$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/jyGK5wGL7RvYG6h9S5_5ST6-hKo.roa File: jyGK5wGL7RvYG6h9S5_5ST6-hKo.roa (raw, json) Hash identifier: AuUDhp/ptIkUkl3zUIPijiMfjpRltuiys+adsKFfVmc= Subject key identifier: 8F:21:8A:E7:01:8B:ED:1B:D8:1B:A8:7D:4B:9F:F9:49:3E:BE:84:AA Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0CF4 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/jyGK5wGL7RvYG6h9S5_5ST6-hKo.roa Signing time: Mon 15 Jan 2024 21:23:57 +0000 ROA not before: Mon 15 Jan 2024 21:23:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24154 IP address blocks: 222.156.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:23:57 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=8F218AE7018BED1BD81BA87D4B9FF9493EBE84AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:cd:2b:c2:c4:c2:c3:6d:bf:56:cc:3c:3a: 56:0f:b4:44:3a:da:fb:3a:91:e7:4c:3c:0b:0d:f9: 88:e5:01:6b:2f:54:4a:2f:80:03:29:a9:f1:43:68: 6d:25:b8:51:1f:5e:25:6e:74:49:92:58:87:3f:59: e0:cc:4b:75:e4:ed:42:09:d2:d9:eb:ad:3b:20:2d: 4f:d8:4e:0c:43:26:d2:5a:86:ce:5f:57:c0:25:b9: c3:50:72:bb:25:74:36:24:9b:61:87:df:b2:3d:56: 02:e9:c1:e0:95:54:f9:a8:1c:bc:e1:56:63:dd:8c: df:cf:ad:d2:88:04:32:06:bf:d1:16:15:a0:c3:de: 58:9e:1f:91:73:62:ff:1a:43:0a:ed:6e:db:1a:95: c7:9c:67:87:92:12:53:92:22:70:36:2f:b7:20:e0: 04:96:50:61:58:ec:d2:bc:e3:fb:39:98:89:97:57: bd:56:2b:48:bb:d6:01:ba:8a:e5:3a:97:0b:ab:63: 4c:6d:03:f7:2e:7e:9e:fd:57:01:8b:6f:cc:91:12: cf:eb:df:05:db:84:9b:b3:87:a2:e6:9a:e3:2b:63: d4:56:49:6e:5b:27:5f:6d:29:df:fc:da:b0:63:03: 3a:43:f0:19:23:11:8e:35:c6:ac:be:ae:7e:c7:ad: 7c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:21:8A:E7:01:8B:ED:1B:D8:1B:A8:7D:4B:9F:F9:49:3E:BE:84:AA X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/jyGK5wGL7RvYG6h9S5_5ST6-hKo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 222.156.246.0/24 Signature Algorithm: sha256WithRSAEncryption 95:de:aa:7f:31:d1:5f:a4:23:3e:20:40:b4:42:56:53:bf:59: c2:57:7e:1a:b8:70:a7:42:69:34:be:26:f8:33:19:99:18:d5: e2:12:42:7c:ce:4c:9b:2c:37:d2:45:39:ee:08:1e:39:18:6d: 7d:70:38:84:88:c4:91:e1:bc:32:11:3e:0b:d4:26:21:12:f7: d3:14:43:5a:b4:7e:3d:78:19:ac:d8:19:d3:b7:7b:47:bf:58: d8:f7:bc:39:76:d9:4c:b1:f2:e9:40:e9:ec:fb:f6:78:98:70: b5:fb:ec:4c:e5:eb:32:b8:4d:64:c4:e9:37:96:92:b6:df:48: 62:1d:5d:0a:a6:ae:75:1d:4b:f5:15:3a:76:57:f5:61:65:87: 8f:6a:ef:01:f5:39:47:77:81:11:65:17:88:c9:20:73:83:47: 97:1c:08:54:7d:e8:91:ca:58:1d:ab:2c:4f:2f:fd:2b:6c:74: b8:08:41:d9:df:cc:aa:ea:d0:1e:2d:79:66:d5:39:04:0f:30: 57:72:93:13:66:0a:72:ff:c1:d4:88:27:75:6d:dd:02:ed:9c: 39:92:f7:98:9f:2a:cd:e1:bb:20:2f:c9:b9:d6:5c:7c:d9:5d: f7:90:93:f3:71:3b:39:6d:0d:73:d8:e7:59:09:69:cf:ed:1d: 2f:0c:a1:a0 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTIzNTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhGMjE4QUU3MDE4QkVE MUJEODFCQTg3RDRCOUZGOTQ5M0VCRTg0QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8GM0rwsTCw22/Vsw8OlYPtEQ62vs6kedMPAsN+YjlAWsvVEov gAMpqfFDaG0luFEfXiVudEmSWIc/WeDMS3Xk7UIJ0tnrrTsgLU/YTgxDJtJahs5f V8AlucNQcrsldDYkm2GH37I9VgLpweCVVPmoHLzhVmPdjN/PrdKIBDIGv9EWFaDD 3lieH5FzYv8aQwrtbtsalcecZ4eSElOSInA2L7cg4ASWUGFY7NK84/s5mImXV71W K0i71gG6iuU6lwurY0xtA/cufp79VwGLb8yREs/r3wXbhJuzh6LmmuMrY9RWSW5b J19tKd/82rBjAzpD8BkjEY41xqy+rn7HrXxDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUjyGK5wGL7RvYG6h9S5/5ST6+hKowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2p5R0s1d0dMN1J2WUc2aDlTNV81U1Q2 LWhLby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADenPYwDQYJ KoZIhvcNAQELBQADggEBAJXeqn8x0V+kIz4gQLRCVlO/WcJXfhq4cKdCaTS+Jvgz GZkY1eISQnzOTJssN9JFOe4IHjkYbX1wOISIxJHhvDIRPgvUJiES99MUQ1q0fj14 GazYGdO3e0e/WNj3vDl22Uyx8ulA6ez79niYcLX77Ezl6zK4TWTE6TeWkrbfSGId XQqmrnUdS/UVOnZX9WFlh49q7wH1OUd3gRFlF4jJIHODR5ccCFR96JHKWB2rLE8v /StsdLgIQdnfzKrq0B4teWbVOQQPMFdykxNmCnL/wdSIJ3Vt3QLtnDmS95ifKs3h uyAvybnWXHzZXfeQk/NxOzltDXPY51kJac/tHS8MoaA= -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org