$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/z_OClDPRIgMMyUHzR6JjTYzCxqY.roa File: z_OClDPRIgMMyUHzR6JjTYzCxqY.roa (raw, json) Hash identifier: VqEMKR/gJfNLsbjd63EOLsyXlNZsz6k9Hk4Nz53WkxE= Subject key identifier: CF:F3:82:94:33:D1:22:03:0C:C9:41:F3:47:A2:63:4D:8C:C2:C6:A6 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0D76 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/z_OClDPRIgMMyUHzR6JjTYzCxqY.roa Signing time: Mon 26 Aug 2024 05:19:50 +0000 ROA not before: Mon 26 Aug 2024 05:19:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 61.61.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 26 05:19:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CFF3829433D122030CC941F347A2634D8CC2C6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:8c:1a:80:c1:5e:c9:ce:1f:4b:5b:b6:44: e1:b5:92:c8:08:6a:b8:0a:da:83:a2:68:ff:8a:ff: e7:75:6d:2c:bd:a0:6d:12:4d:08:2e:63:0e:4b:a4: 96:fb:7b:be:a2:02:8e:21:7f:e7:99:b6:cf:90:b8: a6:4a:8b:31:84:d8:61:01:8c:93:27:f5:14:53:64: f1:c1:80:ac:57:74:08:5d:c1:e4:3d:e1:1f:33:1e: 9b:8f:64:7e:bb:f6:a3:d2:27:00:46:e9:08:f0:10: c8:70:52:1d:56:3e:74:67:ef:3e:13:77:7e:a5:e5: c7:a6:3c:b3:32:78:9c:c9:cf:8e:a2:a3:e0:82:48: 4b:64:98:81:db:f2:5d:80:da:8f:36:fa:a3:54:27: 03:a7:5f:28:7b:6e:df:39:fd:27:68:42:31:40:4a: 82:bb:7e:20:d3:25:89:bf:81:46:0e:dc:bf:25:41: 13:08:b3:de:4e:98:68:aa:b5:c7:46:db:73:cd:51: d2:32:a7:15:3c:e7:ed:31:e3:4d:ae:7b:31:9e:4f: 2e:d9:e7:88:66:32:fb:85:04:db:cf:a0:02:70:75: 87:e2:db:c5:20:a3:f7:0a:6c:ba:4f:15:e5:cf:26: 94:e1:83:90:4f:a4:69:49:1c:be:e0:c7:a8:14:ef: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F3:82:94:33:D1:22:03:0C:C9:41:F3:47:A2:63:4D:8C:C2:C6:A6 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/z_OClDPRIgMMyUHzR6JjTYzCxqY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.152.0/22 Signature Algorithm: sha256WithRSAEncryption 66:06:38:bc:f1:54:68:2f:c1:ca:6f:e5:24:83:ec:a0:d4:77: 42:3f:26:83:57:9a:2c:16:54:bf:95:5f:1e:24:a6:b0:9c:9b: c8:2b:6c:f6:8f:90:45:c6:25:e3:55:e1:a2:25:16:b4:84:9f: 90:ae:a3:28:be:bc:06:42:f5:31:d6:ba:33:f6:ad:05:8a:b3: a0:02:85:6e:82:f9:8c:4f:79:bf:ec:fb:3b:8b:1c:a0:f8:ef: 16:79:9c:89:b8:31:d4:c9:2f:1c:98:56:65:18:3c:bd:da:5f: ef:f9:09:a3:79:2a:47:9d:51:c3:10:44:e6:29:04:02:09:ba: fd:7e:d4:30:9b:01:af:84:fe:81:60:d7:6e:0a:8f:5d:4e:7b: db:2f:ef:ea:2f:cb:81:90:1b:f9:72:95:a2:21:12:0a:e1:cd: fb:20:e2:ac:5a:cd:d5:04:28:fa:a7:cd:45:0a:5d:04:6d:5f: d4:4c:7d:43:b2:64:ac:0d:1a:32:fb:47:dc:04:c2:2d:bb:78: 26:76:d8:d2:f4:10:e1:6c:80:da:21:dd:aa:ae:25:2f:3b:90: a6:d1:1a:af:f6:41:5b:bb:81:80:28:bb:ea:28:8f:ea:f2:15: 6b:c9:8e:0b:e7:ef:87:f4:3f:ac:65:11:f5:27:6d:3b:9d:0d: ba:ef:3f:43 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNDA4MjYw NTE5NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENGRjM4Mjk0MzNEMTIy MDMwQ0M5NDFGMzQ3QTI2MzREOENDMkM2QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLFYwagMFeyc4fS1u2ROG1ksgIargK2oOiaP+K/+d1bSy9oG0S TQguYw5LpJb7e76iAo4hf+eZts+QuKZKizGE2GEBjJMn9RRTZPHBgKxXdAhdweQ9 4R8zHpuPZH679qPSJwBG6QjwEMhwUh1WPnRn7z4Td36l5cemPLMyeJzJz46io+CC SEtkmIHb8l2A2o82+qNUJwOnXyh7bt85/SdoQjFASoK7fiDTJYm/gUYO3L8lQRMI s95OmGiqtcdG23PNUdIypxU85+0x402uezGeTy7Z54hmMvuFBNvPoAJwdYfi28Ug o/cKbLpPFeXPJpThg5BPpGlJHL7gx6gU7wWNAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUz/OClDPRIgMMyUHzR6JjTYzCxqYwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3pfT0NsRFBSSWdNTXlVSHpSNkpqVFl6 Q3hxWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PZgwDQYJ KoZIhvcNAQELBQADggEBAGYGOLzxVGgvwcpv5SSD7KDUd0I/JoNXmiwWVL+VXx4k prCcm8grbPaPkEXGJeNV4aIlFrSEn5Cuoyi+vAZC9THWujP2rQWKs6AChW6C+YxP eb/s+zuLHKD47xZ5nIm4MdTJLxyYVmUYPL3aX+/5CaN5KkedUcMQROYpBAIJuv1+ 1DCbAa+E/oFg124Kj11Oe9sv7+ovy4GQG/lylaIhEgrhzfsg4qxazdUEKPqnzUUK XQRtX9RMfUOyZKwNGjL7R9wEwi27eCZ22NL0EOFsgNoh3aquJS87kKbRGq/2QVu7 gYAou+ooj+ryFWvJjgvn74f0P6xlEfUnbTudDbrvP0M= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org