$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-dk9TTnimQLJ844d8Di5SPkea9Q.roa File: -dk9TTnimQLJ844d8Di5SPkea9Q.roa (raw, json) Hash identifier: 1wec2kJjWPM8pOiHp57sUcqUFrY6HfJYq1a6utaBZjc= Subject key identifier: F9:D9:3D:4D:39:E2:99:02:C9:F3:8E:1D:F0:38:B9:48:F9:1E:6B:D4 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0BCB Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-dk9TTnimQLJ844d8Di5SPkea9Q.roa Signing time: Fri 01 Sep 2023 08:36:46 +0000 ROA not before: Fri 01 Sep 2023 08:36:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9244 IP address blocks: 61.247.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Sep 1 08:36:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F9D93D4D39E29902C9F38E1DF038B948F91E6BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:ee:aa:f1:60:1d:62:05:d6:1f:e9:58:19: c2:e2:3f:6a:4f:5c:5c:2d:36:64:be:6e:b5:45:f7: d0:08:08:93:70:67:6d:0e:0f:67:9f:3b:48:80:6c: 47:3e:20:cb:2c:c4:fa:ec:27:f1:c4:7b:51:0a:f1: eb:5d:99:a9:16:97:b4:b2:aa:96:fd:45:1c:a6:7e: e9:af:e4:e5:b8:3e:b5:a3:6b:13:20:34:57:1e:a2: 2a:7b:11:f5:0c:ca:18:dd:ae:f3:7b:44:7d:13:8e: e6:9a:b7:51:33:5c:81:9d:ca:7a:27:8e:6f:77:fd: 34:c9:8e:2d:99:d8:5f:ed:95:de:00:a4:d8:b0:e1: c3:59:f9:f8:3a:aa:77:3a:d6:56:74:69:76:7e:07: d0:8c:a4:e3:cf:dd:4e:f3:57:c9:1d:53:1e:8f:19: 7e:cd:dc:bd:3e:b8:ea:2b:cf:d6:8a:e3:fd:a4:e4: 8e:4f:e5:84:5d:71:1a:d2:4a:5d:eb:09:99:e9:bc: af:8c:c8:e6:21:cd:ac:98:1c:72:b5:b1:7c:55:c2: e8:9c:a2:a6:d6:b8:49:05:37:ee:cf:d6:1f:a8:57: a8:14:d3:6c:ff:96:53:50:52:1a:ee:d9:94:8f:4f: 60:66:c4:30:cd:f5:f7:3a:53:25:0b:64:c4:d3:96: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D9:3D:4D:39:E2:99:02:C9:F3:8E:1D:F0:38:B9:48:F9:1E:6B:D4 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-dk9TTnimQLJ844d8Di5SPkea9Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.247.160.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:f8:37:09:5d:f3:1d:3c:bc:37:45:0f:ca:ab:88:22:12:63: 73:56:ad:46:68:8e:95:84:e8:19:7b:75:7e:fa:5c:01:25:01: fc:5a:39:d0:89:9d:da:4d:94:f7:3e:63:fa:aa:3c:9b:20:67: 13:b1:31:79:6f:11:b7:89:1c:08:44:f3:03:8c:70:5d:4c:af: 99:ef:23:40:7b:56:27:f0:48:32:6e:ff:ae:41:a2:e0:46:84: c2:a5:7f:7f:54:25:ad:3a:96:e4:07:a6:74:11:fb:ee:3d:8a: 80:b0:06:54:4a:23:1a:a5:c3:09:6f:de:8e:72:3f:20:9c:a8: ca:95:18:89:fe:9c:71:ec:f1:a7:e5:c1:16:31:c6:d9:e0:db: 9d:cd:25:e9:a9:85:3b:32:68:a6:f4:27:11:23:69:8c:a0:82: f5:a2:95:ee:dc:a0:66:50:08:46:03:b8:85:3e:09:4a:13:8b: 91:d6:63:02:ed:bc:86:c6:87:91:e5:a8:de:63:7f:07:32:06: 46:48:96:30:4f:c3:f6:ed:41:2d:71:dc:3a:34:bb:75:f1:8e: 78:8d:3f:ec:a4:a4:78:1b:22:48:cf:1f:85:70:f5:a2:22:42: 46:a5:f8:b3:5f:68:f1:15:d5:44:e7:49:2a:2f:6e:82:d6:ed: 92:cf:fe:a8 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICC8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMzA5MDEw ODM2NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY5RDkzRDREMzlFMjk5 MDJDOUYzOEUxREYwMzhCOTQ4RjkxRTZCRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBy+6q8WAdYgXWH+lYGcLiP2pPXFwtNmS+brVF99AICJNwZ20O D2efO0iAbEc+IMssxPrsJ/HEe1EK8etdmakWl7Syqpb9RRymfumv5OW4PrWjaxMg NFceoip7EfUMyhjdrvN7RH0Tjuaat1EzXIGdynonjm93/TTJji2Z2F/tld4ApNiw 4cNZ+fg6qnc61lZ0aXZ+B9CMpOPP3U7zV8kdUx6PGX7N3L0+uOorz9aK4/2k5I5P 5YRdcRrSSl3rCZnpvK+MyOYhzayYHHK1sXxVwuicoqbWuEkFN+7P1h+oV6gU02z/ llNQUhru2ZSPT2BmxDDN9fc6UyULZMTTlgRnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+dk9TTnimQLJ844d8Di5SPkea9QwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVULy1kazlUVG5pbVFMSjg0NGQ4 RGk1U1BrZWE5US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9 96AwDQYJKoZIhvcNAQELBQADggEBAEv4Nwld8x08vDdFD8qriCISY3NWrUZojpWE 6Bl7dX76XAElAfxaOdCJndpNlPc+Y/qqPJsgZxOxMXlvEbeJHAhE8wOMcF1Mr5nv I0B7VifwSDJu/65BouBGhMKlf39UJa06luQHpnQR++49ioCwBlRKIxqlwwlv3o5y PyCcqMqVGIn+nHHs8aflwRYxxtng253NJemphTsyaKb0JxEjaYyggvWile7coGZQ CEYDuIU+CUoTi5HWYwLtvIbGh5HlqN5jfwcyBkZIljBPw/btQS1x3Do0u3XxjniN P+ykpHgbIkjPH4Vw9aIiQkal+LNfaPEV1UTnSSovboLW7ZLP/qg= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org