$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/suDWwdsLW2FjdRI_G8xxl95B7Cw.roa File: suDWwdsLW2FjdRI_G8xxl95B7Cw.roa (raw, json) Hash identifier: ZnokSKx7hZyHMqqs2R0/P0YHs4nk+P0FcN+VBDNCTfg= Subject key identifier: B2:E0:D6:C1:DB:0B:5B:61:63:75:12:3F:1B:CC:71:97:DE:41:EC:2C Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0C15 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/suDWwdsLW2FjdRI_G8xxl95B7Cw.roa Signing time: Fri 05 Jan 2024 09:04:33 +0000 ROA not before: Fri 05 Jan 2024 09:04:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 7482 IP address blocks: 218.184.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3093 (0xc15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 5 09:04:33 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B2E0D6C1DB0B5B616375123F1BCC7197DE41EC2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:f4:83:d2:d0:17:a7:4b:d7:61:5a:83:fa: 96:f6:87:43:d6:63:d8:d8:09:20:c7:94:e2:b4:ce: 2c:64:f8:ca:3a:c4:b3:a4:ae:0d:2d:ae:b8:fc:67: 89:80:e6:41:e0:dc:07:b3:28:ad:76:b4:40:dc:74: 20:8c:f0:d7:67:f9:36:cd:7a:03:6d:e1:a3:f3:fb: fd:92:96:d6:95:81:2c:07:4b:c1:d6:6d:1f:61:1e: d9:03:b6:a8:20:f5:a4:88:f9:58:5a:9b:3c:08:d7: 9e:be:ed:b5:2f:f5:90:4c:60:fc:38:9b:a2:07:4b: f6:49:8e:58:48:7d:52:bf:4c:fd:d2:7c:ef:e9:d2: a2:44:82:f8:11:98:61:11:23:d0:df:ff:cb:d3:f6: 42:f0:0d:9a:74:f4:a2:5d:b3:01:03:90:5f:b4:0a: be:5b:ee:c1:bc:d9:08:fb:cc:db:74:62:d6:c2:c1: 17:74:9c:f5:88:70:b6:ef:da:eb:9e:e9:84:68:a0: 40:c1:2f:36:64:2a:18:3f:60:7d:c4:6d:7b:db:d8: f0:7f:fa:e3:e1:5c:64:46:c5:51:01:e8:fb:2f:a0: 43:d0:ef:e0:03:5f:7d:4a:63:fc:31:57:cc:55:2a: e9:f5:ea:9a:f5:25:79:54:bb:13:58:a2:0b:08:b9: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E0:D6:C1:DB:0B:5B:61:63:75:12:3F:1B:CC:71:97:DE:41:EC:2C X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/suDWwdsLW2FjdRI_G8xxl95B7Cw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 218.184.0.0/16 Signature Algorithm: sha256WithRSAEncryption 36:82:73:41:c3:0c:21:be:82:86:0b:c3:01:23:0b:7a:d5:65: b3:ac:57:ab:f1:b4:f3:79:68:7b:3a:35:69:ca:ce:74:ca:84: a9:af:44:00:26:21:04:28:be:f2:ae:cc:37:6a:38:65:ca:21: 12:90:d8:02:ef:20:8a:6b:14:fc:5f:df:c7:a9:dc:e7:2d:33: f4:4b:27:61:22:2a:6c:bd:72:09:51:e8:91:14:79:ba:e4:bb: dc:95:70:b8:78:75:0f:aa:9d:de:18:a2:e4:40:88:b5:f6:70: a5:52:0f:9d:35:95:05:1e:b7:25:50:e6:4b:c5:60:ea:3b:4e: 18:1b:49:cd:f2:13:a1:1a:78:b4:c4:6d:03:18:08:40:46:6f: 14:c3:ed:cb:db:6e:8a:a0:1d:f2:ec:b5:b1:e1:2b:e8:7b:e4: 16:49:e0:af:dc:82:a7:3a:4a:d7:34:83:e3:ea:21:f2:ee:15: 2b:0b:69:ed:a8:ef:89:cc:1d:47:d5:b2:92:00:e9:0e:e4:f3: be:ab:64:48:aa:51:b3:53:b5:e9:8c:5d:5b:2b:5e:06:83:21: 59:06:10:12:59:40:7e:12:0a:bb:37:c1:e6:6a:a7:9b:a4:3e: e6:cc:96:6c:b8:7a:85:01:b3:f5:7c:c8:1e:4e:ec:92:01:af: c4:6c:31:a4 -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMDUw OTA0MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIyRTBENkMxREIwQjVC NjE2Mzc1MTIzRjFCQ0M3MTk3REU0MUVDMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFQfSD0tAXp0vXYVqD+pb2h0PWY9jYCSDHlOK0zixk+Mo6xLOk rg0trrj8Z4mA5kHg3AezKK12tEDcdCCM8Ndn+TbNegNt4aPz+/2SltaVgSwHS8HW bR9hHtkDtqgg9aSI+VhamzwI156+7bUv9ZBMYPw4m6IHS/ZJjlhIfVK/TP3SfO/p 0qJEgvgRmGERI9Df/8vT9kLwDZp09KJdswEDkF+0Cr5b7sG82Qj7zNt0YtbCwRd0 nPWIcLbv2uue6YRooEDBLzZkKhg/YH3EbXvb2PB/+uPhXGRGxVEB6PsvoEPQ7+AD X31KY/wxV8xVKun16pr1JXlUuxNYogsIuWK/AgMBAAGjggHnMIIB4zAdBgNVHQ4E FgQUsuDWwdsLW2FjdRI/G8xxl95B7CwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3N1RFd3ZHNMVzJGamRSSV9HOHh4bDk1 QjdDdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDauDANBgkq hkiG9w0BAQsFAAOCAQEANoJzQcMMIb6ChgvDASMLetVls6xXq/G083loezo1acrO dMqEqa9EACYhBCi+8q7MN2o4ZcohEpDYAu8gimsU/F/fx6nc5y0z9EsnYSIqbL1y CVHokRR5uuS73JVwuHh1D6qd3hii5ECItfZwpVIPnTWVBR63JVDmS8Vg6jtOGBtJ zfIToRp4tMRtAxgIQEZvFMPty9tuiqAd8uy1seEr6HvkFkngr9yCpzpK1zSD4+oh 8u4VKwtp7ajvicwdR9WykgDpDuTzvqtkSKpRs1O16YxdWyteBoMhWQYQEllAfhIK uzfB5mqnm6Q+5syWbLh6hQGz9XzIHk7skgGvxGwxpA== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:39 2024 by rpki-client on console-fra.rpki-client.org