$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/z4lXl2KRyRTBYbX7H5MgALled6s.roa File: z4lXl2KRyRTBYbX7H5MgALled6s.roa (raw, json) Hash identifier: ZBiV7vpZpuoN9iXmjxoBHbRAe7C9a1bCVi5tZJpLUbY= Subject key identifier: CF:89:57:97:62:91:C9:14:C1:61:B5:FB:1F:93:20:00:B9:5E:77:AB Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Certificate serial: 0C51 Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/z4lXl2KRyRTBYbX7H5MgALled6s.roa Signing time: Mon 26 Aug 2024 05:12:03 +0000 ROA not before: Mon 26 Aug 2024 05:12:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 61.58.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B Validity Not Before: Aug 26 05:12:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CF8957976291C914C161B5FB1F932000B95E77AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:f7:d0:b2:9e:bc:ff:f6:d8:11:d2:d6:ce: a1:53:17:d0:7d:67:33:6e:a7:92:fd:a9:bc:c8:c3: 31:d4:2d:dd:8e:17:01:a1:94:69:13:1e:a6:90:a7: b1:b9:5b:9e:c9:ff:4a:56:70:e7:28:8f:d8:48:b7: fd:30:cf:b7:fd:13:b6:2f:d8:80:54:b5:10:0f:f3: 62:5d:40:fc:09:e8:c1:ee:e6:3e:fe:0c:49:c2:ac: ca:cc:aa:79:8f:07:05:0d:43:34:71:f3:14:cf:5d: 93:43:57:15:8f:92:99:9d:ad:4f:20:69:6e:f1:d2: 45:5d:94:20:a3:92:1e:97:08:e6:dc:8c:ed:58:a5: 86:09:e5:bc:c1:3c:9c:87:e5:3a:89:be:a5:68:2a: 13:12:98:78:cb:a4:3a:d8:d7:30:fb:ec:cd:7f:d5: c4:78:02:7d:c2:58:53:fa:da:77:88:14:b7:f5:d4: bf:19:64:c0:fe:75:9f:36:42:4e:d0:fb:60:4e:f5: 9a:20:0e:b7:88:e1:95:54:5c:b8:be:3b:3c:0d:b9: 0e:22:ae:85:7c:b4:43:6a:d1:2c:37:bf:c6:bf:3a: 25:b2:f1:f5:e2:e2:67:08:76:30:21:2f:09:31:7a: c6:19:b3:d3:53:d5:39:e3:59:6a:11:0f:0c:a7:7f: 76:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:89:57:97:62:91:C9:14:C1:61:B5:FB:1F:93:20:00:B9:5E:77:AB X509v3 Authority Key Identifier: keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/z4lXl2KRyRTBYbX7H5MgALled6s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.16.0/20 Signature Algorithm: sha256WithRSAEncryption 96:a9:ea:7f:71:2f:1c:2c:8c:35:1e:ba:d8:ef:f6:f6:6f:31: 4c:08:d5:a4:79:0e:51:23:a5:7a:3c:db:84:88:08:26:61:08: c2:b4:fc:36:da:9f:eb:4d:d0:93:00:52:b0:58:a2:59:a6:b8: 9a:fb:3e:c6:e4:ff:47:f6:bf:17:ef:a2:04:55:eb:1c:10:3b: de:7b:76:be:28:2d:86:d5:88:7d:b2:ca:6b:92:2c:da:d7:8a: 06:09:69:d9:76:b0:05:0f:aa:71:24:c4:4f:2d:b9:ee:5f:0a: e2:3e:6c:56:34:98:d8:46:7c:90:17:0d:17:65:67:4b:92:9a: 6c:d9:2a:00:5b:45:62:41:07:01:c6:0f:3a:64:32:3c:ff:17: 97:1a:90:8d:ce:61:ee:30:ea:67:d8:de:8a:d1:78:a4:0f:c7: 07:0c:9f:1d:41:05:46:14:14:f9:01:8b:39:ac:c1:c0:d7:2c: 67:b7:2f:fc:89:d8:13:89:27:87:69:e8:e0:24:a3:b0:5b:ff: c2:c2:e6:84:3a:5d:77:15:50:40:88:83:e9:d2:fb:9a:46:f4: 9f:d8:49:4d:51:47:21:89:9f:26:0f:e6:32:0e:49:00:8c:1d: 2c:c5:a7:8d:fe:cc:24:42:dc:6a:60:1c:c7:6c:84:0e:dc:ed: 71:a0:51:05 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yNDA4MjYw NTEyMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGODk1Nzk3NjI5MUM5 MTRDMTYxQjVGQjFGOTMyMDAwQjk1RTc3QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClX/fQsp68//bYEdLWzqFTF9B9ZzNup5L9qbzIwzHULd2OFwGh lGkTHqaQp7G5W57J/0pWcOcoj9hIt/0wz7f9E7Yv2IBUtRAP82JdQPwJ6MHu5j7+ DEnCrMrMqnmPBwUNQzRx8xTPXZNDVxWPkpmdrU8gaW7x0kVdlCCjkh6XCObcjO1Y pYYJ5bzBPJyH5TqJvqVoKhMSmHjLpDrY1zD77M1/1cR4An3CWFP62neIFLf11L8Z ZMD+dZ82Qk7Q+2BO9ZogDreI4ZVUXLi+OzwNuQ4iroV8tENq0Sw3v8a/OiWy8fXi 4mcIdjAhLwkxesYZs9NT1TnjWWoRDwynf3Y1AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUz4lXl2KRyRTBYbX7H5MgALled6swHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv +/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvejRsWGwyS1J5UlRCWWJY N0g1TWdBTGxlZDZzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BD06EDANBgkqhkiG9w0BAQsFAAOCAQEAlqnqf3EvHCyMNR662O/29m8xTAjVpHkO USOlejzbhIgIJmEIwrT8Ntqf603QkwBSsFiiWaa4mvs+xuT/R/a/F++iBFXrHBA7 3nt2vigthtWIfbLKa5Is2teKBglp2XawBQ+qcSTETy257l8K4j5sVjSY2EZ8kBcN F2VnS5KabNkqAFtFYkEHAcYPOmQyPP8XlxqQjc5h7jDqZ9jeitF4pA/HBwyfHUEF RhQU+QGLOazBwNcsZ7cv/InYE4knh2no4CSjsFv/wsLmhDpddxVQQIiD6dL7mkb0 n9hJTVFHIYmfJg/mMg5JAIwdLMWnjf7MJELcamAcx2yEDtztcaBRBQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:30 2024 by rpki-client on console-ams.rpki-client.org