX4eA8uJBEb051kSDB5bYaOBpE.roa File: FbX4eA8uJBEb051kSDB5bYaOBpE.roa (raw, json) Hash identifier: /tcP3tLp8kNAKJJbkgCUlohnp2L4IFHKzYzJ7whvfbA= Subject key identifier: 15:B5:F8:78:0F:2E:24:11:1B:D3:9D:64:48:30:79:6D:86:8E:06:91 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C21 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FbX4eA8uJBEb051kSDB5bYaOBpE.roa Signing time: Fri 05 Jan 2024 11:05:14 +0000 ROA not before: Fri 05 Jan 2024 11:05:14 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 222.250.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 5 11:05:14 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=15B5F8780F2E24111BD39D644830796D868E0691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:bc:12:88:18:7b:c3:d6:9f:3a:a7:e2:53: f4:bf:9e:7a:cc:65:a3:68:6a:f7:17:ef:b4:fd:9b: fb:44:5c:70:e2:fe:fc:19:41:91:ec:b2:35:bf:ab: 11:88:4a:07:0a:7c:92:19:f8:12:d8:8d:c5:35:7e: ea:d7:f3:b5:fc:b7:cf:bd:85:ac:79:83:98:f2:a3: c6:f1:b1:77:ba:91:3c:0e:90:8c:3b:ae:8f:33:26: 75:ca:5d:2f:ff:9e:83:92:81:9b:89:0a:2b:63:bc: 43:86:c7:7f:7a:3e:b2:80:3b:c1:f8:40:d2:e2:31: 47:1b:25:b3:be:e1:a4:75:12:81:e1:bc:59:00:17: f4:31:b5:51:ff:69:7f:6e:a3:39:2f:85:02:fa:e7: 82:f2:36:1c:ba:b9:f3:e6:18:59:c3:95:62:d8:21: 95:cb:56:5d:9e:fe:04:5b:31:d1:e0:e3:50:5a:e2: 7a:52:bf:f4:3f:81:a4:80:be:25:8b:74:9b:a5:2e: 8b:ba:30:f9:c5:13:70:33:23:ff:94:54:c2:a2:4d: f0:eb:bc:59:b8:56:f3:12:b9:42:70:83:12:a8:f0: 91:73:b8:ed:8e:4c:8d:41:76:fa:dc:4d:75:3c:90: 71:b4:55:f0:51:7d:47:5e:62:ac:8a:c6:55:07:b5: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B5:F8:78:0F:2E:24:11:1B:D3:9D:64:48:30:79:6D:86:8E:06:91 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/FbX4eA8uJBEb051kSDB5bYaOBpE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.250.192.0/18 Signature Algorithm: sha256WithRSAEncryption 71:3b:c4:69:ca:f0:06:43:4f:ad:e3:58:a1:2f:c1:b3:b4:a0: c6:e8:9f:1d:64:6f:12:bb:04:d8:f7:22:f2:85:4c:bd:da:67: 12:cc:d6:02:40:d1:dc:6a:ca:1d:6c:21:81:10:a6:cb:04:af: 5b:da:5b:f0:ba:f5:5d:3e:9a:58:3f:76:71:81:ca:35:72:4b: f0:dc:77:3f:00:26:39:e8:28:5d:0d:3c:d6:dd:dd:ca:62:22: 76:30:bb:f6:c3:c3:37:bc:e4:28:61:a5:3d:8d:e6:6e:f6:b2: d9:41:8c:c1:43:c9:11:02:eb:98:f2:e6:c4:a4:40:1c:e0:ee: 16:a2:e8:59:f0:0e:d1:6e:ed:6e:ab:54:df:c2:b2:dc:f7:5c: 33:aa:2d:1f:89:a6:3b:12:b7:9a:2c:63:c6:cd:63:14:62:0c: d4:d5:47:2b:a5:a7:4f:13:38:fc:49:2f:08:e9:d9:24:91:4b: 6f:9a:9b:d3:fa:ea:7a:d4:17:9a:8d:fe:87:a8:83:52:40:4e: f2:46:68:8b:5e:f8:b0:4e:ff:cb:8e:d4:4f:7d:22:fb:3c:fc: 77:87:74:72:df:b3:ef:20:9e:ea:be:5a:bd:41:b9:7a:b5:c8: ba:dd:75:2d:64:80:ff:04:6b:56:04:07:ba:0f:71:41:b7:6d: d3:45:be:03 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMDUx MTA1MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDE1QjVGODc4MEYyRTI0 MTExQkQzOUQ2NDQ4MzA3OTZEODY4RTA2OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2TbwSiBh7w9afOqfiU/S/nnrMZaNoavcX77T9m/tEXHDi/vwZ QZHssjW/qxGISgcKfJIZ+BLYjcU1furX87X8t8+9hax5g5jyo8bxsXe6kTwOkIw7 ro8zJnXKXS//noOSgZuJCitjvEOGx396PrKAO8H4QNLiMUcbJbO+4aR1EoHhvFkA F/QxtVH/aX9uozkvhQL654LyNhy6ufPmGFnDlWLYIZXLVl2e/gRbMdHg41Ba4npS v/Q/gaSAviWLdJulLou6MPnFE3AzI/+UVMKiTfDrvFm4VvMSuUJwgxKo8JFzuO2O TI1BdvrcTXU8kHG0VfBRfUdeYqyKxlUHtVNpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUFbX4eA8uJBEb051kSDB5bYaOBpEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0ZiWDRlQTh1SkJFYjA1MWtTREI1Yllh T0JwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbe+sAwDQYJ KoZIhvcNAQELBQADggEBAHE7xGnK8AZDT63jWKEvwbO0oMbonx1kbxK7BNj3IvKF TL3aZxLM1gJA0dxqyh1sIYEQpssEr1vaW/C69V0+mlg/dnGByjVyS/Dcdz8AJjno KF0NPNbd3cpiInYwu/bDwze85ChhpT2N5m72stlBjMFDyREC65jy5sSkQBzg7hai 6FnwDtFu7W6rVN/Cstz3XDOqLR+JpjsSt5osY8bNYxRiDNTVRyulp08TOPxJLwjp 2SSRS2+am9P66nrUF5qN/oeog1JATvJGaIte+LBO/8uO1E99Ivs8/HeHdHLfs+8g nuq+Wr1BuXq1yLrddS1kgP8Ea1YEB7oPcUG3bdNFvgM= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org