$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/JVD1TTiw8Gju9YWyPyoM4y4IxmM.roa File: JVD1TTiw8Gju9YWyPyoM4y4IxmM.roa (raw, json) Hash identifier: odDWa7b+v1ZpO/EEfM+y0BZpSVTdd2JH81svrCQX5G0= Subject key identifier: 25:50:F5:4D:38:B0:F0:68:EE:F5:85:B2:3F:2A:0C:E3:2E:08:C6:63 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C78 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JVD1TTiw8Gju9YWyPyoM4y4IxmM.roa Signing time: Mon 15 Jan 2024 21:09:40 +0000 ROA not before: Mon 15 Jan 2024 21:09:40 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 210.200.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:40 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2550F54D38B0F068EEF585B23F2A0CE32E08C663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:7e:a5:65:ca:18:d2:71:82:bd:a1:dc:50: 8a:bd:93:39:c4:e1:8f:e6:ea:c7:51:f6:de:0d:ee: cb:49:70:95:a3:52:d0:ac:ca:cf:01:98:9e:51:1d: d8:b8:44:ed:51:51:cb:2d:b2:a3:fd:32:ac:ca:41: 9c:a9:b7:6c:d4:de:23:25:64:81:82:83:a0:fd:24: bb:ae:07:48:6a:23:10:bf:64:f4:75:12:a1:3d:ca: 29:a0:a0:dc:6d:c5:ad:57:65:98:21:30:bb:47:e3: e6:d5:3b:88:6b:61:da:3f:78:50:49:c2:c7:74:a2: f6:e6:a9:32:9c:f2:10:ea:e0:bc:b3:98:00:6c:69: 35:97:0b:5c:43:5b:2d:e6:2c:82:a1:bd:c2:bb:c7: e0:c0:b1:a4:f8:b4:2e:fb:c3:eb:cf:6b:f2:d5:7e: a1:51:da:c9:0a:60:b7:a2:70:23:00:66:b4:a8:83: 77:1b:83:3c:b3:55:f6:56:1a:94:c2:d4:07:d8:cc: 11:ad:86:af:6b:24:ee:47:ec:1c:5c:31:53:d6:aa: f7:ac:2f:87:6f:10:11:dd:74:78:42:58:ec:00:d4: fb:cf:a5:e5:35:cd:e6:8e:5e:d3:ec:40:ac:85:5e: a1:d4:af:1c:df:c6:98:30:70:7e:6f:28:76:fb:8d: a6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:50:F5:4D:38:B0:F0:68:EE:F5:85:B2:3F:2A:0C:E3:2E:08:C6:63 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/JVD1TTiw8Gju9YWyPyoM4y4IxmM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.8.0/21 Signature Algorithm: sha256WithRSAEncryption 73:0d:ea:09:7e:2d:0f:21:19:0f:51:02:52:e5:02:7e:fc:ef: 1c:4c:fe:44:07:fd:df:d0:d3:7b:72:17:06:4a:44:78:81:81: a4:73:f7:f7:c8:47:e1:56:74:f1:78:48:c4:af:8e:9c:5c:5b: d6:90:b3:da:5e:af:0f:a6:e0:15:20:bc:09:45:c0:d9:6b:6f: 5c:ae:39:52:1d:19:37:f4:a4:e8:cf:c7:78:53:af:48:96:09: 8a:69:57:16:ba:41:32:ba:d0:e0:da:71:43:e5:14:61:fa:30: 78:a0:2b:aa:51:0d:f3:be:3f:1b:c1:48:c2:2a:6c:2b:01:e4: aa:5a:72:8a:fd:20:74:82:8b:53:f9:b0:a7:f0:08:86:fe:79: fe:d6:28:c4:2d:23:bd:39:f6:b4:ea:e1:01:fc:2d:1d:b5:b7: 8a:c2:ca:cd:cc:5b:68:cb:76:0a:58:b0:58:88:c1:df:8b:0d: 4d:b4:00:83:67:d0:bb:69:8e:e3:b1:10:8a:c6:ea:e6:d7:c4: c0:a0:32:a4:11:65:8c:b0:72:ec:4e:e9:b0:7c:7a:b7:f6:9f: 58:4f:a9:6c:cb:2a:9c:9e:55:59:36:1a:34:91:e8:a3:73:b0: a2:c0:79:82:d1:63:cc:91:bb:c8:d1:90:c4:58:74:cb:2e:51: ad:10:aa:1c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI1NTBGNTREMzhCMEYw NjhFRUY1ODVCMjNGMkEwQ0UzMkUwOEM2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWnH6lZcoY0nGCvaHcUIq9kznE4Y/m6sdR9t4N7stJcJWjUtCs ys8BmJ5RHdi4RO1RUcstsqP9MqzKQZypt2zU3iMlZIGCg6D9JLuuB0hqIxC/ZPR1 EqE9yimgoNxtxa1XZZghMLtH4+bVO4hrYdo/eFBJwsd0ovbmqTKc8hDq4LyzmABs aTWXC1xDWy3mLIKhvcK7x+DAsaT4tC77w+vPa/LVfqFR2skKYLeicCMAZrSog3cb gzyzVfZWGpTC1AfYzBGthq9rJO5H7BxcMVPWqvesL4dvEBHddHhCWOwA1PvPpeU1 zeaOXtPsQKyFXqHUrxzfxpgwcH5vKHb7jabpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUJVD1TTiw8Gju9YWyPyoM4y4IxmMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0pWRDFUVGl3OEdqdTlZV3lQeW9NNHk0 SXhtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPSyAgwDQYJ KoZIhvcNAQELBQADggEBAHMN6gl+LQ8hGQ9RAlLlAn787xxM/kQH/d/Q03tyFwZK RHiBgaRz9/fIR+FWdPF4SMSvjpxcW9aQs9perw+m4BUgvAlFwNlrb1yuOVIdGTf0 pOjPx3hTr0iWCYppVxa6QTK60ODacUPlFGH6MHigK6pRDfO+PxvBSMIqbCsB5Kpa cor9IHSCi1P5sKfwCIb+ef7WKMQtI7059rTq4QH8LR21t4rCys3MW2jLdgpYsFiI wd+LDU20AINn0LtpjuOxEIrG6ubXxMCgMqQRZYywcuxO6bB8erf2n1hPqWzLKpye VVk2GjSR6KNzsKLAeYLRY8yRu8jRkMRYdMsuUa0Qqhw= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org