$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa File: 54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa (raw, json) Hash identifier: L1jxjPmqH4fiUgepqP9mHncPo3XXlUJvDMCL9EkBa2s= Subject key identifier: E7:89:03:96:1A:4C:1F:09:59:3F:01:CF:7C:9E:45:A0:85:F4:68:6C Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0D53 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa Signing time: Mon 26 Aug 2024 05:19:41 +0000 ROA not before: Mon 26 Aug 2024 05:19:41 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 61.61.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 26 05:19:41 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E78903961A4C1F09593F01CF7C9E45A085F4686C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:dc:47:8a:19:49:77:c4:56:0d:80:75:7b: 6f:44:88:53:6f:f6:82:6a:1d:d3:a4:63:94:24:27: e5:37:04:c6:85:65:47:69:ce:23:70:44:a1:c3:dc: 24:b9:11:17:44:26:3b:f2:8a:40:8d:9a:18:46:63: c4:40:9a:58:1d:dd:ab:90:73:c2:47:06:99:28:e1: d8:3c:ba:55:4a:7e:43:61:1c:9a:37:78:c2:cd:d8: a6:13:14:00:e1:b1:65:4c:ca:d0:79:3a:dc:cd:2a: 20:88:28:c6:85:91:90:5c:a8:67:b4:64:c2:37:07: 6c:d2:31:5f:58:fd:22:1b:b2:4d:62:9f:f4:e7:32: 75:5c:66:7f:b7:3f:84:b9:7e:ed:04:44:ac:6d:d8: fc:35:cf:f3:f3:13:c1:39:a5:f4:d8:11:09:be:02: 89:92:b3:cf:af:07:a3:78:c6:a5:14:d0:3a:37:a0: 25:8d:d5:0e:b7:9e:8e:b7:83:ed:46:32:59:a9:e7: d2:ea:43:4d:b8:55:c2:0b:e7:a0:e3:8a:a2:e7:e4: 72:88:b7:00:af:b3:7e:fe:24:b4:07:4b:ee:9b:58: 42:b4:a9:0d:1f:3e:87:45:e0:c3:08:a2:cf:31:93: 0f:8c:6a:4f:61:17:e9:ca:bc:51:3d:13:3a:61:07: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:03:96:1A:4C:1F:09:59:3F:01:CF:7C:9E:45:A0:85:F4:68:6C X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.0.0/17 Signature Algorithm: sha256WithRSAEncryption 67:21:6d:4c:6e:33:93:1a:07:bc:c0:7b:7e:8d:61:97:29:47: fc:d4:db:53:d0:3a:ae:33:cb:02:f2:50:f7:54:fe:ce:6f:62: e5:34:66:cb:8a:53:11:c3:ba:0b:de:b3:43:98:19:42:b1:7b: e9:ba:82:5f:09:36:41:62:40:ca:d8:30:38:e4:24:d6:99:6e: 9b:81:ae:99:c1:d9:31:1a:53:09:a4:15:d5:f1:46:a4:a2:e9: 9b:cf:86:de:d1:0a:1c:10:6b:fc:70:d6:0e:c1:42:1d:ba:b1: 7c:c2:ee:89:09:3d:5f:ba:0f:81:1d:53:51:d8:6d:dc:5f:c9: 06:46:2f:ba:9c:e2:f6:4e:60:5b:15:36:84:0c:06:5d:69:6c: 2a:7a:68:6e:a1:86:a6:ad:75:65:51:99:bd:3a:a0:7c:a1:5f: f2:4a:7d:4f:ba:d3:5b:b0:7d:4b:c7:3a:81:4c:33:d2:7d:13: b9:c9:00:c5:e4:ae:28:11:d1:dd:a2:58:4b:05:52:54:fc:cc: ee:91:a7:59:52:2f:21:71:b9:96:01:25:b2:8f:bb:94:18:1e: aa:41:0a:68:72:f4:cf:02:b5:36:0b:28:52:3c:ba:ad:ea:af: ce:b0:51:3d:41:d4:7a:16:7e:93:a9:e3:87:3b:e1:70:74:30: 5b:aa:c2:7a -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNDA4MjYw NTE5NDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU3ODkwMzk2MUE0QzFG MDk1OTNGMDFDRjdDOUU0NUEwODVGNDY4NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsl9xHihlJd8RWDYB1e29EiFNv9oJqHdOkY5QkJ+U3BMaFZUdp ziNwRKHD3CS5ERdEJjvyikCNmhhGY8RAmlgd3auQc8JHBpko4dg8ulVKfkNhHJo3 eMLN2KYTFADhsWVMytB5OtzNKiCIKMaFkZBcqGe0ZMI3B2zSMV9Y/SIbsk1in/Tn MnVcZn+3P4S5fu0ERKxt2Pw1z/PzE8E5pfTYEQm+AomSs8+vB6N4xqUU0Do3oCWN 1Q63no63g+1GMlmp59LqQ024VcIL56DjiqLn5HKItwCvs37+JLQHS+6bWEK0qQ0f PodF4MMIos8xkw+Mak9hF+nKvFE9EzphB31NAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU54kDlhpMHwlZPwHPfJ5FoIX0aGwwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dULzU0a0RsaHBNSHdsWlB3SFBmSjVGb0lY MGFHdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9PQAwDQYJ KoZIhvcNAQELBQADggEBAGchbUxuM5MaB7zAe36NYZcpR/zU21PQOq4zywLyUPdU /s5vYuU0ZsuKUxHDugves0OYGUKxe+m6gl8JNkFiQMrYMDjkJNaZbpuBrpnB2TEa UwmkFdXxRqSi6ZvPht7RChwQa/xw1g7BQh26sXzC7okJPV+6D4EdU1HYbdxfyQZG L7qc4vZOYFsVNoQMBl1pbCp6aG6hhqatdWVRmb06oHyhX/JKfU+601uwfUvHOoFM M9J9E7nJAMXkrigR0d2iWEsFUlT8zO6Rp1lSLyFxuZYBJbKPu5QYHqpBCmhy9M8C tTYLKFI8uq3qr86wUT1B1HoWfpOp44c74XB0MFuqwno= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org