$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/UJH46Leu872W0aZLJqwLdR8nBkQ.roa File: UJH46Leu872W0aZLJqwLdR8nBkQ.roa (raw, json) Hash identifier: dnk8m4OY4QrV1WMF2hsO7S0Y+vRoFz+CruoRBthZh2w= Subject key identifier: 50:91:F8:E8:B7:AE:F3:BD:96:D1:A6:4B:26:AC:0B:75:1F:27:06:44 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D92 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UJH46Leu872W0aZLJqwLdR8nBkQ.roa Signing time: Mon 15 Jan 2024 21:29:27 +0000 ROA not before: Mon 15 Jan 2024 21:29:27 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 124.218.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3474 (0xd92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:29:27 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5091F8E8B7AEF3BD96D1A64B26AC0B751F270644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:5b:24:f5:b4:33:3f:02:b6:cc:d3:92:e3: 1a:71:95:4f:9f:fd:d4:e2:4b:d7:94:cf:e2:1f:77: c2:d1:88:68:f8:a8:35:d1:e9:ea:ee:e3:c8:0e:6e: 9a:a3:ba:5e:8a:f7:0f:61:66:d3:17:f5:8e:ab:25: ba:cd:96:f5:d9:c3:93:2d:72:4e:7d:59:fb:6f:97: f9:ed:12:3b:d4:bd:61:20:fd:b0:51:47:d6:f1:1b: 6f:37:09:e2:4a:44:3e:12:06:06:90:7e:12:31:68: c4:dd:a3:e5:61:d2:ed:29:48:27:38:75:b6:54:c2: 01:2d:98:a9:d3:7a:e5:db:d1:92:db:7d:f7:88:f3: 4f:dd:32:83:1f:44:74:36:5c:1a:24:57:1c:55:c3: 61:ba:05:ef:5b:d3:83:b8:8b:9d:70:f1:22:05:80: ef:01:57:fc:e4:12:52:c0:42:49:71:b8:8b:bd:fc: 4a:a3:f4:4c:76:2e:e9:6b:e9:c7:1d:09:50:ff:f2: 73:74:bd:39:35:dc:57:d3:02:69:92:5a:9a:4c:96: 1a:79:78:d1:f1:fd:40:29:9b:65:37:9b:38:d0:7b: f9:84:9d:e5:cb:74:f2:fc:4c:a0:2a:d7:7e:49:bc: 6c:03:6b:c1:2d:1e:f4:54:bd:7c:97:81:cb:96:df: 8e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:91:F8:E8:B7:AE:F3:BD:96:D1:A6:4B:26:AC:0B:75:1F:27:06:44 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/UJH46Leu872W0aZLJqwLdR8nBkQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.192.0/19 Signature Algorithm: sha256WithRSAEncryption 9f:37:34:ac:f1:5c:3f:e2:8c:66:fd:3c:49:56:3f:1f:7f:08: 8f:1e:c0:63:71:64:c3:84:07:25:1c:97:8e:68:39:a3:01:f7: c5:3f:6a:c4:40:6f:20:e8:7b:05:ef:e3:b1:d7:5f:01:f2:a7: c2:7d:bc:25:69:63:21:af:09:e5:9e:90:84:12:79:e5:c9:09: 7e:b3:4a:fe:30:af:de:6a:6f:0c:2a:19:08:5f:e2:b1:1a:29: 16:89:4e:09:5b:d6:8e:16:27:3c:0a:92:5b:2c:70:a3:04:d9: 27:fb:e9:a0:bd:34:55:da:05:0f:ff:0c:ce:87:26:cb:6d:17: 3c:b4:06:b0:14:5d:9b:5b:b4:89:3b:f5:32:ce:86:88:f2:4f: 5e:3f:5e:24:d7:f2:55:b9:ed:f4:42:0b:a9:27:a7:f3:bc:92: 79:1b:98:f2:e3:6c:9c:1e:a2:e2:9c:e6:83:6e:3d:17:4c:13: d0:53:95:03:f2:3f:e8:d7:42:1e:38:a5:b7:fb:e0:8b:b6:0d: 66:79:d2:11:6b:fa:d6:3b:c0:a3:a2:4d:f5:0d:d8:b2:76:97: 0e:ca:05:5c:37:9a:7c:52:3a:42:ef:77:5d:6f:7f:7c:6e:a6: dd:c2:1a:ad:28:c8:f0:59:6a:75:49:f4:36:a4:7b:e9:ec:27: 05:4b:49:00 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI5MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUwOTFGOEU4QjdBRUYz QkQ5NkQxQTY0QjI2QUMwQjc1MUYyNzA2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGQ1sk9bQzPwK2zNOS4xpxlU+f/dTiS9eUz+Ifd8LRiGj4qDXR 6eru48gObpqjul6K9w9hZtMX9Y6rJbrNlvXZw5Mtck59Wftvl/ntEjvUvWEg/bBR R9bxG283CeJKRD4SBgaQfhIxaMTdo+Vh0u0pSCc4dbZUwgEtmKnTeuXb0ZLbffeI 80/dMoMfRHQ2XBokVxxVw2G6Be9b04O4i51w8SIFgO8BV/zkElLAQklxuIu9/Eqj 9Ex2Lulr6ccdCVD/8nN0vTk13FfTAmmSWppMlhp5eNHx/UApm2U3mzjQe/mEneXL dPL8TKAq135JvGwDa8EtHvRUvXyXgcuW346JAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUUJH46Leu872W0aZLJqwLdR8nBkQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1VKSDQ2TGV1ODcyVzBhWkxKcXdMZFI4 bkJrUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV82sAwDQYJ KoZIhvcNAQELBQADggEBAJ83NKzxXD/ijGb9PElWPx9/CI8ewGNxZMOEByUcl45o OaMB98U/asRAbyDoewXv47HXXwHyp8J9vCVpYyGvCeWekIQSeeXJCX6zSv4wr95q bwwqGQhf4rEaKRaJTglb1o4WJzwKklsscKME2Sf76aC9NFXaBQ//DM6HJsttFzy0 BrAUXZtbtIk79TLOhojyT14/XiTX8lW57fRCC6knp/O8knkbmPLjbJweouKc5oNu PRdME9BTlQPyP+jXQh44pbf74Iu2DWZ50hFr+tY7wKOiTfUN2LJ2lw7KBVw3mnxS OkLvd11vf3xupt3CGq0oyPBZanVJ9Dake+nsJwVLSQA= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org