$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/IXZxyB3MX9ykEwmRaIHc7IXUli0.roa File: IXZxyB3MX9ykEwmRaIHc7IXUli0.roa (raw, json) Hash identifier: kmKlJM9NEIDY7RgA/4vsVlQCHM5MB2N9mnn2/VC/h1w= Subject key identifier: 21:76:71:C8:1D:CC:5F:DC:A4:13:09:91:68:81:DC:EC:85:D4:96:2D Certificate issuer: /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Certificate serial: 0C2D Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/IXZxyB3MX9ykEwmRaIHc7IXUli0.roa Signing time: Mon 26 Aug 2024 05:21:03 +0000 ROA not before: Mon 26 Aug 2024 05:21:03 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18179 IP address blocks: 211.78.240.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3117 (0xc2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26 Validity Not Before: Aug 26 05:21:03 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=217671C81DCC5FDCA41309916881DCEC85D4962D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:2b:3c:1a:e7:45:87:ca:8e:d3:c0:22:90: 80:96:38:e0:63:35:4e:fa:5d:70:d8:35:24:c9:9a: 8d:cd:fa:90:29:11:cb:54:ee:c4:b2:7a:fe:8c:c8: 03:d5:80:fc:83:60:59:e9:1e:a0:43:d9:f8:96:c6: 60:8b:88:70:56:6b:44:1d:9a:9d:85:3f:61:6d:29: d6:6e:86:57:83:22:b5:b3:9c:c6:ff:76:1f:77:b3: e7:b1:39:7a:23:71:e4:ac:93:d7:4a:a1:f2:87:4f: 09:3a:e5:2d:28:0c:f9:6a:7f:fc:66:8a:45:fe:13: e9:db:ea:c2:0a:8a:ad:88:ff:78:b1:d1:61:5f:61: ef:86:71:20:8f:09:55:15:80:b0:e0:b9:e9:ff:ec: db:68:b4:2b:57:0c:41:d8:a8:e0:be:49:81:d2:98: f2:d9:19:26:57:fa:c9:e7:48:e7:b3:b8:7b:28:5b: 5d:cd:0f:d6:27:6b:29:aa:6d:9e:92:0e:23:a4:a7: 62:56:36:dd:ee:12:e9:8b:2b:f4:8d:30:19:1d:41: 13:a3:a0:c2:de:47:96:44:d6:b7:ff:f7:d3:10:b0: 76:52:ba:62:b4:29:8c:b7:eb:3c:90:d6:75:0a:b9: 22:85:b5:9d:f0:9f:9d:a1:19:6d:65:3e:10:f3:71: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:76:71:C8:1D:CC:5F:DC:A4:13:09:91:68:81:DC:EC:85:D4:96:2D X509v3 Authority Key Identifier: keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/IXZxyB3MX9ykEwmRaIHc7IXUli0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.240.0/20 Signature Algorithm: sha256WithRSAEncryption 04:6d:e4:2a:77:0c:31:46:48:15:2c:84:9f:41:ab:2c:ec:4f: d8:d2:f3:02:a0:0e:00:e0:e9:cd:fd:16:e8:1e:04:7b:60:70: 99:60:70:cb:92:a0:ca:db:b8:df:b3:35:0a:07:df:82:c8:2b: 6f:26:54:d4:82:98:13:13:a9:24:bd:8c:ac:45:0c:fc:ca:69: a0:8b:95:02:ce:2b:6b:32:a8:2e:d9:f1:36:31:2c:f8:6d:29: b2:cc:91:e2:4b:ce:c2:a0:24:06:79:bf:d3:b4:cd:98:6e:28: fe:84:ef:18:56:7a:50:22:46:e9:41:8e:63:4e:f1:f6:91:d9: 5f:8e:ed:39:f2:16:f0:bc:47:f6:9e:06:aa:65:b7:aa:99:42: 0a:30:02:2f:ea:b3:5c:2d:62:ea:12:3b:47:55:7d:f8:cb:2c: cc:54:cf:50:b4:5b:2f:9f:03:72:70:54:45:ee:a6:89:5a:7e: 6d:0e:99:01:83:5b:14:13:3a:c4:95:9f:0b:d6:43:25:34:ab: d6:b2:08:e0:1c:8a:b2:d1:60:04:55:d3:7f:31:30:9f:a4:28: b1:f4:ac:7e:96:99:af:f2:fb:ed:5b:c5:70:cb:6d:51:74:32: ca:72:90:26:69:f2:e9:3c:4a:95:1c:54:b8:72:44:3c:1b:23: 6f:69:f7:bd -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDC0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2 QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yNDA4MjYw NTIxMDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIxNzY3MUM4MURDQzVG RENBNDEzMDk5MTY4ODFEQ0VDODVENDk2MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvzSs8GudFh8qO08AikICWOOBjNU76XXDYNSTJmo3N+pApEctU 7sSyev6MyAPVgPyDYFnpHqBD2fiWxmCLiHBWa0Qdmp2FP2FtKdZuhleDIrWznMb/ dh93s+exOXojceSsk9dKofKHTwk65S0oDPlqf/xmikX+E+nb6sIKiq2I/3ix0WFf Ye+GcSCPCVUVgLDguen/7NtotCtXDEHYqOC+SYHSmPLZGSZX+snnSOezuHsoW13N D9YnaymqbZ6SDiOkp2JWNt3uEumLK/SNMBkdQROjoMLeR5ZE1rf/99MQsHZSumK0 KYy36zyQ1nUKuSKFtZ3wn52hGW1lPhDzcUWdAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUIXZxyB3MX9ykEwmRaIHc7IXUli0wHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy9JWFp4eUIzTVg5eWtF d21SYUlIYzdJWFVsaTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQE007wMA0GCSqGSIb3DQEBCwUAA4IBAQAEbeQqdwwxRkgVLISfQass7E/Y0vMC oA4A4OnN/RboHgR7YHCZYHDLkqDK27jfszUKB9+CyCtvJlTUgpgTE6kkvYysRQz8 ymmgi5UCzitrMqgu2fE2MSz4bSmyzJHiS87CoCQGeb/TtM2Ybij+hO8YVnpQIkbp QY5jTvH2kdlfju058hbwvEf2ngaqZbeqmUIKMAIv6rNcLWLqEjtHVX34yyzMVM9Q tFsvnwNycFRF7qaJWn5tDpkBg1sUEzrElZ8L1kMlNKvWsgjgHIqy0WAEVdN/MTCf pCix9Kx+lpmv8vvtW8Vwy21RdDLKcpAmafLpPEqVHFS4ckQ8GyNvafe9 -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org