$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/YW4fQrKWoPxbGuHDqZB_WNhoFN8.roa File: YW4fQrKWoPxbGuHDqZB_WNhoFN8.roa (raw, json) Hash identifier: zPB+2Ky9meukaA44fg/1r0cF+aEaBlqQhDQmq+zTdP8= Subject key identifier: 61:6E:1F:42:B2:96:A0:FC:5B:1A:E1:C3:A9:90:7F:58:D8:68:14:DF Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DE8 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YW4fQrKWoPxbGuHDqZB_WNhoFN8.roa Signing time: Mon 15 Jan 2024 21:35:22 +0000 ROA not before: Mon 15 Jan 2024 21:35:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 124.218.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3560 (0xde8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:35:22 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=616E1F42B296A0FC5B1AE1C3A9907F58D86814DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:14:47:be:65:da:27:fe:bd:e4:88:38:e7: a3:dc:3d:dd:64:7f:7b:5a:bb:e2:95:a3:34:f8:58: d9:0b:33:4f:b4:17:2d:77:17:24:dc:4c:2e:81:08: a7:e7:57:f6:1e:71:39:82:77:0b:18:f7:b7:a3:17: 78:45:91:77:68:c0:f9:32:99:b5:eb:5b:27:9f:f8: 5d:41:30:08:08:cd:41:de:2e:62:f0:25:27:12:b7: d3:da:83:73:be:55:61:00:b5:c7:66:25:12:e3:18: 89:bc:bd:68:bf:ac:0a:47:89:93:e8:78:e9:eb:3a: 80:e1:f4:9f:42:64:0b:1b:36:e1:18:7e:3c:3b:12: a6:77:9d:a7:a6:b7:ef:42:09:f5:7c:10:37:30:c1: 33:27:cb:b4:c4:4a:88:a0:c8:65:68:d5:09:82:15: 05:29:f2:b1:4a:12:c1:51:1b:e3:3d:1e:20:4c:07: db:40:0c:b3:b5:ce:9f:a1:5f:37:29:e9:47:25:b6: 45:f5:56:de:39:f4:0c:3a:a9:a5:b4:9e:30:3e:2b: e8:84:8b:a1:5b:94:16:99:ef:c6:47:43:e8:e2:f9: 61:5c:54:8b:f2:c7:59:50:b3:a4:6c:4e:13:5c:a5: a8:b7:9f:bc:33:27:8f:8d:ea:47:90:41:1a:70:50: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6E:1F:42:B2:96:A0:FC:5B:1A:E1:C3:A9:90:7F:58:D8:68:14:DF X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/YW4fQrKWoPxbGuHDqZB_WNhoFN8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.173.0/24 Signature Algorithm: sha256WithRSAEncryption 52:9f:0a:8c:64:be:28:65:6b:f1:4f:f5:56:a6:97:8d:e0:02: 35:35:e3:f0:a6:c5:70:4a:6d:39:4f:13:15:5f:21:fe:ac:ec: 4c:96:9f:8f:8d:62:90:cd:07:ea:5e:b7:95:3c:2e:93:2e:cb: 0a:46:33:0a:6f:1f:16:23:d1:25:ee:24:e5:88:94:94:73:69: 82:10:6f:a9:08:d7:7a:c1:2b:a0:a8:3e:a6:32:1e:b1:9d:89: 2e:1f:e9:6a:10:9e:0b:18:29:6d:3d:b2:a6:29:16:56:f4:bf: 48:95:35:b9:39:4a:17:ba:a1:3f:78:86:58:52:07:2f:dc:72: 08:68:42:e6:ab:ae:f0:e0:2d:0a:eb:e9:aa:bd:d9:b2:a5:23: a0:91:0c:c6:a1:19:34:79:31:eb:32:40:7a:27:44:b9:91:21: 49:fa:e5:b7:00:59:ab:c2:db:ec:b6:c5:1f:8f:48:eb:d4:b0: 9c:4d:1f:cf:e6:71:fb:3f:8c:64:3e:b5:a0:55:74:75:6f:c0: 4e:21:b8:fd:48:ca:47:a4:7e:06:66:f7:ee:a5:d2:bd:6b:4e: a1:fa:57:43:d8:26:7c:0f:34:f7:e5:d5:32:23:04:e0:d7:9e: b4:48:e0:bc:6c:95:64:67:b9:eb:7d:36:12:f1:01:59:69:6c: 0d:3f:fc:cf -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM1MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYxNkUxRjQyQjI5NkEw RkM1QjFBRTFDM0E5OTA3RjU4RDg2ODE0REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzzxRHvmXaJ/695Ig456PcPd1kf3tau+KVozT4WNkLM0+0Fy13 FyTcTC6BCKfnV/YecTmCdwsY97ejF3hFkXdowPkymbXrWyef+F1BMAgIzUHeLmLw JScSt9Pag3O+VWEAtcdmJRLjGIm8vWi/rApHiZPoeOnrOoDh9J9CZAsbNuEYfjw7 EqZ3naemt+9CCfV8EDcwwTMny7TESoigyGVo1QmCFQUp8rFKEsFRG+M9HiBMB9tA DLO1zp+hXzcp6UcltkX1Vt459Aw6qaW0njA+K+iEi6FblBaZ78ZHQ+ji+WFcVIvy x1lQs6RsThNcpai3n7wzJ4+N6keQQRpwUH+LAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUYW4fQrKWoPxbGuHDqZB/WNhoFN8wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1lXNGZRcktXb1B4Ykd1SERxWkJfV05o b0ZOOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82q0wDQYJ KoZIhvcNAQELBQADggEBAFKfCoxkvihla/FP9Vaml43gAjU14/CmxXBKbTlPExVf If6s7EyWn4+NYpDNB+pet5U8LpMuywpGMwpvHxYj0SXuJOWIlJRzaYIQb6kI13rB K6CoPqYyHrGdiS4f6WoQngsYKW09sqYpFlb0v0iVNbk5She6oT94hlhSBy/ccgho QuarrvDgLQrr6aq92bKlI6CRDMahGTR5MesyQHonRLmRIUn65bcAWavC2+y2xR+P SOvUsJxNH8/mcfs/jGQ+taBVdHVvwE4huP1IykekfgZm9+6l0r1rTqH6V0PYJnwP NPfl1TIjBODXnrRI4LxslWRnuet9NhLxAVlpbA0//M8= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org