$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa File: oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa (raw, json) Hash identifier: Z21z4eceYGICVcgz2U89Ch92aa4MRNx1qJlfIZYGt0s= Subject key identifier: A0:23:22:3E:F6:44:38:8A:B8:52:3D:D4:03:62:FE:E6:11:4E:08:58 Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Certificate serial: 0C5E Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa Signing time: Fri 01 Sep 2023 10:20:36 +0000 ROA not before: Fri 01 Sep 2023 10:20:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24168 IP address blocks: 121.50.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7 Validity Not Before: Sep 1 10:20:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A023223EF644388AB8523DD40362FEE6114E0858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:2a:a3:a0:69:d8:63:9e:97:cf:cc:d9:41: 0d:50:ac:5a:fe:28:17:17:b4:98:c2:cb:87:66:14: d9:c6:7d:3d:4d:8f:9a:fb:f2:51:ad:e3:e3:99:b6: fa:c9:08:13:3b:f8:a9:07:18:d3:05:b8:8c:58:a5: 3f:7b:1b:30:ad:e4:b3:6d:f0:a3:b7:29:74:3e:c7: e9:31:b8:5b:7e:4f:93:7f:29:c1:40:1f:69:25:b0: ff:5f:14:84:b4:12:34:49:ea:23:b2:62:80:04:56: 74:3c:a8:40:1d:a4:d1:45:cd:c7:95:a0:03:b3:ca: b4:0d:ba:9a:ee:f9:95:f9:3a:65:fe:e7:43:86:5b: a1:63:f5:f5:8a:58:44:0b:66:c8:53:7e:7f:a7:a6: 51:f9:50:2d:75:e7:49:6d:0a:6d:2a:38:91:7f:1e: 98:66:4a:92:40:47:e8:f7:27:52:74:81:de:06:b1: d6:9f:1d:45:ab:69:b2:e0:86:17:98:db:17:58:a4: 47:e0:af:b4:f2:2d:fa:c4:27:b5:a1:4c:f9:6c:42: e9:b4:0a:dc:6a:e9:37:5c:30:8a:fb:da:95:b7:c3: e5:66:11:20:16:4a:42:e7:93:e8:28:d8:b9:8b:2a: cc:7c:e6:bc:56:b3:3b:b0:f5:1c:ca:d7:10:3a:5b: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:23:22:3E:F6:44:38:8A:B8:52:3D:D4:03:62:FE:E6:11:4E:08:58 X509v3 Authority Key Identifier: keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oCMiPvZEOIq4Uj3UA2L-5hFOCFg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 121.50.144.0/21 Signature Algorithm: sha256WithRSAEncryption 58:51:c2:02:fb:3a:13:65:0d:97:dc:06:85:58:27:4e:8b:dd: b9:f1:6d:d8:63:b7:e1:99:a6:c1:5a:ed:5a:ad:6e:03:f5:41: bc:03:e4:6d:c2:8e:c2:6c:b6:0d:59:3a:d7:6b:83:2a:6c:7f: fd:46:3d:c6:3d:20:47:03:46:6a:41:f8:6c:38:05:6e:2f:ee: 1f:81:3d:8b:5e:2e:7d:9d:c1:17:6e:ba:c0:ce:9e:6f:88:d1: 7b:ad:c3:4f:d4:3f:e2:34:bd:9c:3d:80:20:91:4a:1a:68:63: da:0f:bf:f9:ba:0e:bf:22:b6:cf:b2:33:98:6f:d1:d9:69:1c: fb:fe:a1:fa:23:f8:ce:30:a3:3a:fa:d0:d0:26:70:93:95:45: 2e:28:68:f3:a5:f9:ff:6b:06:f0:62:fb:da:b6:ab:53:88:cb: 61:cf:14:d7:a2:c8:97:14:1f:3d:32:cc:e6:20:ae:c9:df:0b: 35:df:73:a8:99:21:ea:10:2d:f5:8f:26:cb:07:28:18:d5:af: 76:9d:f5:b1:21:99:b3:3a:66:36:05:35:ca:89:61:8e:05:dc: 9f:9a:e8:e5:e7:78:8f:d4:a8:d3:68:8c:15:34:95:05:ae:72: 78:ac:ca:0b:b5:2f:8d:a0:22:15:21:84:ff:5f:71:e8:0e:d0: e8:e2:00:2a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3 RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzA5MDEx MDIwMzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEEwMjMyMjNFRjY0NDM4 OEFCODUyM0RENDAzNjJGRUU2MTE0RTA4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC39yqjoGnYY56Xz8zZQQ1QrFr+KBcXtJjCy4dmFNnGfT1Nj5r7 8lGt4+OZtvrJCBM7+KkHGNMFuIxYpT97GzCt5LNt8KO3KXQ+x+kxuFt+T5N/KcFA H2klsP9fFIS0EjRJ6iOyYoAEVnQ8qEAdpNFFzceVoAOzyrQNupru+ZX5OmX+50OG W6Fj9fWKWEQLZshTfn+nplH5UC1150ltCm0qOJF/HphmSpJAR+j3J1J0gd4Gsdaf HUWrabLghheY2xdYpEfgr7TyLfrEJ7WhTPlsQum0Ctxq6TdcMIr72pW3w+VmESAW SkLnk+go2LmLKsx85rxWszuw9RzK1xA6W5yrAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUoCMiPvZEOIq4Uj3UA2L+5hFOCFgwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL29DTWlQdlpFT0lx NFVqM1VBMkwtNWhGT0NGZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAN5MpAwDQYJKoZIhvcNAQELBQADggEBAFhRwgL7OhNlDZfcBoVYJ06L3bnx bdhjt+GZpsFa7VqtbgP1QbwD5G3CjsJstg1ZOtdrgypsf/1GPcY9IEcDRmpB+Gw4 BW4v7h+BPYteLn2dwRduusDOnm+I0Xutw0/UP+I0vZw9gCCRShpoY9oPv/m6Dr8i ts+yM5hv0dlpHPv+ofoj+M4wozr60NAmcJOVRS4oaPOl+f9rBvBi+9q2q1OIy2HP FNeiyJcUHz0yzOYgrsnfCzXfc6iZIeoQLfWPJssHKBjVr3ad9bEhmbM6ZjYFNcqJ YY4F3J+a6OXneI/UqNNojBU0lQWucnisygu1L42gIhUhhP9fcegO0OjiACo= -----END CERTIFICATE-----Generated at Thu May 2 04:47:42 2024 by rpki-client on console-fra.rpki-client.org