$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/WFNWwB5MvYydfeOCBQfmvai5T1U.roa File: WFNWwB5MvYydfeOCBQfmvai5T1U.roa (raw, json) Hash identifier: o8QEj1jQ9zBAiPoOcWjbUzm+5BhAn1w1tht0pg6+o5s= Subject key identifier: 58:53:56:C0:1E:4C:BD:8C:9D:7D:E3:82:05:07:E6:BD:A8:B9:4F:55 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C12 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/WFNWwB5MvYydfeOCBQfmvai5T1U.roa Signing time: Fri 01 Sep 2023 09:13:56 +0000 ROA not before: Fri 01 Sep 2023 09:13:56 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 61.61.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:13:56 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=585356C01E4CBD8C9D7DE3820507E6BDA8B94F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:2b:01:ca:1d:11:37:ae:94:43:d1:78:6e: 6b:13:0b:ff:3f:b4:cd:f3:f6:f7:1f:2e:49:97:6d: 68:8d:0a:93:9f:e4:5b:0e:70:d9:8c:5a:d0:9a:3c: 85:36:8d:23:8b:c3:a2:24:09:83:f9:b1:cb:f1:bc: 26:e2:27:cb:54:12:9a:a1:19:68:a6:6a:54:98:bc: 0a:50:23:2f:34:5e:96:6e:16:5b:74:b2:d1:69:cb: 9c:39:4b:43:3b:0f:00:d8:d2:52:89:5b:4e:ff:77: 87:ad:24:2d:18:8c:1e:c4:ed:3d:19:b9:da:21:b6: 7a:35:8c:ba:37:c7:09:a5:fc:72:67:ff:1d:62:ff: 2a:f4:f3:31:8c:a8:d1:0f:a1:03:4d:38:da:7d:26: f0:36:12:ba:53:ce:6a:66:fc:9a:4b:e7:e7:74:48: 0c:6b:29:f3:d7:56:42:8c:61:b7:59:f7:dc:94:6a: fd:72:4a:5c:ca:78:af:a6:a1:f0:f4:d2:d5:6b:c8: ec:58:9a:a0:88:56:08:05:5e:bd:bb:50:95:48:04: 63:f0:a4:e7:9a:b7:b3:b2:fe:e2:5b:64:59:2b:62: 95:3b:36:ee:b1:3f:e6:06:2b:7f:1b:be:e8:19:2b: de:7d:d9:b0:24:ad:35:76:09:f6:a0:b0:22:31:da: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:56:C0:1E:4C:BD:8C:9D:7D:E3:82:05:07:E6:BD:A8:B9:4F:55 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/WFNWwB5MvYydfeOCBQfmvai5T1U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.144.0/21 Signature Algorithm: sha256WithRSAEncryption 8d:d8:de:46:7c:3f:e7:34:d5:0e:05:b8:8a:55:d1:f9:b3:2c: 06:07:07:01:6d:ad:c8:e1:82:9b:78:ef:69:f3:ea:d0:b9:04: 98:b4:5a:2b:5d:16:06:e3:14:b0:a8:8d:31:b7:e2:c5:17:fc: af:e2:5a:95:ad:bf:07:1d:94:16:83:80:f3:03:eb:09:21:c2: cb:3a:c9:29:f9:af:7b:a8:e5:f2:28:72:c5:b2:3b:c5:b5:f2: 26:b6:7a:0c:2e:2c:17:ec:b8:d7:f4:c7:38:94:a3:43:00:97: 15:c3:74:3d:72:d6:c3:00:6d:ba:bc:d9:77:d7:7a:68:92:3a: f6:e0:54:37:0f:fe:50:4d:e1:f2:8a:6f:33:ee:1e:7d:1a:a5: c3:14:91:9d:8d:4b:c3:a9:60:82:bd:d0:3b:5f:a8:dd:51:b1: ef:d4:bf:9b:cb:6c:a2:34:a5:e4:9a:63:db:93:25:e5:de:87: 09:12:41:bf:92:54:03:39:87:8a:0b:a5:8b:77:a6:13:12:7a: 74:9e:33:57:1f:01:76:c7:84:7c:b6:62:bf:b5:f3:2c:c6:03: 79:5b:23:5d:8a:da:1d:60:9c:60:81:37:98:37:b2:5f:78:3f: fc:f2:47:03:1d:a4:50:12:70:93:a1:36:fd:9b:78:33:f8:8e: a4:6e:7c:5b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTEzNTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU4NTM1NkMwMUU0Q0JE OEM5RDdERTM4MjA1MDdFNkJEQThCOTRGNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKzisByh0RN66UQ9F4bmsTC/8/tM3z9vcfLkmXbWiNCpOf5FsO cNmMWtCaPIU2jSOLw6IkCYP5scvxvCbiJ8tUEpqhGWimalSYvApQIy80XpZuFlt0 stFpy5w5S0M7DwDY0lKJW07/d4etJC0YjB7E7T0Zudohtno1jLo3xwml/HJn/x1i /yr08zGMqNEPoQNNONp9JvA2ErpTzmpm/JpL5+d0SAxrKfPXVkKMYbdZ99yUav1y SlzKeK+mofD00tVryOxYmqCIVggFXr27UJVIBGPwpOeat7Oy/uJbZFkrYpU7Nu6x P+YGK38bvugZK9592bAkrTV2CfagsCIx2sUNAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUWFNWwB5MvYydfeOCBQfmvai5T1UwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1dGTld3QjVNdll5ZGZlT0NCUWZtdmFp NVQxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9PZAwDQYJ KoZIhvcNAQELBQADggEBAI3Y3kZ8P+c01Q4FuIpV0fmzLAYHBwFtrcjhgpt472nz 6tC5BJi0WitdFgbjFLCojTG34sUX/K/iWpWtvwcdlBaDgPMD6wkhwss6ySn5r3uo 5fIocsWyO8W18ia2egwuLBfsuNf0xziUo0MAlxXDdD1y1sMAbbq82XfXemiSOvbg VDcP/lBN4fKKbzPuHn0apcMUkZ2NS8OpYIK90DtfqN1Rse/Uv5vLbKI0peSaY9uT JeXehwkSQb+SVAM5h4oLpYt3phMSenSeM1cfAXbHhHy2Yr+18yzGA3lbI12K2h1g nGCBN5g3sl94P/zyRwMdpFAScJOhNv2beDP4jqRufFs= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:46 2024 by rpki-client on console-ams.rpki-client.org