$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/toVoKjhealIXQFnrd8e0iH5m16Q.roa File: toVoKjhealIXQFnrd8e0iH5m16Q.roa (raw, json) Hash identifier: ZR+LApjKyIw+KHjioLZA6POVkjZEPKskn576Nlp/VvY= Subject key identifier: B6:85:68:2A:38:5E:6A:52:17:40:59:EB:77:C7:B4:88:7E:66:D7:A4 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0D00 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/toVoKjhealIXQFnrd8e0iH5m16Q.roa Signing time: Mon 26 Aug 2024 05:12:56 +0000 ROA not before: Mon 26 Aug 2024 05:12:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 113.21.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B685682A385E6A52174059EB77C7B4887E66D7A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fb:de:d7:40:18:20:92:a8:17:fa:19:40:29: 70:07:35:5c:b1:5b:24:a9:d2:51:6b:95:b7:37:13: e5:4b:e4:85:96:1a:97:39:bf:5c:3b:f0:97:2b:37: 59:4c:89:dd:cd:65:6c:9e:57:8b:b1:7b:74:f5:0d: bc:a4:d6:55:eb:5d:8c:6f:2a:30:e6:f2:e1:46:a3: d0:ae:a8:f6:8e:b1:59:11:de:50:59:d3:38:3b:47: 7b:b7:40:5c:2d:1a:38:ae:40:b7:d4:da:2d:68:90: 90:da:4c:ac:a6:fd:d1:7f:b6:aa:13:b9:0c:c0:5b: 4f:5c:72:7f:6d:48:5d:6f:4a:f9:72:c4:a4:02:b5: 9f:e2:4d:4e:27:e0:2f:24:e5:52:3a:19:67:36:65: 30:8e:e2:93:90:c7:fd:00:49:b2:15:27:e3:81:ac: 81:db:39:f3:1e:71:06:ab:21:5f:98:72:44:6f:78: 2a:96:d1:40:e5:d4:46:fc:e8:97:fe:45:f5:3e:10: 52:d6:5f:8d:4b:d0:3f:c4:e1:af:99:77:bf:b5:2a: cc:27:1f:fe:ee:fe:0c:61:0f:a7:44:18:7d:21:57: fa:fc:1f:86:3a:71:0a:d4:3b:30:0d:30:e0:94:69: 36:a6:cf:46:5e:28:06:c3:a5:36:75:54:ea:8c:35: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:85:68:2A:38:5E:6A:52:17:40:59:EB:77:C7:B4:88:7E:66:D7:A4 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/toVoKjhealIXQFnrd8e0iH5m16Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.175.0/24 Signature Algorithm: sha256WithRSAEncryption 83:0a:a4:eb:8b:08:e7:b1:65:01:41:1f:34:ba:79:55:58:05: 70:f0:b5:7a:60:86:77:bd:cd:1e:44:16:7d:f4:9e:7b:a8:12: 0a:18:5c:f6:2e:dc:67:22:cf:de:c8:43:06:e4:bd:43:16:c5: 7c:ec:6f:a1:bf:1b:d3:0c:b6:d1:7d:dd:28:39:55:53:e0:84: cc:ba:8e:84:1e:47:0a:af:41:0f:87:de:18:43:8c:82:c4:54: 0e:55:7d:43:fc:20:8f:b9:05:d7:e9:83:fd:4d:ad:21:13:ba: 86:eb:ee:82:40:b1:36:5d:8c:3f:3e:e8:3a:99:51:2e:de:3d: 72:4c:3c:19:20:49:0d:cf:a4:db:6f:78:3d:77:77:22:ce:4a: 47:52:5b:d0:a4:97:d6:8c:31:86:73:0e:93:ab:ad:7f:eb:05: 47:e0:5b:df:91:b2:6a:74:fb:b0:84:83:9a:ae:94:06:33:eb: f5:95:13:85:b5:76:18:cf:86:b1:96:fb:2d:2e:dd:2b:26:fe: fd:11:48:66:83:79:31:7c:4a:86:dc:f8:ac:45:4f:16:c8:fd: 01:15:84:e3:a0:35:bc:f3:6d:56:7e:08:e4:ab:aa:30:b5:73: 11:b6:86:fa:02:49:4c:73:89:35:26:2b:a7:c5:99:d6:09:7d: 7a:91:30:66 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI2ODU2ODJBMzg1RTZB NTIxNzQwNTlFQjc3QzdCNDg4N0U2NkQ3QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1+97XQBggkqgX+hlAKXAHNVyxWySp0lFrlbc3E+VL5IWWGpc5 v1w78JcrN1lMid3NZWyeV4uxe3T1Dbyk1lXrXYxvKjDm8uFGo9CuqPaOsVkR3lBZ 0zg7R3u3QFwtGjiuQLfU2i1okJDaTKym/dF/tqoTuQzAW09ccn9tSF1vSvlyxKQC tZ/iTU4n4C8k5VI6GWc2ZTCO4pOQx/0ASbIVJ+OBrIHbOfMecQarIV+YckRveCqW 0UDl1Eb86Jf+RfU+EFLWX41L0D/E4a+Zd7+1KswnH/7u/gxhD6dEGH0hV/r8H4Y6 cQrUOzANMOCUaTamz0ZeKAbDpTZ1VOqMNZ6xAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUtoVoKjhealIXQFnrd8e0iH5m16QwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL3RvVm9LamhlYWxJWFFGbnJk OGUwaUg1bTE2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABx Fa8wDQYJKoZIhvcNAQELBQADggEBAIMKpOuLCOexZQFBHzS6eVVYBXDwtXpghne9 zR5EFn30nnuoEgoYXPYu3Gciz97IQwbkvUMWxXzsb6G/G9MMttF93Sg5VVPghMy6 joQeRwqvQQ+H3hhDjILEVA5VfUP8II+5Bdfpg/1NrSETuobr7oJAsTZdjD8+6DqZ US7ePXJMPBkgSQ3PpNtveD13dyLOSkdSW9Ckl9aMMYZzDpOrrX/rBUfgW9+Rsmp0 +7CEg5qulAYz6/WVE4W1dhjPhrGW+y0u3Ssm/v0RSGaDeTF8Sobc+KxFTxbI/QEV hOOgNbzzbVZ+COSrqjC1cxG2hvoCSUxziTUmK6fFmdYJfXqRMGY= -----END CERTIFICATE-----Generated at Sat Sep 28 14:43:46 2024 by rpki-client on console-ams.rpki-client.org