$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/haIgMrKfsrMl_MC7a7CQ7TZ_mAk.roa File: haIgMrKfsrMl_MC7a7CQ7TZ_mAk.roa (raw, json) Hash identifier: RTNhyOjIDGc1tFVBmjxiwngsclT0zvlGOBO9QfuJAZI= Subject key identifier: 85:A2:20:32:B2:9F:B2:B3:25:FC:C0:BB:6B:B0:90:ED:36:7F:98:09 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C18 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/haIgMrKfsrMl_MC7a7CQ7TZ_mAk.roa Signing time: Fri 01 Sep 2023 09:13:58 +0000 ROA not before: Fri 01 Sep 2023 09:13:58 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9919 IP address blocks: 61.61.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:13:58 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=85A22032B29FB2B325FCC0BB6BB090ED367F9809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:c5:ae:34:50:4a:60:53:8d:8b:b7:14:9e: df:47:1b:cf:33:87:8a:db:c8:b3:53:38:d3:2a:00: 81:3d:d9:45:28:f1:17:a4:c8:06:37:c8:d5:0f:7f: ff:7d:f7:1f:b5:79:cd:55:60:79:d9:c7:16:12:5b: 5d:74:54:c3:17:09:95:4a:59:28:dd:4a:cc:94:e5: 78:8e:a2:29:12:fd:cb:9a:f7:c9:f1:97:48:e5:d1: d4:33:8b:9e:a7:9d:87:4a:34:ad:cd:b0:e5:d1:a4: e6:22:4c:7c:f0:c1:76:5a:fe:65:12:9a:65:80:20: 77:aa:b2:38:6c:5e:1a:c1:3e:82:df:0b:b1:ce:d7: cd:3c:79:88:d1:dd:28:37:05:87:38:85:94:3b:38: 8b:79:f7:d0:78:77:5f:6d:a7:0f:85:38:df:da:75: 57:95:5b:03:47:8b:22:3a:7f:1c:17:b6:65:fa:19: 56:5c:36:c7:96:30:d9:d0:08:a0:78:8e:3c:e4:74: c9:0a:94:3d:21:e7:e6:fa:71:f5:16:8d:8e:9f:fe: 2d:70:7b:e1:61:db:2a:40:30:1b:9b:31:f1:50:38: 65:73:84:d3:cb:54:6a:c0:cc:c6:6c:05:61:e0:cc: 3b:e2:f3:06:5e:bc:36:24:2d:72:19:4f:d8:3f:cd: a4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A2:20:32:B2:9F:B2:B3:25:FC:C0:BB:6B:B0:90:ED:36:7F:98:09 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/haIgMrKfsrMl_MC7a7CQ7TZ_mAk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.128.0/18 Signature Algorithm: sha256WithRSAEncryption 3a:05:66:6d:a0:28:26:d9:9a:e1:35:ad:6d:7d:c7:92:b2:80: 94:b8:66:87:ba:e6:48:a3:c9:74:9f:30:d8:d2:df:95:33:ef: 93:5c:17:6d:24:61:f5:91:ec:16:e9:6f:8d:9b:45:64:e2:b6: 94:bc:e7:a7:58:15:3c:aa:6f:62:a4:fe:25:4e:89:fd:7a:c7: 63:90:66:ba:f2:c1:f5:67:73:75:20:14:e7:08:7c:1e:0d:92: de:4c:6c:ba:df:94:41:f3:9d:bd:45:72:48:13:48:73:9a:70: 04:a7:5d:bd:0c:91:ef:98:63:11:69:fd:be:92:47:37:e6:a5: 82:e9:88:97:25:84:9c:0a:23:3d:c8:64:22:9f:ce:e9:94:52: 34:3d:00:cc:7c:cc:07:f4:ee:e1:72:72:05:0c:04:0d:ec:2e: 24:33:b0:b6:0c:c8:9b:c1:ea:6c:32:ea:62:33:0b:a2:5a:1e: d6:0f:95:9d:9e:34:e6:1d:cd:5b:90:ea:8a:f0:69:b5:ef:77: 9b:f5:de:2a:4f:71:a3:d6:59:1b:7c:5b:09:43:50:79:15:e4: c6:41:67:2e:02:1f:28:9f:91:96:11:ee:98:02:e4:ba:b5:2c: 66:fb:83:db:3a:84:aa:48:88:53:75:f4:0b:03:ca:52:8a:24: b6:07:52:ca -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTEzNThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg1QTIyMDMyQjI5RkIy QjMyNUZDQzBCQjZCQjA5MEVEMzY3Rjk4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCYr8WuNFBKYFONi7cUnt9HG88zh4rbyLNTONMqAIE92UUo8Rek yAY3yNUPf/999x+1ec1VYHnZxxYSW110VMMXCZVKWSjdSsyU5XiOoikS/cua98nx l0jl0dQzi56nnYdKNK3NsOXRpOYiTHzwwXZa/mUSmmWAIHeqsjhsXhrBPoLfC7HO 1808eYjR3Sg3BYc4hZQ7OIt599B4d19tpw+FON/adVeVWwNHiyI6fxwXtmX6GVZc NseWMNnQCKB4jjzkdMkKlD0h5+b6cfUWjY6f/i1we+Fh2ypAMBubMfFQOGVzhNPL VGrAzMZsBWHgzDvi8wZevDYkLXIZT9g/zaRDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUhaIgMrKfsrMl/MC7a7CQ7TZ/mAkwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL2hhSWdNcktmc3JNbF9NQzdhN0NRN1Ra X21Bay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY9PYAwDQYJ KoZIhvcNAQELBQADggEBADoFZm2gKCbZmuE1rW19x5KygJS4Zoe65kijyXSfMNjS 35Uz75NcF20kYfWR7Bbpb42bRWTitpS856dYFTyqb2Kk/iVOif16x2OQZrrywfVn c3UgFOcIfB4Nkt5MbLrflEHznb1FckgTSHOacASnXb0Mke+YYxFp/b6SRzfmpYLp iJclhJwKIz3IZCKfzumUUjQ9AMx8zAf07uFycgUMBA3sLiQzsLYMyJvB6mwy6mIz C6JaHtYPlZ2eNOYdzVuQ6orwabXvd5v13ipPcaPWWRt8WwlDUHkV5MZBZy4CHyif kZYR7pgC5Lq1LGb7g9s6hKpIiFN19AsDylKKJLYHUso= -----END CERTIFICATE-----Generated at Fri May 31 23:15:51 2024 by rpki-client on console-ams.rpki-client.org