$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/gqUXUnDURbAIMUvcCPkz9A8Ku4k.roa File: gqUXUnDURbAIMUvcCPkz9A8Ku4k.roa (raw, json) Hash identifier: TDqrNdab5Vzf1r2QumWbDleDTSDf3MZwElHJNsFBe7Q= Subject key identifier: 82:A5:17:52:70:D4:45:B0:08:31:4B:DC:08:F9:33:F4:0F:0A:BB:89 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D9E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gqUXUnDURbAIMUvcCPkz9A8Ku4k.roa Signing time: Mon 15 Jan 2024 21:29:45 +0000 ROA not before: Mon 15 Jan 2024 21:29:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 124.218.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3486 (0xd9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:29:45 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=82A5175270D445B008314BDC08F933F40F0ABB89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:30:dd:a9:58:c9:fd:45:80:e3:94:ec:d2: 1f:05:93:c2:66:57:70:22:d1:90:92:bf:26:e6:5e: 99:92:a7:29:b1:f9:ab:b6:49:09:11:d6:9a:a9:17: 9f:55:8c:b6:d8:05:be:93:15:53:77:ca:f7:0f:ed: 34:79:11:97:88:5f:43:1b:e4:0f:07:c2:37:e7:73: 59:3e:32:bc:5b:4b:3c:1e:e3:d1:6c:46:7d:aa:f6: f0:b7:80:7e:99:35:b5:ed:67:3a:80:3c:02:c9:40: dd:d7:52:cc:fa:74:ef:be:47:3a:3d:2b:c0:84:10: 4a:7b:c4:aa:15:87:c2:0d:0d:f6:b9:99:29:08:1e: 15:20:c0:2f:a8:27:e1:43:7e:be:a0:30:8b:ea:b1: ac:d0:43:e1:61:9d:76:b8:28:a5:5b:ce:5d:d1:2e: 9b:67:73:0b:16:4d:f6:b8:3f:b0:1d:ac:12:2f:24: bf:e4:f3:b9:b6:b6:e1:bc:9b:b8:94:46:e6:d5:48: 49:51:86:91:b8:9e:c6:fe:82:9f:9b:bf:25:d9:09: 5c:6f:41:70:31:33:dc:bc:76:a0:38:36:e5:cd:fb: 6d:5c:32:34:82:e3:a9:2c:e8:d3:59:1a:ff:11:9c: a5:b3:16:60:1e:c7:d5:94:33:23:e4:d3:4e:a2:4b: 12:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A5:17:52:70:D4:45:B0:08:31:4B:DC:08:F9:33:F4:0F:0A:BB:89 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/gqUXUnDURbAIMUvcCPkz9A8Ku4k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.232.0/21 Signature Algorithm: sha256WithRSAEncryption 4c:e0:79:e0:28:da:d6:32:c0:78:27:7d:29:e3:a0:2f:c8:07: 20:7e:23:d3:65:d9:03:fb:ff:3a:74:8d:41:25:a9:29:95:87: ae:21:f0:3b:e9:b4:ae:ae:8e:63:8f:61:fe:de:74:9d:cd:f7: 73:50:58:e3:46:7e:3e:f5:2c:df:50:14:8c:30:7f:d4:10:49: 49:da:77:34:c1:f2:0f:b0:82:ab:25:a3:80:d2:50:f2:6c:c4: 5d:15:ee:8c:e6:2b:c1:6b:0f:be:b4:c0:f5:89:27:2d:8e:ee: db:23:ca:93:e1:92:76:7e:53:8a:ff:80:64:5e:be:a5:24:8c: 6c:af:fa:1d:f1:48:3b:90:24:ca:e5:52:ba:f3:3a:a7:db:4b: cd:1f:7c:c1:22:10:9f:de:95:70:ae:f7:83:31:2e:94:36:d0: f9:88:9b:1f:4f:ad:c5:3c:63:83:03:b7:3d:fb:84:36:9c:05: 3c:77:60:e1:0c:7a:2b:ec:aa:c6:7b:ea:79:66:ec:f5:bf:03: b4:31:3f:18:3c:86:40:2a:69:84:7f:12:72:d1:3a:9c:1a:dd: fb:53:9b:3e:1d:94:c9:46:f3:a7:51:05:dc:cc:99:fb:14:eb: c7:c1:17:fc:ab:2e:4e:33:03:dc:f8:61:5f:8f:88:1e:a2:b8: ba:5e:16:35 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI5NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgyQTUxNzUyNzBENDQ1 QjAwODMxNEJEQzA4RjkzM0Y0MEYwQUJCODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLMDDdqVjJ/UWA45Ts0h8Fk8JmV3Ai0ZCSvybmXpmSpymx+au2 SQkR1pqpF59VjLbYBb6TFVN3yvcP7TR5EZeIX0Mb5A8Hwjfnc1k+MrxbSzwe49Fs Rn2q9vC3gH6ZNbXtZzqAPALJQN3XUsz6dO++Rzo9K8CEEEp7xKoVh8INDfa5mSkI HhUgwC+oJ+FDfr6gMIvqsazQQ+FhnXa4KKVbzl3RLptncwsWTfa4P7AdrBIvJL/k 87m2tuG8m7iURubVSElRhpG4nsb+gp+bvyXZCVxvQXAxM9y8dqA4NuXN+21cMjSC 46ks6NNZGv8RnKWzFmAex9WUMyPk006iSxKLAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUgqUXUnDURbAIMUvcCPkz9A8Ku4kwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2dxVVhVbkRVUmJBSU1VdmNDUGt6OUE4 S3U0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82ugwDQYJ KoZIhvcNAQELBQADggEBAEzgeeAo2tYywHgnfSnjoC/IByB+I9Nl2QP7/zp0jUEl qSmVh64h8DvptK6ujmOPYf7edJ3N93NQWONGfj71LN9QFIwwf9QQSUnadzTB8g+w gqslo4DSUPJsxF0V7ozmK8FrD760wPWJJy2O7tsjypPhknZ+U4r/gGRevqUkjGyv +h3xSDuQJMrlUrrzOqfbS80ffMEiEJ/elXCu94MxLpQ20PmImx9PrcU8Y4MDtz37 hDacBTx3YOEMeivsqsZ76nlm7PW/A7QxPxg8hkAqaYR/EnLROpwa3ftTmz4dlMlG 86dRBdzMmfsU68fBF/yrLk4zA9z4YV+PiB6iuLpeFjU= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org