$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/AxnTpDSnd7hatg0ui4944Vy_YTM.roa File: AxnTpDSnd7hatg0ui4944Vy_YTM.roa (raw, json) Hash identifier: HtxAiX9XqyfseASDRyHL5m4yl/qofnVoZ2MJTHNig98= Subject key identifier: 03:19:D3:A4:34:A7:77:B8:5A:B6:0D:2E:8B:8F:78:E1:5C:BF:61:33 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0D50 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/AxnTpDSnd7hatg0ui4944Vy_YTM.roa Signing time: Mon 26 Aug 2024 05:19:40 +0000 ROA not before: Mon 26 Aug 2024 05:19:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 61.61.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3408 (0xd50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 26 05:19:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0319D3A434A777B85AB60D2E8B8F78E15CBF6133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:05:14:9d:44:a6:46:47:4a:0d:2e:e6:83: 2a:d0:1f:c9:f1:ac:9f:bf:2e:08:01:0e:a6:74:e2: f8:cc:88:b2:b1:1e:59:de:af:01:bf:fa:80:d7:c4: 31:4b:1a:f4:16:16:ce:93:42:83:1c:c5:5b:e8:67: c7:13:a1:96:ff:3e:b6:24:a4:3c:25:91:d1:17:42: 42:12:33:f8:4b:8e:4f:d3:91:14:26:53:d1:60:c0: db:6d:90:e4:79:c5:3a:e5:de:ce:47:00:83:4c:71: 26:8a:49:fa:57:55:85:68:3c:f6:61:ff:b4:51:f3: d3:07:5f:81:48:52:15:40:f3:7d:01:1d:67:81:39: aa:b2:f1:d1:b0:75:a5:11:5f:e2:e9:08:db:15:2f: 66:c9:68:76:d0:76:02:66:11:04:51:f8:5e:60:70: 3b:4b:59:c2:a1:8d:a9:14:13:2d:7f:64:47:83:db: 36:7e:34:83:84:22:5d:8e:5d:8d:53:6d:e8:df:1f: 7f:e5:fd:2f:94:9b:42:57:26:d4:9a:4e:97:c9:1f: 9c:e4:38:9b:fe:d7:3a:0f:22:96:2a:10:27:b6:e0: 4f:8c:e5:82:c0:b5:74:34:01:2b:5b:de:2f:93:8b: e9:68:10:4d:80:4e:40:dd:2e:56:50:1c:42:9a:89: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:19:D3:A4:34:A7:77:B8:5A:B6:0D:2E:8B:8F:78:E1:5C:BF:61:33 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/AxnTpDSnd7hatg0ui4944Vy_YTM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.60.0/22 Signature Algorithm: sha256WithRSAEncryption a1:42:9a:e6:2a:9c:e9:c2:d8:99:9d:d8:1d:58:e1:f5:aa:98: 71:f8:73:07:c2:f8:5f:77:09:81:23:ad:61:ae:85:9c:10:ba: 3d:82:28:6c:e1:44:7d:67:1f:6f:73:0a:59:bb:e1:59:97:d8: b8:1e:7a:d4:66:0c:48:f6:ea:4f:39:02:72:c6:a5:f0:86:1a: d9:ef:53:d0:15:55:d4:e2:cd:79:53:1b:ef:58:73:20:61:54: d6:fc:06:72:48:25:57:ed:79:8e:e0:5f:c4:21:ef:be:7e:9f: 17:c9:6d:3d:84:fb:2c:27:70:38:f3:14:08:fe:c3:31:3e:1a: 22:e3:68:8e:79:d2:3c:3a:f5:cf:4e:a7:6d:83:d4:4f:77:0d: 3b:57:76:5c:1a:b1:34:79:15:55:ff:75:70:ed:fc:91:a9:de: 68:41:79:a4:43:24:5f:69:0a:27:ea:21:a5:b1:8b:84:9f:82: 7c:a1:68:15:ce:a8:13:ed:63:05:a5:5d:ac:2f:a6:69:f0:3c: fc:c0:39:d8:34:62:6f:54:7c:6a:8a:2a:a8:0a:1c:a1:02:bf: 6e:ac:da:99:66:45:a4:a9:31:de:5d:fa:9f:cb:9b:63:c1:a2: 3b:b2:5d:6c:c6:d3:f5:d5:7f:5d:43:ed:26:7f:4e:aa:7d:58: 0f:55:76:65 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNDA4MjYw NTE5NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAzMTlEM0E0MzRBNzc3 Qjg1QUI2MEQyRThCOEY3OEUxNUNCRjYxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuYQUUnUSmRkdKDS7mgyrQH8nxrJ+/LggBDqZ04vjMiLKxHlne rwG/+oDXxDFLGvQWFs6TQoMcxVvoZ8cToZb/PrYkpDwlkdEXQkISM/hLjk/TkRQm U9FgwNttkOR5xTrl3s5HAINMcSaKSfpXVYVoPPZh/7RR89MHX4FIUhVA830BHWeB Oaqy8dGwdaURX+LpCNsVL2bJaHbQdgJmEQRR+F5gcDtLWcKhjakUEy1/ZEeD2zZ+ NIOEIl2OXY1TbejfH3/l/S+Um0JXJtSaTpfJH5zkOJv+1zoPIpYqECe24E+M5YLA tXQ0AStb3i+Ti+loEE2ATkDdLlZQHEKaiRRnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUAxnTpDSnd7hatg0ui4944Vy/YTMwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0F4blRwRFNuZDdoYXRnMHVpNDk0NFZ5 X1lUTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PTwwDQYJ KoZIhvcNAQELBQADggEBAKFCmuYqnOnC2Jmd2B1Y4fWqmHH4cwfC+F93CYEjrWGu hZwQuj2CKGzhRH1nH29zClm74VmX2LgeetRmDEj26k85AnLGpfCGGtnvU9AVVdTi zXlTG+9YcyBhVNb8BnJIJVfteY7gX8Qh775+nxfJbT2E+ywncDjzFAj+wzE+GiLj aI550jw69c9Op22D1E93DTtXdlwasTR5FVX/dXDt/JGp3mhBeaRDJF9pCifqIaWx i4SfgnyhaBXOqBPtYwWlXawvpmnwPPzAOdg0Ym9UfGqKKqgKHKECv26s2plmRaSp Md5d+p/Lm2PBojuyXWzG0/XVf11D7SZ/Tqp9WA9VdmU= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org