$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/XOx4OQskAXefIDT1vfOMFYAv7OU.roa File: XOx4OQskAXefIDT1vfOMFYAv7OU.roa (raw, json) Hash identifier: vixFihRojDs2aEwI9JskcuM+4XRzL5fERGScHf+l0Ng= Subject key identifier: 5C:EC:78:39:0B:24:01:77:9F:20:34:F5:BD:F3:8C:15:80:2F:EC:E5 Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0CB0 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/XOx4OQskAXefIDT1vfOMFYAv7OU.roa Signing time: Mon 26 Aug 2024 05:19:27 +0000 ROA not before: Mon 26 Aug 2024 05:19:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 61.63.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 26 05:19:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CEC78390B2401779F2034F5BDF38C15802FECE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:d5:1a:b9:d5:66:72:56:1f:fb:3c:8a:1f: 4b:48:b0:d1:a6:79:a8:8f:76:2b:75:46:ed:1a:72: 27:14:c6:e9:76:05:8f:43:33:20:2d:54:4b:96:ff: bc:2e:eb:d1:a2:a3:3a:5f:a5:22:14:98:83:4f:df: eb:d7:ad:5f:11:f7:a1:7b:1c:55:94:37:d5:42:50: 78:ef:8d:f3:79:e0:2c:3a:c8:6c:fe:17:56:81:51: cf:09:4e:37:f2:1d:e7:16:c6:29:e9:69:9b:b4:62: 86:06:9a:71:2b:15:6a:da:d3:b8:5a:6a:78:1a:14: 82:13:47:d9:6d:5f:f2:c0:7e:d6:bd:e8:d4:8c:25: 91:7a:09:b6:af:fb:da:28:a0:97:49:b9:56:c6:ba: c9:3a:90:87:51:84:82:03:2c:7a:8f:40:f0:54:b5: 18:7d:5b:58:59:9b:4c:a1:a1:57:50:89:56:6e:c8: fa:9c:53:67:f7:cb:a4:20:1b:02:c1:2c:d2:d6:8d: af:4b:03:78:96:fb:57:c6:d8:ec:52:43:08:75:a3: e7:54:56:ed:3e:a7:dc:39:df:ce:86:0c:76:a3:8f: 5f:82:3a:b2:f2:b7:f6:24:68:71:7c:ae:44:2c:76: 30:0a:28:d0:38:3c:41:ee:42:07:8e:ce:dc:61:24: 6a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EC:78:39:0B:24:01:77:9F:20:34:F5:BD:F3:8C:15:80:2F:EC:E5 X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/XOx4OQskAXefIDT1vfOMFYAv7OU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.63.87.0/24 Signature Algorithm: sha256WithRSAEncryption 38:69:86:3d:46:49:cc:89:82:99:a7:ea:db:dd:86:cd:36:9d: b0:00:05:20:d8:f0:19:2c:d9:fd:fe:56:76:cd:75:b1:8a:d0: 79:26:f4:4c:ec:6e:1e:c0:1d:44:a3:87:d9:4b:bf:50:b9:20: 8d:00:f5:5a:cd:9f:d6:53:2f:9f:c0:92:00:48:a8:2f:bc:9d: 1f:14:2f:fe:30:5d:9c:19:a6:02:97:73:05:2e:c4:35:9b:17: 64:54:9f:e5:7b:b3:87:0d:af:ca:7e:fa:95:e7:6b:6e:38:e4: c3:29:d3:d5:95:f3:26:e6:30:dd:93:69:b2:5b:6f:fd:5f:1d: 66:7f:a0:ac:ae:35:50:5c:92:23:27:da:ec:d9:a3:a7:dd:9c: 34:2a:07:1b:a4:c9:49:a5:92:8c:9d:9f:17:c0:f3:44:66:38: c0:7f:4a:f7:72:ff:0a:7e:96:1e:aa:ae:25:13:0d:1c:cf:ef: 24:2f:0a:78:45:fb:58:d7:8b:a6:dc:37:8a:38:74:5e:b8:a7: 90:a6:05:cd:3b:e1:d8:47:f9:51:ce:07:54:2c:e9:0c:db:92: 52:f2:47:fb:7b:bc:f0:89:07:97:52:8e:ed:ee:05:7f:0e:6b: a8:2f:7b:d5:84:a6:da:33:d8:c7:1a:23:ff:72:6a:1f:83:c6: d2:be:df:24 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNDA4MjYw NTE5MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDRUM3ODM5MEIyNDAx Nzc5RjIwMzRGNUJERjM4QzE1ODAyRkVDRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD5NUaudVmclYf+zyKH0tIsNGmeaiPdit1Ru0acicUxul2BY9D MyAtVEuW/7wu69GiozpfpSIUmINP3+vXrV8R96F7HFWUN9VCUHjvjfN54Cw6yGz+ F1aBUc8JTjfyHecWxinpaZu0YoYGmnErFWra07haangaFIITR9ltX/LAfta96NSM JZF6Cbav+9oooJdJuVbGusk6kIdRhIIDLHqPQPBUtRh9W1hZm0yhoVdQiVZuyPqc U2f3y6QgGwLBLNLWja9LA3iW+1fG2OxSQwh1o+dUVu0+p9w5386GDHajj1+COrLy t/YkaHF8rkQsdjAKKNA4PEHuQgeOztxhJGp/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXOx4OQskAXefIDT1vfOMFYAv7OUwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL1hPeDRPUXNrQVhlZklEVDF2Zk9NRllB djdPVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9P1cwDQYJ KoZIhvcNAQELBQADggEBADhphj1GScyJgpmn6tvdhs02nbAABSDY8Bks2f3+VnbN dbGK0Hkm9Ezsbh7AHUSjh9lLv1C5II0A9VrNn9ZTL5/AkgBIqC+8nR8UL/4wXZwZ pgKXcwUuxDWbF2RUn+V7s4cNr8p++pXna2445MMp09WV8ybmMN2TabJbb/1fHWZ/ oKyuNVBckiMn2uzZo6fdnDQqBxukyUmlkoydnxfA80RmOMB/Svdy/wp+lh6qriUT DRzP7yQvCnhF+1jXi6bcN4o4dF64p5CmBc074dhH+VHOB1Qs6QzbklLyR/t7vPCJ B5dSju3uBX8Oa6gve9WEptoz2McaI/9yah+DxtK+3yQ= -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:46 2024 by rpki-client on console-fra.rpki-client.org