$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/YMjE-nNsS1TbFv4pnSynCEe2Ptc.roa File: YMjE-nNsS1TbFv4pnSynCEe2Ptc.roa (raw, json) Hash identifier: qVt4oTOksAQ6H4NeuKw+HSQZ08bRDD2Y2z4qnFgzmV0= Subject key identifier: 60:C8:C4:FA:73:6C:4B:54:DB:16:FE:29:9D:2C:A7:08:47:B6:3E:D7 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C30 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/YMjE-nNsS1TbFv4pnSynCEe2Ptc.roa Signing time: Fri 01 Sep 2023 09:14:04 +0000 ROA not before: Fri 01 Sep 2023 09:14:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18049 IP address blocks: 61.61.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3120 (0xc30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:14:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=60C8C4FA736C4B54DB16FE299D2CA70847B63ED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d2:e3:47:d6:93:ed:76:e7:ac:c6:71:99:c1: da:84:e4:a4:b0:c9:17:d8:fc:c4:2d:e3:2c:69:8d: fa:db:98:82:f8:9e:93:09:87:f9:33:04:30:d1:72: de:35:a5:5c:31:85:04:7c:3d:d7:0f:27:f3:24:08: ef:06:15:99:db:ce:54:92:d3:d8:bd:77:cd:06:07: 8e:03:cf:19:2e:85:c8:a0:fa:60:0e:cb:7a:4f:43: a3:42:65:c4:36:f4:fb:33:0b:11:84:bc:a4:09:4a: 60:4a:6e:31:cc:ff:50:d7:49:e2:f4:c2:17:4a:22: 80:ce:6a:10:e3:05:9e:fb:b9:76:cd:4e:ac:d4:ba: b5:13:2f:5d:05:5a:28:d3:85:23:2e:6b:b0:27:bb: b3:90:ba:23:ac:5a:e2:0e:ee:8a:49:90:2a:ac:c1: 78:e8:c3:cd:b1:69:b1:c8:be:1b:4b:af:34:03:2b: 2a:cf:af:cf:15:17:90:85:e1:63:af:75:9f:41:dc: 69:88:d3:01:6c:6b:0a:d9:6e:69:d8:17:da:1b:f3: dd:da:7d:a7:ba:d0:e2:35:dd:98:83:2e:ea:aa:c6: 5f:57:5a:e5:59:fe:bd:a9:89:00:93:d8:d9:1a:98: cb:86:68:1e:a2:2c:ea:0b:f2:af:f8:5e:00:3f:6b: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C8:C4:FA:73:6C:4B:54:DB:16:FE:29:9D:2C:A7:08:47:B6:3E:D7 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/YMjE-nNsS1TbFv4pnSynCEe2Ptc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.16.0/20 Signature Algorithm: sha256WithRSAEncryption 20:af:55:aa:5d:2b:0f:a8:33:2e:41:2f:d3:90:b3:35:40:9c: 3e:15:3e:bf:32:0e:54:52:78:b8:23:a6:2a:01:c2:b8:e3:d0: fb:13:e4:76:13:0e:b3:d5:23:f7:6b:88:8a:f7:42:f2:06:39: b4:78:19:00:2d:2b:ed:3c:42:28:bb:e0:a2:3d:a4:ea:08:75: 33:17:c7:a3:6c:db:b3:65:2c:9c:cc:0e:f7:a9:f5:9c:df:ba: a3:98:fa:f2:78:fb:4f:d8:50:35:ce:19:88:3d:b8:42:08:f1: d7:41:d5:86:47:39:95:47:0d:c7:4a:0f:30:4c:71:d2:88:27: d2:a1:ee:80:e8:ba:2c:31:cc:77:20:35:37:7f:40:b2:84:59: 42:72:4c:e5:d0:e3:f2:5f:85:00:ea:d7:2d:50:8d:89:ed:ee: 44:f6:af:af:d3:db:bb:4a:0e:14:c6:ba:84:59:83:8b:44:21: ba:24:5b:bb:62:8f:79:30:48:c9:dc:92:98:bb:85:d1:ef:43: 01:6e:4b:a5:a8:9e:f9:c3:9f:f6:db:77:5a:18:7d:e0:b8:db: fc:f9:19:15:27:24:a9:fb:cd:6f:01:18:ee:7b:d8:fb:c9:c9: 34:92:f8:5d:a6:d4:5d:1f:68:36:dc:2c:d4:8c:63:ee:7c:4d: 1c:5e:2c:da -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTE0MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYwQzhDNEZBNzM2QzRC NTREQjE2RkUyOTlEMkNBNzA4NDdCNjNFRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA0uNH1pPtduesxnGZwdqE5KSwyRfY/MQt4yxpjfrbmIL4npMJ h/kzBDDRct41pVwxhQR8PdcPJ/MkCO8GFZnbzlSS09i9d80GB44Dzxkuhcig+mAO y3pPQ6NCZcQ29PszCxGEvKQJSmBKbjHM/1DXSeL0whdKIoDOahDjBZ77uXbNTqzU urUTL10FWijThSMua7Anu7OQuiOsWuIO7opJkCqswXjow82xabHIvhtLrzQDKyrP r88VF5CF4WOvdZ9B3GmI0wFsawrZbmnYF9ob893afae60OI13ZiDLuqqxl9XWuVZ /r2piQCT2NkamMuGaB6iLOoL8q/4XgA/a5aFAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUYMjE+nNsS1TbFv4pnSynCEe2PtcwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1lNakUtbk5zUzFUYkZ2NHBuU3luQ0Vl MlB0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9PRAwDQYJ KoZIhvcNAQELBQADggEBACCvVapdKw+oMy5BL9OQszVAnD4VPr8yDlRSeLgjpioB wrjj0PsT5HYTDrPVI/driIr3QvIGObR4GQAtK+08Qii74KI9pOoIdTMXx6Ns27Nl LJzMDvep9ZzfuqOY+vJ4+0/YUDXOGYg9uEII8ddB1YZHOZVHDcdKDzBMcdKIJ9Kh 7oDouiwxzHcgNTd/QLKEWUJyTOXQ4/JfhQDq1y1QjYnt7kT2r6/T27tKDhTGuoRZ g4tEIbokW7tij3kwSMnckpi7hdHvQwFuS6WonvnDn/bbd1oYfeC42/z5GRUnJKn7 zW8BGO572PvJyTSS+F2m1F0faDbcLNSMY+58TRxeLNo= -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:40 2024 by rpki-client on console-fra.rpki-client.org