$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa File: XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa (raw, json) Hash identifier: T1WkXZpAz++n0GQMQJubo7c+BWlBVZ+Yw4o4ExSot4A= Subject key identifier: 5D:1C:16:ED:CD:CA:60:C2:DD:D2:94:DB:77:56:3A:22:F1:DF:E0:21 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0CF3 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa Signing time: Mon 26 Aug 2024 05:12:53 +0000 ROA not before: Mon 26 Aug 2024 05:12:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.56.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5D1C16EDCDCA60C2DDD294DB77563A22F1DFE021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:50:58:31:c9:a0:ee:4d:40:90:83:aa:23: 0e:04:a4:5a:b4:66:81:be:2e:be:5e:9e:f8:54:3e: 05:96:98:6d:32:84:8b:09:ad:dc:39:cb:21:c2:bb: e5:aa:21:6a:f3:4a:df:1a:44:e0:ea:72:7e:e1:17: b0:4b:76:3f:7d:64:72:cd:77:77:ed:ff:c8:d3:89: f4:6a:ec:95:26:84:38:44:24:20:e8:5e:1e:dc:20: 3f:cb:5b:b1:b6:3e:0c:27:c2:85:81:74:3e:0b:a4: a2:3f:49:e5:87:ce:98:7e:2c:49:ff:23:ac:18:91: 41:b6:dd:30:74:07:82:f6:d7:4b:b9:d9:98:d7:6b: 6f:9c:8f:5a:44:0f:95:a2:94:6d:8e:3f:58:b3:06: d4:25:ae:60:d6:15:5b:86:6c:d0:0f:1a:0b:b9:7f: 00:e0:73:f8:e2:dc:a0:ec:28:5d:9d:7e:22:5e:4a: ec:b2:23:95:b5:84:6f:3d:f4:ae:37:86:ff:98:c2: 5b:af:64:79:3b:54:0d:26:5c:a4:dc:44:e5:76:a8: 30:ed:40:52:40:a4:9c:cc:2f:53:fd:a8:5d:69:08: b2:51:4e:f4:de:47:b2:10:3d:6c:3d:79:84:14:ba: cc:d4:43:6a:c1:b6:d1:7e:33:87:37:7e:6d:f2:2c: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1C:16:ED:CD:CA:60:C2:DD:D2:94:DB:77:56:3A:22:F1:DF:E0:21 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XRwW7c3KYMLd0pTbd1Y6IvHf4CE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.80.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:99:ab:d5:1e:86:e2:76:71:d4:a0:bb:d2:a9:0a:01:13:4d: aa:70:0b:05:71:3c:66:78:07:8f:27:cd:41:a6:29:b6:6c:60: 74:97:a9:8f:c3:d7:61:81:19:e3:c0:1f:6a:1f:09:94:8f:49: b6:b7:6e:88:12:b6:4d:f5:98:ea:c6:c1:eb:24:a2:a0:7f:ce: 7d:af:b5:45:27:31:02:1f:83:25:a4:fa:00:d3:70:82:30:79: 9c:29:ea:1d:89:4a:a1:3b:c3:58:e3:ab:be:e2:8d:58:24:1c: fb:8e:50:87:6b:e2:44:a8:32:e6:e4:c2:e3:1c:f4:a4:3c:a4: 27:ef:b2:c6:39:30:2f:cc:4f:f7:bc:10:36:85:fe:c1:26:d5: f3:60:a7:f8:10:0e:5a:e6:fe:38:3e:52:88:d7:e2:c4:9a:e4: 25:3e:6c:c6:5f:a2:63:cd:df:28:96:2b:86:5b:46:74:e9:95: 50:1f:16:44:a1:0a:db:7c:28:d7:f2:a8:5b:f6:39:8c:2c:c8: bb:3a:f8:12:d9:62:2c:f1:68:c2:4e:54:6a:7d:ce:20:c0:f9: 01:43:1f:d8:dc:7c:b3:e8:d7:b8:96:39:2d:f5:b0:66:d2:82: 61:cb:d3:b4:05:39:6a:65:bf:5f:26:cc:cc:09:d1:62:19:01: 2c:55:34:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVEMUMxNkVEQ0RDQTYw QzJEREQyOTREQjc3NTYzQTIyRjFERkUwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG2FBYMcmg7k1AkIOqIw4EpFq0ZoG+Lr5envhUPgWWmG0yhIsJ rdw5yyHCu+WqIWrzSt8aRODqcn7hF7BLdj99ZHLNd3ft/8jTifRq7JUmhDhEJCDo Xh7cID/LW7G2PgwnwoWBdD4LpKI/SeWHzph+LEn/I6wYkUG23TB0B4L210u52ZjX a2+cj1pED5WilG2OP1izBtQlrmDWFVuGbNAPGgu5fwDgc/ji3KDsKF2dfiJeSuyy I5W1hG899K43hv+YwluvZHk7VA0mXKTcROV2qDDtQFJApJzML1P9qF1pCLJRTvTe R7IQPWw9eYQUuszUQ2rBttF+M4c3fm3yLPDrAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUXRwW7c3KYMLd0pTbd1Y6IvHf4CEwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1hSd1c3YzNLWU1MZDBwVGJk MVk2SXZIZjRDRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9 OFAwDQYJKoZIhvcNAQELBQADggEBAIuZq9UehuJ2cdSgu9KpCgETTapwCwVxPGZ4 B48nzUGmKbZsYHSXqY/D12GBGePAH2ofCZSPSba3bogStk31mOrGweskoqB/zn2v tUUnMQIfgyWk+gDTcIIweZwp6h2JSqE7w1jjq77ijVgkHPuOUIdr4kSoMubkwuMc 9KQ8pCfvssY5MC/MT/e8EDaF/sEm1fNgp/gQDlrm/jg+UojX4sSa5CU+bMZfomPN 3yiWK4ZbRnTplVAfFkShCtt8KNfyqFv2OYwsyLs6+BLZYizxaMJOVGp9ziDA+QFD H9jcfLPo17iWOS31sGbSgmHL07QFOWplv18mzMwJ0WIZASxVNAE= -----END CERTIFICATE-----Generated at Sat Sep 28 12:03:22 2024 by rpki-client on console-fra.rpki-client.org