$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/KHTVqqtqgqGEZ-VMBhJSzDA_RuY.roa File: KHTVqqtqgqGEZ-VMBhJSzDA_RuY.roa (raw, json) Hash identifier: eCFjmfDFSuPqCKJSNrgLQOTQSsAEANlgbNRqBHpz/Z4= Subject key identifier: 28:74:D5:AA:AB:6A:82:A1:84:67:E5:4C:06:12:52:CC:30:3F:46:E6 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C62 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KHTVqqtqgqGEZ-VMBhJSzDA_RuY.roa Signing time: Mon 15 Jan 2024 21:09:17 +0000 ROA not before: Mon 15 Jan 2024 21:09:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 203.79.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:09:17 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2874D5AAAB6A82A18467E54C061252CC303F46E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:94:ae:9d:20:33:99:fd:3e:e7:4c:1b:28: 52:8d:99:87:74:58:fc:f1:92:ce:0f:b2:d1:cc:77: 15:63:f5:fe:69:9b:75:bc:e4:68:18:54:83:07:79: bf:ac:a1:e7:76:33:20:ee:d3:8b:1f:3e:51:cc:54: e0:b3:ad:68:35:e8:18:b0:8a:fd:5f:f5:22:57:98: 25:dc:0a:f5:6f:3e:5b:ab:12:9a:10:b9:f4:bb:3b: 8c:9d:e5:a7:07:06:55:c8:6e:81:62:8a:33:fd:d4: a3:95:94:5b:3c:ad:21:3f:97:32:83:0e:14:b3:b8: 55:16:59:cb:42:50:43:b9:b0:89:c9:78:52:7e:27: 47:95:65:20:05:4c:bf:d1:76:bf:0a:eb:1d:df:7a: 8f:bb:d6:8f:bc:e9:59:d7:0d:11:67:2c:6c:cf:b9: 23:1f:30:43:0f:ff:42:4f:f3:99:2a:6c:65:37:4d: e9:2c:b5:6b:08:54:64:d4:cb:b7:07:a1:d5:7d:c6: 6d:48:66:21:75:b3:c0:b6:ba:91:90:04:a3:0c:58: 38:c4:86:04:33:4a:24:a5:4f:6d:31:1c:4d:73:30: d5:ac:2c:48:e6:69:1e:1c:3a:98:c0:19:99:36:28: 25:38:21:10:cc:27:ce:07:e4:f3:d5:9a:26:e4:af: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:74:D5:AA:AB:6A:82:A1:84:67:E5:4C:06:12:52:CC:30:3F:46:E6 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/KHTVqqtqgqGEZ-VMBhJSzDA_RuY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.79.216.0/22 Signature Algorithm: sha256WithRSAEncryption 24:af:0d:96:af:da:fb:23:3b:98:15:43:f2:f0:bf:c2:4a:30: eb:f9:35:3a:39:40:80:38:d4:ba:12:5f:f3:12:ed:47:32:4d: 40:f6:44:1b:1e:2f:e3:24:80:d7:18:2a:a8:e5:46:56:86:b8: 62:3e:68:97:fe:72:d0:89:48:0a:b3:ba:e8:90:0c:23:3a:d8: 8e:cb:8f:96:d5:b8:c0:29:65:0d:bb:76:70:41:69:81:fe:8f: 0e:e6:66:0c:22:c6:fc:35:1f:90:c6:f4:98:88:73:46:00:72: 68:76:e3:64:82:03:2e:2c:14:94:f5:43:76:f4:85:00:6f:5a: 26:9c:d2:49:a4:a6:a5:cf:fb:2a:c5:55:67:d7:ed:6a:ab:5b: d8:74:e5:94:91:26:39:8f:dd:1c:76:c1:6e:30:fe:0b:68:0e: f8:3e:3b:50:1f:4b:1c:65:b6:ce:5b:6b:27:3a:aa:a8:eb:bf: 05:37:2a:e3:70:09:66:7f:8c:90:f9:76:33:bd:9c:a3:4e:11: c1:81:d2:ff:6c:a4:71:62:3a:90:9d:e0:f6:76:64:bd:71:61: 55:91:b6:39:2e:45:e5:df:7e:3c:df:e3:b4:55:e1:2d:62:6e: b8:4a:55:2c:df:e0:c7:73:3b:42:ac:fb:98:b8:38:b4:74:5a: 08:d8:70:0e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTA5MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI4NzRENUFBQUI2QTgy QTE4NDY3RTU0QzA2MTI1MkNDMzAzRjQ2RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu15SunSAzmf0+50wbKFKNmYd0WPzxks4PstHMdxVj9f5pm3W8 5GgYVIMHeb+soed2MyDu04sfPlHMVOCzrWg16Biwiv1f9SJXmCXcCvVvPlurEpoQ ufS7O4yd5acHBlXIboFiijP91KOVlFs8rSE/lzKDDhSzuFUWWctCUEO5sInJeFJ+ J0eVZSAFTL/Rdr8K6x3feo+71o+86VnXDRFnLGzPuSMfMEMP/0JP85kqbGU3Teks tWsIVGTUy7cHodV9xm1IZiF1s8C2upGQBKMMWDjEhgQzSiSlT20xHE1zMNWsLEjm aR4cOpjAGZk2KCU4IRDMJ84H5PPVmibkr3yrAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUKHTVqqtqgqGEZ+VMBhJSzDA/RuYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0tIVFZxcXRxZ3FHRVotVk1CaEpTekRB X1J1WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLT9gwDQYJ KoZIhvcNAQELBQADggEBACSvDZav2vsjO5gVQ/Lwv8JKMOv5NTo5QIA41LoSX/MS 7UcyTUD2RBseL+MkgNcYKqjlRlaGuGI+aJf+ctCJSAqzuuiQDCM62I7Lj5bVuMAp ZQ27dnBBaYH+jw7mZgwixvw1H5DG9JiIc0YAcmh242SCAy4sFJT1Q3b0hQBvWiac 0kmkpqXP+yrFVWfX7WqrW9h05ZSRJjmP3Rx2wW4w/gtoDvg+O1AfSxxlts5bayc6 qqjrvwU3KuNwCWZ/jJD5djO9nKNOEcGB0v9spHFiOpCd4PZ2ZL1xYVWRtjkuReXf fjzf47RV4S1ibrhKVSzf4MdzO0Ks+5i4OLR0WgjYcA4= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:43 2024 by rpki-client on console-ams.rpki-client.org