$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/rDWrxAX4kHhLG0I3XEG1bzdxCXY.roa File: rDWrxAX4kHhLG0I3XEG1bzdxCXY.roa (raw, json) Hash identifier: Aq/bNFcYAg6P3wY/jg6vqNTwI3h3hiwhxttYi3FHjQE= Subject key identifier: AC:35:AB:C4:05:F8:90:78:4B:1B:42:37:5C:41:B5:6F:37:71:09:76 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DBC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/rDWrxAX4kHhLG0I3XEG1bzdxCXY.roa Signing time: Mon 15 Jan 2024 21:30:29 +0000 ROA not before: Mon 15 Jan 2024 21:30:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 124.218.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:30:29 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=AC35ABC405F890784B1B42375C41B56F37710976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:74:1a:83:13:04:26:56:78:68:79:10:17: fe:4e:dc:d1:76:4e:14:2b:e6:ae:5c:b4:94:7d:f8: 47:ed:b5:5f:33:97:6e:4a:45:74:ce:1e:16:09:d0: f1:c8:2b:6b:6a:27:65:4c:85:6c:28:74:03:ba:20: a7:30:6b:89:ec:65:1f:5d:de:bf:72:d5:ac:5c:5a: ec:56:06:35:9c:52:09:12:ed:8f:e5:38:60:df:c2: 4d:12:dc:d1:26:e2:70:98:d1:aa:6b:14:a1:00:5d: 95:4a:5e:a6:b4:42:8c:e9:b8:39:93:16:15:23:6a: 27:8c:c3:c9:ab:10:50:d5:01:18:b8:f5:cf:57:69: 8e:21:70:8b:72:8a:67:e2:2c:89:a5:68:48:48:28: 6d:5e:50:16:98:9f:5b:91:45:6d:87:86:5d:3d:af: 04:0a:04:f1:4d:4e:b7:bb:f1:d9:a7:80:ab:47:bd: 8a:43:ba:f6:67:3c:d6:d9:6d:db:4a:05:5b:f2:f3: e2:2c:40:5c:cb:9b:ef:74:8b:c0:89:31:46:d4:94: 6f:cb:af:f1:10:9b:59:a3:51:c0:d0:3c:ec:0a:9a: d8:58:17:c8:6b:82:d0:39:55:5c:6b:f4:ae:33:b4: b5:76:4e:6e:81:60:c0:a8:16:69:6e:bc:35:33:f8: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:35:AB:C4:05:F8:90:78:4B:1B:42:37:5C:41:B5:6F:37:71:09:76 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/rDWrxAX4kHhLG0I3XEG1bzdxCXY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.218.168.0/22 Signature Algorithm: sha256WithRSAEncryption 10:46:67:05:c4:65:5d:ba:af:0f:16:5c:f8:93:e8:ac:9e:a1: 7f:9d:6f:55:e0:c2:b1:c5:ef:3c:a9:de:cd:d9:8b:e6:bb:fc: 3e:72:b5:3f:53:42:d1:c7:cb:07:8c:21:55:dd:5e:0d:6f:29: 12:80:e3:ca:28:16:9d:59:4a:88:5f:09:f9:17:1c:f4:2d:c3: d2:ee:ec:02:b2:9e:45:ae:52:3d:6c:44:a2:3a:d7:41:e7:f2: 54:44:34:21:32:f0:8e:1b:cc:9e:a6:c6:57:ff:06:59:37:0a: 7b:04:de:00:e5:17:b3:c5:34:97:c5:ec:c1:2a:4e:bc:38:27: 3e:b4:5c:23:f7:0c:2b:df:fb:fb:21:27:e8:4f:43:ff:73:b2: f0:3a:8c:1d:20:69:be:ea:8b:2a:b4:34:bd:d5:bc:40:a9:4f: 8a:ad:c9:aa:21:ca:30:18:18:ca:d3:b7:28:d2:b9:bf:04:d1: 2b:c8:58:73:72:ea:7a:51:a8:48:9a:85:36:f9:5b:05:95:a8: 23:31:fd:1e:79:3d:8e:b6:22:44:b4:27:a2:66:75:a1:5d:74: a3:a1:16:eb:1e:80:f8:06:07:13:4d:32:ee:58:e4:81:ce:63: 04:f4:bc:24:e0:94:b7:fe:55:83:ea:96:e3:98:8b:42:ae:d6: 12:38:68:b9 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTMwMjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFDMzVBQkM0MDVGODkw Nzg0QjFCNDIzNzVDNDFCNTZGMzc3MTA5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0x3QagxMEJlZ4aHkQF/5O3NF2ThQr5q5ctJR9+EfttV8zl25K RXTOHhYJ0PHIK2tqJ2VMhWwodAO6IKcwa4nsZR9d3r9y1axcWuxWBjWcUgkS7Y/l OGDfwk0S3NEm4nCY0aprFKEAXZVKXqa0QozpuDmTFhUjaieMw8mrEFDVARi49c9X aY4hcItyimfiLImlaEhIKG1eUBaYn1uRRW2Hhl09rwQKBPFNTre78dmngKtHvYpD uvZnPNbZbdtKBVvy8+IsQFzLm+90i8CJMUbUlG/Lr/EQm1mjUcDQPOwKmthYF8hr gtA5VVxr9K4ztLV2Tm6BYMCoFmluvDUz+FRNAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUrDWrxAX4kHhLG0I3XEG1bzdxCXYwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3JEV3J4QVg0a0hoTEcwSTNYRUcxYnpk eENYWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ82qgwDQYJ KoZIhvcNAQELBQADggEBABBGZwXEZV26rw8WXPiT6KyeoX+db1XgwrHF7zyp3s3Z i+a7/D5ytT9TQtHHyweMIVXdXg1vKRKA48ooFp1ZSohfCfkXHPQtw9Lu7AKynkWu Uj1sRKI610Hn8lRENCEy8I4bzJ6mxlf/Blk3CnsE3gDlF7PFNJfF7MEqTrw4Jz60 XCP3DCvf+/shJ+hPQ/9zsvA6jB0gab7qiyq0NL3VvECpT4qtyaohyjAYGMrTtyjS ub8E0SvIWHNy6npRqEiahTb5WwWVqCMx/R55PY62IkS0J6JmdaFddKOhFusegPgG BxNNMu5Y5IHOYwT0vCTglLf+VYPqluOYi0Ku1hI4aLk= -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:33 2024 by rpki-client on console-ams.rpki-client.org