$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XHiuGhqNsJbVXaqjU9Hw7AdB62A.roa File: XHiuGhqNsJbVXaqjU9Hw7AdB62A.roa (raw, json) Hash identifier: Z+nUNLcXynEviTs8pVVVA6+xXV/lfyfRu1XMrzUWGoc= Subject key identifier: 5C:78:AE:1A:1A:8D:B0:96:D5:5D:AA:A3:53:D1:F0:EC:07:41:EB:60 Certificate issuer: /CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Certificate serial: 0C4D Authority key identifier: 94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XHiuGhqNsJbVXaqjU9Hw7AdB62A.roa Signing time: Mon 26 Aug 2024 05:13:04 +0000 ROA not before: Mon 26 Aug 2024 05:13:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18411 IP address blocks: 61.56.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C6DDFDD4BAA50400F3A119A5833CE0021BDB2E Validity Not Before: Aug 26 05:13:04 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5C78AE1A1A8DB096D55DAAA353D1F0EC0741EB60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:9e:86:93:e7:7e:df:39:48:92:a5:d9:29: b5:8b:d3:76:c3:8b:09:ef:72:d8:f8:29:05:46:f3: 5b:9e:dd:2e:be:8a:67:82:49:dd:81:0b:8d:03:f2: a7:15:66:df:eb:5a:fd:84:da:92:ff:11:94:a3:f0: 9b:ae:8e:37:1f:fe:5b:f7:f3:a9:28:37:8f:3c:2d: 18:c4:da:5a:43:dd:86:38:34:5d:df:38:9f:9d:8d: 8c:28:61:dc:e9:05:d7:4d:95:6f:9b:93:21:d8:f5: 20:73:52:2d:7f:75:6b:4e:32:30:81:e0:65:dc:1c: a4:2f:8e:eb:0e:25:15:ab:d0:cc:ca:6b:df:be:b0: e5:cc:a9:50:9c:54:2c:9a:6a:5a:e1:d6:d7:69:d0: fc:c6:88:0b:28:46:56:e7:d6:31:fc:f9:bb:2b:2b: 8a:71:20:14:1c:ff:ac:65:7e:aa:04:72:28:22:9e: 83:ec:db:a1:fe:01:65:c7:97:8d:91:fb:23:85:a5: d4:5a:c8:8e:e9:44:ef:bb:be:2e:e7:6b:a3:58:13: fb:31:5f:86:bc:39:f0:d4:79:31:ed:a1:d4:8f:7d: 4f:19:a2:5a:4e:d6:1e:c8:d1:0b:9a:18:db:29:4e: 87:d4:71:73:6a:27:43:b9:81:3d:75:96:33:60:56: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:78:AE:1A:1A:8D:B0:96:D5:5D:AA:A3:53:D1:F0:EC:07:41:EB:60 X509v3 Authority Key Identifier: keyid:94:C6:DD:FD:D4:BA:A5:04:00:F3:A1:19:A5:83:3C:E0:02:1B:DB:2E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/lMbd_dS6pQQA86EZpYM84AIb2y4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lMbd_dS6pQQA86EZpYM84AIb2y4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EDTNS/XHiuGhqNsJbVXaqjU9Hw7AdB62A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.56.18.0/24 Signature Algorithm: sha256WithRSAEncryption 96:6a:d3:e5:fe:d5:97:27:a3:7c:57:fa:4a:17:6d:44:dc:77: 4b:dd:a6:3f:fd:3a:1c:30:b1:f4:5f:a3:ef:15:00:b9:c9:4e: 3b:58:10:04:56:db:ef:90:f4:bd:3f:0f:82:5f:a3:f8:f6:a8: 40:ff:98:d4:67:87:03:97:06:3f:56:9b:09:eb:b4:bf:22:f9: 1b:58:ac:bb:85:3c:e6:62:4d:69:74:e8:c7:73:0d:45:4f:9b: 0a:8e:52:d9:5b:13:70:eb:13:de:6c:70:88:10:ea:22:91:b0: 63:35:8d:62:58:0b:55:37:e4:7c:6f:47:2a:5f:6e:8b:b4:a0: 1e:c3:c2:b5:84:0a:a1:d1:b1:09:8e:f4:7d:81:20:c4:13:fc: 6f:df:92:69:46:84:44:12:bc:c2:f2:77:3a:8a:88:26:34:95: 17:66:25:19:f0:16:9a:d0:ec:e3:e1:b5:c0:8f:d3:30:5e:ee: 84:1b:6f:3b:f2:af:25:5b:63:e3:d2:36:47:c4:20:6b:af:06: 32:42:05:2d:29:66:a9:a4:9d:53:e7:0b:84:0f:34:dd:7f:fd: 7f:85:d0:b4:21:92:85:f3:94:b7:49:c7:c2:e7:81:e1:cd:c1: 54:2d:9c:4c:30:bf:30:5e:99:a3:30:f6:e5:44:28:02:9d:2f: 68:fa:99:3d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTRD NkRERkRENEJBQTUwNDAwRjNBMTE5QTU4MzNDRTAwMjFCREIyRTAeFw0yNDA4MjYw NTEzMDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDNzhBRTFBMUE4REIw OTZENTVEQUFBMzUzRDFGMEVDMDc0MUVCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCc856Gk+d+3zlIkqXZKbWL03bDiwnvctj4KQVG81ue3S6+imeC Sd2BC40D8qcVZt/rWv2E2pL/EZSj8Juujjcf/lv386koN488LRjE2lpD3YY4NF3f OJ+djYwoYdzpBddNlW+bkyHY9SBzUi1/dWtOMjCB4GXcHKQvjusOJRWr0MzKa9++ sOXMqVCcVCyaalrh1tdp0PzGiAsoRlbn1jH8+bsrK4pxIBQc/6xlfqoEciginoPs 26H+AWXHl42R+yOFpdRayI7pRO+7vi7na6NYE/sxX4a8OfDUeTHtodSPfU8ZolpO 1h7I0QuaGNspTofUcXNqJ0O5gT11ljNgVsPpAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUXHiuGhqNsJbVXaqjU9Hw7AdB62AwHwYDVR0jBBgwFoAUlMbd/dS6pQQA86EZ pYM84AIb2y4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRURUTlMv bE1iZF9kUzZwUVFBODZFWnBZTTg0QUliMnk0LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9sTWJkX2RTNnBRUUE4NkVacFlNODRBSWIyeTQuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9FRFROUy9YSGl1R2hxTnNKYlZYYXFqVTlI dzdBZEI2MkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTgS MA0GCSqGSIb3DQEBCwUAA4IBAQCWatPl/tWXJ6N8V/pKF21E3HdL3aY//TocMLH0 X6PvFQC5yU47WBAEVtvvkPS9Pw+CX6P49qhA/5jUZ4cDlwY/VpsJ67S/IvkbWKy7 hTzmYk1pdOjHcw1FT5sKjlLZWxNw6xPebHCIEOoikbBjNY1iWAtVN+R8b0cqX26L tKAew8K1hAqh0bEJjvR9gSDEE/xv35JpRoREErzC8nc6iogmNJUXZiUZ8Baa0Ozj 4bXAj9MwXu6EG2878q8lW2Pj0jZHxCBrrwYyQgUtKWappJ1T5wuEDzTdf/1/hdC0 IZKF85S3ScfC54HhzcFULZxMML8wXpmjMPblRCgCnS9o+pk9 -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:36 2024 by rpki-client on console-fra.rpki-client.org