$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/hA6RwvnfZ6AWQogWfiALzgtyokM.roa File: hA6RwvnfZ6AWQogWfiALzgtyokM.roa (raw, json) Hash identifier: 4wbWBY4GOmFqkSXYk2BfZTHmw88MMtvlm0FDdDpUEyA= Subject key identifier: 84:0E:91:C2:F9:DF:67:A0:16:42:88:16:7E:20:0B:CE:0B:72:A2:43 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DBA Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/hA6RwvnfZ6AWQogWfiALzgtyokM.roa Signing time: Mon 15 Jan 2024 21:30:26 +0000 ROA not before: Mon 15 Jan 2024 21:30:26 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 124.218.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3514 (0xdba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:30:26 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=840E91C2F9DF67A0164288167E200BCE0B72A243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:4e:99:51:e5:6c:0a:b8:bd:fc:95:fe:a6: d8:f2:a4:47:be:1e:42:99:5d:02:42:77:9a:21:51: 87:89:ba:d1:48:ff:a3:74:7e:cb:95:30:e6:e5:54: 84:d5:66:50:6c:29:06:b1:a5:54:96:f0:da:44:b5: 85:ca:73:95:7f:e7:d5:90:06:1d:df:30:4b:c2:97: 5d:87:94:f7:6b:19:54:2f:c8:b1:a2:0b:1a:45:af: ed:e6:bb:a4:d9:2a:dc:f4:90:51:fb:90:52:bc:53: 1f:44:90:f2:ce:82:7d:f7:a1:8d:38:3b:be:cb:cb: 8a:9a:d5:ab:67:ba:f2:37:f5:35:40:7e:94:9f:b7: 72:39:ae:e1:42:bf:c6:69:8a:20:c8:63:67:94:25: 16:95:78:c8:38:51:6e:59:11:fc:a3:11:52:28:46: 4e:bf:ea:b6:6d:4a:24:62:66:b3:3e:19:ae:04:7f: be:e0:b4:b0:b2:33:d8:ad:26:55:84:18:b4:39:b3: ee:1f:41:b8:ac:13:83:77:ed:d0:44:84:af:10:a4: 75:cc:4e:5e:aa:2a:1a:6b:c8:b9:40:8a:28:e7:37: 9e:f9:60:24:09:9e:6f:ee:f9:41:60:81:79:91:fa: 13:0d:94:4d:46:c9:3c:8f:98:59:e0:11:87:40:24: 91:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0E:91:C2:F9:DF:67:A0:16:42:88:16:7E:20:0B:CE:0B:72:A2:43 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/hA6RwvnfZ6AWQogWfiALzgtyokM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.160.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:c6:30:94:ed:95:06:87:16:d3:ef:bd:e3:89:05:11:f9:ad: 6d:77:f1:fa:69:67:51:b1:a8:d0:02:b5:63:59:da:0a:9a:a1: 4a:5b:44:66:4f:43:45:bc:93:67:42:63:a2:62:26:72:22:bc: e9:94:28:69:0d:b6:f0:f4:ba:97:ec:70:27:9a:7b:c9:59:b2: c0:98:ae:93:5e:bc:11:90:c1:3d:0b:d0:19:46:1e:af:e5:1d: 8d:e7:fe:34:b4:3b:50:57:8f:96:1e:01:8d:05:4a:89:71:da: 3a:2c:14:19:07:d9:3c:77:e4:c5:b0:70:35:6a:1a:a0:ca:63: 79:99:4f:5c:70:ef:c7:6f:40:e2:51:b4:2b:be:80:ee:23:dd: fb:06:77:2d:87:80:a5:d6:8f:a3:e2:32:7e:94:e6:8c:a9:f8: 44:00:53:f1:f8:ac:f4:33:74:06:98:d0:09:e4:06:4c:ff:fa: 6f:1c:f4:ed:9c:d2:c5:af:77:27:0c:af:14:ce:77:22:cc:cc: c6:2b:22:4c:90:4e:dc:b5:80:da:f2:bb:bc:64:1d:23:a7:93: 02:f3:88:26:0b:86:60:0d:d5:65:be:bf:53:1a:c8:a5:83:29: 74:b9:6c:ca:4e:1d:43:b2:f4:a4:09:1a:ae:69:03:10:6b:29: b6:bf:1d:1b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTMwMjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg0MEU5MUMyRjlERjY3 QTAxNjQyODgxNjdFMjAwQkNFMEI3MkEyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTbU6ZUeVsCri9/JX+ptjypEe+HkKZXQJCd5ohUYeJutFI/6N0 fsuVMOblVITVZlBsKQaxpVSW8NpEtYXKc5V/59WQBh3fMEvCl12HlPdrGVQvyLGi CxpFr+3mu6TZKtz0kFH7kFK8Ux9EkPLOgn33oY04O77Ly4qa1atnuvI39TVAfpSf t3I5ruFCv8ZpiiDIY2eUJRaVeMg4UW5ZEfyjEVIoRk6/6rZtSiRiZrM+Ga4Ef77g tLCyM9itJlWEGLQ5s+4fQbisE4N37dBEhK8QpHXMTl6qKhpryLlAiijnN575YCQJ nm/u+UFggXmR+hMNlE1GyTyPmFngEYdAJJEFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUhA6RwvnfZ6AWQogWfiALzgtyokMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2hBNlJ3dm5mWjZBV1FvZ1dmaUFMemd0 eW9rTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN82qAwDQYJ KoZIhvcNAQELBQADggEBAHzGMJTtlQaHFtPvveOJBRH5rW138fppZ1GxqNACtWNZ 2gqaoUpbRGZPQ0W8k2dCY6JiJnIivOmUKGkNtvD0upfscCeae8lZssCYrpNevBGQ wT0L0BlGHq/lHY3n/jS0O1BXj5YeAY0FSolx2josFBkH2Tx35MWwcDVqGqDKY3mZ T1xw78dvQOJRtCu+gO4j3fsGdy2HgKXWj6PiMn6U5oyp+EQAU/H4rPQzdAaY0Ank Bkz/+m8c9O2c0sWvdycMrxTOdyLMzMYrIkyQTty1gNryu7xkHSOnkwLziCYLhmAN 1WW+v1MayKWDKXS5bMpOHUOy9KQJGq5pAxBrKba/HRs= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org