$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/1vvghiBiOmsjKow18EkxqjFrKVQ.roa File: 1vvghiBiOmsjKow18EkxqjFrKVQ.roa (raw, json) Hash identifier: 84ffa6/tApxsyJL6xtgrEDo+6FyaZfp2Sq7hDtobpxc= Subject key identifier: D6:FB:E0:86:20:62:3A:6B:23:2A:8C:35:F0:49:31:AA:31:6B:29:54 Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Certificate serial: 0255 Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/1vvghiBiOmsjKow18EkxqjFrKVQ.roa Signing time: Wed 06 Nov 2024 08:31:00 +0000 ROA not before: Wed 06 Nov 2024 08:31:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17408 IP address blocks: 160.25.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 13:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Validity Not Before: Nov 6 08:31:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D6FBE08620623A6B232A8C35F04931AA316B2954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:36:7c:6d:a6:70:61:ca:c5:a5:73:1f:df:db: 45:55:75:3f:8d:2a:fa:c8:24:f7:12:a8:f1:93:7c: 09:3e:4a:fd:ef:44:f8:f3:90:72:09:09:46:0c:99: 64:c6:c4:1c:c1:a2:73:58:be:d1:df:2c:a3:8a:b9: 70:52:fc:52:63:09:d9:dd:fa:c0:c0:18:86:2b:ec: 49:61:8e:78:d4:8d:2e:53:c7:da:d3:b5:8b:f0:9c: aa:9e:a9:81:c3:4b:9a:a5:96:97:03:cd:c3:4a:cc: ae:79:25:70:6a:b8:21:c8:33:ed:bc:3e:f9:eb:4d: 4e:e3:28:d9:c0:8d:b0:80:0d:7a:10:e0:99:8d:62: 9f:94:0b:7c:fd:c0:11:3f:c6:0c:e7:9e:18:a5:8e: ce:2c:42:79:54:11:69:1e:ac:93:2c:83:0b:3d:d4: f4:7c:b9:bb:a4:e5:2e:36:54:36:64:cd:31:f9:38: ac:05:5a:44:cc:9e:70:2d:3f:c4:32:a2:1b:8f:7c: 2f:06:b8:51:08:c0:b5:0f:dc:e7:ab:9d:d1:ea:26: 13:25:ad:47:a4:f4:3d:0f:e0:17:ec:d9:d6:89:2f: 8d:8e:cb:97:8d:ba:84:78:1b:fd:9c:21:8f:6d:17: 93:05:3b:a3:33:fc:10:0d:27:7f:cc:f8:03:84:d9: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FB:E0:86:20:62:3A:6B:23:2A:8C:35:F0:49:31:AA:31:6B:29:54 X509v3 Authority Key Identifier: keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/1vvghiBiOmsjKow18EkxqjFrKVQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.221.0/24 Signature Algorithm: sha256WithRSAEncryption 86:5b:0f:5b:05:d8:94:c9:3f:58:25:42:b8:49:ed:c7:cf:ae: 42:67:ec:f3:c7:6e:e9:81:58:a4:0e:4a:c1:a3:c3:9a:8c:5c: ec:c8:24:ec:3c:ee:9c:82:35:e8:87:9a:4d:b5:5a:69:0d:57: 87:f8:ac:40:19:b0:da:b6:95:5e:32:d2:28:e5:7f:c6:66:26: e2:aa:5b:2a:c4:9f:af:bc:85:6a:c1:02:88:c5:4f:b1:ba:c8: 94:e3:af:a0:81:ac:d0:4b:f4:ca:16:fa:55:93:21:11:b3:0f: 7c:22:fa:98:f7:c9:90:bf:24:5a:2b:87:42:43:39:6a:99:c3: 5c:02:bf:72:74:43:f0:22:3d:cf:74:7a:11:ff:f3:92:e0:a2: 43:1f:31:7d:89:18:8a:5f:e4:98:80:5d:a8:4e:af:99:cb:c7: 28:98:9e:e9:cd:fc:80:65:f4:10:05:e6:d2:1f:e7:0f:26:7a: 88:f1:d8:c0:d9:c3:6d:e1:f4:f9:35:ff:38:51:5b:77:c5:87: 80:09:14:e1:91:3b:bb:9e:43:21:9e:7d:2b:3a:18:2f:57:94: 7b:8a:eb:6b:a9:ea:bc:d8:ac:af:08:56:44:29:0c:ef:e1:67: 1b:fe:9a:4c:b3:5a:ab:0f:80:32:bd:04:82:48:c9:4d:a6:51: 23:b0:ed:8f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDIy RTdDOTVEODdERTlBRUVCMjEyQTBDNENDQjAxNzRFNjVDQTVEMDAeFw0yNDExMDYw ODMxMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2RkJFMDg2MjA2MjNB NkIyMzJBOEMzNUYwNDkzMUFBMzE2QjI5NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDaNnxtpnBhysWlcx/f20VVdT+NKvrIJPcSqPGTfAk+Sv3vRPjz kHIJCUYMmWTGxBzBonNYvtHfLKOKuXBS/FJjCdnd+sDAGIYr7ElhjnjUjS5Tx9rT tYvwnKqeqYHDS5qllpcDzcNKzK55JXBquCHIM+28PvnrTU7jKNnAjbCADXoQ4JmN Yp+UC3z9wBE/xgznnhiljs4sQnlUEWkerJMsgws91PR8ubuk5S42VDZkzTH5OKwF WkTMnnAtP8QyohuPfC8GuFEIwLUP3OerndHqJhMlrUek9D0P4Bfs2daJL42Oy5eN uoR4G/2cIY9tF5MFO6Mz/BANJ3/M+AOE2cGtAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU1vvghiBiOmsjKow18EkxqjFrKVQwHwYDVR0jBBgwFoAUQi58ldh96a7rISoM TMsBdOZcpdAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tJUFRF Q0gvUWk1OGxkaDk2YTdySVNvTVRNc0JkT1pjcGRBLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9RaTU4bGRoOTZhN3JJU29NVE1zQmRPWmNwZEEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVDSC8xdnZnaGlCaU9tc2pL b3cxOEVreHFqRnJLVlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAoBndMA0GCSqGSIb3DQEBCwUAA4IBAQCGWw9bBdiUyT9YJUK4Se3Hz65CZ+zz x27pgVikDkrBo8OajFzsyCTsPO6cgjXoh5pNtVppDVeH+KxAGbDatpVeMtIo5X/G ZibiqlsqxJ+vvIVqwQKIxU+xusiU46+ggazQS/TKFvpVkyERsw98IvqY98mQvyRa K4dCQzlqmcNcAr9ydEPwIj3PdHoR//OS4KJDHzF9iRiKX+SYgF2oTq+Zy8comJ7p zfyAZfQQBebSH+cPJnqI8djA2cNt4fT5Nf84UVt3xYeACRThkTu7nkMhnn0rOhgv V5R7iutrqeq82KyvCFZEKQzv4Wcb/ppMs1qrD4AyvQSCSMlNplEjsO2P -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org