$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/pKbq8Phul3yXl_r1QbicBHvmtnQ.roa File: pKbq8Phul3yXl_r1QbicBHvmtnQ.roa (raw, json) Hash identifier: vffVTglXHyBm7DHIrXUP6WIdbn9Odg7ES8uI2JLXM+s= Subject key identifier: A4:A6:EA:F0:F8:6E:97:7C:97:97:FA:F5:41:B8:9C:04:7B:E6:B6:74 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D7E Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pKbq8Phul3yXl_r1QbicBHvmtnQ.roa Signing time: Mon 15 Jan 2024 21:28:56 +0000 ROA not before: Mon 15 Jan 2024 21:28:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 210.63.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3454 (0xd7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:28:56 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A4A6EAF0F86E977C9797FAF541B89C047BE6B674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:40:bc:46:30:e8:a3:98:c5:c3:fd:6e:52: af:a7:84:38:d0:78:9e:98:a3:74:a6:2f:3b:17:de: f4:ae:61:30:00:de:34:39:27:b3:0c:d5:ec:63:d1: 6f:ed:d8:30:8c:44:fa:7a:59:ad:13:20:be:1f:48: 31:d3:37:5d:14:d3:0f:5f:7d:d7:83:4b:ff:fa:6c: b4:77:1a:b8:60:c7:c8:0b:40:fc:73:80:d3:3d:e2: 1a:5a:bd:9c:54:8c:02:ea:25:15:b3:5b:13:8b:83: c8:e4:87:17:88:59:99:8d:5e:1e:39:45:87:96:58: dd:c1:d8:c1:90:a6:80:80:d9:2f:02:4b:d8:8a:70: 1c:2f:42:f1:74:1e:59:88:64:b9:ef:d0:d6:71:f4: 5e:e1:02:62:ce:8e:24:50:b5:f4:92:8c:4d:e7:06: f1:61:27:58:fe:07:06:85:30:f1:e4:ba:cb:33:bb: 2c:b5:21:33:80:31:15:eb:f9:81:cc:84:db:2d:14: 2f:d6:34:b9:00:19:46:d5:99:19:c2:73:97:8b:2a: f2:09:84:98:dc:c9:a5:36:ef:87:e4:82:92:83:cd: 5e:4b:25:b1:32:f2:fa:7a:e4:a9:61:42:20:80:04: b8:65:ca:7f:cf:ad:11:44:d9:1e:9d:e4:48:37:a4: a9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:EA:F0:F8:6E:97:7C:97:97:FA:F5:41:B8:9C:04:7B:E6:B6:74 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pKbq8Phul3yXl_r1QbicBHvmtnQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.63.232.0/22 Signature Algorithm: sha256WithRSAEncryption a9:15:19:57:fe:bc:81:2a:09:bf:eb:62:1b:f4:ce:10:09:61: ec:b0:ce:40:5c:7f:99:77:58:98:7e:99:19:f4:7b:c5:cc:a9: a7:90:ef:9c:32:dc:76:24:e9:6c:b8:15:5c:28:f4:11:ae:db: c9:8e:e7:e6:45:21:55:44:b0:1f:b2:08:ff:70:f7:a6:8d:93: 33:0c:61:89:54:8c:be:7c:d5:c1:90:3b:dd:a8:6d:ee:53:e4: 68:c2:ee:e2:8a:ed:14:3b:de:f6:1a:2c:92:39:22:a7:c2:56: 61:ed:89:7d:c0:a9:c3:b5:31:e2:73:f2:a7:b3:a2:29:89:51: 44:ce:d1:ac:d3:6c:da:18:6c:09:61:45:5c:c2:ef:3d:6a:08: f4:86:69:76:81:99:d1:b4:32:97:de:9e:2d:ac:65:b0:87:d0: f1:73:bf:d1:d9:c2:54:95:26:68:00:e0:f1:5a:3c:d2:14:93: c6:3c:88:fa:51:15:a9:40:6a:80:9c:72:1a:9d:33:78:e7:f9: 2b:73:81:6f:63:ad:81:c6:b7:5b:03:e5:99:90:57:43:46:5a: 3b:72:19:71:30:fa:1b:dd:d0:1c:2f:a2:8d:f6:6c:78:cc:38: 5a:1d:a4:aa:eb:e9:4d:6c:96:62:8e:e0:c6:32:f7:c1:36:c9: 3f:40:7a:9a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI4NTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE0QTZFQUYwRjg2RTk3 N0M5Nzk3RkFGNTQxQjg5QzA0N0JFNkI2NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnqkC8RjDoo5jFw/1uUq+nhDjQeJ6Yo3SmLzsX3vSuYTAA3jQ5 J7MM1exj0W/t2DCMRPp6Wa0TIL4fSDHTN10U0w9ffdeDS//6bLR3Grhgx8gLQPxz gNM94hpavZxUjALqJRWzWxOLg8jkhxeIWZmNXh45RYeWWN3B2MGQpoCA2S8CS9iK cBwvQvF0HlmIZLnv0NZx9F7hAmLOjiRQtfSSjE3nBvFhJ1j+BwaFMPHkusszuyy1 ITOAMRXr+YHMhNstFC/WNLkAGUbVmRnCc5eLKvIJhJjcyaU274fkgpKDzV5LJbEy 8vp65KlhQiCABLhlyn/PrRFE2R6d5Eg3pKkzAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUpKbq8Phul3yXl/r1QbicBHvmtnQwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3BLYnE4UGh1bDN5WGxfcjFRYmljQkh2 bXRuUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALSP+gwDQYJ KoZIhvcNAQELBQADggEBAKkVGVf+vIEqCb/rYhv0zhAJYeywzkBcf5l3WJh+mRn0 e8XMqaeQ75wy3HYk6Wy4FVwo9BGu28mO5+ZFIVVEsB+yCP9w96aNkzMMYYlUjL58 1cGQO92obe5T5GjC7uKK7RQ73vYaLJI5IqfCVmHtiX3AqcO1MeJz8qezoimJUUTO 0azTbNoYbAlhRVzC7z1qCPSGaXaBmdG0Mpfeni2sZbCH0PFzv9HZwlSVJmgA4PFa PNIUk8Y8iPpRFalAaoCcchqdM3jn+StzgW9jrYHGt1sD5ZmQV0NGWjtyGXEw+hvd 0Bwvoo32bHjMOFodpKrr6U1slmKO4MYy98E2yT9Aepo= -----END CERTIFICATE-----Generated at Mon May 20 08:32:39 2024 by rpki-client on console-fra.rpki-client.org