$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/d17AylgmjcKoiBx1VN82XzPsC1M.roa File: d17AylgmjcKoiBx1VN82XzPsC1M.roa (raw, json) Hash identifier: G+tnXIg3puhKP5kAZipXP8t+SCdhvX6VT+cb/KxV1/U= Subject key identifier: 77:5E:C0:CA:58:26:8D:C2:A8:88:1C:75:54:DF:36:5F:33:EC:0B:53 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DC2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/d17AylgmjcKoiBx1VN82XzPsC1M.roa Signing time: Mon 15 Jan 2024 21:30:37 +0000 ROA not before: Mon 15 Jan 2024 21:30:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 124.218.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3522 (0xdc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:30:37 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=775EC0CA58268DC2A8881C7554DF365F33EC0B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:fa:5d:10:43:86:39:35:5c:0d:1c:83:8a: 58:51:fe:06:37:b1:d6:a9:9a:33:29:4e:33:06:db: ff:26:9f:6d:c1:15:e8:ad:7f:1a:98:fe:a3:38:a8: 70:60:2e:98:61:2d:e9:18:14:8b:02:fb:44:91:53: 1f:34:fa:6e:29:7c:52:c4:63:a8:ec:a2:f3:c5:c0: 60:4d:ec:57:67:f3:2a:f1:ae:26:88:c8:f9:6a:7e: cb:ff:87:5d:17:d0:3e:ab:c7:79:a1:8b:ed:73:30: 1d:5d:88:30:2a:e4:e4:c6:99:7c:e0:5f:e4:99:a4: f5:6c:e2:42:fd:89:d0:52:e5:8b:cb:98:85:90:5e: 69:f7:11:0a:ea:3a:40:9e:8b:1e:fc:89:90:b4:e3: 78:00:97:18:90:26:8a:46:5e:4e:a7:9b:77:59:f6: bb:72:db:61:91:23:13:53:31:58:9c:e0:60:c5:03: c1:4b:68:3b:ce:1f:42:5c:51:b2:37:83:33:64:54: fb:f6:a4:83:6b:ef:29:11:bd:eb:5e:bf:b6:ff:7a: b8:93:ce:7b:7f:af:0f:d4:11:52:4f:b0:1d:d8:e1: b0:37:13:9f:6b:57:24:3f:02:13:38:89:8f:6f:ce: 72:e1:cf:c6:85:87:96:c9:fc:7d:cf:08:50:4f:7a: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5E:C0:CA:58:26:8D:C2:A8:88:1C:75:54:DF:36:5F:33:EC:0B:53 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/d17AylgmjcKoiBx1VN82XzPsC1M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.112.0/21 Signature Algorithm: sha256WithRSAEncryption 14:62:92:09:24:93:cb:3b:a3:fa:36:1a:aa:db:4a:73:05:d6: 0b:af:99:25:3b:d3:45:30:83:8b:3a:0b:fb:03:79:c6:3e:b3: 09:c1:0d:e0:b2:66:85:d1:c3:bf:4a:e5:27:5d:3c:89:39:11: 5e:b2:b2:53:73:a6:25:f1:25:51:5e:6b:ae:dd:66:05:d1:13: 1f:ae:81:0a:3c:f4:e0:ca:76:6c:8a:a2:53:a3:b1:91:23:94: 7b:b1:fb:97:47:eb:b9:6b:21:aa:f0:15:0b:eb:89:82:02:19: 8e:3f:4b:7a:38:01:ed:de:8d:80:47:10:a8:b2:66:3f:b2:4b: ea:2b:b5:95:2b:92:c4:12:3e:9d:b8:2a:4e:0e:b4:ec:24:75: 00:1a:47:a1:6b:da:05:68:36:8c:0e:00:93:7d:42:6f:51:21: 00:e0:1f:cb:11:c4:41:25:48:ca:44:de:ee:a9:76:95:7c:0c: dc:e0:f3:d5:81:18:d6:38:5e:aa:6a:57:39:12:43:1e:fd:44: e8:0a:af:44:3b:ad:e7:c7:be:4b:ca:b3:d8:0e:fc:a6:23:f2: 1c:8d:e5:31:95:cd:43:14:6c:4f:07:7e:04:05:52:e1:a6:23: 67:5a:c0:16:fd:de:19:86:96:c4:22:2d:d8:15:a6:85:81:a8: 70:1d:a0:6d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTMwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3NUVDMENBNTgyNjhE QzJBODg4MUM3NTU0REYzNjVGMzNFQzBCNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDs/pdEEOGOTVcDRyDilhR/gY3sdapmjMpTjMG2/8mn23BFeit fxqY/qM4qHBgLphhLekYFIsC+0SRUx80+m4pfFLEY6jsovPFwGBN7Fdn8yrxriaI yPlqfsv/h10X0D6rx3mhi+1zMB1diDAq5OTGmXzgX+SZpPVs4kL9idBS5YvLmIWQ Xmn3EQrqOkCeix78iZC043gAlxiQJopGXk6nm3dZ9rty22GRIxNTMVic4GDFA8FL aDvOH0JcUbI3gzNkVPv2pINr7ykRvetev7b/eriTznt/rw/UEVJPsB3Y4bA3E59r VyQ/AhM4iY9vznLhz8aFh5bJ/H3PCFBPesx7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUd17AylgmjcKoiBx1VN82XzPsC1MwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2QxN0F5bGdtamNLb2lCeDFWTjgyWHpQ c0MxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82nAwDQYJ KoZIhvcNAQELBQADggEBABRikgkkk8s7o/o2GqrbSnMF1guvmSU700Uwg4s6C/sD ecY+swnBDeCyZoXRw79K5SddPIk5EV6yslNzpiXxJVFea67dZgXREx+ugQo89ODK dmyKolOjsZEjlHux+5dH67lrIarwFQvriYICGY4/S3o4Ae3ejYBHEKiyZj+yS+or tZUrksQSPp24Kk4OtOwkdQAaR6Fr2gVoNowOAJN9Qm9RIQDgH8sRxEElSMpE3u6p dpV8DNzg89WBGNY4XqpqVzkSQx79ROgKr0Q7refHvkvKs9gO/KYj8hyN5TGVzUMU bE8HfgQFUuGmI2dawBb93hmGlsQiLdgVpoWBqHAdoG0= -----END CERTIFICATE-----Generated at Sun Jun 2 21:48:26 2024 by rpki-client on console-ams.rpki-client.org