$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/k2Tw9ILJ3uBRkcP8hS11c_Ko39U.roa File: k2Tw9ILJ3uBRkcP8hS11c_Ko39U.roa (raw, json) Hash identifier: wv1bEKWaLF+l/n7gQFnSbguPURIleZ2qYnqH3nFJmaA= Subject key identifier: 93:64:F0:F4:82:C9:DE:E0:51:91:C3:FC:85:2D:75:73:F2:A8:DF:D5 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C8C Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/k2Tw9ILJ3uBRkcP8hS11c_Ko39U.roa Signing time: Mon 15 Jan 2024 21:10:02 +0000 ROA not before: Mon 15 Jan 2024 21:10:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 210.200.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:10:02 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9364F0F482C9DEE05191C3FC852D7573F2A8DFD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:37:28:09:04:86:5c:d9:e9:ff:f8:15:58: 8e:db:da:6f:e0:67:a4:23:2c:02:f6:fc:64:5b:33: c8:4e:d9:6f:64:72:bb:c4:6e:7e:ee:92:74:5f:49: 7f:a2:09:a8:32:d3:c0:2d:87:85:93:d4:6d:ef:16: 29:45:da:cc:73:ec:ba:77:78:04:6f:e5:81:3a:e0: d6:a9:f8:53:56:ac:c2:af:0d:d0:28:09:77:93:1a: 70:d5:e2:68:0e:34:99:32:08:9c:1f:c5:ce:82:4d: 8a:61:2a:30:38:d1:52:82:8f:dc:8e:90:03:75:b1: f3:66:47:1f:44:5d:bc:4d:18:b2:53:9f:c3:2c:d1: 44:39:48:b6:6c:cb:9b:16:97:ed:ef:fc:50:fe:62: 57:45:64:dc:e5:a6:46:44:75:4c:45:3f:d5:44:06: eb:4c:4d:b3:32:aa:90:9c:b5:a9:7b:b0:c2:f5:e7: 69:f3:83:c1:e7:bf:22:de:de:23:24:31:68:6d:fb: d3:57:ba:6a:d4:9f:a3:75:f3:fd:ee:73:85:1b:26: f8:10:21:12:15:e7:09:bd:e6:36:57:b5:48:55:01: 28:0e:fa:6d:95:04:95:e4:98:70:eb:02:69:44:1e: 84:7b:c5:37:4f:64:cb:a5:46:de:be:d9:ff:66:30: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:64:F0:F4:82:C9:DE:E0:51:91:C3:FC:85:2D:75:73:F2:A8:DF:D5 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/k2Tw9ILJ3uBRkcP8hS11c_Ko39U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.200.128.0/18 Signature Algorithm: sha256WithRSAEncryption 14:9a:f6:de:59:71:3e:5f:79:ca:3f:ec:af:d5:d6:73:e2:14: 0e:8e:70:7d:2d:6d:67:be:4b:da:70:b7:67:f6:88:21:5c:bf: ea:73:6e:c4:8b:46:65:c6:59:ca:3c:82:59:c7:c9:c1:84:6c: 31:52:fb:06:43:b8:56:e8:be:33:b1:d9:18:7c:ee:d4:81:dd: f2:d3:de:9e:3b:59:35:cc:ce:58:96:cb:f1:34:b7:04:71:48: 43:92:11:f1:fc:90:68:44:35:df:51:68:d8:e4:66:9b:5c:bd: 09:0a:94:84:7d:57:7b:88:0c:2e:de:b2:ec:df:12:92:c7:fc: 63:5f:bd:a4:88:f3:94:f3:d0:01:0a:ee:26:ce:20:f0:d3:9f: 68:3e:30:d8:12:f3:3b:b5:65:72:75:cb:da:fe:91:a4:02:6c: a7:72:54:2f:fd:76:97:25:ea:1c:83:84:3e:dd:0c:10:c8:51: a1:9a:ad:8c:b7:3b:16:89:01:63:2f:0d:2b:fa:e3:4b:e6:bc: bf:c9:e8:3e:64:40:93:8a:ea:2b:f7:e6:04:45:2a:50:02:4a: 51:30:8c:87:2f:e2:29:05:0c:2f:11:54:67:e1:a4:58:76:07: 89:c3:d1:cd:02:97:e6:94:8a:54:d4:83:d3:87:66:68:e3:39: af:3b:e1:b6 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTEwMDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkzNjRGMEY0ODJDOURF RTA1MTkxQzNGQzg1MkQ3NTczRjJBOERGRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG9zcoCQSGXNnp//gVWI7b2m/gZ6QjLAL2/GRbM8hO2W9kcrvE bn7uknRfSX+iCagy08Ath4WT1G3vFilF2sxz7Lp3eARv5YE64Nap+FNWrMKvDdAo CXeTGnDV4mgONJkyCJwfxc6CTYphKjA40VKCj9yOkAN1sfNmRx9EXbxNGLJTn8Ms 0UQ5SLZsy5sWl+3v/FD+YldFZNzlpkZEdUxFP9VEButMTbMyqpCctal7sML152nz g8HnvyLe3iMkMWht+9NXumrUn6N18/3uc4UbJvgQIRIV5wm95jZXtUhVASgO+m2V BJXkmHDrAmlEHoR7xTdPZMulRt6+2f9mMFbvAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUk2Tw9ILJ3uBRkcP8hS11c/Ko39UwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2syVHc5SUxKM3VCUmtjUDhoUzExY19L bzM5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSyIAwDQYJ KoZIhvcNAQELBQADggEBABSa9t5ZcT5feco/7K/V1nPiFA6OcH0tbWe+S9pwt2f2 iCFcv+pzbsSLRmXGWco8glnHycGEbDFS+wZDuFbovjOx2Rh87tSB3fLT3p47WTXM zliWy/E0twRxSEOSEfH8kGhENd9RaNjkZptcvQkKlIR9V3uIDC7esuzfEpLH/GNf vaSI85Tz0AEK7ibOIPDTn2g+MNgS8zu1ZXJ1y9r+kaQCbKdyVC/9dpcl6hyDhD7d DBDIUaGarYy3OxaJAWMvDSv640vmvL/J6D5kQJOK6iv35gRFKlACSlEwjIcv4ikF DC8RVGfhpFh2B4nD0c0Cl+aUilTUg9OHZmjjOa874bY= -----END CERTIFICATE-----Generated at Mon May 20 22:04:47 2024 by rpki-client on console-fra.rpki-client.org