$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/iKiN4J8IKOUKVUDBPcqhI9XQKhE.roa File: iKiN4J8IKOUKVUDBPcqhI9XQKhE.roa (raw, json) Hash identifier: pVRaL77OpbaHzR2wU63rIKaGEcpvHcUpk6MMqPWAT3k= Subject key identifier: 88:A8:8D:E0:9F:08:28:E5:0A:55:40:C1:3D:CA:A1:23:D5:D0:2A:11 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0CF5 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/iKiN4J8IKOUKVUDBPcqhI9XQKhE.roa Signing time: Mon 26 Aug 2024 05:12:53 +0000 ROA not before: Mon 26 Aug 2024 05:12:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 61.56.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=88A88DE09F0828E50A5540C13DCAA123D5D02A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:56:71:a9:cf:4e:8d:56:63:49:6b:3d:29:51: 5d:76:91:65:a8:e1:a5:12:dc:ea:bd:71:36:12:7b: f0:7f:e7:18:b9:2d:ad:1a:c7:d7:49:1d:0d:43:8f: 49:27:43:74:e9:66:bc:f0:db:6d:aa:ec:b2:26:81: 6a:e8:c9:7f:6d:40:96:bc:97:6b:10:39:da:59:a5: 4d:43:6f:c0:ae:01:53:b1:da:a5:74:74:60:5e:34: ce:87:7c:68:fa:38:f5:64:bb:31:e8:e3:83:ee:f2: b0:ea:fd:5e:a5:21:84:17:ea:ba:79:b3:6d:e8:10: 10:41:96:ac:9e:75:7b:7b:1f:bf:9c:c5:16:cf:98: 43:6c:a6:f3:af:d8:89:6d:14:5b:25:f2:6a:04:36: d3:33:56:63:10:b9:d7:d7:36:bb:80:c4:58:74:00: 7b:84:31:a6:ad:f4:af:ec:73:8f:d4:43:f3:ce:86: f9:a4:b6:ff:e8:99:bd:22:7f:a7:2d:39:2f:4b:5a: 3f:6d:af:97:9a:09:dc:9b:0d:63:27:9e:a0:1a:0d: 70:4e:02:52:cc:b5:ff:d8:f8:41:9a:45:26:d3:69: 3d:eb:72:97:6b:cf:64:5f:03:94:c9:b9:1f:56:91: d7:9f:7d:76:71:c4:61:2b:75:80:0c:da:5b:33:bb: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A8:8D:E0:9F:08:28:E5:0A:55:40:C1:3D:CA:A1:23:D5:D0:2A:11 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/iKiN4J8IKOUKVUDBPcqhI9XQKhE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.67.0/24 Signature Algorithm: sha256WithRSAEncryption 82:b8:15:f3:2f:97:ad:83:76:15:24:84:f8:9d:c3:a3:e0:42: 03:6c:d5:7c:48:89:02:69:e4:26:41:ca:4a:86:ac:bf:e5:da: c6:5d:1d:58:ea:4b:bd:ed:2e:7d:fe:df:83:db:06:00:7f:12: 87:c5:bf:a3:7d:6b:62:e8:05:5d:5a:c2:29:cb:b0:64:6c:71: 8b:70:72:d0:04:46:9c:27:bf:56:89:87:52:f0:f6:38:6a:fb: e6:ad:6d:04:59:fd:ce:8f:29:3b:3c:b3:27:13:c1:1e:f1:ae: 32:69:0b:43:e0:b7:36:a3:4d:0d:0e:51:a1:a3:78:6e:16:fa: 40:1f:dc:67:db:7c:c2:0e:31:a3:da:c1:37:9c:e9:7d:09:21: b3:97:64:bb:00:b5:1c:c6:c4:98:1a:5f:01:a8:46:31:59:c7: 28:ce:cf:5f:94:95:6a:18:a8:05:c2:04:9b:53:a8:87:70:2f: 6a:3a:8a:0a:d6:b4:a6:30:ca:3e:e5:2b:63:a2:7a:58:86:91: 6a:ed:0d:0b:89:c4:3e:86:73:4f:be:9e:f4:ef:50:7d:85:eb: af:82:f4:91:95:52:e3:8c:13:cb:db:38:5d:62:9d:0c:58:70: 0b:92:7d:b1:25:e7:57:30:9f:2a:b4:f9:29:5d:84:75:40:03: 13:5a:7d:64 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4QTg4REUwOUYwODI4 RTUwQTU1NDBDMTNEQ0FBMTIzRDVEMDJBMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfVnGpz06NVmNJaz0pUV12kWWo4aUS3Oq9cTYSe/B/5xi5La0a x9dJHQ1Dj0knQ3TpZrzw222q7LImgWroyX9tQJa8l2sQOdpZpU1Db8CuAVOx2qV0 dGBeNM6HfGj6OPVkuzHo44Pu8rDq/V6lIYQX6rp5s23oEBBBlqyedXt7H7+cxRbP mENspvOv2IltFFsl8moENtMzVmMQudfXNruAxFh0AHuEMaat9K/sc4/UQ/POhvmk tv/omb0if6ctOS9LWj9tr5eaCdybDWMnnqAaDXBOAlLMtf/Y+EGaRSbTaT3rcpdr z2RfA5TJuR9WkdeffXZxxGErdYAM2lszu9xzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUiKiN4J8IKOUKVUDBPcqhI9XQKhEwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL2lLaU40SjhJS09VS1ZVREJQ Y3FoSTlYUUtoRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9 OEMwDQYJKoZIhvcNAQELBQADggEBAIK4FfMvl62DdhUkhPidw6PgQgNs1XxIiQJp 5CZBykqGrL/l2sZdHVjqS73tLn3+34PbBgB/EofFv6N9a2LoBV1awinLsGRscYtw ctAERpwnv1aJh1Lw9jhq++atbQRZ/c6PKTs8sycTwR7xrjJpC0PgtzajTQ0OUaGj eG4W+kAf3GfbfMIOMaPawTec6X0JIbOXZLsAtRzGxJgaXwGoRjFZxyjOz1+UlWoY qAXCBJtTqIdwL2o6igrWtKYwyj7lK2OieliGkWrtDQuJxD6Gc0++nvTvUH2F66+C 9JGVUuOME8vbOF1inQxYcAuSfbEl51cwnyq0+SldhHVAAxNafWQ= -----END CERTIFICATE-----Generated at Sat Sep 28 14:43:46 2024 by rpki-client on console-ams.rpki-client.org