$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iBV8jWkzsVFDGivrWe_e26rDxH0.roa File: iBV8jWkzsVFDGivrWe_e26rDxH0.roa (raw, json) Hash identifier: 7hzspiBgzYGC+us4v6TCe4HsgfV4g9fhuWFZdys4qr0= Subject key identifier: 88:15:7C:8D:69:33:B1:51:43:1A:2B:EB:59:EF:DE:DB:AA:C3:C4:7D Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DB2 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iBV8jWkzsVFDGivrWe_e26rDxH0.roa Signing time: Mon 15 Jan 2024 21:30:13 +0000 ROA not before: Mon 15 Jan 2024 21:30:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 124.218.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3506 (0xdb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:30:13 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=88157C8D6933B151431A2BEB59EFDEDBAAC3C47D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:14:ad:96:b1:2e:17:e3:a8:87:ff:bd:c4:8f: 7e:4f:fb:b2:21:2f:5c:bb:c3:d6:d1:2b:c7:72:67: be:22:76:a4:7c:3d:60:3f:2e:8a:1d:8f:ba:79:99: c8:1c:c1:71:e4:f7:88:9f:4b:58:80:c3:d0:16:c7: 10:96:98:7e:a0:f1:b9:fe:af:3f:96:9d:93:ba:0f: 27:09:fd:e1:03:76:21:5d:ae:bc:c5:4d:ef:e2:4d: 55:e0:b3:76:0e:2f:58:28:ac:3b:11:63:6e:09:82: 33:59:b7:27:88:5e:d6:9c:ce:8e:cf:43:23:3c:ef: 9b:43:51:ff:8b:b1:83:7a:eb:47:44:8f:df:fb:b6: 57:41:5c:a4:30:0f:92:db:c8:09:56:c2:2a:cb:cc: a6:f6:c6:6f:00:e2:63:c0:b8:a9:88:4b:f9:f7:a4: 51:aa:4d:ca:5b:4a:ad:79:1e:4d:4d:8d:09:67:a1: 1f:ed:f1:74:7e:de:8f:92:ad:60:22:b9:d1:34:67: 40:7e:25:41:fe:0a:a0:93:66:a7:65:50:e1:23:82: c3:48:3e:bb:d0:65:18:ce:3c:76:b5:d9:64:2a:97: 6d:e8:ab:d4:91:4e:93:f7:b0:eb:68:ac:12:26:a4: 7e:ce:45:91:c4:29:18:b4:f2:26:31:25:3d:14:98: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:15:7C:8D:69:33:B1:51:43:1A:2B:EB:59:EF:DE:DB:AA:C3:C4:7D X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iBV8jWkzsVFDGivrWe_e26rDxH0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.100.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:1e:2d:f7:ee:7c:ba:f0:95:25:3c:fb:b7:fc:6f:4a:2a:16: f8:e8:8b:75:ed:39:dc:23:4e:a1:68:67:39:b8:94:00:82:03: 98:fc:9b:4d:87:cd:5f:58:2b:f1:78:87:b3:d7:84:7f:e9:e7: 0d:62:a5:39:b3:af:0c:8d:98:ac:95:de:35:3a:66:b1:1c:56: 40:d1:58:29:9e:1b:9a:b9:2d:b1:74:06:8b:62:f7:2b:47:3c: 52:24:e1:9a:08:e6:cc:bf:d4:bb:ed:ff:c3:e7:66:b2:ef:0b: 3c:37:01:9e:f6:9b:ff:7b:08:5e:c4:d7:c9:5f:1e:2f:0d:49: fe:f8:b6:c5:2e:d8:5f:e5:0d:0e:bf:34:cc:36:71:95:8a:84: 1f:fb:62:e7:ad:9c:69:3a:b5:96:6c:32:93:89:bc:13:e2:38: 56:6b:fe:b3:d6:13:d3:5e:26:8e:0f:79:49:ad:75:34:27:33: 19:e7:cd:a4:30:64:28:98:ba:49:ba:9a:a6:c6:83:d3:0b:a0: ba:bf:84:35:a0:37:92:cd:d4:51:9b:a7:e8:8a:47:be:9a:e7: 29:6d:a9:2a:89:ba:ce:56:5c:28:99:c0:06:68:2c:a9:ea:be: d4:bc:b6:f1:e1:33:63:35:c8:f2:69:a1:14:6d:73:fd:81:d9: 30:49:ab:14 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTMwMTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg4MTU3QzhENjkzM0Ix NTE0MzFBMkJFQjU5RUZERURCQUFDM0M0N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeFK2WsS4X46iH/73Ej35P+7IhL1y7w9bRK8dyZ74idqR8PWA/ Loodj7p5mcgcwXHk94ifS1iAw9AWxxCWmH6g8bn+rz+WnZO6DycJ/eEDdiFdrrzF Te/iTVXgs3YOL1gorDsRY24JgjNZtyeIXtaczo7PQyM875tDUf+LsYN660dEj9/7 tldBXKQwD5LbyAlWwirLzKb2xm8A4mPAuKmIS/n3pFGqTcpbSq15Hk1NjQlnoR/t 8XR+3o+SrWAiudE0Z0B+JUH+CqCTZqdlUOEjgsNIPrvQZRjOPHa12WQql23oq9SR TpP3sOtorBImpH7ORZHEKRi08iYxJT0UmDi7AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUiBV8jWkzsVFDGivrWe/e26rDxH0wHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2lCVjhqV2t6c1ZGREdpdnJXZV9lMjZy RHhIMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82mQwDQYJ KoZIhvcNAQELBQADggEBAI0eLffufLrwlSU8+7f8b0oqFvjoi3XtOdwjTqFoZzm4 lACCA5j8m02HzV9YK/F4h7PXhH/p5w1ipTmzrwyNmKyV3jU6ZrEcVkDRWCmeG5q5 LbF0Boti9ytHPFIk4ZoI5sy/1Lvt/8PnZrLvCzw3AZ72m/97CF7E18lfHi8NSf74 tsUu2F/lDQ6/NMw2cZWKhB/7YuetnGk6tZZsMpOJvBPiOFZr/rPWE9NeJo4PeUmt dTQnMxnnzaQwZCiYukm6mqbGg9MLoLq/hDWgN5LN1FGbp+iKR76a5yltqSqJus5W XCiZwAZoLKnqvtS8tvHhM2M1yPJpoRRtc/2B2TBJqxQ= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:43 2024 by rpki-client on console-ams.rpki-client.org