$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/VjkFgg-Y2AHS-YhxSnARZQolwuQ.roa File: VjkFgg-Y2AHS-YhxSnARZQolwuQ.roa (raw, json) Hash identifier: eyB4PKfe5l0IJWjj6URmqR18Lh14mcwfD+Dh1L43B1I= Subject key identifier: 56:39:05:82:0F:98:D8:01:D2:F9:88:71:4A:70:11:65:0A:25:C2:E4 Certificate issuer: /CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Certificate serial: 3E Authority key identifier: 42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/VjkFgg-Y2AHS-YhxSnARZQolwuQ.roa Signing time: Mon 29 Jul 2024 02:47:07 +0000 ROA not before: Mon 29 Jul 2024 02:47:07 +0000 ROA not after: Thu 17 Jul 2025 15:30:26 +0000 asID: 14618 IP address blocks: 160.25.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Sep 2024 00:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=422E7C95D87DE9AEEB212A0C4CCB0174E65CA5D0 Validity Not Before: Jul 29 02:47:07 2024 GMT Not After : Jul 17 15:30:26 2025 GMT Subject: CN=563905820F98D801D2F988714A7011650A25C2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:79:4a:cd:59:38:9a:20:4c:ab:38:ef:c5: 0e:54:d5:f8:72:5a:de:55:09:34:f8:21:42:1a:1b: bb:67:28:73:f2:8f:12:dd:fa:7f:17:4e:db:ce:b6: 59:23:bb:d7:24:62:9b:25:a5:6e:ce:07:38:74:65: 1d:1d:43:79:51:20:86:e5:77:48:39:fd:71:53:18: 1e:ca:59:a6:aa:51:07:ba:87:72:05:cd:50:20:44: 43:5c:cd:ee:7d:25:52:a4:14:8e:f7:96:32:81:c5: 9b:be:26:c9:97:aa:a6:fb:e9:89:ec:60:ed:1a:e0: 82:5a:2e:c9:e1:8b:bc:fd:fc:39:fb:95:13:ab:73: bd:9a:e7:de:b9:d0:16:ad:f8:9d:67:60:c9:2d:9c: a1:64:7d:94:8b:e1:64:55:11:b7:dc:c5:74:fa:c8: 26:25:d9:b4:57:7d:86:40:15:a2:aa:f7:7f:84:e3: 4b:0b:8c:16:31:09:e3:a0:52:ed:7c:e7:88:e6:68: c3:60:c9:68:98:86:a9:65:c5:c8:61:84:fe:c9:30: 59:0d:e2:02:48:4c:45:77:09:91:f6:85:94:be:f7: 59:d4:5e:95:b2:40:e6:24:7f:47:54:1e:d2:c7:4a: 69:b7:74:05:4b:89:dd:f0:50:49:67:a4:a9:84:93: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:39:05:82:0F:98:D8:01:D2:F9:88:71:4A:70:11:65:0A:25:C2:E4 X509v3 Authority Key Identifier: keyid:42:2E:7C:95:D8:7D:E9:AE:EB:21:2A:0C:4C:CB:01:74:E6:5C:A5:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Qi58ldh96a7rISoMTMsBdOZcpdA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Qi58ldh96a7rISoMTMsBdOZcpdA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/VjkFgg-Y2AHS-YhxSnARZQolwuQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.25.220.0/24 Signature Algorithm: sha256WithRSAEncryption 82:8d:a6:61:ae:c1:62:00:16:2d:06:42:89:4a:a7:96:90:45: 7d:f4:fa:5a:c0:c7:32:2d:74:e7:6d:47:bf:0d:01:2e:d0:ff: c0:64:ac:9b:32:db:b9:b5:09:9d:80:45:d3:b0:83:a6:94:06: 8b:83:ef:f6:55:a6:c8:f8:a3:91:c1:bb:22:09:fa:21:d8:8a: 52:3a:6a:b1:20:5c:d9:b2:1c:28:71:96:60:e8:1c:0d:10:c2: a3:23:f5:05:9d:b4:5a:bb:51:00:d9:0b:97:f2:6c:7d:af:d5: d9:ab:24:08:3d:ca:ae:7b:b0:c4:2a:aa:82:0b:84:c4:56:1a: 48:e3:02:56:09:ae:8e:b8:5b:78:ac:8b:33:4a:ac:e5:f3:71: 60:19:d5:6f:84:d9:25:84:01:ee:30:e7:36:fd:86:92:bb:9a: e8:28:aa:2b:55:cf:3a:61:8f:cc:ab:e9:91:32:5c:21:5a:c2: 8f:a5:a4:bc:ab:45:ec:0c:a9:8f:74:af:05:31:be:7d:7e:d6: eb:31:1e:fb:9f:6a:26:bf:5d:41:68:ea:6f:6d:51:d1:c6:88: 3d:97:eb:26:c0:17:83:79:14:c2:86:99:d9:62:21:7c:e8:f1: 17:9f:01:5b:20:8d:62:51:14:04:6d:82:79:e7:12:25:35:30: 89:cd:ce:90 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MjJF N0M5NUQ4N0RFOUFFRUIyMTJBMEM0Q0NCMDE3NEU2NUNBNUQwMB4XDTI0MDcyOTAy NDcwN1oXDTI1MDcxNzE1MzAyNlowMzExMC8GA1UEAxMoNTYzOTA1ODIwRjk4RDgw MUQyRjk4ODcxNEE3MDExNjUwQTI1QzJFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKs7eUrNWTiaIEyrOO/FDlTV+HJa3lUJNPghQhobu2coc/KPEt36 fxdO2862WSO71yRimyWlbs4HOHRlHR1DeVEghuV3SDn9cVMYHspZpqpRB7qHcgXN UCBEQ1zN7n0lUqQUjveWMoHFm74myZeqpvvpiexg7RrgglouyeGLvP38OfuVE6tz vZrn3rnQFq34nWdgyS2coWR9lIvhZFURt9zFdPrIJiXZtFd9hkAVoqr3f4TjSwuM FjEJ46BS7XzniOZow2DJaJiGqWXFyGGE/skwWQ3iAkhMRXcJkfaFlL73WdRelbJA 5iR/R1Qe0sdKabd0BUuJ3fBQSWekqYSTvjUCAwEAAaOCAfIwggHuMB0GA1UdDgQW BBRWOQWCD5jYAdL5iHFKcBFlCiXC5DAfBgNVHSMEGDAWgBRCLnyV2H3prushKgxM ywF05lyl0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GA1UdHwRXMFUwU6BR oE+GTXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS0lQVEVD SC9RaTU4bGRoOTZhN3JJU29NVE1zQmRPWmNwZEEuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1FpNThsZGg5NmE3cklTb01UTXNCZE9aY3BkQS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGeBggrBgEFBQcBCwSBkTCBjjBZBggrBgEFBQcwC4ZNcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NLSVBURUNIL1Zqa0ZnZy1ZMkFIUy1Z aHhTbkFSWlFvbHd1US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25p Yy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgGdwwDQYJKoZIhvcNAQELBQADggEBAIKNpmGuwWIAFi0GQolKp5aQRX30+lrA xzItdOdtR78NAS7Q/8BkrJsy27m1CZ2ARdOwg6aUBouD7/ZVpsj4o5HBuyIJ+iHY ilI6arEgXNmyHChxlmDoHA0QwqMj9QWdtFq7UQDZC5fybH2v1dmrJAg9yq57sMQq qoILhMRWGkjjAlYJro64W3isizNKrOXzcWAZ1W+E2SWEAe4w5zb9hpK7mugoqitV zzphj8yr6ZEyXCFawo+lpLyrRewMqY90rwUxvn1+1usxHvufaia/XUFo6m9tUdHG iD2X6ybAF4N5FMKGmdliIXzo8RefAVsgjWJRFARtgnnnEiU1MInNzpA= -----END CERTIFICATE-----Generated at Wed Sep 18 23:45:48 2024 by rpki-client on console-ams.rpki-client.org