$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/iIPZGRK264oKH86UeoQysFGvfeE.roa File: iIPZGRK264oKH86UeoQysFGvfeE.roa (raw, json) Hash identifier: tbJLXRYO/Hi3ev7BnDExM0KGaHQDx2WyH/iceA7Ha20= Subject key identifier: 88:83:D9:19:12:B6:EB:8A:0A:1F:CE:94:7A:84:32:B0:51:AF:7D:E1 Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0C55 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/iIPZGRK264oKH86UeoQysFGvfeE.roa Signing time: Mon 26 Aug 2024 05:12:05 +0000 ROA not before: Mon 26 Aug 2024 05:12:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 61.58.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Aug 26 05:12:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8883D91912B6EB8A0A1FCE947A8432B051AF7DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b2:22:30:77:de:08:40:2b:c1:d2:c3:51:1c: a7:a5:b7:df:44:f4:1f:78:15:4f:4a:a6:e8:0a:ae: fa:4e:8b:e3:88:96:94:06:30:04:1b:f6:fe:d4:ec: c4:f4:2f:d0:9b:32:e6:ae:83:d3:34:73:6d:5a:b1: 77:c3:74:55:9c:1f:28:6f:fa:99:02:2b:38:6c:cb: db:9c:25:14:9b:47:20:52:dd:ac:86:a3:f5:d8:61: 46:e9:81:87:76:73:96:03:60:3e:d3:9f:00:91:ac: 97:76:0f:34:f7:26:23:9f:86:d7:77:12:cd:98:8a: eb:8a:68:a9:12:e6:bf:40:ec:03:72:88:b7:db:f0: 42:15:54:1a:52:0a:d0:6b:18:49:08:3b:21:1c:e9: f0:32:68:ab:30:70:0c:74:74:e9:de:1d:58:34:0a: 6b:ff:21:78:73:11:fd:37:98:be:5b:f7:7d:5b:9d: 84:c0:da:a6:d0:04:29:de:72:56:1d:10:36:f3:78: 1f:78:b2:0d:0d:bf:d8:d8:58:3e:11:e7:64:71:67: b6:97:d2:a6:0e:d8:48:03:e7:61:49:b0:4d:2c:89: b4:83:ac:39:34:1d:bc:6a:c4:f9:df:c5:81:f0:28: 48:cf:92:b9:a2:c5:3d:80:9a:13:67:e5:b7:3b:92: 83:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:83:D9:19:12:B6:EB:8A:0A:1F:CE:94:7A:84:32:B0:51:AF:7D:E1 X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/iIPZGRK264oKH86UeoQysFGvfeE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.48.0/20 Signature Algorithm: sha256WithRSAEncryption 97:98:1c:01:12:e2:bc:4a:66:f1:1a:da:c8:d3:02:35:e6:d9: 93:24:2e:3e:4d:12:a2:bc:9e:60:5c:a3:af:82:12:3a:2c:41: 1a:6a:ed:9c:aa:6c:d9:4f:4d:83:1d:89:81:cd:c4:92:3e:2e: cb:96:da:7d:8d:05:a1:73:22:7a:7d:e8:d1:e8:e8:d5:42:1b: bb:08:0b:bb:04:2d:46:36:77:ed:85:4a:2d:a2:b6:80:a9:28: 79:24:b6:e7:8e:8e:c7:c3:9d:61:30:a2:37:10:90:65:f6:0e: 6e:f2:81:ba:23:3d:ef:81:47:88:86:e6:66:6e:b4:df:23:5a: 0c:78:5d:01:80:c8:f3:93:44:b9:99:3c:0a:e7:b6:ae:f2:ae: 83:5c:1d:0a:8c:93:8c:35:78:c3:24:31:0a:59:cc:d5:27:79: f1:08:c1:f9:84:22:18:84:17:bf:5c:ff:b5:53:b5:85:e5:13: 26:b1:51:45:f4:0a:3a:d4:e7:9f:9d:d3:60:e3:b1:9e:4f:4a: a4:10:42:bb:b6:4c:f7:56:de:d0:c6:a6:57:c1:0d:64:be:c3: d7:93:72:75:c9:07:8d:12:56:f5:19:bc:a2:fd:f4:c1:ae:8d: 8d:2f:d0:37:11:0b:25:37:86:cd:e3:c2:52:34:4b:ff:1e:2f: d2:be:e9:e9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNDA4MjYw NTEyMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4ODNEOTE5MTJCNkVC OEEwQTFGQ0U5NDdBODQzMkIwNTFBRjdERTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtsiIwd94IQCvB0sNRHKelt99E9B94FU9KpugKrvpOi+OIlpQG MAQb9v7U7MT0L9CbMuaug9M0c21asXfDdFWcHyhv+pkCKzhsy9ucJRSbRyBS3ayG o/XYYUbpgYd2c5YDYD7TnwCRrJd2DzT3JiOfhtd3Es2YiuuKaKkS5r9A7ANyiLfb 8EIVVBpSCtBrGEkIOyEc6fAyaKswcAx0dOneHVg0Cmv/IXhzEf03mL5b931bnYTA 2qbQBCneclYdEDbzeB94sg0Nv9jYWD4R52RxZ7aX0qYO2EgD52FJsE0sibSDrDk0 HbxqxPnfxYHwKEjPkrmixT2AmhNn5bc7koNHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUiIPZGRK264oKH86UeoQysFGvfeEwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvaUlQWkdSSzI2NG9LSDg2 VWVvUXlzRkd2ZmVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BD06MDANBgkqhkiG9w0BAQsFAAOCAQEAl5gcARLivEpm8RrayNMCNebZkyQuPk0S oryeYFyjr4ISOixBGmrtnKps2U9Ngx2Jgc3Ekj4uy5bafY0FoXMien3o0ejo1UIb uwgLuwQtRjZ37YVKLaK2gKkoeSS2546Ox8OdYTCiNxCQZfYObvKBuiM974FHiIbm Zm603yNaDHhdAYDI85NEuZk8Cue2rvKug1wdCoyTjDV4wyQxClnM1Sd58QjB+YQi GIQXv1z/tVO1heUTJrFRRfQKOtTnn53TYOOxnk9KpBBCu7ZM91be0MamV8ENZL7D 15NydckHjRJW9Rm8ov30wa6NjS/QNxELJTeGzePCUjRL/x4v0r7p6Q== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:30 2024 by rpki-client on console-ams.rpki-client.org