$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/qJ4HXFTc-xpRmNYz8FptjLgr0Eg.roa File: qJ4HXFTc-xpRmNYz8FptjLgr0Eg.roa (raw, json) Hash identifier: pWVjHFoAfcehDbfsuxsTVs5JMm0BHW/sL2duCP55Y38= Subject key identifier: A8:9E:07:5C:54:DC:FB:1A:51:98:D6:33:F0:5A:6D:8C:B8:2B:D0:48 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DEE Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/qJ4HXFTc-xpRmNYz8FptjLgr0Eg.roa Signing time: Mon 15 Jan 2024 21:35:31 +0000 ROA not before: Mon 15 Jan 2024 21:35:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 124.218.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3566 (0xdee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:35:31 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A89E075C54DCFB1A5198D633F05A6D8CB82BD048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:df:6b:7d:00:23:58:eb:46:c4:3e:96:9d: fe:22:87:9b:60:37:d0:65:ec:83:54:b8:2c:e0:44: d6:18:9a:c6:76:8e:8b:88:ad:08:ff:e2:cb:15:f4: 34:66:a9:d6:67:0f:57:2e:ed:4b:86:97:84:2d:9f: 91:27:14:07:62:02:99:12:45:44:f4:62:8f:82:2b: 21:cf:94:51:77:73:47:a4:59:83:92:d4:bb:63:05: 49:59:68:09:34:58:bb:2e:23:cd:98:47:7d:79:c2: 90:b1:77:11:3d:92:93:de:87:ca:1c:bb:39:30:38: 4f:22:ce:5a:14:d2:dc:19:1d:08:0e:d5:47:e1:0d: 29:a2:07:db:55:65:2c:28:f6:1c:aa:a8:69:07:9a: e5:83:3c:81:b3:4d:fa:d1:25:88:ae:db:d6:65:af: c1:74:6f:99:21:bf:85:6a:b9:2d:c7:13:ac:cb:bc: b6:ca:57:27:f8:87:c3:3c:d0:d0:6d:c6:3d:51:e4: 1c:66:09:72:66:74:1d:5f:3a:89:93:7f:18:7b:54: 5f:de:92:7d:9e:6a:f4:48:50:06:99:a2:0f:ca:4e: 43:6b:6c:33:b3:9e:ae:f0:e1:16:23:b6:99:5a:75: 68:aa:a9:3a:45:46:54:04:43:73:67:eb:f9:a7:a4: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:07:5C:54:DC:FB:1A:51:98:D6:33:F0:5A:6D:8C:B8:2B:D0:48 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/qJ4HXFTc-xpRmNYz8FptjLgr0Eg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.176.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c8:19:99:56:be:58:d3:c2:39:31:bf:2b:85:e2:c7:7d:7b: 66:a8:dc:48:80:21:ec:16:1c:35:fe:f1:9b:95:fb:47:bb:f4: 38:a3:ca:69:fc:d9:40:13:e7:b6:2a:95:36:1f:42:bd:41:f2: 87:f4:5e:09:49:83:18:94:1c:39:62:ba:56:a5:39:83:8b:34: 39:f6:e2:cd:51:f2:97:01:1e:49:a9:90:ef:3f:af:a6:4e:31: 6a:88:be:c6:d2:84:57:1f:cc:df:52:27:96:aa:96:6d:6f:6b: ea:26:23:23:60:6c:c2:2d:4d:48:ca:5a:a5:d7:a5:49:92:99: 9f:c7:a8:52:24:bc:40:e8:50:7a:eb:7c:d4:2f:97:52:9d:e6: f0:40:9f:48:63:5e:ff:0f:30:ee:26:c8:b6:f1:68:20:99:1f: 45:03:88:0f:d7:c2:3c:68:91:1b:77:a5:d2:7f:81:ad:ca:3e: b4:97:e5:fb:61:2f:80:d7:13:01:28:ca:e9:ce:cb:a7:54:d3: 77:ee:e5:41:75:27:37:08:74:df:1f:0e:5f:23:1f:40:76:3e: 03:f1:0f:14:83:86:34:2d:87:67:36:34:e4:d7:cd:c3:75:cc: dc:23:aa:dd:98:c0:d1:fe:ac:fa:94:9a:07:0c:e2:6a:24:d2: 9a:5b:ee:6d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTM1MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE4OUUwNzVDNTREQ0ZC MUE1MTk4RDYzM0YwNUE2RDhDQjgyQkQwNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs3d9rfQAjWOtGxD6Wnf4ih5tgN9Bl7INUuCzgRNYYmsZ2jouI rQj/4ssV9DRmqdZnD1cu7UuGl4Qtn5EnFAdiApkSRUT0Yo+CKyHPlFF3c0ekWYOS 1LtjBUlZaAk0WLsuI82YR315wpCxdxE9kpPeh8ocuzkwOE8izloU0twZHQgO1Ufh DSmiB9tVZSwo9hyqqGkHmuWDPIGzTfrRJYiu29Zlr8F0b5khv4VquS3HE6zLvLbK Vyf4h8M80NBtxj1R5BxmCXJmdB1fOomTfxh7VF/ekn2eavRIUAaZog/KTkNrbDOz nq7w4RYjtpladWiqqTpFRlQEQ3Nn6/mnpAydAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUqJ4HXFTc+xpRmNYz8FptjLgr0EgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3FKNEhYRlRjLXhwUm1OWXo4RnB0akxn cjBFZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB82rAwDQYJ KoZIhvcNAQELBQADggEBAD3IGZlWvljTwjkxvyuF4sd9e2ao3EiAIewWHDX+8ZuV +0e79Dijymn82UAT57YqlTYfQr1B8of0XglJgxiUHDliulalOYOLNDn24s1R8pcB HkmpkO8/r6ZOMWqIvsbShFcfzN9SJ5aqlm1va+omIyNgbMItTUjKWqXXpUmSmZ/H qFIkvEDoUHrrfNQvl1Kd5vBAn0hjXv8PMO4myLbxaCCZH0UDiA/XwjxokRt3pdJ/ ga3KPrSX5fthL4DXEwEoyunOy6dU03fu5UF1JzcIdN8fDl8jH0B2PgPxDxSDhjQt h2c2NOTXzcN1zNwjqt2YwNH+rPqUmgcM4mok0ppb7m0= -----END CERTIFICATE-----Generated at Sun Jun 2 21:48:27 2024 by rpki-client on console-ams.rpki-client.org