$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa File: YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa (raw, json) Hash identifier: 6rcUVuisa/oi34VtMjH2NnPmIjx0focAi+hSJiLEKU8= Subject key identifier: 60:A4:A3:95:7B:B2:2B:20:49:43:F5:52:34:9D:AD:23:8D:7A:FE:44 Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0C85 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa Signing time: Mon 26 Aug 2024 05:26:36 +0000 ROA not before: Mon 26 Aug 2024 05:26:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18182 IP address blocks: 219.85.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 26 05:26:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=60A4A3957BB22B204943F552349DAD238D7AFE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f5:ba:f9:d6:a3:cd:da:cf:5b:be:33:44:ef: 4c:bd:23:68:e7:8e:13:46:3f:6c:a6:b1:c6:aa:5a: 5e:be:d8:6c:42:ce:01:e6:45:46:79:81:77:04:fb: 23:b6:59:17:9f:42:5a:bb:17:59:6f:7f:57:05:22: 2c:e6:a9:46:1b:cb:ec:ff:79:b2:d2:86:b1:60:9e: 1d:f9:b2:c0:55:80:6f:71:b2:62:33:70:03:67:3d: 41:f3:d4:aa:3e:bc:a2:b2:60:5a:90:2d:fe:5b:a0: e6:6d:50:fd:77:32:2c:6f:eb:a1:be:66:78:d6:17: 8e:d2:a0:da:38:71:51:a3:6f:c3:c6:38:cb:c2:28: b3:2c:3c:48:df:1d:b6:fe:20:e9:d9:2e:7b:f6:59: 2e:df:42:7b:a1:e3:c7:f8:63:ac:7e:f2:00:3a:44: 15:c9:26:c3:bf:70:28:a3:82:6e:02:8e:07:d3:e8: 4b:ac:e6:50:ea:fd:21:4e:12:f8:51:a8:89:35:34: 7a:87:bf:a0:d8:66:d3:5a:51:df:d1:fd:23:fd:36: 88:c3:cb:43:f3:32:0b:01:9e:e6:eb:db:d2:62:c9: 17:15:7d:28:44:52:2d:53:ee:47:b5:b4:72:23:fe: 7a:e3:05:2e:9d:c0:aa:97:70:8f:e7:30:38:c0:06: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A4:A3:95:7B:B2:2B:20:49:43:F5:52:34:9D:AD:23:8D:7A:FE:44 X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/YKSjlXuyKyBJQ_VSNJ2tI416_kQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.85.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:2f:ec:81:2d:d9:60:e4:a6:fc:b9:54:f0:8a:0f:fe:31:4e: b1:fb:52:d4:18:64:15:b2:de:95:6e:7f:5f:94:95:95:ee:0b: 1e:4e:98:c5:6e:b7:de:32:70:e1:b3:dd:94:1c:51:9f:81:56: 6b:82:df:f2:86:79:16:f0:54:bf:e6:86:ec:3e:54:68:b5:e7: 40:08:65:2a:fb:74:80:a1:43:69:e3:ba:62:b8:1d:be:4a:95: 93:8b:92:08:fb:2d:de:82:1e:33:88:53:da:a6:32:db:37:1a: f2:da:95:83:7a:66:36:e5:c1:e4:59:52:3e:88:d3:c2:c0:9c: 63:88:e6:ee:87:c4:a3:fa:bb:0d:82:f3:3d:ab:83:61:bb:5a: 21:dc:a1:dc:0e:88:4c:6e:e3:a5:ae:22:7a:07:2b:1e:ac:25: 94:4f:95:d0:f6:83:3d:3d:10:16:5a:5f:5b:17:6a:1c:fc:a9: bb:ef:0e:92:17:60:4c:2a:ad:92:c5:a2:08:03:62:60:9c:cc: f4:5b:3f:b3:c4:22:bc:8d:44:9f:c4:bc:9b:fd:ed:99:5a:ed: 76:7e:a3:93:fe:c7:d6:d2:d1:d1:b0:eb:48:dc:a0:33:50:4d: 48:f3:bc:b2:e5:0a:ad:98:24:4c:ec:1d:0d:2b:cc:29:69:92: 8a:f3:98:78 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNDA4MjYw NTI2MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwQTRBMzk1N0JCMjJC MjA0OTQzRjU1MjM0OURBRDIzOEQ3QUZFNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD19br51qPN2s9bvjNE70y9I2jnjhNGP2ymscaqWl6+2GxCzgHm RUZ5gXcE+yO2WRefQlq7F1lvf1cFIizmqUYby+z/ebLShrFgnh35ssBVgG9xsmIz cANnPUHz1Ko+vKKyYFqQLf5boOZtUP13Mixv66G+ZnjWF47SoNo4cVGjb8PGOMvC KLMsPEjfHbb+IOnZLnv2WS7fQnuh48f4Y6x+8gA6RBXJJsO/cCijgm4CjgfT6Eus 5lDq/SFOEvhRqIk1NHqHv6DYZtNaUd/R/SP9NojDy0PzMgsBnubr29JiyRcVfShE Ui1T7ke1tHIj/nrjBS6dwKqXcI/nMDjABpaPAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUYKSjlXuyKyBJQ/VSNJ2tI416/kQwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9ZS1NqbFh1eUt5QkpRX1ZTTkoy dEk0MTZfa1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA21Uw DQYJKoZIhvcNAQELBQADggEBAEov7IEt2WDkpvy5VPCKD/4xTrH7UtQYZBWy3pVu f1+UlZXuCx5OmMVut94ycOGz3ZQcUZ+BVmuC3/KGeRbwVL/mhuw+VGi150AIZSr7 dIChQ2njumK4Hb5KlZOLkgj7Ld6CHjOIU9qmMts3GvLalYN6ZjblweRZUj6I08LA nGOI5u6HxKP6uw2C8z2rg2G7WiHcodwOiExu46WuInoHKx6sJZRPldD2gz09EBZa X1sXahz8qbvvDpIXYEwqrZLFoggDYmCczPRbP7PEIryNRJ/EvJv97Zla7XZ+o5P+ x9bS0dGw60jcoDNQTUjzvLLlCq2YJEzsHQ0rzClpkorzmHg= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:44 2024 by rpki-client on console-fra.rpki-client.org