$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/QLAhT9qeARAl8ep0SKs45ysr2no.roa File: QLAhT9qeARAl8ep0SKs45ysr2no.roa (raw, json) Hash identifier: pdiJTyEnWAkZ/XYRzAEYjjDjXPRDEQ8TX7xxbsXan/k= Subject key identifier: 40:B0:21:4F:DA:9E:01:10:25:F1:EA:74:48:AB:38:E7:2B:2B:DA:7A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DE2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QLAhT9qeARAl8ep0SKs45ysr2no.roa Signing time: Mon 15 Jan 2024 21:35:13 +0000 ROA not before: Mon 15 Jan 2024 21:35:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 60.244.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3554 (0xde2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:35:13 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=40B0214FDA9E011025F1EA7448AB38E72B2BDA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:e1:32:9f:f5:99:57:8d:9b:10:df:25:cb: d2:9d:06:74:12:a7:a3:06:02:6c:0f:a7:65:4a:96: 6f:36:5e:6d:a2:51:75:b1:cd:c4:61:77:1e:39:55: 47:15:b9:d4:c5:85:37:cc:56:f0:ea:0e:97:0c:15: 1f:e2:03:38:7d:ea:bc:3d:16:02:24:70:b9:2e:e1: 44:9d:d1:75:4b:86:be:5f:12:6f:de:b8:7f:2c:05: 2a:52:98:3c:e5:36:f5:48:88:81:9b:11:4d:84:c8: 41:7c:95:8b:20:87:68:b7:ad:07:3f:7b:4c:f6:bc: fa:25:9e:6e:04:61:b4:5e:d8:7a:8e:88:0d:9a:41: 3b:a2:6c:79:32:a4:89:d4:d5:c0:df:37:b8:d6:09: 02:14:4e:eb:1c:ec:54:5f:86:d2:5b:bc:4a:00:51: f2:06:2b:fa:1c:c0:49:5b:b8:9b:eb:5f:19:42:56: 91:52:38:22:a7:a1:5a:ae:3a:81:31:cd:5b:c3:25: f0:23:78:f8:32:ad:a0:7c:d0:36:b0:5a:c6:59:18: 40:13:bf:1a:ca:08:47:08:cb:7b:04:9a:55:2e:cc: 12:e6:9f:64:6d:5d:58:34:8f:76:70:49:37:bd:a3: a5:13:0b:d4:8a:de:09:36:e4:36:b5:2c:89:4c:35: 34:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:21:4F:DA:9E:01:10:25:F1:EA:74:48:AB:38:E7:2B:2B:DA:7A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/QLAhT9qeARAl8ep0SKs45ysr2no.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.128.0/18 Signature Algorithm: sha256WithRSAEncryption 84:8e:a3:1c:df:00:dd:44:38:50:22:41:fb:76:14:7b:05:ce: 26:d9:ef:b2:29:8f:38:3d:8c:0c:63:24:49:f3:cd:e9:98:69: 62:c8:c5:b4:e5:f8:de:8b:d5:8c:30:78:44:48:27:ee:5b:63: 48:f9:47:7c:92:12:5c:cb:19:91:1a:26:20:c4:70:98:c0:78: f4:c7:1f:9a:28:22:ce:15:da:ef:bd:8b:d7:fe:91:c1:2b:ff: cd:3b:fe:13:3c:62:8a:98:15:2c:bc:bd:50:9c:37:85:2e:28: 19:ba:d5:aa:98:74:1a:b8:3b:ac:70:c4:77:f2:2a:59:f0:89: 34:6b:16:53:b5:e8:5f:06:ec:ea:b3:85:a2:2e:30:a7:e6:b8: 2e:fb:2c:41:72:cd:0e:59:95:92:8d:05:ab:18:a0:f0:f6:57: 95:d3:dc:a3:ee:92:2e:8d:16:8d:0b:93:d8:df:0f:1b:8f:28: 82:4f:b3:74:fb:f4:fa:0a:b7:20:24:6e:40:91:a7:42:70:13: 08:17:2d:d5:b2:32:37:d7:64:e5:3d:bf:af:ee:68:c3:8d:51: 55:17:15:1d:cf:21:93:ca:a3:6f:7a:02:52:5c:92:a0:e6:c3: 5d:45:82:d3:55:bf:52:e0:87:0d:db:59:21:53:43:1b:c0:43: c8:48:cd:ff -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM1MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwQjAyMTRGREE5RTAx MTAyNUYxRUE3NDQ4QUIzOEU3MkIyQkRBN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0tuEyn/WZV42bEN8ly9KdBnQSp6MGAmwPp2VKlm82Xm2iUXWx zcRhdx45VUcVudTFhTfMVvDqDpcMFR/iAzh96rw9FgIkcLku4USd0XVLhr5fEm/e uH8sBSpSmDzlNvVIiIGbEU2EyEF8lYsgh2i3rQc/e0z2vPolnm4EYbRe2HqOiA2a QTuibHkypInU1cDfN7jWCQIUTusc7FRfhtJbvEoAUfIGK/ocwElbuJvrXxlCVpFS OCKnoVquOoExzVvDJfAjePgyraB80DawWsZZGEATvxrKCEcIy3sEmlUuzBLmn2Rt XVg0j3ZwSTe9o6UTC9SK3gk25Da1LIlMNTRpAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUQLAhT9qeARAl8ep0SKs45ysr2nowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1FMQWhUOXFlQVJBbDhlcDBTS3M0NXlz cjJuby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY89IAwDQYJ KoZIhvcNAQELBQADggEBAISOoxzfAN1EOFAiQft2FHsFzibZ77Ipjzg9jAxjJEnz zemYaWLIxbTl+N6L1YwweERIJ+5bY0j5R3ySElzLGZEaJiDEcJjAePTHH5ooIs4V 2u+9i9f+kcEr/807/hM8YoqYFSy8vVCcN4UuKBm61aqYdBq4O6xwxHfyKlnwiTRr FlO16F8G7OqzhaIuMKfmuC77LEFyzQ5ZlZKNBasYoPD2V5XT3KPuki6NFo0Lk9jf DxuPKIJPs3T79PoKtyAkbkCRp0JwEwgXLdWyMjfXZOU9v6/uaMONUVUXFR3PIZPK o296AlJckqDmw11FgtNVv1Lghw3bWSFTQxvAQ8hIzf8= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org