$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/J22BlhgRZmxWs5HCwkYVOTDsDpE.roa File: J22BlhgRZmxWs5HCwkYVOTDsDpE.roa (raw, json) Hash identifier: ffdqe2skkofWVQpv1OaSschMtB2LK4otYIMSrFCPmi8= Subject key identifier: 27:6D:81:96:18:11:66:6C:56:B3:91:C2:C2:46:15:39:30:EC:0E:91 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C1A Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/J22BlhgRZmxWs5HCwkYVOTDsDpE.roa Signing time: Fri 01 Sep 2023 09:13:58 +0000 ROA not before: Fri 01 Sep 2023 09:13:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4780 IP address blocks: 61.61.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:13:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=276D81961811666C56B391C2C246153930EC0E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7c:bc:e5:34:d1:88:77:3d:55:78:a8:bc:02: 25:f2:1b:2f:fb:24:49:c6:16:9f:fc:b2:86:23:60: 07:bb:59:2e:0f:55:4a:a5:44:7c:60:23:36:15:50: 63:1c:a9:6d:e0:62:ed:99:81:fe:55:43:b8:eb:d5: 17:e2:fe:f1:24:78:cc:7a:3a:cc:42:4e:3c:c3:03: c0:d3:96:98:33:29:99:ce:98:88:8d:e1:7a:b1:db: 75:94:b8:b6:37:e9:5d:33:4b:af:9c:7b:72:3d:4b: 3a:76:99:28:79:2a:77:19:51:6c:4c:21:3c:4c:08: 1b:7a:98:57:ab:ef:b7:86:20:0f:9d:7d:08:80:1d: f9:cf:eb:42:23:6e:db:bc:7b:7e:d9:f0:52:5d:44: 15:82:aa:5e:e5:d4:5b:ea:5e:94:33:e3:89:96:26: e1:c3:ee:46:3e:e2:b6:3a:43:cb:d1:3d:de:2a:3c: 33:91:a7:4f:ec:a3:39:14:95:ee:61:a9:fc:28:a5: a5:d8:73:50:d2:bb:22:79:04:da:da:a1:81:48:60: 68:5a:4b:90:8f:1d:63:fc:c1:d8:e5:f2:e4:2b:8e: 3e:bf:24:63:06:4d:d0:55:50:db:87:3e:c6:6a:05: 7f:de:ad:c6:d2:71:a3:5a:3c:9a:89:a2:46:49:98: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6D:81:96:18:11:66:6C:56:B3:91:C2:C2:46:15:39:30:EC:0E:91 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/J22BlhgRZmxWs5HCwkYVOTDsDpE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.128.0/18 Signature Algorithm: sha256WithRSAEncryption 38:d2:5a:83:4b:e5:8d:76:b8:28:d0:d4:90:21:12:e4:20:50: a0:68:de:f6:eb:fd:a3:cf:f6:f2:6e:9d:e0:85:30:95:e9:85: 14:c3:2c:3c:10:95:28:12:97:b7:e8:b4:7c:24:8c:6d:68:b2: 2c:59:1e:78:15:a2:8f:33:7a:a8:a0:6e:14:e5:ba:16:6a:8d: 5c:1c:ee:a0:2e:42:cb:52:2f:e7:2f:95:45:7d:e4:39:33:74: 56:34:f2:57:b8:e3:4f:83:ae:26:5d:df:44:bd:bc:f2:b6:e6: e6:a3:68:dc:ce:bb:00:ab:b7:27:93:4b:44:fc:a3:6b:01:66: 08:53:3b:e6:d2:42:72:08:98:07:d2:2e:72:98:7a:e7:4f:5c: 38:81:ac:d0:10:bb:bf:dd:41:1f:10:8f:88:e3:23:dd:9b:60: 8c:d7:21:96:12:d9:fe:14:98:e9:d0:7a:b5:e8:b0:b5:0b:71: 9a:9f:86:41:dc:4c:c0:5d:20:5f:7b:4e:08:68:3f:c2:0b:96: a6:c3:d0:d7:b9:50:92:f2:86:53:ac:ed:4d:ae:e9:6d:27:d1: be:f7:67:8e:55:c9:73:5d:ed:c8:97:0e:d3:e4:52:dd:1b:52: ec:68:20:f6:28:e9:bd:0c:c6:34:40:2a:c9:be:e1:b9:f9:bd: a4:75:0b:79 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTEzNThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI3NkQ4MTk2MTgxMTY2 NkM1NkIzOTFDMkMyNDYxNTM5MzBFQzBFOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgfLzlNNGIdz1VeKi8AiXyGy/7JEnGFp/8soYjYAe7WS4PVUql RHxgIzYVUGMcqW3gYu2Zgf5VQ7jr1Rfi/vEkeMx6OsxCTjzDA8DTlpgzKZnOmIiN 4Xqx23WUuLY36V0zS6+ce3I9Szp2mSh5KncZUWxMITxMCBt6mFer77eGIA+dfQiA HfnP60Ijbtu8e37Z8FJdRBWCql7l1FvqXpQz44mWJuHD7kY+4rY6Q8vRPd4qPDOR p0/sozkUle5hqfwopaXYc1DSuyJ5BNraoYFIYGhaS5CPHWP8wdjl8uQrjj6/JGMG TdBVUNuHPsZqBX/ercbScaNaPJqJokZJmIkHAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUJ22BlhgRZmxWs5HCwkYVOTDsDpEwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0oyMkJsaGdSWm14V3M1SEN3a1lWT1RE c0RwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY9PYAwDQYJ KoZIhvcNAQELBQADggEBADjSWoNL5Y12uCjQ1JAhEuQgUKBo3vbr/aPP9vJuneCF MJXphRTDLDwQlSgSl7fotHwkjG1osixZHngVoo8zeqigbhTluhZqjVwc7qAuQstS L+cvlUV95DkzdFY08le440+DriZd30S9vPK25uajaNzOuwCrtyeTS0T8o2sBZghT O+bSQnIImAfSLnKYeudPXDiBrNAQu7/dQR8Qj4jjI92bYIzXIZYS2f4UmOnQerXo sLULcZqfhkHcTMBdIF97TghoP8ILlqbD0Ne5UJLyhlOs7U2u6W0n0b73Z45VyXNd 7ciXDtPkUt0bUuxoIPYo6b0MxjRAKsm+4bn5vaR1C3k= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:01 2024 by rpki-client on console-fra.rpki-client.org