$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/RuqQB0YVeaK_GOm5wdDjCwTLYco.roa File: RuqQB0YVeaK_GOm5wdDjCwTLYco.roa (raw, json) Hash identifier: G6FbcLq2j6qwdQXKTpY9pg/K2bKsDvyUqqZBdVvRu3Y= Subject key identifier: 46:EA:90:07:46:15:79:A2:BF:18:E9:B9:C1:D0:E3:0B:04:CB:61:CA Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0D5C Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/RuqQB0YVeaK_GOm5wdDjCwTLYco.roa Signing time: Mon 26 Aug 2024 05:19:44 +0000 ROA not before: Mon 26 Aug 2024 05:19:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 61.61.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3420 (0xd5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 26 05:19:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=46EA9007461579A2BF18E9B9C1D0E30B04CB61CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:cc:81:a9:b5:66:bc:0c:a3:b6:15:06:a9: 09:d1:de:fc:10:5f:47:cd:57:1a:d6:4c:09:df:d6: 02:5d:2b:c2:2a:0e:f2:6d:4c:3f:3d:94:b5:83:a3: 92:58:43:d3:e3:b5:b3:4b:8e:8b:00:6a:5c:2f:c9: 71:72:09:4d:05:f2:93:2e:3d:5f:6f:4a:3b:89:03: de:ee:e0:b9:4f:3b:d0:ad:68:51:33:03:a3:6e:8a: 90:70:8b:2c:3c:17:14:2f:4a:de:d7:63:a0:ff:da: 2e:54:4e:13:c1:1f:48:89:d5:c6:29:59:70:eb:72: 73:f1:b2:09:b9:48:a9:8f:7a:db:26:18:30:00:f6: e6:12:07:c6:e0:f4:72:2e:e5:a5:36:d7:87:96:ac: 64:2a:50:94:fa:9b:c9:8d:bc:75:8e:4d:f4:8c:44: 47:4d:67:3f:9a:0b:ba:ba:bd:71:98:24:ee:1b:04: 62:9f:32:ca:29:98:0a:ab:7d:76:ba:87:db:63:00: 9b:f5:28:b3:15:ed:52:91:f9:7c:c1:57:a0:c6:dc: ec:9c:87:bd:b3:b4:63:79:41:47:31:61:6a:aa:5f: ea:e8:41:a5:08:e0:f2:61:85:e4:75:da:d1:99:39: a9:70:8d:6c:bb:d3:2f:ec:bd:4d:3c:21:4c:82:3a: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EA:90:07:46:15:79:A2:BF:18:E9:B9:C1:D0:E3:0B:04:CB:61:CA X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/RuqQB0YVeaK_GOm5wdDjCwTLYco.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.36.0/22 Signature Algorithm: sha256WithRSAEncryption 12:06:53:6f:5a:47:15:46:fc:aa:5c:6f:b3:89:db:e1:d8:6f: d8:6e:ea:8d:f0:8d:79:56:7f:a0:7f:e4:f1:db:17:13:bd:8d: b3:5f:af:3d:27:cd:96:5e:b9:d0:3d:88:2a:ef:bd:ad:47:c6: 55:07:cb:df:7c:9e:de:1a:8b:cb:bc:2e:14:af:ff:81:10:d1: 84:2e:f8:ce:70:a6:60:78:3f:bf:af:a2:c2:a6:43:66:98:e4: 2a:44:fe:97:60:7c:ef:65:d5:b4:b2:43:ff:28:a1:6c:8e:39: 1a:13:5e:ca:4f:54:30:0c:05:dd:f5:fa:77:cd:7b:59:89:a7: 83:8d:d5:17:6e:d9:52:d0:91:c4:bd:93:06:3b:bb:4b:12:18: 7c:ca:84:9d:0a:7e:e8:70:67:10:99:53:f5:dd:e7:2b:4b:d4: 45:d8:3d:47:11:e5:39:cf:41:2f:f2:0b:c0:68:20:65:2d:83: f2:73:ea:75:9b:2d:4a:d8:ae:ab:62:15:00:11:1f:77:d7:74: 29:75:a0:31:dd:2d:75:13:db:f9:84:c2:3f:80:48:16:73:07: bc:86:e6:dd:d5:b9:26:31:4a:60:0c:9d:af:80:58:82:3f:76: 08:c7:f5:ba:2a:72:8d:39:20:34:c6:b4:dd:52:55:f3:75:13: de:ea:e4:72 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNDA4MjYw NTE5NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ2RUE5MDA3NDYxNTc5 QTJCRjE4RTlCOUMxRDBFMzBCMDRDQjYxQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCacsyBqbVmvAyjthUGqQnR3vwQX0fNVxrWTAnf1gJdK8IqDvJt TD89lLWDo5JYQ9PjtbNLjosAalwvyXFyCU0F8pMuPV9vSjuJA97u4LlPO9CtaFEz A6NuipBwiyw8FxQvSt7XY6D/2i5UThPBH0iJ1cYpWXDrcnPxsgm5SKmPetsmGDAA 9uYSB8bg9HIu5aU214eWrGQqUJT6m8mNvHWOTfSMREdNZz+aC7q6vXGYJO4bBGKf MsopmAqrfXa6h9tjAJv1KLMV7VKR+XzBV6DG3Oych72ztGN5QUcxYWqqX+roQaUI 4PJhheR12tGZOalwjWy70y/svU08IUyCOoULAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQURuqQB0YVeaK/GOm5wdDjCwTLYcowHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1J1cVFCMFlWZWFLX0dPbTV3ZERqQ3dU TFljby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PSQwDQYJ KoZIhvcNAQELBQADggEBABIGU29aRxVG/Kpcb7OJ2+HYb9hu6o3wjXlWf6B/5PHb FxO9jbNfrz0nzZZeudA9iCrvva1HxlUHy998nt4ai8u8LhSv/4EQ0YQu+M5wpmB4 P7+vosKmQ2aY5CpE/pdgfO9l1bSyQ/8ooWyOORoTXspPVDAMBd31+nfNe1mJp4ON 1Rdu2VLQkcS9kwY7u0sSGHzKhJ0KfuhwZxCZU/Xd5ytL1EXYPUcR5TnPQS/yC8Bo IGUtg/Jz6nWbLUrYrqtiFQARH3fXdCl1oDHdLXUT2/mEwj+ASBZzB7yG5t3VuSYx SmAMna+AWII/dgjH9boqco05IDTGtN1SVfN1E97q5HI= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org