$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/yPlkF-0YRRmjv4y76S8gjsqzKyI.roa File: yPlkF-0YRRmjv4y76S8gjsqzKyI.roa (raw, json) Hash identifier: zpH/cLSpZnYPn/inSnoSLg69/1NdWygqf3pb/jeyki8= Subject key identifier: C8:F9:64:17:ED:18:45:19:A3:BF:8C:BB:E9:2F:20:8E:CA:B3:2B:22 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0CFB Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/yPlkF-0YRRmjv4y76S8gjsqzKyI.roa Signing time: Mon 26 Aug 2024 05:12:54 +0000 ROA not before: Mon 26 Aug 2024 05:12:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9244 IP address blocks: 210.67.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Aug 26 05:12:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C8F96417ED184519A3BF8CBBE92F208ECAB32B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:86:f5:02:30:28:95:9d:49:d3:48:af:6c:35: da:a7:59:de:9c:69:e2:9e:92:5e:f6:03:4f:fa:70: de:7b:41:bd:ab:d9:72:7d:39:96:98:d9:3a:ec:53: d7:df:73:99:1a:e8:c0:19:1e:1e:be:fd:74:75:64: 33:b9:6e:b0:78:bb:fa:43:1a:16:72:66:57:8b:6b: 54:f5:11:83:dc:cd:f2:68:88:45:9e:ff:9e:dd:6f: 71:2a:35:19:99:74:54:f3:4d:09:43:47:74:50:c8: 74:66:b4:23:70:10:54:bf:c6:bd:0d:c9:38:01:6e: 28:cb:fc:4c:13:de:5d:e3:18:90:c6:13:de:f9:73: 16:d0:66:61:78:4e:11:70:78:dc:c0:fa:60:52:9c: 65:81:5c:34:3c:05:bc:b4:77:8d:df:1f:fe:d2:ad: 04:d4:3e:74:f0:3f:a0:bc:02:03:4e:7a:52:80:5b: d1:52:49:26:a9:2e:07:73:de:d0:44:4e:38:db:2c: 43:69:9a:70:9f:55:15:72:97:25:78:b3:92:78:6a: 26:8b:b5:fa:1a:0f:3e:60:7b:08:72:da:fb:58:2c: 73:f9:6d:33:61:cc:4b:f2:7b:fb:76:2f:36:f3:36: 7d:f1:16:3f:ca:a9:97:bd:0a:46:12:86:8e:b2:28: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F9:64:17:ED:18:45:19:A3:BF:8C:BB:E9:2F:20:8E:CA:B3:2B:22 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/yPlkF-0YRRmjv4y76S8gjsqzKyI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.96.0/20 Signature Algorithm: sha256WithRSAEncryption 8c:37:21:e0:eb:f0:f5:06:74:ca:d9:a1:ab:3e:42:7a:47:d8: 2c:d5:5c:26:24:18:3e:67:6a:8f:b4:45:69:a2:82:58:17:f7: 27:df:e4:46:2b:ca:98:fa:56:32:05:65:31:05:64:89:69:7a: c8:4d:17:19:f4:6a:00:26:e2:fa:94:08:52:06:82:a2:d1:38: 3c:44:55:b9:7d:12:9f:6d:04:25:73:60:1e:12:1d:94:8a:62: 78:cd:08:60:b7:68:bd:a1:dd:ad:f2:14:29:4f:54:31:09:51: 9f:37:54:02:7a:b4:ec:a6:e4:fd:dc:23:a2:ec:b1:73:a6:e9: 0d:9f:a5:33:94:1b:b3:cb:6f:b4:93:e6:a9:7a:5b:ef:f7:fb: 7f:90:5f:41:a8:dd:51:1c:03:0b:8d:c4:d7:0c:df:79:a4:4f: 9b:74:22:5f:d4:f1:70:b8:56:c0:4f:8f:92:e8:49:e5:c7:3c: 15:27:51:6c:b8:58:e6:0d:a4:cb:3e:27:6b:23:59:f6:e0:62: 85:23:cb:08:a6:a7:21:dc:71:c6:e4:a5:77:be:2e:51:68:70: dd:7b:a2:63:d9:f2:db:bb:37:b9:a0:ea:8e:ff:8f:09:47:06: dc:30:e4:2a:2b:ea:af:34:1a:b5:97:92:51:db:eb:53:33:4c: 30:49:af:51 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yNDA4MjYw NTEyNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4Rjk2NDE3RUQxODQ1 MTlBM0JGOENCQkU5MkYyMDhFQ0FCMzJCMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDthvUCMCiVnUnTSK9sNdqnWd6caeKekl72A0/6cN57Qb2r2XJ9 OZaY2TrsU9ffc5ka6MAZHh6+/XR1ZDO5brB4u/pDGhZyZleLa1T1EYPczfJoiEWe /57db3EqNRmZdFTzTQlDR3RQyHRmtCNwEFS/xr0NyTgBbijL/EwT3l3jGJDGE975 cxbQZmF4ThFweNzA+mBSnGWBXDQ8Bby0d43fH/7SrQTUPnTwP6C8AgNOelKAW9FS SSapLgdz3tBETjjbLENpmnCfVRVylyV4s5J4aiaLtfoaDz5gewhy2vtYLHP5bTNh zEvye/t2LzbzNn3xFj/KqZe9CkYSho6yKN5fAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUyPlkF+0YRRmjv4y76S8gjsqzKyIwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL3lQbGtGLTBZUlJtanY0eTc2 UzhnanNxekt5SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATS Q2AwDQYJKoZIhvcNAQELBQADggEBAIw3IeDr8PUGdMrZoas+QnpH2CzVXCYkGD5n ao+0RWmiglgX9yff5EYrypj6VjIFZTEFZIlpeshNFxn0agAm4vqUCFIGgqLRODxE Vbl9Ep9tBCVzYB4SHZSKYnjNCGC3aL2h3a3yFClPVDEJUZ83VAJ6tOym5P3cI6Ls sXOm6Q2fpTOUG7PLb7ST5ql6W+/3+3+QX0Go3VEcAwuNxNcM33mkT5t0Il/U8XC4 VsBPj5LoSeXHPBUnUWy4WOYNpMs+J2sjWfbgYoUjywimpyHcccbkpXe+LlFocN17 omPZ8tu7N7mg6o7/jwlHBtww5Cor6q80GrWXklHb61MzTDBJr1E= -----END CERTIFICATE-----Generated at Sat Sep 28 14:43:46 2024 by rpki-client on console-ams.rpki-client.org