$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/y2l0YOENpnopUkW6FekQvfiv7Gg.roa File: y2l0YOENpnopUkW6FekQvfiv7Gg.roa (raw, json) Hash identifier: dGYh6wUDP1Zcp0Taeb1Fg9JMpThshWnKUt3ozfsQctM= Subject key identifier: CB:69:74:60:E1:0D:A6:7A:29:52:45:BA:15:E9:10:BD:F8:AF:EC:68 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0C0A Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/y2l0YOENpnopUkW6FekQvfiv7Gg.roa Signing time: Fri 01 Sep 2023 09:13:54 +0000 ROA not before: Fri 01 Sep 2023 09:13:54 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9922 IP address blocks: 61.61.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3082 (0xc0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Sep 1 09:13:54 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CB697460E10DA67A295245BA15E910BDF8AFEC68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9a:b9:19:ee:1a:c4:06:ee:f7:b9:30:8c:81: 02:c3:e1:66:16:00:b2:49:88:03:2b:86:bb:52:9e: d5:d0:bd:4e:c2:ec:6a:28:00:6d:d6:31:fd:d9:d8: fa:fd:62:39:84:7e:7f:00:d4:8a:fa:8a:fb:4e:f6: 22:c6:36:a3:59:9c:c4:64:29:f6:ef:1c:81:03:ab: 03:73:40:4a:9d:7b:bb:5e:83:7e:71:f1:af:8a:07: 82:ba:bb:59:59:ee:19:7a:7e:d6:38:d4:49:43:4a: ab:d0:da:f3:e3:b3:e4:5b:54:42:81:2a:42:ba:4e: 67:85:de:e1:ce:07:9d:b7:45:ca:3e:7e:21:8a:13: 24:a1:a0:5e:a8:d5:79:34:c4:9b:a6:db:16:50:2f: e3:30:d5:15:2d:33:df:99:ba:44:3a:14:24:f5:50: 88:12:1d:f3:15:d1:8b:2a:e5:d8:23:65:e8:22:5f: cf:ed:b2:ff:57:cf:b5:55:00:68:e2:ca:b6:dc:1e: 89:f8:b4:b3:39:b9:59:d0:ac:43:b3:07:6f:15:58: bb:98:3c:91:b6:dd:d6:1b:b0:c5:c5:03:3b:f2:0e: 48:b6:4d:e5:c0:76:7d:f3:8a:20:5f:e3:91:0b:a8: df:7c:a1:e0:2a:46:83:9c:80:82:d0:ae:77:82:d0: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:69:74:60:E1:0D:A6:7A:29:52:45:BA:15:E9:10:BD:F8:AF:EC:68 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/y2l0YOENpnopUkW6FekQvfiv7Gg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:a7:58:53:6d:71:0c:a4:50:ef:63:79:55:6e:88:aa:33:d9: 40:63:28:5c:78:d6:06:32:ac:b0:9e:b0:14:5b:80:66:50:98: 22:3e:00:a8:58:98:a2:ed:42:9e:fd:6c:19:41:97:97:e2:8a: c6:09:8e:84:a2:2d:5d:7c:fb:29:76:1b:8d:cc:b3:07:dd:f3: f5:4d:30:85:7c:e3:70:c5:6f:70:a4:a5:54:73:a2:68:d3:ad: a9:24:18:7c:9e:b4:38:fd:9d:d1:a3:e2:e6:19:4d:1d:73:c9: 38:b8:d7:42:e7:fe:5a:08:80:bf:24:34:25:dc:eb:8b:0c:02: d4:57:a6:18:e8:cd:e9:a3:77:ee:97:de:79:ff:09:62:df:aa: ef:85:9c:aa:46:36:fa:d6:dc:11:28:7a:2d:58:28:68:31:fb: 9e:f3:85:85:b0:84:8f:0a:42:b5:04:52:e1:5e:18:b6:09:40: b4:9a:4d:e9:52:42:17:02:de:1c:57:22:3f:c3:78:69:52:0e: 9a:c5:64:77:d8:53:b1:c7:08:13:e6:b1:3f:f6:56:2a:c9:65: b3:ae:3c:5c:51:68:ca:a1:58:4b:df:fc:61:da:42:cd:db:29: c5:31:01:c9:84:cb:d2:15:b7:52:4e:94:d4:c8:a6:de:7d:87: 93:18:ff:b1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yMzA5MDEw OTEzNTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENCNjk3NDYwRTEwREE2 N0EyOTUyNDVCQTE1RTkxMEJERjhBRkVDNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOmrkZ7hrEBu73uTCMgQLD4WYWALJJiAMrhrtSntXQvU7C7Goo AG3WMf3Z2Pr9YjmEfn8A1Ir6ivtO9iLGNqNZnMRkKfbvHIEDqwNzQEqde7teg35x 8a+KB4K6u1lZ7hl6ftY41ElDSqvQ2vPjs+RbVEKBKkK6TmeF3uHOB523Rco+fiGK EyShoF6o1Xk0xJum2xZQL+Mw1RUtM9+ZukQ6FCT1UIgSHfMV0Ysq5dgjZegiX8/t sv9Xz7VVAGjiyrbcHon4tLM5uVnQrEOzB28VWLuYPJG23dYbsMXFAzvyDki2TeXA dn3ziiBf45ELqN98oeAqRoOcgILQrneC0E/5AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUy2l0YOENpnopUkW6FekQvfiv7GgwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3kybDBZT0VOcG5vcFVrVzZGZWtRdmZp djdHZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PZgwDQYJ KoZIhvcNAQELBQADggEBAAunWFNtcQykUO9jeVVuiKoz2UBjKFx41gYyrLCesBRb gGZQmCI+AKhYmKLtQp79bBlBl5fiisYJjoSiLV18+yl2G43Mswfd8/VNMIV843DF b3CkpVRzomjTrakkGHyetDj9ndGj4uYZTR1zyTi410Ln/loIgL8kNCXc64sMAtRX phjozemjd+6X3nn/CWLfqu+FnKpGNvrW3BEoei1YKGgx+57zhYWwhI8KQrUEUuFe GLYJQLSaTelSQhcC3hxXIj/DeGlSDprFZHfYU7HHCBPmsT/2VirJZbOuPFxRaMqh WEvf/GHaQs3bKcUxAcmEy9IVt1JOlNTIpt59h5MY/7E= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:46 2024 by rpki-client on console-ams.rpki-client.org