$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/fRVcLPc88--6CVAGj7P7WrEGoXI.roa File: fRVcLPc88--6CVAGj7P7WrEGoXI.roa (raw, json) Hash identifier: Ax+/IkoZbEGnUR9+Yvag9gdiTwMdFoZ1LVn5HyQPBZY= Subject key identifier: 7D:15:5C:2C:F7:3C:F3:EF:BA:09:50:06:8F:B3:FB:5A:B1:06:A1:72 Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Certificate serial: 0CCD Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/fRVcLPc88--6CVAGj7P7WrEGoXI.roa Signing time: Fri 01 Sep 2023 09:39:47 +0000 ROA not before: Fri 01 Sep 2023 09:39:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38843 IP address blocks: 124.150.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3277 (0xccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3 Validity Not Before: Sep 1 09:39:47 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7D155C2CF73CF3EFBA0950068FB3FB5AB106A172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:04:b8:be:ca:c6:ca:ab:2b:48:df:ea:84: 8b:ea:b0:1c:77:5b:df:74:6f:8d:86:b2:aa:5d:26: b2:f2:59:b9:c3:c4:21:b7:ea:28:07:4d:2f:6f:1f: 28:06:a5:20:fe:25:a9:f1:cc:dd:a4:6b:d8:7b:81: dd:00:05:fd:0b:7a:a5:e6:06:da:09:79:cf:65:03: 89:c3:fa:1b:87:27:7f:77:de:d9:e4:ad:25:47:3b: 21:11:72:e8:75:e3:c3:13:66:9c:d9:bf:14:e0:b2: 47:c0:a8:d5:36:ac:69:10:cc:12:b3:fc:f1:05:c4: 87:c5:d0:7e:b3:4b:12:4b:0c:f7:d7:8a:4d:d1:f2: e8:d8:09:38:1c:72:81:fe:4d:ad:27:f8:1d:8b:bf: 02:f8:22:ac:ff:8b:1e:2f:90:59:d4:71:d5:0c:5f: e9:23:80:51:be:84:b4:af:22:61:79:5e:cb:2c:e6: 12:bd:32:b2:63:92:c2:96:b5:a8:26:fa:33:da:d9: 3b:b3:b7:0a:32:10:4c:29:df:c6:7f:30:c7:f5:fd: 1e:43:ef:c7:cb:58:71:07:a1:a8:e1:53:b7:3e:40: da:bc:0d:f4:de:84:78:75:72:70:2a:58:4f:dc:1c: 31:c0:b9:88:46:27:9e:b6:d9:d7:67:ed:92:21:2f: 1c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:15:5C:2C:F7:3C:F3:EF:BA:09:50:06:8F:B3:FB:5A:B1:06:A1:72 X509v3 Authority Key Identifier: keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/fRVcLPc88--6CVAGj7P7WrEGoXI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.150.131.0/24 Signature Algorithm: sha256WithRSAEncryption 43:b9:9c:c6:80:2c:93:96:cf:64:14:d2:b5:78:b9:8c:70:4d: f4:9f:0d:2c:df:4c:5c:a9:20:a3:9d:79:ae:6a:6b:00:d7:9c: 0e:db:6f:5c:c3:24:5b:8b:fc:be:6c:bc:d0:25:64:23:ff:7b: d1:0c:d0:f6:02:62:62:5d:51:8d:44:df:f9:44:04:42:a5:47: 44:4f:95:b3:e8:bf:1c:8d:e0:94:4b:b3:ca:90:cb:08:1c:79: 06:db:a4:e8:5f:19:ae:1c:b2:5b:73:ba:28:82:4b:47:7e:5b: f2:63:0e:2e:7e:9d:60:aa:59:dd:9c:5b:f6:3f:28:85:68:c7: 4d:dd:4c:bb:f8:07:06:6d:5d:c6:93:7a:b9:7d:32:72:a4:6c: 08:32:8f:d3:26:b6:9e:51:8e:68:83:c2:64:9d:f1:5c:c9:2f: 8c:1e:c4:3b:3d:72:fb:ab:6c:3a:62:b2:a3:9d:72:d0:6b:39: dd:92:6f:e9:8a:74:bd:a8:b9:22:3f:14:e8:c7:92:3b:2c:0a: 9b:ee:c9:ed:85:3d:e1:04:4a:69:85:e7:0c:7e:d2:ff:0a:85: 4b:e5:01:b1:0b:bd:23:af:e8:68:ce:54:64:ef:93:c9:05:f9: 37:37:fa:a0:13:a4:b4:8f:ac:5f:f5:50:11:e4:c3:d5:29:ed: 77:c3:37:8d -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRE RDQzMjk2MUFDNDJENjQ0QUVBRjM0QjE0QUVDNzAyNzVCMDZBMzAeFw0yMzA5MDEw OTM5NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdEMTU1QzJDRjczQ0Yz RUZCQTA5NTAwNjhGQjNGQjVBQjEwNkExNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNgQS4vsrGyqsrSN/qhIvqsBx3W990b42GsqpdJrLyWbnDxCG3 6igHTS9vHygGpSD+JanxzN2ka9h7gd0ABf0LeqXmBtoJec9lA4nD+huHJ3933tnk rSVHOyERcuh148MTZpzZvxTgskfAqNU2rGkQzBKz/PEFxIfF0H6zSxJLDPfXik3R 8ujYCTgccoH+Ta0n+B2LvwL4Iqz/ix4vkFnUcdUMX+kjgFG+hLSvImF5Xsss5hK9 MrJjksKWtagm+jPa2TuztwoyEEwp38Z/MMf1/R5D78fLWHEHoajhU7c+QNq8DfTe hHh1cnAqWE/cHDHAuYhGJ5622ddn7ZIhLxxxAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUfRVcLPc88++6CVAGj7P7WrEGoXIwHwYDVR0jBBgwFoAUNN1DKWGsQtZErq80 sUrscCdbBqMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFVNTy9O TjFES1dHc1F0WkVycTgwc1Vyc2NDZGJCcU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05OMURLV0dzUXRaRXJxODBzVXJzY0NkYkJxTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1BVTU8vZlJWY0xQYzg4LS02Q1ZBR2o3UDdX ckVHb1hJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHyWgzAN BgkqhkiG9w0BAQsFAAOCAQEAQ7mcxoAsk5bPZBTStXi5jHBN9J8NLN9MXKkgo515 rmprANecDttvXMMkW4v8vmy80CVkI/970QzQ9gJiYl1RjUTf+UQEQqVHRE+Vs+i/ HI3glEuzypDLCBx5Btuk6F8ZrhyyW3O6KIJLR35b8mMOLn6dYKpZ3Zxb9j8ohWjH Td1Mu/gHBm1dxpN6uX0ycqRsCDKP0ya2nlGOaIPCZJ3xXMkvjB7EOz1y+6tsOmKy o51y0Gs53ZJv6Yp0vai5Ij8U6MeSOywKm+7J7YU94QRKaYXnDH7S/wqFS+UBsQu9 I6/oaM5UZO+TyQX5Nzf6oBOktI+sX/VQEeTD1Sntd8M3jQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org