$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa File: Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa (raw, json) Hash identifier: H3GCkmhNiPYdzzyf58fksIj9dRStpbQuuUfachhBlWI= Subject key identifier: 06:2E:54:ED:39:13:CE:68:56:AD:D8:90:D0:89:00:4A:64:EF:A4:CC Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0CFC Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa Signing time: Mon 26 Aug 2024 05:12:55 +0000 ROA not before: Mon 26 Aug 2024 05:12:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.56.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=062E54ED3913CE6856ADD890D089004A64EFA4CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:8a:57:b1:8e:5c:dc:ed:eb:6f:c0:f3:fe: 88:f0:61:15:31:14:4d:a3:c6:56:58:87:dd:b7:4b: cb:d0:56:89:9b:f8:f3:1b:a9:83:56:23:86:5d:09: 18:2d:e7:13:2f:ee:3e:84:ec:e1:77:eb:8c:1c:4a: 35:10:92:a8:f4:6d:4d:5e:73:fe:7f:fd:4b:e8:c1: c3:bf:2f:f6:bb:d5:34:64:33:59:04:79:56:0b:07: 77:42:90:cf:e1:80:76:4b:1c:b7:00:f8:3d:f2:35: 5e:17:1c:79:92:3f:5f:77:f8:a5:97:3a:47:ec:5e: 67:d6:eb:73:90:20:08:e4:6a:db:ec:ac:31:d4:ad: a7:68:81:15:0f:1d:e9:db:a0:7e:d2:9f:3d:93:67: 8e:40:45:85:17:c4:28:3b:cf:da:a6:67:16:95:f2: 55:31:1b:89:f7:bc:cb:0a:e4:10:e4:fb:b8:6b:4f: 81:7d:61:29:f8:3a:98:ad:eb:5e:3b:22:df:02:49: 8f:e4:ea:30:01:6f:54:07:a9:7a:26:b0:59:db:3a: 6b:56:71:69:eb:11:8f:57:b0:f2:30:45:6e:41:c9: fd:cd:83:a5:b8:2f:5c:58:eb:ae:1d:43:a5:69:d6: 55:07:ec:a8:f3:a0:db:06:dd:2b:f3:7b:1d:3e:4c: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2E:54:ED:39:13:CE:68:56:AD:D8:90:D0:89:00:4A:64:EF:A4:CC X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Bi5U7TkTzmhWrdiQ0IkASmTvpMw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.84.0/24 Signature Algorithm: sha256WithRSAEncryption bd:35:1f:6a:ca:14:a4:36:01:c7:5b:bf:c8:1a:8f:7d:29:df: 75:25:43:cf:53:8d:ed:8d:be:a7:98:7c:aa:4f:74:0d:29:7f: 83:87:8e:29:0e:3e:24:a0:f6:21:e8:89:53:8c:80:c7:93:a6: 35:43:b8:bf:d9:2b:ca:e3:6a:14:52:5d:1f:75:35:94:84:fa: bb:c9:d5:7c:89:e6:70:b5:5e:54:c2:03:d8:e9:1a:1c:5a:60: 3d:69:87:4e:a5:fc:50:15:23:d3:f6:b0:83:0f:b0:e4:23:31: af:5e:12:f1:4a:39:b3:b1:46:98:22:9f:96:72:fc:2a:ef:6e: 61:66:67:0f:c0:c0:4f:64:e2:a2:5c:7e:82:7a:5a:46:1a:29: 8c:4b:31:4f:2f:46:d2:c1:80:c2:a2:66:41:2b:a9:6f:b6:bc: 0e:bc:6c:95:be:6f:d0:7f:c5:d6:8d:49:4b:15:0c:3a:ad:7d: b2:86:49:d8:fb:16:b2:01:46:e3:7c:a7:7d:f8:b4:39:55:5d: 6b:41:aa:fa:55:14:2a:55:30:36:e3:99:d3:e4:4d:c8:11:4e: 50:71:c7:f6:15:a5:35:96:fb:89:0c:59:8b:78:90:30:e3:d2: 83:28:38:8e:61:66:2c:35:5b:41:13:c0:d7:c2:f6:d0:97:cc: 45:44:4d:ec -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA2MkU1NEVEMzkxM0NF Njg1NkFERDg5MEQwODkwMDRBNjRFRkE0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGVYpXsY5c3O3rb8Dz/ojwYRUxFE2jxlZYh923S8vQVomb+PMb qYNWI4ZdCRgt5xMv7j6E7OF364wcSjUQkqj0bU1ec/5//UvowcO/L/a71TRkM1kE eVYLB3dCkM/hgHZLHLcA+D3yNV4XHHmSP193+KWXOkfsXmfW63OQIAjkatvsrDHU radogRUPHenboH7Snz2TZ45ARYUXxCg7z9qmZxaV8lUxG4n3vMsK5BDk+7hrT4F9 YSn4Opit6147It8CSY/k6jABb1QHqXomsFnbOmtWcWnrEY9XsPIwRW5Byf3Ng6W4 L1xY664dQ6Vp1lUH7KjzoNsG3Svzex0+TK8FAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUBi5U7TkTzmhWrdiQ0IkASmTvpMwwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL0JpNVU3VGtUem1oV3JkaVEw SWtBU21UdnBNdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 OFQwDQYJKoZIhvcNAQELBQADggEBAL01H2rKFKQ2Acdbv8gaj30p33UlQ89Tje2N vqeYfKpPdA0pf4OHjikOPiSg9iHoiVOMgMeTpjVDuL/ZK8rjahRSXR91NZSE+rvJ 1XyJ5nC1XlTCA9jpGhxaYD1ph06l/FAVI9P2sIMPsOQjMa9eEvFKObOxRpgin5Zy /CrvbmFmZw/AwE9k4qJcfoJ6WkYaKYxLMU8vRtLBgMKiZkErqW+2vA68bJW+b9B/ xdaNSUsVDDqtfbKGSdj7FrIBRuN8p334tDlVXWtBqvpVFCpVMDbjmdPkTcgRTlBx x/YVpTWW+4kMWYt4kDDj0oMoOI5hZiw1W0ETwNfC9tCXzEVETew= -----END CERTIFICATE-----Generated at Sat Sep 28 14:43:46 2024 by rpki-client on console-ams.rpki-client.org