$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCTV/rggT_xP9zVJBv-kHDpEfCt2CjNA.roa File: rggT_xP9zVJBv-kHDpEfCt2CjNA.roa (raw, json) Hash identifier: 7kNylPbiH9NxoLT9oY+VRH//iu5JX5unPftrxFRhxHs= Subject key identifier: AE:08:13:FF:13:FD:CD:52:41:BF:E9:07:0E:91:1F:0A:DD:82:8C:D0 Certificate issuer: /CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0 Certificate serial: 0C11 Authority key identifier: A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/rggT_xP9zVJBv-kHDpEfCt2CjNA.roa Signing time: Mon 26 Aug 2024 05:12:16 +0000 ROA not before: Mon 26 Aug 2024 05:12:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131607 IP address blocks: 27.0.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6FE5D1C93127E4AAEFF100F3A5C330F2DD1ABC0 Validity Not Before: Aug 26 05:12:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AE0813FF13FDCD5241BFE9070E911F0ADD828CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:96:5b:46:8e:76:76:df:ea:57:68:6b:03: eb:f5:12:1e:42:8b:b2:68:1e:83:5e:1f:f7:ad:ba: a2:d5:26:9e:67:7f:41:8c:27:87:fa:a3:47:5f:f5: b8:23:66:8c:dc:02:2c:7c:45:49:39:04:8a:8f:9f: c1:67:15:9f:25:db:cd:ab:a8:f3:76:41:b7:86:15: 17:a4:62:24:8d:c6:9a:35:45:40:b3:d9:3f:0b:29: 87:3f:97:0b:f5:1d:72:1a:fa:24:a9:78:00:45:f3: 23:19:92:02:e8:8c:fe:10:55:00:6e:e6:58:88:9c: f2:e8:7b:c1:ba:14:81:0f:6e:bd:c7:0c:39:2a:97: d4:40:54:4f:60:bd:ac:67:d4:05:0f:3b:73:97:2e: 5f:ba:51:2e:50:9e:52:f9:dd:43:9c:4a:a7:8d:13: fe:c8:8f:47:ba:9b:67:3e:bf:63:c0:0c:02:ab:8a: 6c:16:e9:2c:95:fc:91:9f:d5:ca:f4:6e:6c:8b:52: 82:06:e5:db:20:4c:c1:3c:20:e3:50:59:1c:3f:24: eb:4b:f4:f6:5f:72:c2:df:7f:bf:1a:0a:46:35:17: 86:69:4c:7a:f6:3b:36:a0:30:5b:06:85:47:af:26: 6c:ef:c0:68:ae:fa:cf:fa:a2:75:78:19:07:70:72: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:08:13:FF:13:FD:CD:52:41:BF:E9:07:0E:91:1F:0A:DD:82:8C:D0 X509v3 Authority Key Identifier: keyid:A6:FE:5D:1C:93:12:7E:4A:AE:FF:10:0F:3A:5C:33:0F:2D:D1:AB:C0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pv5dHJMSfkqu_xAPOlwzDy3Rq8A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCTV/rggT_xP9zVJBv-kHDpEfCt2CjNA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.0.152.0/22 Signature Algorithm: sha256WithRSAEncryption 41:cc:70:49:63:c2:fb:e3:ec:2e:14:d2:3e:5c:9b:73:59:1a: 2a:fd:38:8b:88:91:ae:43:c8:a9:ce:59:ca:c7:be:c2:18:8b: f0:31:14:61:f3:62:94:2b:c5:f4:0c:49:cd:76:61:88:5c:95: 59:a3:02:b5:cb:3f:b5:67:93:a1:bc:37:5e:1e:65:23:20:78: a9:16:0e:9b:e1:d0:4d:d2:de:0a:6c:e1:44:d5:79:c5:15:0d: 89:a0:6e:52:36:41:b8:f0:49:b2:d0:5f:12:5d:db:76:85:ab: 6c:0e:05:a2:c5:7e:5c:f7:d0:b9:91:a8:d7:6e:7d:bc:01:33: de:8c:4f:dd:c8:06:86:62:6c:df:50:dc:a7:dd:62:a9:92:0a: e6:e6:6e:01:d2:91:22:82:3a:58:85:6b:b6:03:6a:9a:49:54: cb:c2:e3:7a:ba:ac:38:d5:80:6c:0f:b7:e8:df:b1:75:56:c4: 63:31:8f:af:19:c6:b5:24:2c:3f:02:12:da:da:5f:9d:55:fc: 46:fb:5b:fa:80:60:3f:c0:dd:fd:d9:27:a7:23:dd:7c:ae:0f: 2d:de:b3:60:d6:cc:98:d1:ca:f2:7e:27:c2:35:8a:ab:80:6f: b8:2d:4b:32:a9:b2:62:b5:9f:2a:6e:76:dc:30:91:13:73:94: eb:85:b9:35 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZG RTVEMUM5MzEyN0U0QUFFRkYxMDBGM0E1QzMzMEYyREQxQUJDMDAeFw0yNDA4MjYw NTEyMTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFFMDgxM0ZGMTNGRENE NTI0MUJGRTkwNzBFOTExRjBBREQ4MjhDRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZ4pZbRo52dt/qV2hrA+v1Eh5Ci7JoHoNeH/etuqLVJp5nf0GM J4f6o0df9bgjZozcAix8RUk5BIqPn8FnFZ8l282rqPN2QbeGFRekYiSNxpo1RUCz 2T8LKYc/lwv1HXIa+iSpeABF8yMZkgLojP4QVQBu5liInPLoe8G6FIEPbr3HDDkq l9RAVE9gvaxn1AUPO3OXLl+6US5QnlL53UOcSqeNE/7Ij0e6m2c+v2PADAKrimwW 6SyV/JGf1cr0bmyLUoIG5dsgTME8IONQWRw/JOtL9PZfcsLff78aCkY1F4ZpTHr2 OzagMFsGhUevJmzvwGiu+s/6onV4GQdwchSRAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUrggT/xP9zVJBv+kHDpEfCt2CjNAwHwYDVR0jBBgwFoAUpv5dHJMSfkqu/xAP OlwzDy3Rq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUVi9w djVkSEpNU2ZrcXVfeEFQT2x3ekR5M1JxOEEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3B2NWRISk1TZmtxdV94QVBPbHd6RHkzUnE4QS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0RDVFYvcmdnVF94UDl6VkpCdi1rSERwRWZD dDJDak5BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAhsAmDAN BgkqhkiG9w0BAQsFAAOCAQEAQcxwSWPC++PsLhTSPlybc1kaKv04i4iRrkPIqc5Z yse+whiL8DEUYfNilCvF9AxJzXZhiFyVWaMCtcs/tWeTobw3Xh5lIyB4qRYOm+HQ TdLeCmzhRNV5xRUNiaBuUjZBuPBJstBfEl3bdoWrbA4FosV+XPfQuZGo1259vAEz 3oxP3cgGhmJs31Dcp91iqZIK5uZuAdKRIoI6WIVrtgNqmklUy8LjerqsONWAbA+3 6N+xdVbEYzGPrxnGtSQsPwIS2tpfnVX8Rvtb+oBgP8Dd/dknpyPdfK4PLd6zYNbM mNHK8n4nwjWKq4BvuC1LMqmyYrWfKm523DCRE3OU64W5NQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:03 2024 by rpki-client on console-ams.rpki-client.org