$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9UhAWxS7znVK_xB6h9qTy1p0QQI.roa File: 9UhAWxS7znVK_xB6h9qTy1p0QQI.roa (raw, json) Hash identifier: gYNnKtN5FX+E112NTOgtU+DlFvJILF6baVJv7HHIsvA= Subject key identifier: F5:48:40:5B:14:BB:CE:75:4A:FF:10:7A:87:DA:93:CB:5A:74:41:02 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0CFD Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9UhAWxS7znVK_xB6h9qTy1p0QQI.roa Signing time: Mon 26 Aug 2024 05:12:55 +0000 ROA not before: Mon 26 Aug 2024 05:12:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 113.21.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F548405B14BBCE754AFF107A87DA93CB5A744102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:e8:fd:89:8b:86:61:b6:5e:f4:8a:7f:de: ff:90:7e:00:3c:1d:9f:9d:f1:cc:a1:11:bc:98:23: d9:54:da:75:be:d7:c0:69:07:63:bd:44:b7:73:a1: 47:e0:a6:d9:66:c1:de:37:b5:20:6d:a3:1c:0e:bc: ed:63:5d:56:db:cd:57:dd:0b:a9:a0:1e:af:ef:30: c2:28:df:09:42:bd:90:07:f3:0e:b1:9e:a9:28:4a: 04:b1:18:31:2c:4e:c9:99:8f:b6:6f:1e:ee:f9:34: ec:04:81:da:8c:b0:9e:f9:57:0b:fc:ee:d5:d6:46: 37:9e:73:26:c0:c5:9f:7d:96:b3:94:be:75:6a:71: 8f:7a:2c:24:2e:1b:8a:65:34:d6:8a:27:03:e6:af: 10:73:68:93:7d:2a:be:33:eb:2d:ca:55:70:5d:e8: 59:7f:37:ea:5e:fd:69:7a:ce:17:1d:18:e8:c1:9a: 09:cc:58:8a:e7:96:bc:83:27:e2:e1:b6:a8:a8:ed: 70:27:2d:54:b2:6c:11:eb:dc:ec:8e:6e:ed:a3:f1: ba:89:36:b4:a7:86:91:9f:ae:71:f2:18:3d:3f:fa: e0:d8:78:0f:53:69:e8:09:0c:2d:90:9a:96:48:51: 04:cb:5e:d4:e1:25:2f:e7:69:5f:96:b4:94:8d:39: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:48:40:5B:14:BB:CE:75:4A:FF:10:7A:87:DA:93:CB:5A:74:41:02 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9UhAWxS7znVK_xB6h9qTy1p0QQI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.160.0/19 Signature Algorithm: sha256WithRSAEncryption 6c:88:a3:e1:81:61:e1:b5:24:61:88:72:25:90:1a:0a:5d:29: 38:ee:38:57:e4:17:4a:68:13:bb:c8:98:62:4a:e3:9f:b9:ec: 88:87:09:9d:29:a8:0a:9f:29:b0:6c:04:b9:c7:43:ff:ab:e9: f7:2f:74:17:45:bd:d0:d4:31:2c:65:92:38:83:95:fc:bb:67: d8:94:85:31:63:31:16:fb:5d:1d:b3:97:0d:40:33:5f:57:1e: e4:df:44:d1:b2:59:cd:83:2f:53:b0:d3:d4:3d:0b:5d:41:1d: 74:b5:c9:35:2f:91:70:cb:f3:a4:cf:3d:79:e7:c4:2e:fc:52: 39:d1:5c:69:f6:56:df:d1:ea:5d:ef:47:43:8a:31:9b:18:f7: aa:42:2b:2c:57:5f:12:7d:ca:bc:31:f2:cb:6f:8f:c1:7a:55: 1e:5d:18:6f:28:c1:aa:a9:5c:df:cf:1e:74:7b:dc:50:5c:d4: 7c:94:f3:67:6f:94:32:72:f7:a9:5f:4b:01:51:09:4b:8c:b7: fa:5b:31:1d:35:29:0d:5a:ec:36:fe:2d:8b:20:0e:a8:8b:3c: 0f:ec:73:6b:41:54:00:d7:ed:3a:73:e0:e2:dd:0b:a9:04:7b: 24:64:e4:69:d1:fd:e5:6b:1f:8e:5a:f6:61:ed:73:6b:a1:7b: 41:b0:7f:ae -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1NDg0MDVCMTRCQkNF NzU0QUZGMTA3QTg3REE5M0NCNUE3NDQxMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7bej9iYuGYbZe9Ip/3v+QfgA8HZ+d8cyhEbyYI9lU2nW+18Bp B2O9RLdzoUfgptlmwd43tSBtoxwOvO1jXVbbzVfdC6mgHq/vMMIo3wlCvZAH8w6x nqkoSgSxGDEsTsmZj7ZvHu75NOwEgdqMsJ75Vwv87tXWRjeecybAxZ99lrOUvnVq cY96LCQuG4plNNaKJwPmrxBzaJN9Kr4z6y3KVXBd6Fl/N+pe/Wl6zhcdGOjBmgnM WIrnlryDJ+Lhtqio7XAnLVSybBHr3OyObu2j8bqJNrSnhpGfrnHyGD0/+uDYeA9T aegJDC2QmpZIUQTLXtThJS/naV+WtJSNOR4HAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU9UhAWxS7znVK/xB6h9qTy1p0QQIwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVULzlVaEFXeFM3em5WS194QjZo OXFUeTFwMFFRSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVx FaAwDQYJKoZIhvcNAQELBQADggEBAGyIo+GBYeG1JGGIciWQGgpdKTjuOFfkF0po E7vImGJK45+57IiHCZ0pqAqfKbBsBLnHQ/+r6fcvdBdFvdDUMSxlkjiDlfy7Z9iU hTFjMRb7XR2zlw1AM19XHuTfRNGyWc2DL1Ow09Q9C11BHXS1yTUvkXDL86TPPXnn xC78UjnRXGn2Vt/R6l3vR0OKMZsY96pCKyxXXxJ9yrwx8stvj8F6VR5dGG8owaqp XN/PHnR73FBc1HyU82dvlDJy96lfSwFRCUuMt/pbMR01KQ1a7Db+LYsgDqiLPA/s c2tBVADX7Tpz4OLdC6kEeyRk5GnR/eVrH45a9mHtc2uhe0Gwf64= -----END CERTIFICATE-----Generated at Sat Sep 28 12:03:22 2024 by rpki-client on console-fra.rpki-client.org