$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iK_RaCwCDgKO_FjmtD5BP4nwrXM.roa File: iK_RaCwCDgKO_FjmtD5BP4nwrXM.roa (raw, json) Hash identifier: LUJ0D180efEoU25h0faKcdnLZZffJTyOH9FopFyaOTQ= Subject key identifier: 88:AF:D1:68:2C:02:0E:02:8E:FC:58:E6:B4:3E:41:3F:89:F0:AD:73 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FFC Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iK_RaCwCDgKO_FjmtD5BP4nwrXM.roa Signing time: Mon 26 Aug 2024 05:15:57 +0000 ROA not before: Mon 26 Aug 2024 05:15:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24154 IP address blocks: 60.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4092 (0xffc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:57 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=88AFD1682C020E028EFC58E6B43E413F89F0AD73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:d1:a5:a4:bb:96:9e:4c:fd:46:92:53:d4: 3e:99:61:ed:ba:be:c9:09:78:e1:48:fc:67:1d:bf: 09:b7:41:05:59:55:34:42:04:68:45:e8:fe:b1:b4: 11:6c:bb:77:a1:cf:bf:e4:8c:82:9c:7b:e2:7e:bc: 55:40:e8:fc:30:bc:f6:74:1c:d8:fd:22:75:cd:5e: a7:10:52:0e:1d:37:eb:0e:65:fc:2c:67:c5:cf:47: fe:9d:86:39:f5:11:87:a9:2d:49:6e:3a:6c:6a:7d: d7:b2:64:aa:07:cd:f9:1b:d9:04:62:c9:04:cb:7f: 75:75:fb:99:9c:83:31:70:be:78:f6:85:33:fa:1b: d1:34:0f:9d:bc:a2:2d:a4:04:96:96:92:20:de:3f: b1:61:68:fd:3a:b4:f0:ed:2d:9c:a4:d9:96:ec:c4: 79:f2:02:7c:c7:1b:45:ba:94:44:f4:2d:49:f7:52: 63:fd:29:d9:a1:0b:91:9d:5d:4b:80:7f:23:17:7d: 03:c9:91:b5:5f:11:20:d3:93:38:90:a6:fb:88:4e: 86:8d:80:38:3e:8b:95:d7:dc:3d:ec:18:24:c1:9b: 19:11:ea:ab:e5:38:ee:44:43:57:6c:24:51:34:45: 1c:9f:c2:a3:0e:0e:9a:fb:68:96:fd:cc:a8:92:3f: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AF:D1:68:2C:02:0E:02:8E:FC:58:E6:B4:3E:41:3F:89:F0:AD:73 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iK_RaCwCDgKO_FjmtD5BP4nwrXM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.244.1.0/24 Signature Algorithm: sha256WithRSAEncryption af:fc:7b:94:e0:28:11:14:d8:8e:97:77:70:eb:f4:f8:3b:58: 0d:bd:11:e1:7a:3b:bb:4b:8d:14:c6:53:3b:c9:f7:6c:2e:a6: cc:61:5b:fc:39:0c:25:55:88:60:7b:32:ff:91:98:80:a0:38: ea:0b:2e:58:da:10:a6:04:b2:27:ac:73:6d:57:f8:b4:2c:aa: 52:d6:6d:08:e0:7c:b5:bc:9a:72:00:26:12:a6:66:89:67:9e: 9e:34:00:61:a2:26:e8:e7:f6:81:48:4c:d5:1c:29:46:2a:68: d0:55:64:21:c2:ff:70:4e:54:5d:b2:80:5b:5a:8b:9d:11:d0: 37:0f:08:a7:31:ee:81:8a:09:39:32:80:49:83:14:36:21:30: df:81:e3:77:c1:88:8b:b7:43:ea:9c:a2:d4:57:a7:bf:f8:06: 47:8b:36:33:02:1d:5c:78:b6:5f:ff:37:9e:cc:68:c1:14:47: 02:26:22:3c:9a:8c:c5:df:9c:1d:be:6d:b1:f8:51:f5:74:ab: 5a:49:36:98:ae:10:57:02:1d:95:ed:7c:e1:7c:5c:00:9d:ad: 3e:ce:28:83:cd:f8:a4:a4:a1:bd:ce:35:cb:82:80:f5:2d:6d: a3:2c:07:d3:7a:cd:5d:a3:08:1f:cd:37:25:e9:af:5b:2b:f2: 48:ff:02:1a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICD/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4QUZEMTY4MkMwMjBF MDI4RUZDNThFNkI0M0U0MTNGODlGMEFENzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHmdGlpLuWnkz9RpJT1D6ZYe26vskJeOFI/Gcdvwm3QQVZVTRC BGhF6P6xtBFsu3ehz7/kjIKce+J+vFVA6PwwvPZ0HNj9InXNXqcQUg4dN+sOZfws Z8XPR/6dhjn1EYepLUluOmxqfdeyZKoHzfkb2QRiyQTLf3V1+5mcgzFwvnj2hTP6 G9E0D528oi2kBJaWkiDeP7FhaP06tPDtLZyk2ZbsxHnyAnzHG0W6lET0LUn3UmP9 KdmhC5GdXUuAfyMXfQPJkbVfESDTkziQpvuIToaNgDg+i5XX3D3sGCTBmxkR6qvl OO5EQ1dsJFE0RRyfwqMODpr7aJb9zKiSP5JNAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUiK/RaCwCDgKO/FjmtD5BP4nwrXMwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2lLX1JhQ3dDRGdLT19Gam10RDVCUDRu d3JYTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA89AEwDQYJ KoZIhvcNAQELBQADggEBAK/8e5TgKBEU2I6Xd3Dr9Pg7WA29EeF6O7tLjRTGUzvJ 92wupsxhW/w5DCVViGB7Mv+RmICgOOoLLljaEKYEsiesc21X+LQsqlLWbQjgfLW8 mnIAJhKmZolnnp40AGGiJujn9oFITNUcKUYqaNBVZCHC/3BOVF2ygFtai50R0DcP CKcx7oGKCTkygEmDFDYhMN+B43fBiIu3Q+qcotRXp7/4BkeLNjMCHVx4tl//N57M aMEURwImIjyajMXfnB2+bbH4UfV0q1pJNpiuEFcCHZXtfOF8XACdrT7OKIPN+KSk ob3ONcuCgPUtbaMsB9N6zV2jCB/NNyXpr1sr8kj/Aho= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:38 2024 by rpki-client on console-fra.rpki-client.org