$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/m8p9X8cQg58FDXl6P9_Za_5gExg.roa File: m8p9X8cQg58FDXl6P9_Za_5gExg.roa (raw, json) Hash identifier: SJ8jzjArBiE1Hl79dIAjBl6k+2Mwao+VJ2bcnteBLa8= Subject key identifier: 9B:CA:7D:5F:C7:10:83:9F:05:0D:79:7A:3F:DF:D9:6B:FE:60:13:18 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D62 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/m8p9X8cQg58FDXl6P9_Za_5gExg.roa Signing time: Mon 15 Jan 2024 21:26:18 +0000 ROA not before: Mon 15 Jan 2024 21:26:18 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18419 IP address blocks: 218.35.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3426 (0xd62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:26:18 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9BCA7D5FC710839F050D797A3FDFD96BFE601318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:34:d1:9c:e7:cf:77:97:8a:62:04:03:40: e5:f2:10:d3:73:3d:ae:b4:47:cc:a9:3d:69:2c:e2: 59:6c:26:32:69:c0:d4:c0:d0:c1:a6:d0:55:6a:6d: 13:72:a5:39:75:b4:81:53:bb:10:72:5a:8d:16:2c: b5:92:4a:78:37:d0:fe:52:d8:08:66:cb:a2:11:ab: 1b:51:9a:0c:fc:3d:21:17:0a:c1:d9:bd:3a:4c:0b: 8b:48:d6:8e:da:02:3b:cc:2b:59:e6:5f:64:be:eb: 2e:67:fb:cb:a5:0c:3c:cd:dd:22:0b:fa:ef:72:7b: b9:d8:6c:e2:43:f8:4b:0f:e6:86:6f:b5:d6:77:19: 13:cf:5c:6c:21:fd:eb:89:68:9f:ff:a8:f2:b9:7a: 31:97:b1:1d:46:c2:05:b2:b5:8f:f6:40:83:7b:61: 8f:dc:df:33:40:c6:e0:c0:42:c3:ce:04:84:19:d5: e3:89:a3:dc:4a:89:7a:3a:29:b4:85:84:ef:ec:f2: 59:4d:ca:56:bb:72:4a:a1:3e:3e:60:a4:21:00:c5: 2d:15:ad:f1:36:b8:63:46:c9:64:94:32:14:8c:26: c3:6f:67:9a:b4:1f:55:04:a8:55:0f:7c:83:8a:4d: af:9e:6f:4f:c6:a6:f2:29:40:3e:6f:63:b7:33:4e: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CA:7D:5F:C7:10:83:9F:05:0D:79:7A:3F:DF:D9:6B:FE:60:13:18 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/m8p9X8cQg58FDXl6P9_Za_5gExg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.35.128.0/18 Signature Algorithm: sha256WithRSAEncryption be:ae:67:06:b5:67:06:f5:0a:3b:fe:aa:e1:14:42:4f:d8:c4: a3:f7:40:a3:c8:01:80:da:54:85:d4:d2:59:02:4c:0c:ff:9f: bc:75:3a:93:5e:3e:78:ef:2d:58:64:f3:5a:4b:0d:c3:24:2b: e4:37:85:56:17:9a:b4:26:8d:d7:5e:b6:25:53:94:34:e2:74: d7:59:0d:41:25:57:b3:d2:a6:fd:ae:6e:71:b8:5d:d4:7b:de: 2e:46:7d:82:fb:47:9b:89:88:a5:95:1c:82:a0:56:8f:ce:e6: 09:29:7c:e3:43:48:0b:4b:06:a3:20:c1:f3:bf:6e:ff:d3:85: d5:b4:4c:53:0f:d1:f9:2e:86:67:c6:a8:09:6b:29:32:1b:16: 19:39:3c:1c:59:7e:3f:28:f8:4c:39:8f:25:64:d2:c4:ac:85: 24:19:0f:fd:bd:03:3a:5b:f9:48:3d:9c:0f:48:1c:bd:02:72: 4e:00:c9:e1:47:85:ba:cb:5f:99:47:83:4a:bd:1c:f0:75:ee: 26:58:37:4f:aa:5f:62:13:69:17:fd:e5:4e:64:8f:cc:4e:19: fa:96:c6:ff:df:7d:ec:8c:13:6b:72:9b:68:5e:cf:7d:0c:b7: d1:20:a8:2a:7a:3b:52:df:20:35:e5:22:ea:ed:74:e7:e7:c2: f6:61:d0:dc -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI2MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlCQ0E3RDVGQzcxMDgz OUYwNTBENzk3QTNGREZEOTZCRkU2MDEzMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf7zTRnOfPd5eKYgQDQOXyENNzPa60R8ypPWks4llsJjJpwNTA 0MGm0FVqbRNypTl1tIFTuxByWo0WLLWSSng30P5S2Ahmy6IRqxtRmgz8PSEXCsHZ vTpMC4tI1o7aAjvMK1nmX2S+6y5n+8ulDDzN3SIL+u9ye7nYbOJD+EsP5oZvtdZ3 GRPPXGwh/euJaJ//qPK5ejGXsR1GwgWytY/2QIN7YY/c3zNAxuDAQsPOBIQZ1eOJ o9xKiXo6KbSFhO/s8llNyla7ckqhPj5gpCEAxS0VrfE2uGNGyWSUMhSMJsNvZ5q0 H1UEqFUPfIOKTa+eb0/GpvIpQD5vY7czTm7XAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUm8p9X8cQg58FDXl6P9/Za/5gExgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL204cDlYOGNRZzU4RkRYbDZQOV9aYV81 Z0V4Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbaI4AwDQYJ KoZIhvcNAQELBQADggEBAL6uZwa1Zwb1Cjv+quEUQk/YxKP3QKPIAYDaVIXU0lkC TAz/n7x1OpNePnjvLVhk81pLDcMkK+Q3hVYXmrQmjddetiVTlDTidNdZDUElV7PS pv2ubnG4XdR73i5GfYL7R5uJiKWVHIKgVo/O5gkpfONDSAtLBqMgwfO/bv/ThdW0 TFMP0fkuhmfGqAlrKTIbFhk5PBxZfj8o+Ew5jyVk0sSshSQZD/29Azpb+Ug9nA9I HL0Cck4AyeFHhbrLX5lHg0q9HPB17iZYN0+qX2ITaRf95U5kj8xOGfqWxv/ffeyM E2tym2hez30Mt9EgqCp6O1LfIDXlIurtdOfnwvZh0Nw= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:43 2024 by rpki-client on console-ams.rpki-client.org