$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/xV188o1mFmS__RHYSbmloWHM5qc.roa File: xV188o1mFmS__RHYSbmloWHM5qc.roa (raw, json) Hash identifier: wWzR5H6XFyulfblbOpOV0ZSMOIlNR6D6yoauJxh+4ko= Subject key identifier: C5:5D:7C:F2:8D:66:16:64:BF:FD:11:D8:49:B9:A5:A1:61:CC:E6:A7 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0DFC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xV188o1mFmS__RHYSbmloWHM5qc.roa Signing time: Mon 15 Jan 2024 21:43:33 +0000 ROA not before: Mon 15 Jan 2024 21:43:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17709 IP address blocks: 60.244.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3580 (0xdfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:43:33 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C55D7CF28D661664BFFD11D849B9A5A161CCE6A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:a9:f9:48:4f:bf:b0:6c:23:dd:dc:53:2b: 5e:5c:e6:75:0f:95:5a:83:c1:eb:fa:6d:b3:a9:15: 09:4a:6d:b3:ee:ba:99:5d:e5:00:86:73:c7:10:ed: 6f:d7:da:ef:22:c5:da:1e:ff:0f:4f:93:db:58:56: f2:83:f7:e3:59:f7:e9:03:9e:40:c9:2d:6d:50:e2: 57:3c:00:2a:69:ca:d7:58:3b:bf:2b:7c:1c:e7:6f: 5e:a6:16:15:79:6d:2f:2a:38:68:9b:d9:4d:6f:66: 52:cd:75:ad:d5:3c:69:5f:77:e5:f1:4d:09:f6:ae: 9c:b1:ec:46:83:b0:16:dc:7e:01:89:1f:92:9f:82: 51:49:27:cd:e7:4d:76:f0:bf:72:d8:34:94:9d:5c: e6:f1:bb:a7:aa:f0:ce:48:53:61:01:2c:ef:06:f7: 1a:f7:10:64:2d:87:a2:e0:1c:c4:25:d2:32:3f:a0: 37:61:f6:c2:da:94:0a:b8:71:a4:c5:20:fb:e1:24: 4f:61:f4:17:ae:2d:6c:11:27:75:79:9f:d3:6a:f2: 90:60:f8:4e:c9:be:b3:49:4f:8f:f1:ac:e4:d9:f9: a1:1b:16:0c:a4:93:ad:ff:e1:a3:34:5b:34:6e:fb: 34:ce:54:43:30:62:d1:98:ea:bc:7d:7f:b2:79:9f: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5D:7C:F2:8D:66:16:64:BF:FD:11:D8:49:B9:A5:A1:61:CC:E6:A7 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/xV188o1mFmS__RHYSbmloWHM5qc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.128.0/17 Signature Algorithm: sha256WithRSAEncryption 86:2b:c7:58:50:da:b3:c9:c5:fc:c5:30:40:f1:6d:11:56:1a: 7b:bb:09:31:b4:2d:9d:04:86:ba:f1:2f:85:db:16:66:c2:a7: ef:bd:fa:66:51:66:2c:72:67:3f:ab:87:fd:9b:36:79:7b:32: b3:8d:f7:7e:a3:dd:54:89:b3:7a:12:04:08:31:90:2c:e6:56: 23:28:19:7e:e0:85:cf:db:8f:94:b1:35:35:c8:dd:0d:80:52: 2d:61:9b:f7:1f:7d:ef:f2:5a:f6:90:14:1e:b7:36:ec:c8:8b: 22:b5:b9:fc:07:4f:8a:ac:f3:8e:57:e9:b6:2c:1f:26:8b:d8: cc:ae:ed:93:6b:b1:eb:7b:51:0b:1b:f5:7c:9d:9c:0f:0a:e1: 01:fc:45:bd:e7:f5:7a:86:28:ae:9b:39:76:b7:35:41:c5:21: ce:bb:ea:56:67:c9:eb:82:97:f7:0b:3f:ca:0a:9a:02:aa:c2: 3f:f9:47:8e:a8:55:bd:ba:dc:55:ed:f2:49:f3:f3:74:da:b2: 49:39:ee:e9:82:af:ab:a7:0c:2a:bd:a6:08:ba:62:bf:0e:20: 7b:21:1d:35:8b:e0:a1:a0:d4:60:05:0a:01:df:8f:d7:2b:7d: fb:62:98:6a:bb:94:ec:b1:71:b9:a6:4f:c1:9a:98:3a:23:ca: a6:1e:68:a6 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTQzMzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM1NUQ3Q0YyOEQ2NjE2 NjRCRkZEMTFEODQ5QjlBNUExNjFDQ0U2QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8wqn5SE+/sGwj3dxTK15c5nUPlVqDwev6bbOpFQlKbbPuupld 5QCGc8cQ7W/X2u8ixdoe/w9Pk9tYVvKD9+NZ9+kDnkDJLW1Q4lc8ACppytdYO78r fBznb16mFhV5bS8qOGib2U1vZlLNda3VPGlfd+XxTQn2rpyx7EaDsBbcfgGJH5Kf glFJJ83nTXbwv3LYNJSdXObxu6eq8M5IU2EBLO8G9xr3EGQth6LgHMQl0jI/oDdh 9sLalAq4caTFIPvhJE9h9BeuLWwRJ3V5n9Nq8pBg+E7JvrNJT4/xrOTZ+aEbFgyk k63/4aM0WzRu+zTOVEMwYtGY6rx9f7J5n6exAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUxV188o1mFmS//RHYSbmloWHM5qcwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL3hWMTg4bzFtRm1TX19SSFlTYm1sb1dI TTVxYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc89IAwDQYJ KoZIhvcNAQELBQADggEBAIYrx1hQ2rPJxfzFMEDxbRFWGnu7CTG0LZ0EhrrxL4Xb FmbCp++9+mZRZixyZz+rh/2bNnl7MrON936j3VSJs3oSBAgxkCzmViMoGX7ghc/b j5SxNTXI3Q2AUi1hm/cffe/yWvaQFB63NuzIiyK1ufwHT4qs845X6bYsHyaL2Myu 7ZNrset7UQsb9XydnA8K4QH8Rb3n9XqGKK6bOXa3NUHFIc676lZnyeuCl/cLP8oK mgKqwj/5R46oVb263FXt8knz83Taskk57umCr6unDCq9pgi6Yr8OIHshHTWL4KGg 1GAFCgHfj9crfftimGq7lOyxcbmmT8GamDojyqYeaKY= -----END CERTIFICATE-----Generated at Sun Jun 2 21:48:27 2024 by rpki-client on console-ams.rpki-client.org