$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/Ob04RhHg0XnGKEH-H7TQkTvYSas.roa File: Ob04RhHg0XnGKEH-H7TQkTvYSas.roa (raw, json) Hash identifier: OQeYf9GNnUuRyQvk1EUUupZ7efJwutmvY1ukX4T6K8Y= Subject key identifier: 39:BD:38:46:11:E0:D1:79:C6:28:41:FE:1F:B4:D0:91:3B:D8:49:AB Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0D6F Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/Ob04RhHg0XnGKEH-H7TQkTvYSas.roa Signing time: Mon 26 Aug 2024 05:19:48 +0000 ROA not before: Mon 26 Aug 2024 05:19:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 61.61.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 26 05:19:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=39BD384611E0D179C62841FE1FB4D0913BD849AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:29:e0:f1:52:b6:d1:01:03:54:d4:77:15: 40:a3:f3:54:27:d6:58:71:4f:6d:cd:69:10:6f:a5: 4f:11:56:e3:b3:81:80:44:55:97:22:69:de:b3:e7: 59:ba:4f:6c:4f:27:5f:f4:bf:dc:97:75:46:17:3c: 7d:62:3e:04:4b:a9:11:4c:e7:37:ae:7d:1a:25:a9: ca:22:05:ad:fc:55:38:e6:64:6e:76:1b:ff:4c:c2: 44:48:26:db:57:9e:ef:fc:2f:fb:7a:0d:cb:0b:76: 25:8e:2d:b5:57:1a:f8:55:2e:f0:0b:1f:7b:cd:b8: fc:de:c6:6f:4b:53:2f:87:40:28:54:f4:7b:49:86: 8d:f6:a6:23:10:16:96:1b:12:e9:1c:31:1b:3a:38: d3:a6:31:a1:d8:40:c1:6d:91:6f:5a:4b:50:4c:6d: d8:c0:2c:b1:57:fc:81:e3:14:28:b0:8c:7e:7c:c0: 8d:1b:54:90:c3:45:94:57:44:12:6b:35:70:1b:22: a9:b2:f1:ea:69:fc:5f:02:1c:b9:54:b5:ce:9b:cc: 60:05:d8:b8:51:c8:fc:cb:4d:4a:a7:28:ba:64:b3: 70:83:bd:77:1a:c9:f1:43:63:58:e9:2f:55:fb:b6: 1b:d8:53:8c:bf:f3:cd:d1:3e:e6:80:f4:a4:52:fc: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BD:38:46:11:E0:D1:79:C6:28:41:FE:1F:B4:D0:91:3B:D8:49:AB X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/Ob04RhHg0XnGKEH-H7TQkTvYSas.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.4.0/23 Signature Algorithm: sha256WithRSAEncryption 81:b3:6a:5e:f7:e6:9e:38:e8:6b:1d:31:72:41:d3:f2:72:30: f6:a7:45:95:53:64:49:65:d5:ea:ea:65:94:99:46:a2:57:23: 39:91:05:d4:6c:7e:9e:10:67:dd:21:fa:ba:26:ae:98:6a:66: a8:92:6a:e8:25:68:c9:bb:57:b1:ff:eb:91:55:4e:09:eb:f0: 7c:59:45:ee:10:27:64:64:9e:ae:28:8d:8d:b8:42:3e:c8:b1: ba:ef:89:d4:92:89:7e:cc:40:77:c6:1d:24:52:41:ac:c0:1c: 6e:0f:46:24:ea:87:84:b6:ee:6f:71:b2:ae:86:6c:61:cc:81: ec:d8:28:11:38:ea:c0:9c:22:3b:6d:fd:4d:21:d2:ef:31:17: 2d:2d:d3:13:3d:c6:c9:87:71:ba:4f:67:e4:b6:b9:4a:ad:4f: 2f:ae:f6:3e:73:d3:e7:ab:e4:83:f0:a7:06:d2:f1:eb:2c:a3: 63:6d:79:08:c3:4d:f4:fa:6b:13:e8:c7:54:67:11:5c:e4:61: 3f:5a:de:cf:c5:4d:b9:9a:8b:3f:a1:9f:68:e3:24:3e:eb:aa: 39:d4:11:17:8f:e5:bf:c2:e1:03:84:1c:86:bf:4c:df:27:c0: 99:98:cd:50:1c:1c:11:67:a5:1d:fd:54:da:6f:86:2d:53:b1: 6c:95:b5:ea -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNDA4MjYw NTE5NDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5QkQzODQ2MTFFMEQx NzlDNjI4NDFGRTFGQjREMDkxM0JEODQ5QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOAing8VK20QEDVNR3FUCj81Qn1lhxT23NaRBvpU8RVuOzgYBE VZciad6z51m6T2xPJ1/0v9yXdUYXPH1iPgRLqRFM5zeufRolqcoiBa38VTjmZG52 G/9MwkRIJttXnu/8L/t6DcsLdiWOLbVXGvhVLvALH3vNuPzexm9LUy+HQChU9HtJ ho32piMQFpYbEukcMRs6ONOmMaHYQMFtkW9aS1BMbdjALLFX/IHjFCiwjH58wI0b VJDDRZRXRBJrNXAbIqmy8epp/F8CHLlUtc6bzGAF2LhRyPzLTUqnKLpks3CDvXca yfFDY1jpL1X7thvYU4y/883RPuaA9KRS/OZ1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUOb04RhHg0XnGKEH+H7TQkTvYSaswHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL09iMDRSaEhnMFhuR0tFSC1IN1RRa1R2 WVNhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAE9PQQwDQYJ KoZIhvcNAQELBQADggEBAIGzal735p446GsdMXJB0/JyMPanRZVTZEll1erqZZSZ RqJXIzmRBdRsfp4QZ90h+romrphqZqiSauglaMm7V7H/65FVTgnr8HxZRe4QJ2Rk nq4ojY24Qj7IsbrvidSSiX7MQHfGHSRSQazAHG4PRiTqh4S27m9xsq6GbGHMgezY KBE46sCcIjtt/U0h0u8xFy0t0xM9xsmHcbpPZ+S2uUqtTy+u9j5z0+er5IPwpwbS 8esso2NteQjDTfT6axPox1RnEVzkYT9a3s/FTbmaiz+hn2jjJD7rqjnUEReP5b/C 4QOEHIa/TN8nwJmYzVAcHBFnpR39VNpvhi1TsWyVteo= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org