$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/Y2oCCt4VgpMB89yFTXnSEDYJDKU.roa File: Y2oCCt4VgpMB89yFTXnSEDYJDKU.roa (raw, json) Hash identifier: xygQPvJTlyTCbrvv3W93Otljjyta7nlqIUNEnr8z7+I= Subject key identifier: 63:6A:02:0A:DE:15:82:93:01:F3:DC:85:4D:79:D2:10:36:09:0C:A5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CF6 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Y2oCCt4VgpMB89yFTXnSEDYJDKU.roa Signing time: Mon 15 Jan 2024 21:24:00 +0000 ROA not before: Mon 15 Jan 2024 21:24:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9311 IP address blocks: 222.156.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3318 (0xcf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:24:00 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=636A020ADE15829301F3DC854D79D21036090CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:59:2a:e6:16:b2:a8:6d:71:37:54:82:dc: 01:83:55:a6:40:ce:13:d0:e3:93:31:b2:03:95:d8: c8:43:3c:b2:18:36:52:d9:39:41:5c:58:1c:59:2c: 77:fd:91:52:84:e8:74:de:96:b4:52:f4:95:20:f4: 6a:48:2d:a0:f7:bd:57:c6:6d:64:6b:1b:c3:6c:25: cf:de:f7:98:ed:78:87:a1:5a:cf:67:6c:3f:c1:8e: 56:64:a7:c4:d6:ec:17:20:ea:32:2d:1d:33:3a:3f: e5:89:fb:11:3f:76:23:3f:d4:f9:b3:d1:7d:4c:28: 95:c9:bd:a3:5f:3c:63:89:c1:26:96:a2:a8:88:54: 03:57:1f:e8:42:bc:3f:86:97:2e:02:27:e5:b2:82: 89:d8:84:5c:dc:bb:11:9d:67:e6:15:4b:03:19:5a: 63:9c:49:0c:11:38:a5:87:7a:70:a1:00:02:5f:f2: 64:17:97:dd:75:37:0f:d9:eb:bb:2b:a4:c0:d2:46: 2c:23:07:a2:dc:67:4b:50:69:8d:bd:ff:ff:25:b6: fb:e6:2b:c8:49:11:32:f2:d2:75:97:35:67:bf:50: ba:72:40:81:e2:24:06:c1:a3:a3:b8:b8:a2:af:5e: 95:55:5b:56:82:e9:90:fb:50:8a:28:9c:ee:44:92: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6A:02:0A:DE:15:82:93:01:F3:DC:85:4D:79:D2:10:36:09:0C:A5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/Y2oCCt4VgpMB89yFTXnSEDYJDKU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.156.247.0/24 Signature Algorithm: sha256WithRSAEncryption 05:26:52:8c:cf:23:6b:b6:60:30:47:4e:a3:91:69:a0:d3:5f: 0c:2e:13:3a:18:e7:b8:1f:a2:56:dc:6e:cb:af:25:95:87:c5: 09:2a:f9:78:b1:f5:26:16:29:df:83:2b:2b:73:02:c6:e4:f9: 7b:c5:15:5e:b5:cf:16:7c:4b:44:01:c0:89:59:92:35:3b:fc: 25:b6:36:c2:e6:15:d3:d4:f8:c7:26:75:3a:2b:1c:64:e2:dc: 5f:c6:6e:ed:0a:68:c1:a2:27:2c:1a:2b:5b:cc:2c:fe:2e:25: 84:e4:fb:b0:f0:7e:71:4c:e3:a0:14:f8:c7:be:6b:36:56:81: 45:9c:dc:b4:ec:49:32:d2:5b:21:4d:8e:73:27:27:52:54:5f: 17:b7:16:3d:c9:72:31:fb:04:1c:41:8a:78:54:a0:c7:53:38: 86:69:07:96:51:16:03:5b:fb:94:20:4b:08:25:46:05:2f:10: 8a:79:5e:5d:d2:4a:3c:06:10:68:cb:c2:3d:1d:8f:25:3e:81: 4f:f2:18:5c:de:15:3b:c4:1d:dc:cf:4a:22:94:fc:0b:7f:3a: ed:43:25:df:92:1d:a7:c1:57:77:77:4a:35:6f:cb:86:59:d3: 80:57:f8:8d:e1:9a:07:b4:da:9a:81:82:bc:58:72:3f:eb:bd: 57:9d:c3:4a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI0MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYzNkEwMjBBREUxNTgy OTMwMUYzREM4NTRENzlEMjEwMzYwOTBDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYXlkq5hayqG1xN1SC3AGDVaZAzhPQ45MxsgOV2MhDPLIYNlLZ OUFcWBxZLHf9kVKE6HTelrRS9JUg9GpILaD3vVfGbWRrG8NsJc/e95jteIehWs9n bD/BjlZkp8TW7Bcg6jItHTM6P+WJ+xE/diM/1Pmz0X1MKJXJvaNfPGOJwSaWoqiI VANXH+hCvD+Gly4CJ+WygonYhFzcuxGdZ+YVSwMZWmOcSQwROKWHenChAAJf8mQX l911Nw/Z67srpMDSRiwjB6LcZ0tQaY29//8ltvvmK8hJETLy0nWXNWe/ULpyQIHi JAbBo6O4uKKvXpVVW1aC6ZD7UIoonO5EktDfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUY2oCCt4VgpMB89yFTXnSEDYJDKUwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1kyb0NDdDRWZ3BNQjg5eUZUWG5TRURZ SkRLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADenPcwDQYJ KoZIhvcNAQELBQADggEBAAUmUozPI2u2YDBHTqORaaDTXwwuEzoY57gfolbcbsuv JZWHxQkq+Xix9SYWKd+DKytzAsbk+XvFFV61zxZ8S0QBwIlZkjU7/CW2NsLmFdPU +McmdTorHGTi3F/Gbu0KaMGiJywaK1vMLP4uJYTk+7DwfnFM46AU+Me+azZWgUWc 3LTsSTLSWyFNjnMnJ1JUXxe3Fj3JcjH7BBxBinhUoMdTOIZpB5ZRFgNb+5QgSwgl RgUvEIp5Xl3SSjwGEGjLwj0djyU+gU/yGFzeFTvEHdzPSiKU/At/Ou1DJd+SHafB V3d3SjVvy4ZZ04BX+I3hmge02pqBgrxYcj/rvVedw0o= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org