$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/RS8vbUSsMHMXXdC7JNTVF9czfvw.roa File: RS8vbUSsMHMXXdC7JNTVF9czfvw.roa (raw, json) Hash identifier: ZiBUQ3c7675TbB6fix171bNMcnBWMxmpRv8/zkprJec= Subject key identifier: 45:2F:2F:6D:44:AC:30:73:17:5D:D0:BB:24:D4:D5:17:D7:33:7E:FC Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0C7E Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/RS8vbUSsMHMXXdC7JNTVF9czfvw.roa Signing time: Mon 26 Aug 2024 05:26:35 +0000 ROA not before: Mon 26 Aug 2024 05:26:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18182 IP address blocks: 61.62.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 26 05:26:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=452F2F6D44AC3073175DD0BB24D4D517D7337EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:03:13:92:f3:73:66:90:66:32:49:07:28: 7b:61:ff:7d:bd:71:71:70:6a:b2:c4:76:73:31:d9: 28:00:22:f7:46:96:a6:42:88:40:33:ee:22:aa:15: 8e:2d:7b:70:70:c5:5b:5c:ab:3c:85:e2:e8:4a:a4: f2:a1:ae:d1:cf:7f:e4:0e:1d:fe:5c:a7:d9:f8:6f: 17:f6:b7:b5:fd:15:f8:0a:f9:f6:5b:65:e5:50:af: 6d:2a:9b:bd:9c:62:14:3e:21:f0:fd:fa:38:84:42: a1:fb:ac:e3:80:fd:66:0e:3e:c8:c0:76:21:4f:09: 63:00:db:f9:a9:fd:b8:7b:4c:92:8c:28:5a:7b:73: ab:ed:07:dd:83:3d:24:83:2d:4e:7d:42:ac:e8:cd: ce:76:e7:05:26:68:a6:5e:b9:f7:f0:f5:be:e8:f2: 69:83:9d:8f:7b:a2:c8:af:2f:f5:7e:a2:33:bf:32: b1:f9:ad:da:00:f1:18:ea:90:4b:5f:1c:25:56:ba: 09:93:00:23:be:c5:55:99:6f:04:7e:28:c1:f9:ba: 4f:85:66:82:61:8e:31:28:98:b8:f6:25:a6:38:b9: be:a5:87:05:13:b3:83:2e:9a:a6:8f:6c:e3:e7:af: b9:08:0c:76:8c:e1:a6:d2:a0:ea:44:7f:97:08:f7: 3f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2F:2F:6D:44:AC:30:73:17:5D:D0:BB:24:D4:D5:17:D7:33:7E:FC X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/RS8vbUSsMHMXXdC7JNTVF9czfvw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.62.0.0/16 Signature Algorithm: sha256WithRSAEncryption 00:d2:2b:19:9b:30:f9:44:f1:c9:d1:0c:d0:c4:82:c9:e6:57: 3d:c6:5f:99:c4:d7:8d:a6:0e:5b:ec:85:25:ed:79:39:7e:af: 84:d5:8d:30:f5:3b:9e:15:24:00:d1:92:71:b3:d0:b0:9d:1d: 76:63:7e:e3:e6:8d:52:c9:30:31:91:09:7b:99:5a:2c:04:2c: 69:5b:1a:80:87:49:07:f7:f0:c8:1b:3b:85:63:6c:92:73:35: 71:ca:7e:18:10:4b:80:f1:15:ec:6e:66:d6:87:9c:22:b3:7a: 7d:20:d1:cb:7c:25:05:20:e4:8f:d4:62:43:55:2b:dc:41:2a: 41:97:2b:37:1c:b5:c7:dc:5f:a3:a9:f9:be:31:b4:4c:a6:25: f8:70:21:50:d1:2e:23:51:28:6f:69:9c:12:19:9d:d2:5c:b7: c8:97:f9:0e:33:be:c0:90:db:e6:cd:97:d5:0d:28:f7:1e:cc: 64:57:d0:ef:d2:59:cb:8f:83:35:48:7e:ca:e0:8d:dd:5f:1d: 9f:f0:84:e2:44:9a:37:f6:40:c3:3f:f8:d4:7b:d7:88:17:86: c6:be:3e:2b:c5:9f:d9:5d:36:0e:e2:28:74:78:c6:dd:f5:21: 48:b9:84:cf:8a:67:fc:b3:e1:dd:fa:f5:73:00:07:50:de:e4: 94:59:4b:48 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNDA4MjYw NTI2MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1MkYyRjZENDRBQzMw NzMxNzVERDBCQjI0RDRENTE3RDczMzdFRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQYAMTkvNzZpBmMkkHKHth/329cXFwarLEdnMx2SgAIvdGlqZC iEAz7iKqFY4te3BwxVtcqzyF4uhKpPKhrtHPf+QOHf5cp9n4bxf2t7X9FfgK+fZb ZeVQr20qm72cYhQ+IfD9+jiEQqH7rOOA/WYOPsjAdiFPCWMA2/mp/bh7TJKMKFp7 c6vtB92DPSSDLU59Qqzozc525wUmaKZeuffw9b7o8mmDnY97osivL/V+ojO/MrH5 rdoA8RjqkEtfHCVWugmTACO+xVWZbwR+KMH5uk+FZoJhjjEomLj2JaY4ub6lhwUT s4MumqaPbOPnr7kIDHaM4abSoOpEf5cI9z+LAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQURS8vbUSsMHMXXdC7JNTVF9czfvwwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9SUzh2YlVTc01ITVhYZEM3Sk5U VkY5Y3pmdncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPT4w DQYJKoZIhvcNAQELBQADggEBAADSKxmbMPlE8cnRDNDEgsnmVz3GX5nE142mDlvs hSXteTl+r4TVjTD1O54VJADRknGz0LCdHXZjfuPmjVLJMDGRCXuZWiwELGlbGoCH SQf38MgbO4VjbJJzNXHKfhgQS4DxFexuZtaHnCKzen0g0ct8JQUg5I/UYkNVK9xB KkGXKzcctcfcX6Op+b4xtEymJfhwIVDRLiNRKG9pnBIZndJct8iX+Q4zvsCQ2+bN l9UNKPcezGRX0O/SWcuPgzVIfsrgjd1fHZ/whOJEmjf2QMM/+NR714gXhsa+PivF n9ldNg7iKHR4xt31IUi5hM+KZ/yz4d369XMAB1De5JRZS0g= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:44 2024 by rpki-client on console-fra.rpki-client.org