$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/48Ix3nZo5pXqHJ_9h4GL_2FYl6o.roa File: 48Ix3nZo5pXqHJ_9h4GL_2FYl6o.roa (raw, json) Hash identifier: jYqMV7Z7PwCF1sqlXevd7XabCRnnHkCWMrZFW9zzbuQ= Subject key identifier: E3:C2:31:DE:76:68:E6:95:EA:1C:9F:FD:87:81:8B:FF:61:58:97:AA Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB Certificate serial: 0C9F Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/48Ix3nZo5pXqHJ_9h4GL_2FYl6o.roa Signing time: Mon 26 Aug 2024 05:12:29 +0000 ROA not before: Mon 26 Aug 2024 05:12:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131597 IP address blocks: 61.65.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB Validity Not Before: Aug 26 05:12:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E3C231DE7668E695EA1C9FFD87818BFF615897AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:03:a0:26:2a:1a:ee:b5:b9:2f:a6:ab:8c: 30:42:3d:79:44:78:bf:92:23:69:06:36:48:ce:91: 18:7a:98:e7:6a:85:2d:26:16:bb:4a:51:52:24:5b: f0:3f:a4:d4:6f:bc:b7:f0:68:df:58:f4:06:02:f9: 98:43:8b:88:a3:d6:8f:c4:ac:aa:17:ab:06:ed:6e: 7b:00:1c:77:f1:21:4c:b8:5c:1a:6e:b9:3b:60:e9: 3a:0f:f6:a6:35:f5:e8:1d:c9:0d:ae:ff:10:09:48: 0b:5e:8e:19:12:c5:0a:42:0f:75:72:1d:6e:9f:55: ee:e8:96:24:ee:cc:7b:95:4e:f2:c1:ca:69:bf:e4: 5b:3d:4c:7d:a4:8e:5e:0f:0a:88:f8:96:70:b7:c3: 0d:1f:16:e9:63:2c:a5:ce:9b:0b:5d:79:71:5c:34: 7e:10:7f:c5:58:3b:9e:97:c3:23:89:6d:ad:a5:c8: b3:ab:9e:41:d2:2e:fc:57:81:8e:c6:49:fc:f2:ba: 67:51:00:d7:29:37:db:df:fb:4a:3e:ce:b5:b4:84: 2e:ab:5b:51:a3:fd:87:0b:db:ea:fd:cf:e3:fb:fe: 79:98:fe:d1:eb:52:a0:16:f5:80:17:76:fd:04:57: 9a:87:4e:58:ad:f1:98:a9:3b:13:bf:bd:cb:19:cc: 22:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C2:31:DE:76:68:E6:95:EA:1C:9F:FD:87:81:8B:FF:61:58:97:AA X509v3 Authority Key Identifier: keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/48Ix3nZo5pXqHJ_9h4GL_2FYl6o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.65.232.0/22 Signature Algorithm: sha256WithRSAEncryption 82:6f:ad:cb:40:da:ea:96:32:a2:e3:08:12:80:04:f7:3f:44: 59:86:14:b9:33:ba:b2:86:8f:e8:7c:70:4a:57:4a:f1:5e:56: e0:21:69:a8:ac:b3:7b:9d:39:92:8c:33:de:a6:a9:73:0d:94: c6:6e:8a:30:a5:7a:6e:6e:1c:ba:ec:a3:13:bc:2d:3e:74:7e: fd:06:35:d1:1c:a7:75:7b:fe:e9:72:1e:0b:a7:8d:bf:c9:99: 56:21:c9:31:41:78:27:68:4b:3b:50:12:12:a8:0f:17:03:a3: a7:71:5a:02:9d:f8:b4:74:db:43:0d:0d:f3:6e:d9:71:20:c0: 68:1d:a0:c2:03:e0:55:17:8a:90:dc:3c:92:6f:d9:fc:fe:4c: 02:df:a5:ed:a0:04:3a:63:95:85:c4:ca:38:f3:96:79:d2:3d: c0:ef:9a:a0:ee:4a:e5:32:7a:2e:9c:ae:a2:4f:b4:d9:61:54: 30:f0:96:b7:65:5a:47:66:77:98:80:6f:90:0f:13:ec:1c:3e: 8f:43:47:ed:66:8b:1c:24:08:b0:10:eb:76:f4:41:b1:06:be: c4:b5:37:0f:cf:37:c1:e4:23:0d:80:b3:dd:99:89:fa:f1:23: f6:aa:d2:0b:58:ec:c8:df:a7:33:72:33:4f:b2:a8:c6:1d:8d: 52:c3:70:e4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEM3 ODk2MTY0MkEwNEJFMTMyNzA4REIxOTNEN0JBOTE2QjJCNjdDQjAeFw0yNDA4MjYw NTEyMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzQzIzMURFNzY2OEU2 OTVFQTFDOUZGRDg3ODE4QkZGNjE1ODk3QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnhAOgJioa7rW5L6arjDBCPXlEeL+SI2kGNkjOkRh6mOdqhS0m FrtKUVIkW/A/pNRvvLfwaN9Y9AYC+ZhDi4ij1o/ErKoXqwbtbnsAHHfxIUy4XBpu uTtg6ToP9qY19egdyQ2u/xAJSAtejhkSxQpCD3VyHW6fVe7oliTuzHuVTvLBymm/ 5Fs9TH2kjl4PCoj4lnC3ww0fFuljLKXOmwtdeXFcNH4Qf8VYO56XwyOJba2lyLOr nkHSLvxXgY7GSfzyumdRANcpN9vf+0o+zrW0hC6rW1Gj/YcL2+r9z+P7/nmY/tHr UqAW9YAXdv0EV5qHTlit8ZipOxO/vcsZzCIrAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU48Ix3nZo5pXqHJ/9h4GL/2FYl6owHwYDVR0jBBgwFoAUDHiWFkKgS+EycI2x k9e6kWsrZ8swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRE9OR0ZP TkcvREhpV0ZrS2dTLUV5Y0kyeGs5ZTZrV3NyWjhzLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ESGlXRmtLZ1MtRXljSTJ4azllNmtXc3JaOHMuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ET05HRk9ORy80OEl4M25abzVwWHFI Sl85aDRHTF8yRllsNm8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCPUHoMA0GCSqGSIb3DQEBCwUAA4IBAQCCb63LQNrqljKi4wgSgAT3P0RZhhS5 M7qyho/ofHBKV0rxXlbgIWmorLN7nTmSjDPepqlzDZTGboowpXpubhy67KMTvC0+ dH79BjXRHKd1e/7pch4Lp42/yZlWIckxQXgnaEs7UBISqA8XA6OncVoCnfi0dNtD DQ3zbtlxIMBoHaDCA+BVF4qQ3DySb9n8/kwC36XtoAQ6Y5WFxMo485Z50j3A75qg 7krlMnounK6iT7TZYVQw8Ja3ZVpHZneYgG+QDxPsHD6PQ0ftZoscJAiwEOt29EGx Br7EtTcPzzfB5CMNgLPdmYn68SP2qtILWOzI36czcjNPsqjGHY1Sw3Dk -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:36 2024 by rpki-client on console-fra.rpki-client.org