$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/8sFxCxkp14i1J6YjsljzNMHDgcA.roa File: 8sFxCxkp14i1J6YjsljzNMHDgcA.roa (raw, json) Hash identifier: okBaDdcR75qFx0/Ak4s+bU+8n1aTKbMbN4jvzdblZrk= Subject key identifier: F2:C1:71:0B:19:29:D7:88:B5:27:A6:23:B2:58:F3:34:C1:C3:81:C0 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0CD5 Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/8sFxCxkp14i1J6YjsljzNMHDgcA.roa Signing time: Fri 01 Sep 2023 09:39:49 +0000 ROA not before: Fri 01 Sep 2023 09:39:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38843 IP address blocks: 124.150.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Sep 1 09:39:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F2C1710B1929D788B527A623B258F334C1C381C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:48:54:21:a4:ff:42:18:76:e5:9e:e6:c6: e4:ac:06:04:54:8a:63:4e:0c:77:15:f8:5d:a6:f4: 27:0e:c4:ae:80:ea:1a:0b:24:19:1e:4d:c6:5e:08: 2d:de:ca:4a:2e:7b:ec:bc:d4:00:4b:a9:5a:c6:1e: f8:f7:9a:7d:3c:4f:90:82:9d:8c:92:2c:d6:b8:1d: 8c:2e:c1:44:69:ab:13:59:65:35:6f:2a:68:c7:58: 20:1a:b0:ff:7b:a6:f2:7c:21:41:6a:e9:e0:d6:a4: 20:36:48:57:5c:4b:82:03:52:42:40:71:48:9a:30: 6d:4e:9b:4d:c3:60:b0:05:1a:1c:0f:c7:61:94:ee: 23:9a:7a:71:20:44:8c:c1:b7:c9:36:b0:17:49:48: 83:d9:ad:d0:a4:16:ad:ee:77:55:c5:e7:4b:e5:33: 87:42:65:50:cc:c0:6c:8d:88:39:b6:3f:42:7c:cd: 63:e5:ea:4a:91:49:3e:09:bc:9f:c6:c2:d9:bf:e3: 60:f7:b2:a3:bb:63:ff:ff:02:c0:38:08:ff:56:ce: 06:f7:da:20:68:7e:a7:a9:13:6b:13:63:02:b4:1f: ff:6b:78:b7:ad:b8:d8:18:09:06:76:8e:12:37:dc: 7c:b2:41:32:c3:cc:d8:8c:1e:52:df:92:e5:3e:a2: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:71:0B:19:29:D7:88:B5:27:A6:23:B2:58:F3:34:C1:C3:81:C0 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/8sFxCxkp14i1J6YjsljzNMHDgcA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.129.0/24 Signature Algorithm: sha256WithRSAEncryption 04:d7:8b:66:a8:81:54:32:0f:c7:75:01:b7:e9:bb:7e:9d:77: eb:96:c8:43:e1:67:d5:27:9b:fc:ce:a5:f5:53:d1:da:5d:9e: 94:1d:75:e0:bd:62:f0:25:6e:90:e1:dd:05:ff:62:7c:81:af: 79:71:14:7c:ae:70:76:2e:db:1d:3a:1b:6e:58:0f:a9:0a:62: fe:d0:94:15:3c:da:ae:bd:17:6d:78:0e:ee:11:56:3c:df:7a: e5:d3:63:5d:d8:16:41:e7:67:64:29:3c:eb:2b:a3:90:33:ec: 06:df:94:4c:08:57:a3:44:d1:76:a0:7d:b2:03:65:a3:88:d5: 8b:29:50:15:81:3a:b6:b1:b6:61:73:53:3e:2c:2f:b0:46:fa: c4:be:9d:be:be:ff:15:49:83:94:99:84:f7:49:f7:0d:21:a4: 4f:ed:a4:ae:38:50:44:ce:86:4e:0b:c3:10:37:47:b2:68:8d: 17:69:96:03:2a:1f:31:8e:7e:f0:32:9d:98:d6:6f:0b:67:2d: e2:76:ef:fc:8d:ab:36:50:21:66:da:a4:7e:cc:75:40:ae:7b: e2:84:72:c4:13:2c:1d:2c:ad:90:cc:e4:db:c2:c8:27:ea:43: 18:86:ff:a9:3f:7c:c3:3c:0a:dd:6b:12:01:00:69:34:c2:96: 3a:86:03:7e -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw OTM5NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYyQzE3MTBCMTkyOUQ3 ODhCNTI3QTYyM0IyNThGMzM0QzFDMzgxQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQkUhUIaT/Qhh25Z7mxuSsBgRUimNODHcV+F2m9CcOxK6A6hoL JBkeTcZeCC3eykoue+y81ABLqVrGHvj3mn08T5CCnYySLNa4HYwuwURpqxNZZTVv KmjHWCAasP97pvJ8IUFq6eDWpCA2SFdcS4IDUkJAcUiaMG1Om03DYLAFGhwPx2GU 7iOaenEgRIzBt8k2sBdJSIPZrdCkFq3ud1XF50vlM4dCZVDMwGyNiDm2P0J8zWPl 6kqRST4JvJ/Gwtm/42D3sqO7Y///AsA4CP9Wzgb32iBofqepE2sTYwK0H/9reLet uNgYCQZ2jhI33HyyQTLDzNiMHlLfkuU+ol4nAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQU8sFxCxkp14i1J6YjsljzNMHDgcAwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vOHNGeEN4a3AxNGkxSjZZanNsanpO TUhEZ2NBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHyWgTAN BgkqhkiG9w0BAQsFAAOCAQEABNeLZqiBVDIPx3UBt+m7fp1365bIQ+Fn1Seb/M6l 9VPR2l2elB114L1i8CVukOHdBf9ifIGveXEUfK5wdi7bHTobblgPqQpi/tCUFTza rr0XbXgO7hFWPN965dNjXdgWQednZCk86yujkDPsBt+UTAhXo0TRdqB9sgNlo4jV iylQFYE6trG2YXNTPiwvsEb6xL6dvr7/FUmDlJmE90n3DSGkT+2krjhQRM6GTgvD EDdHsmiNF2mWAyofMY5+8DKdmNZvC2ct4nbv/I2rNlAhZtqkfsx1QK574oRyxBMs HSytkMzk28LIJ+pDGIb/qT98wzwK3WsSAQBpNMKWOoYDfg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org