$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/WvFpAS0kf2lpquVjbGclSnrbnQo.roa File: WvFpAS0kf2lpquVjbGclSnrbnQo.roa (raw, json) Hash identifier: 3hT+rBPt7iWczTxBfytC8o9SzHQvra0GaHvl62jqvxI= Subject key identifier: 5A:F1:69:01:2D:24:7F:69:69:AA:E5:63:6C:67:25:4A:7A:DB:9D:0A Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C15 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/WvFpAS0kf2lpquVjbGclSnrbnQo.roa Signing time: Fri 01 Sep 2023 09:13:57 +0000 ROA not before: Fri 01 Sep 2023 09:13:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 61.61.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3093 (0xc15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:13:57 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5AF169012D247F6969AAE5636C67254A7ADB9D0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:e4:27:d9:24:e8:fc:79:fc:fb:63:80:9b: 9f:0a:e4:15:15:ed:16:f0:34:37:45:f6:87:a1:5e: 23:9f:43:8c:a8:db:6a:df:ad:03:7f:c7:df:d2:f1: 7c:b0:3c:12:e3:09:5b:8d:05:8d:ff:23:73:c1:a1: af:f4:02:0d:86:a9:a7:ef:03:47:b3:c7:4a:ac:67: f0:e7:23:3f:71:0b:a4:89:2f:b3:52:e6:17:b7:38: 46:31:aa:65:80:92:8a:e0:42:c9:23:aa:90:63:24: 1a:44:81:86:d8:3e:8f:3b:f2:67:c4:95:c2:bc:d8: d1:10:67:b3:17:91:4c:1b:b4:d6:0a:e2:00:65:60: 03:ab:bb:a1:e1:fe:43:ad:b7:90:7b:e9:8f:37:98: e9:36:2e:e5:6d:f7:6d:81:46:a5:2b:f1:90:2b:a9: 28:d5:ae:59:d6:25:f3:92:6a:ed:82:00:e3:76:dc: b8:7b:17:16:5a:ea:b7:e4:af:6c:f3:89:98:a5:41: 25:e4:72:b5:5e:a8:b4:eb:c5:aa:be:51:aa:d6:43: 40:ed:93:ed:dc:92:66:5b:20:48:61:97:95:84:9d: e8:3a:c3:b0:62:ab:8a:95:51:19:6e:d7:9d:63:5b: e3:16:50:03:d0:9f:ce:20:76:bc:16:b0:d5:e4:e1: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F1:69:01:2D:24:7F:69:69:AA:E5:63:6C:67:25:4A:7A:DB:9D:0A X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/WvFpAS0kf2lpquVjbGclSnrbnQo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.69.0/24 Signature Algorithm: sha256WithRSAEncryption 09:31:d4:ef:9a:16:e5:ac:81:cf:20:c7:80:6d:a5:5e:72:76: b0:91:70:1a:84:e3:f6:90:b1:73:e5:5b:d4:b1:59:fb:96:ab: 42:cd:63:81:45:55:a7:14:67:71:1a:8f:b5:59:ed:76:94:6e: ab:43:4b:4c:80:95:f9:f8:e7:5a:c9:3a:d6:8e:1a:f9:07:f0: 04:9f:6a:9e:1d:c0:01:b7:d8:7f:4e:fc:33:a3:cb:c7:0d:44: 98:0d:f6:99:eb:e6:f1:bf:6d:72:fe:49:42:ce:ac:c5:b1:40: 81:8d:4d:93:75:5d:05:a7:a3:8d:d9:d8:e5:5f:30:32:07:b9: 6f:23:ba:75:ea:2c:e2:b6:6c:83:4a:78:f8:c6:2e:62:33:4c: 27:7c:17:ca:81:97:87:13:34:6e:2c:88:5a:39:13:98:d1:67: c2:8a:d8:91:8b:fe:ea:3c:52:d4:03:a4:2e:2f:68:07:77:03: 00:28:86:5f:fc:e2:97:f0:a7:b0:e7:b9:60:d9:ae:32:32:c7: a4:51:20:bc:70:b4:f5:e5:a7:dc:da:aa:fa:05:32:10:83:a6: 62:70:04:3e:79:f1:14:ec:58:ef:d1:5f:79:78:9c:43:72:7a: ec:3c:f1:63:ff:fb:5c:3e:d6:3b:cf:d3:05:25:1c:b3:b5:a2: 54:93:b0:76 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTEzNTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVBRjE2OTAxMkQyNDdG Njk2OUFBRTU2MzZDNjcyNTRBN0FEQjlEMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDN9OQn2STo/Hn8+2OAm58K5BUV7RbwNDdF9oehXiOfQ4yo22rf rQN/x9/S8XywPBLjCVuNBY3/I3PBoa/0Ag2GqafvA0ezx0qsZ/DnIz9xC6SJL7NS 5he3OEYxqmWAkorgQskjqpBjJBpEgYbYPo878mfElcK82NEQZ7MXkUwbtNYK4gBl YAOru6Hh/kOtt5B76Y83mOk2LuVt922BRqUr8ZArqSjVrlnWJfOSau2CAON23Lh7 FxZa6rfkr2zziZilQSXkcrVeqLTrxaq+UarWQ0Dtk+3ckmZbIEhhl5WEneg6w7Bi q4qVURlu151jW+MWUAPQn84gdrwWsNXk4V3DAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUWvFpAS0kf2lpquVjbGclSnrbnQowHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1d2RnBBUzBrZjJscHF1VmpiR2NsU25y Ym5Rby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9PUUwDQYJ KoZIhvcNAQELBQADggEBAAkx1O+aFuWsgc8gx4BtpV5ydrCRcBqE4/aQsXPlW9Sx WfuWq0LNY4FFVacUZ3Eaj7VZ7XaUbqtDS0yAlfn451rJOtaOGvkH8ASfap4dwAG3 2H9O/DOjy8cNRJgN9pnr5vG/bXL+SULOrMWxQIGNTZN1XQWno43Z2OVfMDIHuW8j unXqLOK2bINKePjGLmIzTCd8F8qBl4cTNG4siFo5E5jRZ8KK2JGL/uo8UtQDpC4v aAd3AwAohl/84pfwp7DnuWDZrjIyx6RRILxwtPXlp9zaqvoFMhCDpmJwBD558RTs WO/RX3l4nENyeuw88WP/+1w+1jvP0wUlHLO1olSTsHY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:01 2024 by rpki-client on console-fra.rpki-client.org