$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/lOI2oFVkI6wNJwAD3pXpb3gIIFI.roa File: lOI2oFVkI6wNJwAD3pXpb3gIIFI.roa (raw, json) Hash identifier: AOVOQSABBbO8SMb3JKcPwbxyDOrCUIid0utmO+jbZ48= Subject key identifier: 94:E2:36:A0:55:64:23:AC:0D:27:00:03:DE:95:E9:6F:78:08:20:52 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C0C Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/lOI2oFVkI6wNJwAD3pXpb3gIIFI.roa Signing time: Fri 01 Sep 2023 09:13:55 +0000 ROA not before: Fri 01 Sep 2023 09:13:55 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131602 IP address blocks: 211.78.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3084 (0xc0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:13:55 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=94E236A0556423AC0D270003DE95E96F78082052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:36:1d:88:c8:b5:47:b5:4d:14:43:a9:1c: c3:8d:71:5b:6c:f5:da:79:97:3c:a7:b9:1b:83:32: b5:ae:46:22:ee:a7:ab:90:1d:02:75:59:89:f4:d1: 5b:60:ff:a6:58:17:13:5a:80:e8:d6:75:03:fe:49: 4c:6a:8f:fd:b9:3a:69:41:37:b6:dc:de:a1:76:62: 1b:01:99:7c:53:96:77:fd:58:71:1b:02:ae:fa:9f: 41:fc:10:be:28:37:53:f5:f6:62:0f:b1:57:01:24: 95:28:9d:85:74:d6:4e:df:ba:ab:7c:ff:d6:fd:4e: 33:f8:fe:b2:a5:cd:0b:13:7c:eb:08:45:67:6f:4f: a1:16:06:6b:45:c4:2b:a7:e3:81:1e:5d:70:86:34: c2:60:94:23:2d:1a:4e:14:36:56:8f:36:84:ce:4a: 5e:a7:2d:cf:82:8b:9b:d9:cc:40:a9:55:80:8e:a7: bb:81:5c:fa:fe:f0:fb:ae:44:fa:50:c0:2d:25:97: d9:2c:b9:ee:e3:f4:f7:d2:66:c3:22:89:b1:8e:df: a4:d7:0c:7c:7d:98:4b:f8:ab:7d:39:a4:48:a6:33: 83:31:3a:c6:25:64:6d:95:bf:70:8c:2a:99:d0:49: e0:6b:c9:a2:39:f3:ae:9b:57:cc:7b:eb:29:c2:c2: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E2:36:A0:55:64:23:AC:0D:27:00:03:DE:95:E9:6F:78:08:20:52 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/lOI2oFVkI6wNJwAD3pXpb3gIIFI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.8.0/22 Signature Algorithm: sha256WithRSAEncryption 99:09:4c:3a:19:58:41:0e:50:00:e9:91:76:55:15:23:f9:12: 2c:af:b7:e0:9b:ee:1d:36:87:71:03:f8:8c:c9:07:22:2a:b8: 32:9a:12:6c:c3:3e:af:9a:3b:55:68:da:fe:91:69:ef:c9:42: 55:1c:10:55:e8:ed:a5:f5:b1:39:68:0f:c6:07:a4:c9:b9:25: 29:13:64:43:6f:47:3d:e5:29:58:ca:54:96:53:be:1b:7b:a9: 91:3a:2c:29:c7:31:ce:57:1c:bb:25:82:6c:cf:e1:d7:51:d5: 69:8f:63:a0:da:42:85:cd:d4:de:4e:40:71:1e:d3:93:86:fe: 62:39:16:15:57:46:8b:af:7f:41:09:44:1e:40:1e:f2:79:36: 1b:9d:47:f4:15:5f:12:85:9d:f5:3e:98:e4:59:44:76:59:70: 40:bc:1c:f7:5f:ea:0e:c7:4d:5c:99:21:c2:90:7a:75:f4:ee: bc:d1:08:c2:07:23:b0:10:6f:49:15:a4:be:a3:c9:80:d3:90: e9:31:6e:31:30:40:5f:7b:2f:8f:ca:0f:66:de:4b:8d:43:8a: 6c:59:a2:d7:2f:80:7c:17:0d:88:e5:64:3e:1b:38:d0:70:27: 7b:d9:fe:bd:f4:85:21:ab:5c:07:f6:7a:4d:e4:74:ef:d7:f4: 8d:88:8c:cf -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTEzNTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk0RTIzNkEwNTU2NDIz QUMwRDI3MDAwM0RFOTVFOTZGNzgwODIwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCq/jYdiMi1R7VNFEOpHMONcVts9dp5lzynuRuDMrWuRiLup6uQ HQJ1WYn00Vtg/6ZYFxNagOjWdQP+SUxqj/25OmlBN7bc3qF2YhsBmXxTlnf9WHEb Aq76n0H8EL4oN1P19mIPsVcBJJUonYV01k7fuqt8/9b9TjP4/rKlzQsTfOsIRWdv T6EWBmtFxCun44EeXXCGNMJglCMtGk4UNlaPNoTOSl6nLc+Ci5vZzECpVYCOp7uB XPr+8PuuRPpQwC0ll9ksue7j9PfSZsMiibGO36TXDHx9mEv4q305pEimM4MxOsYl ZG2Vv3CMKpnQSeBryaI5866bV8x76ynCwv+ZAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUlOI2oFVkI6wNJwAD3pXpb3gIIFIwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL2xPSTJvRlZrSTZ3Tkp3QUQzcFhwYjNn SUlGSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALTTggwDQYJ KoZIhvcNAQELBQADggEBAJkJTDoZWEEOUADpkXZVFSP5Eiyvt+Cb7h02h3ED+IzJ ByIquDKaEmzDPq+aO1Vo2v6Rae/JQlUcEFXo7aX1sTloD8YHpMm5JSkTZENvRz3l KVjKVJZTvht7qZE6LCnHMc5XHLslgmzP4ddR1WmPY6DaQoXN1N5OQHEe05OG/mI5 FhVXRouvf0EJRB5AHvJ5NhudR/QVXxKFnfU+mORZRHZZcEC8HPdf6g7HTVyZIcKQ enX07rzRCMIHI7AQb0kVpL6jyYDTkOkxbjEwQF97L4/KD2beS41DimxZotcvgHwX DYjlZD4bONBwJ3vZ/r30hSGrXAf2ek3kdO/X9I2IjM8= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:46 2024 by rpki-client on console-ams.rpki-client.org