$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/HZMvbf_zIfNIfbxDJXthUQJ_NeE.roa File: HZMvbf_zIfNIfbxDJXthUQJ_NeE.roa (raw, json) Hash identifier: FDTY5U5x8NdGBbBfOimsGX07vHoSlqZWjXOPRpqWh8M= Subject key identifier: 1D:93:2F:6D:FF:F3:21:F3:48:7D:BC:43:25:7B:61:51:02:7F:35:E1 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DB6 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HZMvbf_zIfNIfbxDJXthUQJ_NeE.roa Signing time: Mon 15 Jan 2024 21:30:20 +0000 ROA not before: Mon 15 Jan 2024 21:30:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 124.218.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:30:20 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1D932F6DFFF321F3487DBC43257B6151027F35E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:2a:91:17:f2:9c:b4:05:fc:f1:b1:a3:ba: ad:9c:f9:32:c3:9e:9b:58:25:f0:29:33:91:29:2d: f6:2d:ff:f1:2e:48:da:8e:41:af:4d:f3:68:3e:60: 12:7d:89:40:d5:f5:74:9f:07:43:e5:8c:1f:17:e5: bf:c1:60:1a:b0:d1:3f:be:8c:5c:c1:0e:c0:f1:f5: 61:58:b0:f7:bd:21:d3:22:f1:cf:70:3e:8b:e8:15: 99:58:08:bc:c2:92:10:52:b0:e0:02:6b:56:c7:21: 80:68:95:61:b5:b9:c7:e3:34:0c:90:a3:e6:68:f6: fb:29:b4:1f:60:32:a5:b0:80:ef:33:48:ab:83:fd: ab:49:94:2b:57:92:fd:04:7f:92:80:43:7f:db:14: c6:b7:89:6a:99:13:ff:e6:c8:67:74:27:e7:29:46: 47:93:c3:1c:a1:6f:8c:6d:1a:c6:a2:fd:b3:d6:9b: 9d:99:9d:ea:9b:24:60:dc:89:ba:38:54:c3:69:16: 3e:74:59:3a:7c:be:75:d7:30:8e:db:ca:98:d9:0c: a5:aa:1c:1d:05:26:17:d7:c5:57:5a:6b:8a:34:80: 24:80:2d:eb:6a:83:20:eb:6c:df:e6:16:5d:b6:ea: 1a:9b:6e:45:40:27:96:08:7d:b9:86:c4:87:4f:36: c6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:93:2F:6D:FF:F3:21:F3:48:7D:BC:43:25:7B:61:51:02:7F:35:E1 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/HZMvbf_zIfNIfbxDJXthUQJ_NeE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.104.0/22 Signature Algorithm: sha256WithRSAEncryption 75:e5:12:d5:fe:4c:25:df:e9:62:72:66:b3:90:76:76:12:2c: 85:82:7a:ae:91:4c:1b:49:9a:90:f5:86:53:2a:86:bb:3e:8b: eb:50:53:3e:b7:b0:9e:7a:63:67:2a:5d:3d:0d:f5:54:aa:7c: 29:88:d9:2c:db:51:c1:d1:15:4c:ff:36:ac:78:d9:72:40:02: 29:3d:b3:dc:84:a5:3f:87:74:62:81:08:9a:71:2a:9a:97:d9: e3:8d:a0:73:52:75:d3:51:a7:99:3b:74:dc:68:94:b4:46:61: 32:95:d8:8a:bb:eb:67:91:2e:87:81:29:95:79:da:2b:e3:9a: 1b:e0:a3:eb:38:e5:23:f8:f7:c2:18:cf:9d:c0:a9:01:69:e5: f1:a6:67:4c:98:b8:8a:11:3a:69:43:37:d9:f3:2d:be:99:68: 88:10:57:b0:ac:6e:17:5f:aa:1e:a2:01:9c:db:6c:c4:f0:1e: e3:2d:06:22:a0:03:6c:aa:ed:9b:39:62:5e:48:24:26:69:fe: fc:8e:d3:44:cb:17:e9:d5:e7:cf:16:92:ce:bf:10:fa:4a:fd: de:03:1d:77:47:52:8f:b0:02:1f:b6:45:0d:45:fb:92:3e:1b: 4f:84:1b:05:18:ed:5c:d3:e7:d2:c1:99:7c:2b:f5:28:1d:68: f0:1e:81:d2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTMwMjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFEOTMyRjZERkZGMzIx RjM0ODdEQkM0MzI1N0I2MTUxMDI3RjM1RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwjCqRF/KctAX88bGjuq2c+TLDnptYJfApM5EpLfYt//EuSNqO Qa9N82g+YBJ9iUDV9XSfB0PljB8X5b/BYBqw0T++jFzBDsDx9WFYsPe9IdMi8c9w PovoFZlYCLzCkhBSsOACa1bHIYBolWG1ucfjNAyQo+Zo9vsptB9gMqWwgO8zSKuD /atJlCtXkv0Ef5KAQ3/bFMa3iWqZE//myGd0J+cpRkeTwxyhb4xtGsai/bPWm52Z neqbJGDcibo4VMNpFj50WTp8vnXXMI7bypjZDKWqHB0FJhfXxVdaa4o0gCSALetq gyDrbN/mFl226hqbbkVAJ5YIfbmGxIdPNsaxAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUHZMvbf/zIfNIfbxDJXthUQJ/NeEwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0haTXZiZl96SWZOSWZieERKWHRoVVFK X05lRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mgwDQYJ KoZIhvcNAQELBQADggEBAHXlEtX+TCXf6WJyZrOQdnYSLIWCeq6RTBtJmpD1hlMq hrs+i+tQUz63sJ56Y2cqXT0N9VSqfCmI2SzbUcHRFUz/Nqx42XJAAik9s9yEpT+H dGKBCJpxKpqX2eONoHNSddNRp5k7dNxolLRGYTKV2Iq762eRLoeBKZV52ivjmhvg o+s45SP498IYz53AqQFp5fGmZ0yYuIoROmlDN9nzLb6ZaIgQV7Csbhdfqh6iAZzb bMTwHuMtBiKgA2yq7Zs5Yl5IJCZp/vyO00TLF+nV588Wks6/EPpK/d4DHXdHUo+w Ah+2RQ1F+5I+G0+EGwUY7VzT59LBmXwr9SgdaPAegdI= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org