$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/4l-t7YBWftDcbxwBdqj1S9IoPfU.roa File: 4l-t7YBWftDcbxwBdqj1S9IoPfU.roa (raw, json) Hash identifier: 7R3KB2wVo4zoTikFyqqXCp11iglTtHwtnQi6ylk4l7Q= Subject key identifier: E2:5F:AD:ED:80:56:7E:D0:DC:6F:1C:01:76:A8:F5:4B:D2:28:3D:F5 Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0C4A Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/4l-t7YBWftDcbxwBdqj1S9IoPfU.roa Signing time: Mon 26 Aug 2024 05:13:03 +0000 ROA not before: Mon 26 Aug 2024 05:13:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18411 IP address blocks: 61.56.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Aug 26 05:13:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E25FADED80567ED0DC6F1C0176A8F54BD2283DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:82:b7:67:1b:c7:73:c5:2a:0b:bd:fc:89: 3f:df:1f:0d:2e:53:f2:26:14:96:1a:be:70:65:4f: 04:4a:db:85:f5:3e:11:73:3a:21:c9:ef:57:28:47: 49:5f:9e:01:71:7d:f7:62:2b:b3:e8:5e:9f:13:cb: 6d:8c:4b:64:eb:01:47:52:89:99:cb:d8:7c:f0:4a: 5a:0f:a8:42:32:23:6a:82:27:f8:2f:7f:dc:3b:9c: 18:c1:55:00:b5:e8:7b:36:f2:79:04:e8:2e:0f:f0: 81:a5:bf:93:b7:5f:3f:b1:d8:a6:86:83:d2:bb:f8: 40:3f:f0:3e:bd:8a:bb:ff:c7:2d:03:89:58:0b:bd: 62:7b:70:3c:21:50:30:69:ae:be:da:2c:9d:24:0e: a6:ba:4f:56:64:b5:87:99:3c:de:17:85:b3:0f:b4: ef:dc:a1:15:64:10:b6:be:be:e4:ed:9a:a8:92:54: 6f:73:97:db:8e:e9:d7:f1:89:2a:d6:9b:98:bf:93: 13:4e:b2:17:81:b9:80:4f:18:7d:3a:81:98:2a:a9: 32:ec:fe:7b:2e:f7:cf:28:01:4b:da:83:9a:7f:1d: 39:af:63:a2:39:2e:59:a8:4a:36:1f:79:e2:ec:f0: aa:6d:c9:87:99:61:cf:e5:85:d3:89:c6:96:c3:c9: 42:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5F:AD:ED:80:56:7E:D0:DC:6F:1C:01:76:A8:F5:4B:D2:28:3D:F5 X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/4l-t7YBWftDcbxwBdqj1S9IoPfU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.24.0/24 Signature Algorithm: sha256WithRSAEncryption a9:f9:90:b1:93:ad:f1:cb:d9:58:8d:17:58:2f:07:63:a6:d9: 8a:cc:16:f1:ef:7d:73:8a:ea:3b:f3:c9:bb:7c:7a:e2:4d:82: b3:d5:ed:56:24:a3:73:f1:93:d1:c3:47:94:4b:48:0e:a4:09: 2f:45:3c:22:7a:17:8f:03:f1:16:89:5c:b9:22:29:95:fe:09: 50:74:10:70:ac:e3:2f:77:f3:00:70:45:37:fe:ac:e0:48:53: 10:7a:7b:21:d1:49:ef:e1:52:19:c4:42:98:6b:59:c7:7c:71: b8:fa:a4:ca:ae:58:35:90:f0:7a:d1:2a:ec:ad:d4:d4:d7:67: d4:68:7d:e5:0f:bb:4a:6e:e3:98:81:3d:71:a1:c0:a6:db:44: e8:15:7d:9f:58:2b:63:cf:33:da:54:70:75:94:cb:8c:fe:72: f0:85:5f:d8:d6:93:2a:08:2c:f3:46:9c:c1:ac:f3:54:9a:8e: 1f:62:a1:1a:69:2c:20:db:44:bf:c6:93:d9:37:78:08:fd:81: 01:f6:24:64:3a:c1:4c:fc:de:73:67:f9:f2:99:5c:a0:a6:11: 69:cb:91:bd:7f:5e:73:28:f0:37:a0:7c:67:89:0e:da:b0:f5: 15:1c:99:47:eb:c6:a3:d9:b1:de:b3:10:2b:f1:e0:f2:4a:c1: 20:4f:31:78 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNDA4MjYw NTEzMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyNUZBREVEODA1NjdF RDBEQzZGMUMwMTc2QThGNTRCRDIyODNERjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCclIK3ZxvHc8UqC738iT/fHw0uU/ImFJYavnBlTwRK24X1PhFz OiHJ71coR0lfngFxffdiK7PoXp8Ty22MS2TrAUdSiZnL2HzwSloPqEIyI2qCJ/gv f9w7nBjBVQC16Hs28nkE6C4P8IGlv5O3Xz+x2KaGg9K7+EA/8D69irv/xy0DiVgL vWJ7cDwhUDBprr7aLJ0kDqa6T1ZktYeZPN4XhbMPtO/coRVkELa+vuTtmqiSVG9z l9uO6dfxiSrWm5i/kxNOsheBuYBPGH06gZgqqTLs/nsu988oAUvag5p/HTmvY6I5 LlmoSjYfeeLs8KptyYeZYc/lhdOJxpbDyUKBAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU4l+t7YBWftDcbxwBdqj1S9IoPfUwHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy80bC10N1lCV2Z0RGNieHdCZHFq MVM5SW9QZlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTgY MA0GCSqGSIb3DQEBCwUAA4IBAQCp+ZCxk63xy9lYjRdYLwdjptmKzBbx731ziuo7 88m7fHriTYKz1e1WJKNz8ZPRw0eUS0gOpAkvRTwiehePA/EWiVy5IimV/glQdBBw rOMvd/MAcEU3/qzgSFMQensh0Unv4VIZxEKYa1nHfHG4+qTKrlg1kPB60SrsrdTU 12fUaH3lD7tKbuOYgT1xocCm20ToFX2fWCtjzzPaVHB1lMuM/nLwhV/Y1pMqCCzz RpzBrPNUmo4fYqEaaSwg20S/xpPZN3gI/YEB9iRkOsFM/N5zZ/nymVygphFpy5G9 f15zKPA3oHxniQ7asPUVHJlH68aj2bHesxAr8eDySsEgTzF4 -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:36 2024 by rpki-client on console-fra.rpki-client.org