$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa File: Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa (raw, json) Hash identifier: ly0FzqUP/2SojsxYs9ZksvgqdVuY6HNQsl80dB+ML6E= Subject key identifier: 32:9B:9C:D4:1E:AC:5F:31:61:F8:3F:DC:47:89:D5:9F:3D:32:38:05 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0CF9 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa Signing time: Mon 26 Aug 2024 05:12:54 +0000 ROA not before: Mon 26 Aug 2024 05:12:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.56.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=329B9CD41EAC5F3161F83FDC4789D59F3D323805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:14:73:b1:95:b4:7b:92:f8:f7:ae:07:80: 77:9a:04:2e:1b:63:9c:85:17:a5:ed:01:8c:34:55: 1b:07:f5:98:8d:36:e8:31:e2:23:55:9a:47:c9:cf: 90:ec:99:f0:e5:41:17:97:70:57:3a:ae:b9:6c:24: de:b4:93:8a:8b:00:34:f4:db:8d:c2:5f:a6:aa:e2: e6:82:30:eb:e8:90:5a:e6:33:71:05:db:d3:31:43: a9:07:63:be:2f:ae:33:3a:50:5c:27:1b:f3:f2:20: 07:5f:84:b9:8f:52:71:34:01:ce:4c:88:4c:16:8a: cc:7c:c8:97:91:3b:b2:d1:fb:bc:6d:3a:00:bb:e1: 00:b7:d4:10:d4:be:71:9c:27:bc:85:2f:bb:6f:34: f8:b7:b8:78:fa:25:27:12:0e:e4:81:71:44:5c:21: 7b:05:dd:9f:0f:c8:d2:de:a8:e0:4e:d5:6d:30:cf: 90:8e:74:96:d4:ce:26:1f:bf:bc:9e:b8:e8:a8:9e: 8d:c6:00:eb:f2:59:a0:b1:36:3d:87:8a:1f:b0:e4: d0:e9:b1:45:44:a4:77:4a:e5:df:30:2f:12:4b:07: 22:e3:ca:74:16:7b:6b:ed:a9:6e:a7:ce:d1:8f:a4: 79:8e:ea:4a:e6:b6:bb:c8:9c:41:82:14:a5:5a:dc: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:9C:D4:1E:AC:5F:31:61:F8:3F:DC:47:89:D5:9F:3D:32:38:05 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/Mpuc1B6sXzFh-D_cR4nVnz0yOAU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.64.0/20 Signature Algorithm: sha256WithRSAEncryption a9:e0:90:ea:68:c1:7f:8a:66:5e:05:05:9d:90:e2:a1:5f:ed: bb:c3:62:a8:c8:97:f5:2a:da:50:ee:3c:af:f0:ba:32:0b:49: db:66:29:06:bf:24:69:6c:12:78:80:1a:df:f9:fe:4c:84:c1: 5a:90:48:40:7b:e9:5e:5e:00:bf:0e:a8:94:91:ac:ce:ba:18: 65:ec:f3:25:1a:2f:15:cb:67:60:cf:bf:23:6e:58:06:86:7e: a5:bd:51:fb:b0:7d:7f:84:ac:e3:a0:2e:68:43:07:a5:c6:6f: a1:1f:99:de:92:90:03:ae:cd:e1:5c:7b:78:4e:1c:ee:8b:c3: c3:94:56:8d:26:32:54:ec:e8:d3:1b:53:22:b7:2f:6b:4e:aa: 47:1e:06:3d:42:22:02:f8:e3:63:33:ae:6a:bb:f9:06:e4:3a: fb:3e:5b:b6:f4:10:22:96:af:68:fe:53:62:2c:a6:dc:98:99: c1:63:28:5a:c4:6c:a6:df:a9:12:f9:0f:08:bf:04:64:88:ff: 49:eb:d2:5a:49:e7:3a:15:c9:ad:41:15:ad:95:bf:c5:1a:00: 86:02:9c:e2:c1:be:75:d0:3a:f9:58:f4:73:c1:14:90:52:fb: cc:df:65:4d:dc:87:71:06:69:79:4b:af:f0:a2:b6:c9:c6:08: b6:a5:c5:0f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyOUI5Q0Q0MUVBQzVG MzE2MUY4M0ZEQzQ3ODlENTlGM0QzMjM4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+sxRzsZW0e5L4964HgHeaBC4bY5yFF6XtAYw0VRsH9ZiNNugx 4iNVmkfJz5DsmfDlQReXcFc6rrlsJN60k4qLADT0243CX6aq4uaCMOvokFrmM3EF 29MxQ6kHY74vrjM6UFwnG/PyIAdfhLmPUnE0Ac5MiEwWisx8yJeRO7LR+7xtOgC7 4QC31BDUvnGcJ7yFL7tvNPi3uHj6JScSDuSBcURcIXsF3Z8PyNLeqOBO1W0wz5CO dJbUziYfv7yeuOiono3GAOvyWaCxNj2Hih+w5NDpsUVEpHdK5d8wLxJLByLjynQW e2vtqW6nztGPpHmO6krmtrvInEGCFKVa3E4RAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUMpuc1B6sXzFh+D/cR4nVnz0yOAUwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL01wdWMxQjZzWHpGaC1EX2NS NG5WbnoweU9BVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 OEAwDQYJKoZIhvcNAQELBQADggEBAKngkOpowX+KZl4FBZ2Q4qFf7bvDYqjIl/Uq 2lDuPK/wujILSdtmKQa/JGlsEniAGt/5/kyEwVqQSEB76V5eAL8OqJSRrM66GGXs 8yUaLxXLZ2DPvyNuWAaGfqW9UfuwfX+ErOOgLmhDB6XGb6Efmd6SkAOuzeFce3hO HO6Lw8OUVo0mMlTs6NMbUyK3L2tOqkceBj1CIgL442Mzrmq7+QbkOvs+W7b0ECKW r2j+U2IsptyYmcFjKFrEbKbfqRL5Dwi/BGSI/0nr0lpJ5zoVya1BFa2Vv8UaAIYC nOLBvnXQOvlY9HPBFJBS+8zfZU3ch3EGaXlLr/CitsnGCLalxQ8= -----END CERTIFICATE-----Generated at Sat Sep 28 14:43:46 2024 by rpki-client on console-ams.rpki-client.org