$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/k6rLiUOzBHomssn1tHS11KpGvKc.roa File: k6rLiUOzBHomssn1tHS11KpGvKc.roa (raw, json) Hash identifier: HrQ3eYExguYtvZY3lRFhTf/3Vj2lBMOgV1Rsd3gjnlU= Subject key identifier: 93:AA:CB:89:43:B3:04:7A:26:B2:C9:F5:B4:74:B5:D4:AA:46:BC:A7 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0C5F Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/k6rLiUOzBHomssn1tHS11KpGvKc.roa Signing time: Fri 01 Sep 2023 08:26:28 +0000 ROA not before: Fri 01 Sep 2023 08:26:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 61.57.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Sep 1 08:26:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=93AACB8943B3047A26B2C9F5B474B5D4AA46BCA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4f:41:af:41:87:6d:ee:30:dd:ed:e9:05:8b: 6d:5e:de:29:5b:69:6a:5a:62:ae:40:aa:e7:ad:b4: 12:3c:6c:72:e5:ab:d5:ca:c3:aa:20:fb:83:4a:ab: 59:46:42:44:c7:60:f9:13:78:db:4c:df:8d:2e:d6: fc:4e:3e:14:ab:9f:1b:cb:94:ce:f0:8c:f6:db:cd: 93:88:b9:4d:53:d1:2f:5e:e1:ce:ff:29:2c:a2:7e: c9:15:9e:ae:e2:71:ed:b3:60:2b:5b:88:85:8f:09: 6d:5a:1b:45:1b:52:c3:08:d7:93:dc:6a:c3:73:da: 47:42:69:2a:bc:10:6a:61:16:e0:30:4d:a7:9f:be: 03:82:35:4e:d7:91:96:d5:fa:ce:a1:37:99:e6:b9: 7b:9f:3d:8b:86:53:f2:5a:af:7c:28:bc:ea:e0:87: 6b:42:a9:d9:69:3c:ea:5a:f8:08:a3:11:32:5c:be: da:6d:0e:b2:6f:5e:ac:c0:b1:b4:4a:68:c9:fe:23: c6:31:49:d7:da:95:74:7b:ba:55:01:ce:14:3c:73: d4:be:23:d5:5d:0f:31:5f:eb:57:1a:98:c3:c4:17: 6d:d2:3a:20:68:83:90:cf:e7:53:e9:60:25:61:cd: 6e:93:41:0f:5f:02:8f:e2:f9:28:75:dc:ac:ca:b1: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AA:CB:89:43:B3:04:7A:26:B2:C9:F5:B4:74:B5:D4:AA:46:BC:A7 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/k6rLiUOzBHomssn1tHS11KpGvKc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.128.0/20 Signature Algorithm: sha256WithRSAEncryption 36:8a:c5:e7:7a:46:8f:8a:33:12:0e:25:4b:05:9f:a7:9e:15: cb:7f:d8:8b:79:2e:90:c6:32:0a:58:84:3e:55:cf:b1:2a:6f: 11:f5:fa:43:0f:65:9e:86:2f:88:54:5b:d5:84:19:46:12:c3: 86:41:3b:9b:35:83:fe:b2:d0:ba:21:7e:20:16:f7:f2:e0:ab: 55:99:09:9f:ba:8d:29:63:30:98:02:d4:2a:a0:b7:26:c9:8f: 96:2c:39:6a:85:53:40:29:2f:ca:24:e0:ee:7e:c4:6a:53:e3: 24:36:c5:62:4a:94:5a:92:6e:c5:98:d1:c9:29:dc:b2:89:90: 28:68:e4:75:3c:ef:8a:aa:e0:06:8e:c1:f1:b3:6e:18:8a:b7: 72:1c:4e:d7:24:13:46:60:39:16:6c:7e:33:72:38:95:96:58: 47:9a:71:2d:35:52:d0:e1:d9:a1:ff:b2:29:cf:c5:3c:53:b5: 36:72:85:f3:b1:01:3b:85:97:e6:58:0c:de:67:4f:58:76:90: 38:10:58:a1:f4:5a:87:a1:c3:bd:27:6a:66:a8:c0:fa:ab:c0: c5:1c:9c:7e:3e:62:29:f0:52:c4:7d:a7:14:00:a3:0d:7c:12: de:b7:a9:a8:5e:3b:6e:ec:e8:e8:0a:c4:c8:75:d4:54:fe:16: bd:f1:87:1e -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw ODI2MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDkzQUFDQjg5NDNCMzA0 N0EyNkIyQzlGNUI0NzRCNUQ0QUE0NkJDQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDvT0GvQYdt7jDd7ekFi21e3ilbaWpaYq5AquettBI8bHLlq9XK w6og+4NKq1lGQkTHYPkTeNtM340u1vxOPhSrnxvLlM7wjPbbzZOIuU1T0S9e4c7/ KSyifskVnq7ice2zYCtbiIWPCW1aG0UbUsMI15PcasNz2kdCaSq8EGphFuAwTaef vgOCNU7XkZbV+s6hN5nmuXufPYuGU/Jar3wovOrgh2tCqdlpPOpa+AijETJcvtpt DrJvXqzAsbRKaMn+I8YxSdfalXR7ulUBzhQ8c9S+I9VdDzFf61camMPEF23SOiBo g5DP51PpYCVhzW6TQQ9fAo/i+Sh13KzKsROvAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUk6rLiUOzBHomssn1tHS11KpGvKcwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9rNnJMaVVPekJIb21zc24xdEhT MTFLcEd2S2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTmA MA0GCSqGSIb3DQEBCwUAA4IBAQA2isXnekaPijMSDiVLBZ+nnhXLf9iLeS6QxjIK WIQ+Vc+xKm8R9fpDD2Wehi+IVFvVhBlGEsOGQTubNYP+stC6IX4gFvfy4KtVmQmf uo0pYzCYAtQqoLcmyY+WLDlqhVNAKS/KJODufsRqU+MkNsViSpRakm7FmNHJKdyy iZAoaOR1PO+KquAGjsHxs24YirdyHE7XJBNGYDkWbH4zcjiVllhHmnEtNVLQ4dmh /7Ipz8U8U7U2coXzsQE7hZfmWAzeZ09YdpA4EFih9FqHocO9J2pmqMD6q8DFHJx+ PmIp8FLEfacUAKMNfBLet6moXjtu7OjoCsTIddRU/ha98Yce -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:38 2024 by rpki-client on console-fra.rpki-client.org