$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/ZSAg73V6fOrk8f4y1gL1pCdOr8o.roa File: ZSAg73V6fOrk8f4y1gL1pCdOr8o.roa (raw, json) Hash identifier: 0u3t6Cu110NQKYXqoIrXA4Cm91Pia1hJk8EecwNNYCg= Subject key identifier: 65:20:20:EF:75:7A:7C:EA:E4:F1:FE:32:D6:02:F5:A4:27:4E:AF:CA Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0D69 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/ZSAg73V6fOrk8f4y1gL1pCdOr8o.roa Signing time: Mon 26 Aug 2024 05:19:47 +0000 ROA not before: Mon 26 Aug 2024 05:19:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9919 IP address blocks: 211.78.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3433 (0xd69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 26 05:19:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=652020EF757A7CEAE4F1FE32D602F5A4274EAFCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:9d:e3:f1:4d:06:80:0e:15:1e:cb:a8:5a: b3:36:47:04:e1:1d:2a:6e:0f:a4:c1:5e:87:08:e8: 8a:6c:a2:ea:ee:32:36:24:bc:9f:0d:13:00:56:70: bf:e8:cd:97:1b:bb:0d:f3:70:7f:90:8b:bd:16:f0: 7c:bc:d0:06:5e:b0:08:2d:93:77:d8:b7:c3:5f:f4: 99:8d:02:00:95:ef:39:e9:a6:71:9d:e8:47:43:e9: b9:f4:df:85:f4:e2:72:4a:7f:33:d2:b0:2e:96:93: 4d:b8:ec:a5:2f:86:dd:1d:75:e6:d3:99:ab:63:f8: a9:df:ec:ef:9e:d1:7b:ae:f1:05:cb:87:83:b7:f2: d6:6c:4e:4c:4e:12:70:46:90:c9:b1:95:7b:a2:d0: 5e:3a:e0:99:c7:75:4d:b2:e8:d8:b2:0b:63:e2:a5: d3:64:7d:10:e9:4d:b9:bf:1e:cc:db:19:08:15:a9: 90:22:f7:9a:cc:47:75:16:51:e8:f5:f4:98:9c:5e: a7:24:08:d9:3a:a6:a1:13:6c:a5:cf:59:54:fd:b9: 4e:0f:7a:73:8f:95:6a:ce:a7:d4:2c:2c:ba:aa:c2: 84:52:28:32:e6:bf:9a:2c:d0:34:ba:78:03:51:ca: b2:bf:23:bc:bc:14:c6:60:98:63:9f:1c:81:ce:22: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:20:20:EF:75:7A:7C:EA:E4:F1:FE:32:D6:02:F5:A4:27:4E:AF:CA X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/ZSAg73V6fOrk8f4y1gL1pCdOr8o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.0.0/18 Signature Algorithm: sha256WithRSAEncryption 73:71:ac:27:36:bd:ad:dc:ae:78:fc:88:20:d1:3b:37:4e:be: dc:2a:48:f6:78:31:ac:63:39:32:c1:a1:11:44:10:a7:1a:48: 2e:81:5c:16:fa:28:43:de:c3:9e:8f:63:fc:80:f3:72:0f:f3: f1:5f:20:72:8d:96:a3:ef:8f:7c:91:c0:55:e7:2c:fd:49:06: af:46:cf:43:58:0f:f0:ef:db:67:c0:5c:5a:23:18:c7:50:24: 1d:f4:4b:5e:28:db:95:7b:e5:5d:ea:34:71:26:e6:f9:6a:67: 44:85:3b:ff:42:e0:fa:de:2e:8f:14:f8:fe:6f:d2:a4:19:1d: 3a:2a:8b:6d:8f:5c:67:21:ad:cc:a8:6b:79:45:b6:86:17:95: 97:ed:96:8f:9b:63:0d:e0:7c:5d:e1:b6:98:89:4f:c4:e8:59: 71:c7:f7:cf:eb:ad:70:75:31:8a:6c:94:dd:29:26:e7:e1:23: e4:96:e1:26:9c:3e:03:9d:ee:f0:39:1a:11:0e:75:ea:84:c0: f6:f3:5a:84:49:da:36:28:a8:5e:12:e2:00:9c:06:24:90:17: b0:d1:c3:a4:7c:fb:d5:f0:4e:61:06:6e:98:dd:36:3a:be:ec: cd:64:87:20:41:45:af:dd:3f:d6:3d:b9:bf:a2:9e:32:3f:83: 52:59:f4:8e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNDA4MjYw NTE5NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY1MjAyMEVGNzU3QTdD RUFFNEYxRkUzMkQ2MDJGNUE0Mjc0RUFGQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCs053j8U0GgA4VHsuoWrM2RwThHSpuD6TBXocI6IpsouruMjYk vJ8NEwBWcL/ozZcbuw3zcH+Qi70W8Hy80AZesAgtk3fYt8Nf9JmNAgCV7znppnGd 6EdD6bn034X04nJKfzPSsC6Wk0247KUvht0ddebTmatj+Knf7O+e0Xuu8QXLh4O3 8tZsTkxOEnBGkMmxlXui0F464JnHdU2y6NiyC2PipdNkfRDpTbm/HszbGQgVqZAi 95rMR3UWUej19JicXqckCNk6pqETbKXPWVT9uU4PenOPlWrOp9QsLLqqwoRSKDLm v5os0DS6eANRyrK/I7y8FMZgmGOfHIHOIu7HAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUZSAg73V6fOrk8f4y1gL1pCdOr8owHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1pTQWc3M1Y2Zk9yazhmNHkxZ0wxcENk T3I4by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbTTgAwDQYJ KoZIhvcNAQELBQADggEBAHNxrCc2va3crnj8iCDROzdOvtwqSPZ4MaxjOTLBoRFE EKcaSC6BXBb6KEPew56PY/yA83IP8/FfIHKNlqPvj3yRwFXnLP1JBq9Gz0NYD/Dv 22fAXFojGMdQJB30S14o25V75V3qNHEm5vlqZ0SFO/9C4PreLo8U+P5v0qQZHToq i22PXGchrcyoa3lFtoYXlZftlo+bYw3gfF3htpiJT8ToWXHH98/rrXB1MYpslN0p JufhI+SW4SacPgOd7vA5GhEOdeqEwPbzWoRJ2jYoqF4S4gCcBiSQF7DRw6R8+9Xw TmEGbpjdNjq+7M1khyBBRa/dP9Y9ub+injI/g1JZ9I4= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:40 2024 by rpki-client on console-fra.rpki-client.org