$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IzN5l1Ltcg7e77NpJ7Q1jBZqWmo.roa File: IzN5l1Ltcg7e77NpJ7Q1jBZqWmo.roa (raw, json) Hash identifier: Cyrst28dM/NuqXJgMypg/81mekRl6lBEtKLhuND8TWY= Subject key identifier: 23:33:79:97:52:ED:72:0E:DE:EF:B3:69:27:B4:35:8C:16:6A:5A:6A Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0C52 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IzN5l1Ltcg7e77NpJ7Q1jBZqWmo.roa Signing time: Mon 26 Aug 2024 05:12:04 +0000 ROA not before: Mon 26 Aug 2024 05:12:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18046 IP address blocks: 103.130.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Aug 26 05:12:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2333799752ED720EDEEFB36927B4358C166A5A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:da:09:e4:cb:3f:51:61:23:ac:75:9d:0b: b8:62:08:a4:a8:30:3c:09:ea:fe:c8:a6:d8:0c:59: d3:94:b3:7d:ac:e8:e1:bf:a5:73:fd:78:57:36:a5: 27:1b:18:0d:ff:e0:4a:12:79:f7:6a:95:35:2e:c7: 44:63:a0:5b:6b:0f:32:63:20:f4:25:fc:ed:b0:67: 10:24:9f:35:4f:7d:f4:78:f8:af:e6:ce:3c:e6:bd: eb:73:db:70:e9:e1:c7:af:43:b9:5b:8d:3e:b7:dc: ae:61:44:91:af:45:73:11:32:b4:77:08:58:3d:af: cc:8e:22:12:4c:c9:3c:44:d0:d7:97:2a:cc:8a:52: 04:7e:71:6f:98:34:b9:d0:68:98:ea:d4:a5:07:27: 26:61:7e:2d:03:7f:f1:e7:d3:9b:b2:3a:16:d1:32: c0:8d:cd:1a:13:11:0b:ed:c7:96:3b:77:4f:59:77: 2d:5f:40:fd:e4:3a:f4:02:02:ac:61:c2:c0:c2:85: 1e:ca:f2:15:60:f9:23:37:cf:47:e3:b0:62:7b:14: e9:08:34:fd:77:39:a8:33:6a:6b:0b:40:2f:75:38: 5f:95:ce:05:16:c0:84:dd:7e:83:92:52:36:51:a4: cc:df:19:af:5e:62:29:37:0f:a1:bf:61:37:8b:ce: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:33:79:97:52:ED:72:0E:DE:EF:B3:69:27:B4:35:8C:16:6A:5A:6A X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/IzN5l1Ltcg7e77NpJ7Q1jBZqWmo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.44.0/22 Signature Algorithm: sha256WithRSAEncryption 06:92:bc:d2:6a:73:82:3e:70:8b:9a:e7:63:4c:0d:b3:8c:6d: 49:24:3f:af:a0:b3:b2:45:9c:dc:ed:39:65:7e:d3:8f:ce:f9: 78:37:c4:b5:71:6a:b7:6c:c7:ec:f6:b8:4b:b6:54:a6:ae:3b: d0:82:e1:2d:be:c9:46:a7:0f:03:fe:b3:7d:4c:e0:d5:d5:73: 71:92:c6:4b:01:14:c3:b6:20:5f:6f:f5:3e:ba:db:7f:a3:b6: eb:2a:2d:21:81:91:7c:2e:e0:db:08:c2:87:3e:67:58:8b:b7: 2d:21:79:0b:48:f9:11:69:00:29:2c:4f:8a:8f:5e:c1:54:dd: 8d:8b:8f:e7:2c:ec:7f:c6:60:26:3f:0c:54:5a:49:9c:eb:1a: 27:88:31:c9:d8:41:19:5b:6c:92:62:10:69:f6:61:63:3a:6e: 3b:f5:35:18:11:45:41:1c:36:f0:4d:6e:cf:69:9b:9b:15:87: 71:e5:05:73:cc:de:8f:d1:61:11:3e:bd:5b:94:ab:b7:95:ed: f7:2b:be:09:dd:0a:26:98:cb:08:bb:70:83:66:c6:55:5a:f0: 14:6e:ec:a7:bc:76:67:ac:8a:36:34:99:ef:4f:a9:52:20:3d: 1b:2e:db:67:35:64:00:64:2a:c1:d4:b7:99:6c:d9:ad:02:ea: 9c:6e:4a:f2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNDA4MjYw NTEyMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIzMzM3OTk3NTJFRDcy MEVERUVGQjM2OTI3QjQzNThDMTY2QTVBNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkhdoJ5Ms/UWEjrHWdC7hiCKSoMDwJ6v7IptgMWdOUs32s6OG/ pXP9eFc2pScbGA3/4EoSefdqlTUux0RjoFtrDzJjIPQl/O2wZxAknzVPffR4+K/m zjzmvetz23Dp4cevQ7lbjT633K5hRJGvRXMRMrR3CFg9r8yOIhJMyTxE0NeXKsyK UgR+cW+YNLnQaJjq1KUHJyZhfi0Df/Hn05uyOhbRMsCNzRoTEQvtx5Y7d09Zdy1f QP3kOvQCAqxhwsDChR7K8hVg+SM3z0fjsGJ7FOkINP13OagzamsLQC91OF+VzgUW wITdfoOSUjZRpMzfGa9eYik3D6G/YTeLzqflAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUIzN5l1Ltcg7e77NpJ7Q1jBZqWmowHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvSXpONWwxTHRjZzdlNzdO cEo3UTFqQlpxV21vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmeCLDANBgkqhkiG9w0BAQsFAAOCAQEABpK80mpzgj5wi5rnY0wNs4xtSSQ/r6Cz skWc3O05ZX7Tj875eDfEtXFqt2zH7Pa4S7ZUpq470ILhLb7JRqcPA/6zfUzg1dVz cZLGSwEUw7YgX2/1Prrbf6O26yotIYGRfC7g2wjChz5nWIu3LSF5C0j5EWkAKSxP io9ewVTdjYuP5yzsf8ZgJj8MVFpJnOsaJ4gxydhBGVtskmIQafZhYzpuO/U1GBFF QRw28E1uz2mbmxWHceUFc8zej9FhET69W5Srt5Xt9yu+Cd0KJpjLCLtwg2bGVVrw FG7sp7x2Z6yKNjSZ70+pUiA9Gy7bZzVkAGQqwdS3mWzZrQLqnG5K8g== -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:26 2024 by rpki-client on console-ams.rpki-client.org