$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/yTsvEEawjeCJLH69A_i0rZzihuU.roa File: yTsvEEawjeCJLH69A_i0rZzihuU.roa (raw, json) Hash identifier: E/oWHLvM0wJgENNSP6pyEj+BLQaUyhNGjFKej5lcjjU= Subject key identifier: C9:3B:2F:10:46:B0:8D:E0:89:2C:7E:BD:03:F8:B4:AD:9C:E2:86:E5 Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0CB6 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/yTsvEEawjeCJLH69A_i0rZzihuU.roa Signing time: Mon 26 Aug 2024 05:19:29 +0000 ROA not before: Mon 26 Aug 2024 05:19:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18042 IP address blocks: 61.63.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 26 05:19:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C93B2F1046B08DE0892C7EBD03F8B4AD9CE286E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:1e:ad:4f:b1:f3:3a:c6:33:40:03:24:20: 3f:02:54:27:d1:55:cd:1b:72:84:8d:12:44:6a:e4: 12:ac:d1:23:8d:43:b0:8e:89:cc:0c:bb:38:2a:86: 60:29:2e:7f:e0:3c:6a:cb:0a:91:88:ae:88:e0:c8: 26:bd:3f:9f:e3:57:bd:40:39:d9:39:37:58:25:09: d6:7c:17:a0:da:07:88:d2:cb:0a:1a:cf:d1:7e:2b: 43:0e:b1:39:80:8e:69:55:ec:c2:a6:ed:b6:51:d7: f4:ab:4d:8d:e2:5f:05:43:31:46:0c:6d:01:21:68: 38:f2:e1:73:45:07:a3:62:b1:f2:70:84:ee:52:a7: be:6f:ad:be:70:26:2d:7f:6c:10:94:49:51:68:a6: 64:41:7e:88:13:f4:6e:6b:b7:d9:54:a6:c5:66:1f: dd:8a:31:c3:6a:17:d5:9c:7a:3f:77:66:77:3a:3e: f3:93:0f:c2:7c:8b:c8:09:3b:cd:22:63:b0:f0:b6: 8d:58:ac:84:60:63:dc:87:58:b8:ef:23:03:48:27: 28:1d:57:63:c3:86:0c:e7:39:64:ad:52:f2:a8:90: ae:71:b4:d3:f0:b4:7b:69:55:e8:0e:33:75:7e:74: c7:7a:47:88:f4:c8:66:a8:6d:8f:31:a5:aa:87:ea: fd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3B:2F:10:46:B0:8D:E0:89:2C:7E:BD:03:F8:B4:AD:9C:E2:86:E5 X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/yTsvEEawjeCJLH69A_i0rZzihuU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.63.63.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:06:36:14:ca:58:67:72:23:6e:83:7f:f0:fb:c2:28:47:36: ea:17:56:00:fd:95:9b:59:50:cb:4b:14:21:b9:f7:d5:87:b0: cb:c6:6f:90:5e:ea:89:0e:bf:da:a4:bf:da:aa:c9:f8:9e:5e: 4c:90:89:43:2e:d1:24:01:02:f1:e8:8d:1f:e2:69:87:c2:d4: 69:7f:fb:cb:f0:1e:12:11:4b:01:aa:1d:cd:e5:6e:ac:19:e4: b7:5f:76:14:aa:a4:2d:d0:65:90:cf:00:6d:47:d3:40:9e:0a: 49:00:35:15:15:74:1c:51:b5:61:f0:be:92:05:c2:41:c6:15: 6b:b5:3c:bb:73:e1:00:cd:a5:ee:23:06:de:dc:4a:15:df:31: 2f:a3:9f:1a:ae:cf:66:a8:ab:b0:7f:8e:2e:14:84:27:5f:c9: 11:ee:cb:6f:86:c0:c3:fb:79:74:57:88:b7:25:33:c6:22:35: cc:ff:c8:45:59:93:16:21:90:4c:c4:b3:bf:ff:81:4d:a3:92: 53:ef:47:43:8f:c1:ff:ee:48:26:6c:a0:5f:b4:6b:4c:ee:e9: d6:3c:87:25:4b:7d:90:7c:2a:c7:89:41:ec:5d:d8:b5:6b:da: 92:47:a7:fb:4d:aa:f1:bd:8e:8d:86:75:6b:ff:5d:ea:ec:6e: 4d:fc:7a:33 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNDA4MjYw NTE5MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM5M0IyRjEwNDZCMDhE RTA4OTJDN0VCRDAzRjhCNEFEOUNFMjg2RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHNx6tT7HzOsYzQAMkID8CVCfRVc0bcoSNEkRq5BKs0SONQ7CO icwMuzgqhmApLn/gPGrLCpGIrojgyCa9P5/jV71AOdk5N1glCdZ8F6DaB4jSywoa z9F+K0MOsTmAjmlV7MKm7bZR1/SrTY3iXwVDMUYMbQEhaDjy4XNFB6NisfJwhO5S p75vrb5wJi1/bBCUSVFopmRBfogT9G5rt9lUpsVmH92KMcNqF9Wcej93Znc6PvOT D8J8i8gJO80iY7Dwto1YrIRgY9yHWLjvIwNIJygdV2PDhgznOWStUvKokK5xtNPw tHtpVegOM3V+dMd6R4j0yGaobY8xpaqH6v3dAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUyTsvEEawjeCJLH69A/i0rZzihuUwHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL3lUc3ZFRWF3amVDSkxINjlBX2kwclp6 aWh1VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9Pz8wDQYJ KoZIhvcNAQELBQADggEBAJ8GNhTKWGdyI26Df/D7wihHNuoXVgD9lZtZUMtLFCG5 99WHsMvGb5Be6okOv9qkv9qqyfieXkyQiUMu0SQBAvHojR/iaYfC1Gl/+8vwHhIR SwGqHc3lbqwZ5LdfdhSqpC3QZZDPAG1H00CeCkkANRUVdBxRtWHwvpIFwkHGFWu1 PLtz4QDNpe4jBt7cShXfMS+jnxquz2aoq7B/ji4UhCdfyRHuy2+GwMP7eXRXiLcl M8YiNcz/yEVZkxYhkEzEs7//gU2jklPvR0OPwf/uSCZsoF+0a0zu6dY8hyVLfZB8 KseJQexd2LVr2pJHp/tNqvG9jo2GdWv/Xersbk38ejM= -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:46 2024 by rpki-client on console-fra.rpki-client.org