$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/EpPlqUCE76A767UDjM5ChaFAg00.roa File: EpPlqUCE76A767UDjM5ChaFAg00.roa (raw, json) Hash identifier: BA5WtAKpCf9PTeqZ/NscbZSwpRovEEvsFIJpp/a7Ug0= Subject key identifier: 12:93:E5:A9:40:84:EF:A0:3B:EB:B5:03:8C:CE:42:85:A1:40:83:4D Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0C49 Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/EpPlqUCE76A767UDjM5ChaFAg00.roa Signing time: Mon 26 Aug 2024 05:13:03 +0000 ROA not before: Mon 26 Aug 2024 05:13:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18411 IP address blocks: 61.56.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Aug 26 05:13:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1293E5A94084EFA03BEBB5038CCE4285A140834D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:2f:6f:a0:56:e4:95:a3:6e:20:d4:40:2e: 74:d2:b5:21:57:96:83:08:19:8f:77:7f:93:85:79: aa:ab:62:40:2d:0b:d1:3f:68:5b:1a:e8:c1:65:94: 2e:5f:ff:fe:72:4b:f5:f0:52:34:36:70:0c:26:82: 12:23:46:62:c0:1f:70:a5:4a:63:d1:a4:6b:4a:c6: e7:2c:5b:24:eb:fb:ca:9f:9d:35:67:54:7c:49:a6: d1:83:6f:dd:75:07:18:42:f8:68:8f:fe:8b:15:bf: 5f:60:08:4a:a5:b0:2e:ca:17:cb:fa:3e:1d:7f:f2: 62:d7:ce:ea:91:80:d4:68:4e:53:7f:9a:a8:1f:24: 93:61:0b:b0:d4:bc:73:18:93:42:a5:10:8b:14:38: d9:ba:cd:03:ea:58:bc:fb:23:4d:a3:87:c6:7e:b4: 9f:f7:2f:24:22:f3:17:5e:8a:a0:ed:94:c0:e1:a8: 3a:98:eb:b7:de:96:46:4b:fc:f5:31:13:84:c3:71: 2d:0f:ca:72:77:99:ba:de:f4:0f:20:c2:78:3f:f4: 92:1e:36:e1:2a:f1:1d:41:1a:15:8e:f3:9f:87:46: df:8a:62:69:1c:e5:ec:97:ae:65:a0:57:ae:11:3c: 19:2e:e8:3e:80:84:72:9c:0e:25:51:05:98:89:c5: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:93:E5:A9:40:84:EF:A0:3B:EB:B5:03:8C:CE:42:85:A1:40:83:4D X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/EpPlqUCE76A767UDjM5ChaFAg00.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.25.0/24 Signature Algorithm: sha256WithRSAEncryption 96:00:1f:d4:16:95:81:22:0a:b1:11:8b:9b:90:ac:21:71:77: ef:08:f7:08:c3:8e:28:6d:de:c0:98:1e:25:ed:da:60:14:1f: a8:5f:07:f6:24:08:9a:2c:fe:37:f1:bf:06:c7:39:da:ec:fe: ef:09:3f:91:d0:f5:ed:a7:40:92:14:88:05:f8:a7:f6:83:bc: 6d:a7:07:be:7e:70:89:73:e9:9b:2f:5b:49:11:0b:14:31:cc: 92:f8:5a:11:f5:7e:27:77:3d:33:79:92:ed:eb:44:fd:53:73: 38:a4:3c:48:ee:89:68:b3:f6:b0:a0:fd:34:5d:b4:48:88:ee: 3d:b3:2f:12:6a:58:1b:d3:dd:f7:2a:d3:87:78:c7:3f:fb:ed: 9e:6c:67:75:5a:c3:6f:38:57:b6:17:84:1b:cb:f5:ed:0a:f9: 79:70:27:fd:a1:2a:ed:ae:d4:78:84:48:58:58:71:59:05:cc: c8:e1:70:20:bc:e8:15:1b:86:dc:05:7f:7f:f6:b3:1c:7c:40: 08:af:3d:27:fc:3a:bb:5e:ec:53:37:2a:2f:c2:73:82:01:5b: 5a:0b:08:9d:30:7c:24:52:7d:06:b7:71:f3:e7:50:ef:fe:71: 3d:5a:06:21:cb:49:d4:cc:fc:11:2d:2c:55:e4:3f:84:c6:cb: cf:9d:2b:10 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNDA4MjYw NTEzMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEyOTNFNUE5NDA4NEVG QTAzQkVCQjUwMzhDQ0U0Mjg1QTE0MDgzNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDV4i9voFbklaNuINRALnTStSFXloMIGY93f5OFeaqrYkAtC9E/ aFsa6MFllC5f//5yS/XwUjQ2cAwmghIjRmLAH3ClSmPRpGtKxucsWyTr+8qfnTVn VHxJptGDb911BxhC+GiP/osVv19gCEqlsC7KF8v6Ph1/8mLXzuqRgNRoTlN/mqgf JJNhC7DUvHMYk0KlEIsUONm6zQPqWLz7I02jh8Z+tJ/3LyQi8xdeiqDtlMDhqDqY 67felkZL/PUxE4TDcS0PynJ3mbre9A8gwng/9JIeNuEq8R1BGhWO85+HRt+KYmkc 5eyXrmWgV64RPBku6D6AhHKcDiVRBZiJxThHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUEpPlqUCE76A767UDjM5ChaFAg00wHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9FcFBscVVDRTc2QTc2N1VEak01 Q2hhRkFnMDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTgZ MA0GCSqGSIb3DQEBCwUAA4IBAQCWAB/UFpWBIgqxEYubkKwhcXfvCPcIw44obd7A mB4l7dpgFB+oXwf2JAiaLP438b8Gxzna7P7vCT+R0PXtp0CSFIgF+Kf2g7xtpwe+ fnCJc+mbL1tJEQsUMcyS+FoR9X4ndz0zeZLt60T9U3M4pDxI7olos/awoP00XbRI iO49sy8Salgb0933KtOHeMc/++2ebGd1WsNvOFe2F4Qby/XtCvl5cCf9oSrtrtR4 hEhYWHFZBczI4XAgvOgVG4bcBX9/9rMcfEAIrz0n/Dq7XuxTNyovwnOCAVtaCwid MHwkUn0Gt3Hz51Dv/nE9WgYhy0nUzPwRLSxV5D+ExsvPnSsQ -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:49 2024 by rpki-client on console-fra.rpki-client.org