$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/4Ts2pIyX81jErYet392Enip_tuE.roa File: 4Ts2pIyX81jErYet392Enip_tuE.roa (raw, json) Hash identifier: e4Co8RjptHtAI7tNkYI7KaFx+jvfbzYP8j/sihTjpUg= Subject key identifier: E1:3B:36:A4:8C:97:F3:58:C4:AD:87:AD:DF:DD:84:9E:2A:7F:B6:E1 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C28 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/4Ts2pIyX81jErYet392Enip_tuE.roa Signing time: Fri 01 Sep 2023 09:14:02 +0000 ROA not before: Fri 01 Sep 2023 09:14:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 61.61.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:14:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=E13B36A48C97F358C4AD87ADDFDD849E2A7FB6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:91:8b:ce:ec:d5:1a:4e:33:21:62:a8:a7: 93:e2:15:1f:44:43:ae:45:82:fe:8e:74:a0:fd:3f: f5:93:f7:89:3b:13:ba:e5:6f:63:d6:fa:d7:70:0a: ed:16:18:c5:06:9b:e2:d2:e6:04:63:54:2c:75:c8: fa:28:5a:7f:22:23:cc:9e:d8:a4:c6:90:e0:0f:1d: bd:7d:d3:69:e7:b0:1a:11:96:33:eb:6c:54:d7:0b: 5d:32:81:11:76:74:88:a3:48:bf:4a:20:0f:e5:a1: ac:0e:32:80:87:0c:d8:7d:b3:59:29:bc:38:57:c5: c1:14:cb:05:e5:62:04:32:c9:6a:ca:5d:d9:c9:10: 5a:ef:79:d7:d3:4c:64:89:9e:a2:84:74:8c:84:c1: 32:41:94:fb:ad:ea:73:d7:0c:8a:43:7c:41:d6:4d: 93:d8:07:6d:9b:7a:3d:96:46:e9:7d:cb:a4:cb:4f: 46:3c:90:1f:1c:a8:28:33:76:3a:25:1a:36:64:da: 5f:d0:2e:47:0d:ce:4b:99:a4:f8:7f:cc:39:f7:d3: 2e:5f:db:70:a7:88:82:fa:da:72:b4:87:fe:60:41: dc:31:b9:2c:e5:42:59:da:b4:94:30:70:38:37:9c: ca:4b:d5:c1:c8:d9:4b:36:60:49:d3:3c:37:c9:38: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3B:36:A4:8C:97:F3:58:C4:AD:87:AD:DF:DD:84:9E:2A:7F:B6:E1 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/4Ts2pIyX81jErYet392Enip_tuE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.76.0/22 Signature Algorithm: sha256WithRSAEncryption 69:18:1c:91:24:e4:1a:9f:3e:0d:ed:c6:bf:0b:1a:87:65:25: c9:eb:9d:cf:2b:e5:dd:cc:1c:04:7e:e5:8e:57:48:5d:b4:8e: 46:0b:40:4e:7d:22:64:a0:7d:2b:4c:fd:8e:0d:9a:f4:87:4b: 56:b2:f6:1b:b0:c5:be:f1:73:09:9f:84:9a:5e:4c:a3:63:54: f5:56:58:e4:12:2c:d3:c3:f9:54:50:3d:62:29:27:1d:5b:2e: 40:da:21:7d:92:09:ea:bb:93:ea:81:82:69:37:bf:3e:ac:c7: 4f:5b:e9:a3:a9:37:3a:c2:18:8e:db:f0:29:bb:cc:99:ba:cb: 42:44:2b:6e:c0:cd:05:36:cc:59:b8:ca:93:f6:9c:37:67:bf: b3:f5:ea:74:3f:46:8f:ea:cb:29:e1:fd:a4:52:eb:ac:7a:fa: 79:58:11:21:ba:bb:29:35:5e:a3:17:db:28:53:9a:de:42:04: 9f:b2:e2:e9:5e:df:af:15:f3:b1:7c:f1:71:11:66:14:43:93: 34:cc:aa:dd:f3:18:0d:e4:40:74:a5:5c:79:21:a4:cc:6f:f2: 38:5b:58:7d:13:2a:61:f8:48:40:ad:76:f9:13:4c:c6:c7:ac: 15:50:c2:29:03:d6:9a:96:24:50:f7:8e:8a:b6:cc:09:5b:96: 50:a4:a9:5f -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTE0MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUxM0IzNkE0OEM5N0Yz NThDNEFEODdBRERGREQ4NDlFMkE3RkI2RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChC5GLzuzVGk4zIWKop5PiFR9EQ65Fgv6OdKD9P/WT94k7E7rl b2PW+tdwCu0WGMUGm+LS5gRjVCx1yPooWn8iI8ye2KTGkOAPHb1902nnsBoRljPr bFTXC10ygRF2dIijSL9KIA/loawOMoCHDNh9s1kpvDhXxcEUywXlYgQyyWrKXdnJ EFrvedfTTGSJnqKEdIyEwTJBlPut6nPXDIpDfEHWTZPYB22bej2WRul9y6TLT0Y8 kB8cqCgzdjolGjZk2l/QLkcNzkuZpPh/zDn30y5f23CniIL62nK0h/5gQdwxuSzl QlnatJQwcDg3nMpL1cHI2Us2YEnTPDfJOLFXAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU4Ts2pIyX81jErYet392Enip/tuEwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dULzRUczJwSXlYODFqRXJZZXQzOTJFbmlw X3R1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PUwwDQYJ KoZIhvcNAQELBQADggEBAGkYHJEk5BqfPg3txr8LGodlJcnrnc8r5d3MHAR+5Y5X SF20jkYLQE59ImSgfStM/Y4NmvSHS1ay9huwxb7xcwmfhJpeTKNjVPVWWOQSLNPD +VRQPWIpJx1bLkDaIX2SCeq7k+qBgmk3vz6sx09b6aOpNzrCGI7b8Cm7zJm6y0JE K27AzQU2zFm4ypP2nDdnv7P16nQ/Ro/qyynh/aRS66x6+nlYESG6uyk1XqMX2yhT mt5CBJ+y4ule368V87F88XERZhRDkzTMqt3zGA3kQHSlXHkhpMxv8jhbWH0TKmH4 SECtdvkTTMbHrBVQwikD1pqWJFD3joq2zAlbllCkqV8= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:01 2024 by rpki-client on console-fra.rpki-client.org