$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/owK_ERARsY9GIW5dk32Zp23qPvA.roa File: owK_ERARsY9GIW5dk32Zp23qPvA.roa (raw, json) Hash identifier: d+rex+/GUvHrwVXCbYnjLrw+gb3qfTUXNdDaBN85N6M= Subject key identifier: A3:02:BF:11:10:11:B1:8F:46:21:6E:5D:93:7D:99:A7:6D:EA:3E:F0 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0CE7 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/owK_ERARsY9GIW5dk32Zp23qPvA.roa Signing time: Mon 26 Aug 2024 05:12:49 +0000 ROA not before: Mon 26 Aug 2024 05:12:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 113.21.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A302BF111011B18F46216E5D937D99A76DEA3EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:02:d5:85:af:8c:84:c0:5a:b4:fa:7c:70: 1e:4f:5e:54:c4:e5:68:d7:dc:a9:a9:40:f0:1f:4f: 16:1c:df:27:4c:eb:a7:4e:12:1f:dc:35:1d:99:c6: bc:89:f8:55:81:d5:92:3f:62:1d:20:07:7c:18:cd: 25:6c:be:e2:8d:43:af:ec:43:c0:83:07:09:ea:04: 39:47:b3:62:f4:81:59:1c:3d:c4:8d:85:1c:d3:7a: 2b:a9:2a:8e:00:84:3b:fb:3b:74:8a:c7:53:31:da: 2b:4b:92:ef:c4:11:6a:4c:62:c2:3a:bb:25:42:3f: 10:79:f1:57:2b:19:1e:6d:17:85:bb:51:1d:c7:19: 9b:fd:26:f1:bf:7b:eb:5a:68:24:6b:7f:1f:8d:49: b4:a4:2f:19:c7:25:1c:9f:e2:56:a8:5c:7b:d0:d8: 18:48:34:49:66:21:05:33:8c:9e:64:3c:6d:7e:42: 92:35:1c:c4:f7:93:b3:5d:78:8b:eb:8b:e7:d9:6e: 7b:a8:8a:72:84:ef:cf:64:7c:4b:d6:2d:98:e1:d2: 00:30:06:fd:10:c6:6e:ca:bb:f1:69:32:13:70:82: 0f:8d:4b:1a:21:3b:b6:99:5f:a5:c7:0f:bd:5a:41: ee:0a:ac:35:77:63:b1:f4:8d:76:c5:02:3b:97:fc: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:02:BF:11:10:11:B1:8F:46:21:6E:5D:93:7D:99:A7:6D:EA:3E:F0 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/owK_ERARsY9GIW5dk32Zp23qPvA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.160.0/20 Signature Algorithm: sha256WithRSAEncryption 19:c9:57:98:22:0f:92:39:1e:77:20:f6:b9:d8:de:29:a9:83: bb:9d:c0:f0:48:3a:b9:02:2e:ee:44:df:8e:83:c8:12:58:e6: 16:32:51:22:34:ee:ac:33:b5:c6:5f:0c:a7:c1:de:63:11:51: 7d:f6:a3:3f:e6:d3:4d:6a:27:c8:a5:e8:31:25:35:0f:a2:a9: 43:44:c8:1d:24:56:0c:3f:08:50:5d:bf:12:64:19:d6:22:02: 3c:ae:34:d3:ea:01:a2:01:6d:ec:12:c6:ff:7a:4b:ad:63:61: 40:b4:1d:88:9d:19:ef:07:65:cc:40:2f:1e:4c:9e:68:e0:58: ab:6d:28:f3:ee:a1:45:d2:41:49:05:49:0a:6a:72:05:c1:2f: ff:dd:00:09:58:9f:6e:fc:bd:e8:3a:6a:2c:e8:8a:87:c0:9d: c8:3a:47:54:b9:61:32:ee:01:84:b9:13:5f:f6:f4:da:9c:ab: ae:12:02:95:d6:4e:ef:31:df:d0:bf:2c:85:40:1a:c4:43:ff: ae:21:1a:32:70:28:06:4b:96:8c:7e:de:39:23:33:10:12:28: 5f:44:51:48:82:99:79:16:7b:ae:cc:a5:63:bd:46:56:f9:1a: 4d:f6:23:07:03:2b:90:b0:d9:93:4c:42:6f:99:4e:93:c3:b1: 8b:4e:5d:fc -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEzMDJCRjExMTAxMUIx OEY0NjIxNkU1RDkzN0Q5OUE3NkRFQTNFRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPSwLVha+MhMBatPp8cB5PXlTE5WjX3KmpQPAfTxYc3ydM66dO Eh/cNR2ZxryJ+FWB1ZI/Yh0gB3wYzSVsvuKNQ6/sQ8CDBwnqBDlHs2L0gVkcPcSN hRzTeiupKo4AhDv7O3SKx1Mx2itLku/EEWpMYsI6uyVCPxB58VcrGR5tF4W7UR3H GZv9JvG/e+taaCRrfx+NSbSkLxnHJRyf4laoXHvQ2BhINElmIQUzjJ5kPG1+QpI1 HMT3k7NdeIvri+fZbnuoinKE789kfEvWLZjh0gAwBv0Qxm7Ku/FpMhNwgg+NSxoh O7aZX6XHD71aQe4KrDV3Y7H0jXbFAjuX/FxbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUowK/ERARsY9GIW5dk32Zp23qPvAwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL293S19FUkFSc1k5R0lXNWRr MzJacDIzcVB2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARx FaAwDQYJKoZIhvcNAQELBQADggEBABnJV5giD5I5Hncg9rnY3impg7udwPBIOrkC Lu5E346DyBJY5hYyUSI07qwztcZfDKfB3mMRUX32oz/m001qJ8il6DElNQ+iqUNE yB0kVgw/CFBdvxJkGdYiAjyuNNPqAaIBbewSxv96S61jYUC0HYidGe8HZcxALx5M nmjgWKttKPPuoUXSQUkFSQpqcgXBL//dAAlYn278veg6aizoiofAncg6R1S5YTLu AYS5E1/29Nqcq64SApXWTu8x39C/LIVAGsRD/64hGjJwKAZLlox+3jkjMxASKF9E UUiCmXkWe67MpWO9Rlb5Gk32IwcDK5Cw2ZNMQm+ZTpPDsYtOXfw= -----END CERTIFICATE-----Generated at Sat Sep 28 14:43:46 2024 by rpki-client on console-ams.rpki-client.org