$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/c7Ko5KkE8sZJ7IWuDBM_PchLDM0.roa File: c7Ko5KkE8sZJ7IWuDBM_PchLDM0.roa (raw, json) Hash identifier: b7I8HjDPcttx50cMg52oP9C5aisP4WcEbzQ1EOk+2sM= Subject key identifier: 73:B2:A8:E4:A9:04:F2:C6:49:EC:85:AE:0C:13:3F:3D:C8:4B:0C:CD Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0E4C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/c7Ko5KkE8sZJ7IWuDBM_PchLDM0.roa Signing time: Tue 16 Apr 2024 09:19:58 +0000 ROA not before: Tue 16 Apr 2024 09:19:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 218.34.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3660 (0xe4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Apr 16 09:19:58 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=73B2A8E4A904F2C649EC85AE0C133F3DC84B0CCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:80:2e:0b:34:3d:f1:89:f4:cb:da:3e:c4: 9d:0f:91:b7:a3:28:e5:9a:b5:11:7b:82:9a:c7:1d: 7e:5e:e2:fb:38:11:18:4b:88:eb:30:2c:d5:c5:8e: 67:37:eb:08:a2:70:86:01:40:a6:cb:eb:81:fa:11: e6:ef:73:c6:f7:46:2d:e9:cc:68:02:07:0e:75:21: e2:bf:2b:f9:2f:7e:a4:95:8e:3b:9f:21:dc:93:05: 6b:89:b8:9e:ec:3a:c6:aa:ec:7e:73:33:19:aa:a6: 2a:4b:e9:10:af:a4:29:e4:ce:a7:fb:e0:c2:9c:55: 42:52:af:c0:6c:29:5c:7c:21:79:a8:ec:17:0e:09: 5c:55:ba:43:8c:03:fe:15:13:8d:60:e4:c7:c8:88: d7:fa:d3:b7:0c:f4:40:24:a4:00:b9:9d:77:1f:99: 18:e0:1b:5e:aa:bf:01:ad:e0:d6:45:fb:f2:a5:89: 0f:cd:d2:67:ee:a6:08:5d:3f:f6:a3:b2:61:47:4c: 4f:00:99:72:f4:82:f2:c9:6c:db:78:9b:55:03:e0: 68:b9:a1:e0:69:e8:b3:e2:18:1c:69:6a:5e:e1:a5: f9:d0:37:c0:75:fe:80:e5:f3:2a:dd:74:bd:c6:c7: ef:56:50:ab:a9:6d:a0:b7:68:27:57:b6:3e:94:f5: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B2:A8:E4:A9:04:F2:C6:49:EC:85:AE:0C:13:3F:3D:C8:4B:0C:CD X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/c7Ko5KkE8sZJ7IWuDBM_PchLDM0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.34.104.0/23 Signature Algorithm: sha256WithRSAEncryption 54:c5:95:39:9a:83:a4:65:e1:3f:6d:51:94:f2:24:de:22:68: e9:68:21:24:2a:9f:dd:f4:aa:62:f2:e0:39:e5:2c:5a:a8:05: 92:23:74:03:1f:15:d5:dd:b6:a3:6a:8e:a7:7c:9f:d5:b3:40: 3e:ca:94:12:f6:02:de:a8:b7:a4:d7:ff:9a:f2:b5:8e:1e:b0: 9c:f4:62:57:4f:9a:0e:5a:f8:44:31:7a:17:e9:b9:ac:4a:bb: fd:af:86:8c:73:dc:bc:bc:24:1f:7b:63:bb:ee:bd:76:ad:2a: bf:3f:0d:b0:fd:db:f5:ea:10:16:3a:a0:5c:03:fa:1d:5e:3f: b0:52:24:9c:d4:d2:ca:ad:76:86:6b:7c:28:dd:2d:6b:47:bb: 7f:74:75:a9:4f:0f:44:eb:22:62:65:72:21:61:64:58:ba:85: 12:b0:4e:87:65:03:13:4d:b5:f6:9b:af:6f:e5:e0:9f:ba:de: e8:af:9a:47:be:06:33:70:d0:66:21:9a:5d:b9:16:c9:9d:12: 0b:c9:f7:ec:d2:88:72:4f:ce:40:8d:a3:39:b7:0b:0c:17:6f: 8b:fa:77:36:fc:cb:1a:2f:82:ee:e0:e5:ec:0d:1a:41:fe:a4: 04:f6:50:43:17:75:5b:b1:91:cc:80:0e:79:b1:df:8a:71:9d: 48:1b:53:06 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDkwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA0MTYw OTE5NThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczQjJBOEU0QTkwNEYy QzY0OUVDODVBRTBDMTMzRjNEQzg0QjBDQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgYoAuCzQ98Yn0y9o+xJ0PkbejKOWatRF7gprHHX5e4vs4ERhL iOswLNXFjmc36wiicIYBQKbL64H6Eebvc8b3Ri3pzGgCBw51IeK/K/kvfqSVjjuf IdyTBWuJuJ7sOsaq7H5zMxmqpipL6RCvpCnkzqf74MKcVUJSr8BsKVx8IXmo7BcO CVxVukOMA/4VE41g5MfIiNf607cM9EAkpAC5nXcfmRjgG16qvwGt4NZF+/KliQ/N 0mfupghdP/ajsmFHTE8AmXL0gvLJbNt4m1UD4Gi5oeBp6LPiGBxpal7hpfnQN8B1 /oDl8yrddL3Gx+9WUKupbaC3aCdXtj6U9b2xAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUc7Ko5KkE8sZJ7IWuDBM/PchLDM0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2M3S281S2tFOHNaSjdJV3VEQk1fUGNo TERNMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHaImgwDQYJ KoZIhvcNAQELBQADggEBAFTFlTmag6Rl4T9tUZTyJN4iaOloISQqn930qmLy4Dnl LFqoBZIjdAMfFdXdtqNqjqd8n9WzQD7KlBL2At6ot6TX/5rytY4esJz0YldPmg5a +EQxehfpuaxKu/2vhoxz3Ly8JB97Y7vuvXatKr8/DbD92/XqEBY6oFwD+h1eP7BS JJzU0sqtdoZrfCjdLWtHu390dalPD0TrImJlciFhZFi6hRKwTodlAxNNtfabr2/l 4J+63uivmke+BjNw0GYhml25FsmdEgvJ9+zSiHJPzkCNozm3CwwXb4v6dzb8yxov gu7g5ewNGkH+pAT2UEMXdVuxkcyADnmx34pxnUgbUwY= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org