$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_O888euPOrM16dIfs8aljNiR0Z0.roa File: _O888euPOrM16dIfs8aljNiR0Z0.roa (raw, json) Hash identifier: 8sVhjX6rxEdtnqLg7n+tx7KKJKNi6ZaznO0YT9vW2IE= Subject key identifier: FC:EF:3C:F1:EB:8F:3A:B3:35:E9:D2:1F:B3:C6:A5:8C:D8:91:D1:9D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0BB0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_O888euPOrM16dIfs8aljNiR0Z0.roa Signing time: Fri 01 Sep 2023 08:50:53 +0000 ROA not before: Fri 01 Sep 2023 08:50:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9674 IP address blocks: 114.140.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Sep 1 08:50:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FCEF3CF1EB8F3AB335E9D21FB3C6A58CD891D19D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:76:9d:a4:6b:2d:15:0b:13:cc:c4:23:26: c1:71:ed:eb:d2:2a:7c:a6:49:0b:e5:63:30:f4:43: 58:d5:af:71:5b:35:90:3f:05:fb:2b:f8:cc:82:c6: 72:9b:93:ee:09:23:10:57:87:1a:08:97:75:13:fa: 8e:fc:a1:ad:ba:8b:17:ee:ef:8b:76:cc:f9:72:9f: 0f:20:2f:56:ce:d6:05:4f:cd:99:ce:fa:49:65:64: 89:3f:d6:83:90:fd:23:3e:32:29:fd:e6:87:43:ab: 7d:86:22:4f:9e:f6:35:19:4c:12:c9:52:c2:27:53: 58:55:72:86:f1:a3:ee:b7:a2:ba:f9:53:af:a8:68: 19:db:46:ba:4b:2d:fd:9f:09:8b:36:de:cf:47:17: 1d:c4:12:cc:06:9d:c8:00:5f:7b:dc:60:48:0c:37: 0a:6f:0b:9a:bb:02:17:29:7d:18:69:af:31:3f:8e: 97:2f:cf:8d:18:65:ea:ec:ea:0e:60:cd:ea:fd:2a: 7a:8b:53:1c:10:10:e2:90:01:70:0e:8a:21:ab:51: cc:43:84:d3:1d:e4:94:8b:be:e9:da:8f:7d:86:d6: 2e:10:e3:c8:23:82:ba:45:74:d9:df:34:4b:a4:d7: 78:44:18:cc:ba:ae:0b:21:0c:eb:9a:ef:53:a0:a2: 54:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EF:3C:F1:EB:8F:3A:B3:35:E9:D2:1F:B3:C6:A5:8C:D8:91:D1:9D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_O888euPOrM16dIfs8aljNiR0Z0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption af:de:f3:f4:ec:c7:a9:30:78:d5:f5:3f:11:b9:e8:11:1e:29: 1d:4f:df:d2:ae:ab:8b:d8:50:12:94:4a:9c:3c:5a:64:bb:23: ba:5d:c1:a2:09:f4:15:61:7d:f0:8b:b2:40:27:8d:a5:aa:bb: a3:4d:fe:3d:22:19:7e:72:f8:d0:c4:35:33:72:ab:bf:cb:ef: 79:5a:31:9d:f3:eb:c5:93:36:5f:b1:58:75:5b:4c:4b:6c:d0: a2:ed:d2:87:5d:85:29:43:a2:04:4b:b5:5b:9a:d0:a1:b4:55: f7:f6:12:0b:d8:80:91:87:74:78:16:0d:e4:50:83:4f:ff:c6: d8:6c:51:97:e1:eb:e3:8c:e8:a3:ef:1b:fb:34:cd:c2:03:bd: 0a:d3:ec:03:ff:53:9f:ba:74:47:0a:eb:6f:b6:72:4f:3d:b6: f0:2e:12:48:2d:6a:02:e7:3a:47:42:02:f2:2c:9d:ee:0e:52: 6f:7f:bc:75:3d:ba:46:6e:dd:d2:ea:66:ff:08:89:a7:8e:3f: 06:b3:12:23:8d:ed:eb:40:e0:8e:ec:15:af:d0:95:0b:a4:2a: df:4d:c2:d1:9b:f5:62:53:94:87:09:0e:c0:f9:74:81:83:47: 9d:f1:87:ca:ea:26:98:41:56:26:89:ba:c9:da:f2:27:ba:68: ef:74:2c:ee -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yMzA5MDEw ODUwNTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDRUYzQ0YxRUI4RjNB QjMzNUU5RDIxRkIzQzZBNThDRDg5MUQxOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9x3adpGstFQsTzMQjJsFx7evSKnymSQvlYzD0Q1jVr3FbNZA/ Bfsr+MyCxnKbk+4JIxBXhxoIl3UT+o78oa26ixfu74t2zPlynw8gL1bO1gVPzZnO +kllZIk/1oOQ/SM+Min95odDq32GIk+e9jUZTBLJUsInU1hVcobxo+63orr5U6+o aBnbRrpLLf2fCYs23s9HFx3EEswGncgAX3vcYEgMNwpvC5q7AhcpfRhprzE/jpcv z40YZers6g5gzer9KnqLUxwQEOKQAXAOiiGrUcxDhNMd5JSLvunaj32G1i4Q48gj grpFdNnfNEuk13hEGMy6rgshDOua71OgolRPAgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQU/O888euPOrM16dIfs8aljNiR0Z0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL19PODg4ZXVQT3JNMTZkSWZzOGFsak5p UjBaMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwByjDANBgkq hkiG9w0BAQsFAAOCAQEAr97z9OzHqTB41fU/EbnoER4pHU/f0q6ri9hQEpRKnDxa ZLsjul3Bogn0FWF98IuyQCeNpaq7o03+PSIZfnL40MQ1M3Krv8vveVoxnfPrxZM2 X7FYdVtMS2zQou3Sh12FKUOiBEu1W5rQobRV9/YSC9iAkYd0eBYN5FCDT//G2GxR l+Hr44zoo+8b+zTNwgO9CtPsA/9Tn7p0Rwrrb7ZyTz228C4SSC1qAuc6R0IC8iyd 7g5Sb3+8dT26Rm7d0upm/wiJp44/BrMSI43t60DgjuwVr9CVC6Qq303C0Zv1YlOU hwkOwPl0gYNHnfGHyuommEFWJom6ydryJ7po73Qs7g== -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org