$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/lHIubFaIzbyX8Yth_l6F78afYM4.roa File: lHIubFaIzbyX8Yth_l6F78afYM4.roa (raw, json) Hash identifier: odUl8BckTo9VliGRYGs1PHgB1hYvdTcYWnqVM9bfCYs= Subject key identifier: 94:72:2E:6C:56:88:CD:BC:97:F1:8B:61:FE:5E:85:EF:C6:9F:60:CE Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C20 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/lHIubFaIzbyX8Yth_l6F78afYM4.roa Signing time: Fri 01 Sep 2023 09:14:01 +0000 ROA not before: Fri 01 Sep 2023 09:14:01 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131627 IP address blocks: 61.61.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3104 (0xc20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:14:01 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=94722E6C5688CDBC97F18B61FE5E85EFC69F60CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:84:36:4a:66:c3:5c:4e:11:ae:ca:8d:53: 11:ab:81:f1:57:bd:1c:2f:59:8f:e3:8a:69:e5:14: 3f:95:03:9b:bb:24:ab:c7:6c:d4:9f:49:2a:dd:3d: e6:79:74:8e:e2:b9:da:6c:2c:15:0f:07:c3:9e:85: 49:bc:9f:3d:a1:71:ee:f9:3f:15:a3:2e:45:82:aa: c6:a0:4a:69:d9:73:a2:e0:29:18:64:d2:7d:36:d2: b7:37:a9:a1:72:26:6e:f3:54:e8:9a:bb:ba:93:05: 30:a1:9a:f4:d1:5c:c8:f1:25:94:54:88:b5:ce:60: 01:0d:9e:f6:7c:15:1a:ae:30:b5:22:c0:3f:a1:a6: bb:e7:66:87:90:ed:a0:dd:f9:e5:98:38:23:00:8d: c7:c2:2d:67:00:fa:8d:1f:49:cf:64:af:c7:e0:7c: dd:9e:fc:cf:b9:4f:4f:3d:e2:ed:8d:f7:7a:b2:74: 4c:3f:41:da:17:30:9c:c5:5f:20:3d:22:5f:ef:2f: 9e:29:7f:c4:53:9d:03:29:bb:81:79:3a:39:e9:50: 0a:e3:d1:f4:74:c7:06:87:25:9e:66:8a:27:fb:8b: 40:4e:40:46:44:12:e5:de:f4:f3:1d:a7:1a:7e:9b: 7a:17:7a:15:50:36:34:7b:50:a0:cd:7b:b6:d1:10: a4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:72:2E:6C:56:88:CD:BC:97:F1:8B:61:FE:5E:85:EF:C6:9F:60:CE X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/lHIubFaIzbyX8Yth_l6F78afYM4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.70.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:d5:10:47:c3:af:09:8f:bc:6e:8c:72:96:2e:48:bb:87:14: 85:aa:de:d0:fb:b7:25:20:bf:40:5c:8c:71:13:09:7e:8e:77: 36:17:11:c7:6e:1d:1b:6d:6e:1a:02:8d:f8:2f:9a:19:c5:c6: d6:e3:44:c2:df:64:0e:c2:13:72:74:19:b3:5b:32:50:27:ad: 86:67:0e:86:cf:92:25:d4:c4:a6:ff:71:8a:36:ed:85:5d:9b: dd:09:91:fd:be:58:7f:04:8f:8f:70:e7:e9:62:a2:1f:d9:67: f2:94:57:9c:1d:d8:8a:dc:e4:72:30:cc:3a:2d:89:b1:a0:0b: 4f:b7:e3:03:96:c3:7b:85:6c:13:58:27:a2:f1:8e:a5:23:4f: 2a:bf:23:28:af:cd:db:b6:b1:03:0d:00:6b:51:d8:f2:2a:b1: c3:7d:52:13:11:c0:27:1e:6b:8b:ee:e2:b1:e3:74:a4:b4:45: bb:0b:c8:1e:b3:7b:e2:9a:bf:e4:37:3f:35:4c:33:75:1f:0f: 58:34:c2:b8:55:58:41:7e:83:98:76:5c:c3:ca:44:7c:1a:02: ed:75:1c:4c:25:0b:0f:0e:9f:86:f2:ac:f5:67:ef:a0:c7:11: 8e:9e:1d:77:30:aa:ed:6e:bd:a7:b8:6d:8e:0c:ec:35:58:1d: 24:3b:1c:d3 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTE0MDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk0NzIyRTZDNTY4OENE QkM5N0YxOEI2MUZFNUU4NUVGQzY5RjYwQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCw/4Q2SmbDXE4RrsqNUxGrgfFXvRwvWY/jimnlFD+VA5u7JKvH bNSfSSrdPeZ5dI7iudpsLBUPB8OehUm8nz2hce75PxWjLkWCqsagSmnZc6LgKRhk 0n020rc3qaFyJm7zVOiau7qTBTChmvTRXMjxJZRUiLXOYAENnvZ8FRquMLUiwD+h prvnZoeQ7aDd+eWYOCMAjcfCLWcA+o0fSc9kr8fgfN2e/M+5T0894u2N93qydEw/ QdoXMJzFXyA9Il/vL54pf8RTnQMpu4F5OjnpUArj0fR0xwaHJZ5miif7i0BOQEZE EuXe9PMdpxp+m3oXehVQNjR7UKDNe7bREKRnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUlHIubFaIzbyX8Yth/l6F78afYM4wHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL2xISXViRmFJemJ5WDhZdGhfbDZGNzhh ZllNNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9PUYwDQYJ KoZIhvcNAQELBQADggEBAH7VEEfDrwmPvG6McpYuSLuHFIWq3tD7tyUgv0BcjHET CX6OdzYXEcduHRttbhoCjfgvmhnFxtbjRMLfZA7CE3J0GbNbMlAnrYZnDobPkiXU xKb/cYo27YVdm90Jkf2+WH8Ej49w5+lioh/ZZ/KUV5wd2Irc5HIwzDotibGgC0+3 4wOWw3uFbBNYJ6LxjqUjTyq/Iyivzdu2sQMNAGtR2PIqscN9UhMRwCcea4vu4rHj dKS0RbsLyB6ze+Kav+Q3PzVMM3UfD1g0wrhVWEF+g5h2XMPKRHwaAu11HEwlCw8O n4byrPVn76DHEY6eHXcwqu1uvae4bY4M7DVYHSQ7HNM= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:01 2024 by rpki-client on console-fra.rpki-client.org