$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/dbZvlVAcTZQkhg6ZLTecopWveJA.roa File: dbZvlVAcTZQkhg6ZLTecopWveJA.roa (raw, json) Hash identifier: X+Ekl1LMySwE9GC6Q4lfYBU3taJffhsmZraMnTJbKXs= Subject key identifier: 75:B6:6F:95:50:1C:4D:94:24:86:0E:99:2D:37:9C:A2:95:AF:78:90 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0CEA Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/dbZvlVAcTZQkhg6ZLTecopWveJA.roa Signing time: Mon 26 Aug 2024 05:12:49 +0000 ROA not before: Mon 26 Aug 2024 05:12:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.247.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3306 (0xcea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=75B66F95501C4D9424860E992D379CA295AF7890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:7e:aa:4f:8a:d7:00:9f:dd:51:28:94:e3: ab:c5:f5:1e:71:66:ff:d7:cd:53:21:79:85:c0:3a: a1:13:c9:ea:5d:a0:2c:93:47:69:35:8f:da:01:26: 7f:9f:a6:4d:63:51:4f:dc:32:16:32:0c:87:ee:12: 26:ce:3d:81:7f:7d:0f:1a:5f:49:44:cc:b0:ee:c1: 39:1a:dd:7f:5a:ea:ba:12:98:6c:ef:c7:b8:ed:23: e3:66:9e:e8:81:d8:b9:1d:17:cf:44:dc:dd:7b:4c: 93:43:9f:83:2a:67:fc:b8:74:7d:d8:ce:0a:6b:9b: e4:3f:51:c4:1c:cd:43:23:91:ee:12:c2:43:aa:42: a2:66:04:e0:67:d4:34:ac:68:57:4f:ea:27:3e:3c: 9b:d5:ca:20:a1:26:20:9a:88:a0:a8:18:e9:7f:06: ed:c6:12:55:70:68:3a:8f:15:cb:d8:ce:98:71:aa: ea:ec:e5:cd:c8:e1:6d:69:48:3d:5c:9e:ae:09:98: 19:68:c3:72:0c:4d:c5:31:e7:5a:7a:31:6f:b4:62: 18:e5:22:34:a9:9f:a4:cb:e1:a8:f5:2e:03:7f:63: aa:27:dd:c3:fb:05:f2:88:c8:8e:47:3d:0d:c2:24: 75:83:3b:36:53:c3:fc:6c:96:7c:7e:ca:3c:df:1f: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B6:6F:95:50:1C:4D:94:24:86:0E:99:2D:37:9C:A2:95:AF:78:90 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/dbZvlVAcTZQkhg6ZLTecopWveJA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.247.160.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:5a:38:b8:78:04:29:c2:33:06:17:05:45:98:f6:80:88:49: d2:41:6c:9b:1a:b1:20:90:c8:86:c1:e1:35:96:d8:1f:87:81: ac:3d:c0:91:81:24:da:33:40:e3:b8:0a:b8:59:d2:65:54:9c: e0:89:db:2c:ca:dd:0b:ca:5b:4a:67:e8:5c:28:77:ae:40:06: f2:7f:3c:8b:03:7a:c9:f8:37:3a:60:92:cf:ca:5a:22:f1:66: 4e:e5:58:bb:1e:0c:b6:23:aa:96:b9:6c:22:57:07:e0:97:7e: 2b:75:a6:8c:d6:28:97:eb:f2:37:90:05:9c:29:bb:8e:be:9d: 87:0c:e8:f3:92:c0:be:78:9e:5c:a2:cd:24:3a:82:4e:6f:f2: d5:86:14:1d:84:a9:fd:76:42:ee:84:56:79:36:09:27:19:80: e9:fd:7b:1c:7d:c2:e7:23:db:2c:76:b6:3f:1f:78:f7:ed:7b: 4c:b6:8a:2d:f9:79:73:90:0a:7c:bf:65:47:17:83:82:9c:ad: ff:11:11:1e:8e:52:d0:af:3a:2c:42:e3:f0:ea:78:47:23:ac: 7b:41:84:02:18:b4:5c:e0:be:59:3b:13:04:6a:cd:a4:7a:43: 18:f7:4a:43:b0:ab:0f:2d:4d:3e:a1:94:a0:ea:3a:d6:dd:c5: 0f:a1:af:bc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDOowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1QjY2Rjk1NTAxQzRE OTQyNDg2MEU5OTJEMzc5Q0EyOTVBRjc4OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu7n6qT4rXAJ/dUSiU46vF9R5xZv/XzVMheYXAOqETyepdoCyT R2k1j9oBJn+fpk1jUU/cMhYyDIfuEibOPYF/fQ8aX0lEzLDuwTka3X9a6roSmGzv x7jtI+NmnuiB2LkdF89E3N17TJNDn4MqZ/y4dH3Yzgprm+Q/UcQczUMjke4SwkOq QqJmBOBn1DSsaFdP6ic+PJvVyiChJiCaiKCoGOl/Bu3GElVwaDqPFcvYzphxqurs 5c3I4W1pSD1cnq4JmBlow3IMTcUx51p6MW+0YhjlIjSpn6TL4aj1LgN/Y6on3cP7 BfKIyI5HPQ3CJHWDOzZTw/xslnx+yjzfH7jtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUdbZvlVAcTZQkhg6ZLTecopWveJAwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL2RiWnZsVkFjVFpRa2hnNlpM VGVjb3BXdmVKQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 96AwDQYJKoZIhvcNAQELBQADggEBAG9aOLh4BCnCMwYXBUWY9oCISdJBbJsasSCQ yIbB4TWW2B+Hgaw9wJGBJNozQOO4CrhZ0mVUnOCJ2yzK3QvKW0pn6Fwod65ABvJ/ PIsDesn4Nzpgks/KWiLxZk7lWLseDLYjqpa5bCJXB+CXfit1pozWKJfr8jeQBZwp u46+nYcM6POSwL54nlyizSQ6gk5v8tWGFB2Eqf12Qu6EVnk2CScZgOn9exx9wucj 2yx2tj8fePfte0y2ii35eXOQCny/ZUcXg4Kcrf8RER6OUtCvOixC4/DqeEcjrHtB hAIYtFzgvlk7EwRqzaR6Qxj3SkOwqw8tTT6hlKDqOtbdxQ+hr7w= -----END CERTIFICATE-----Generated at Sat Sep 28 12:03:22 2024 by rpki-client on console-fra.rpki-client.org