$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/cgTCY30qEIZmtWjdr_dXpuhy6g4.roa File: cgTCY30qEIZmtWjdr_dXpuhy6g4.roa (raw, json) Hash identifier: 299IsWcWuVCnPwCVvlSGV8Mro9P9xp6/X1miTNJTahA= Subject key identifier: 72:04:C2:63:7D:2A:10:86:66:B5:68:DD:AF:F7:57:A6:E8:72:EA:0E Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Certificate serial: 0C88 Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/cgTCY30qEIZmtWjdr_dXpuhy6g4.roa Signing time: Mon 26 Aug 2024 05:26:37 +0000 ROA not before: Mon 26 Aug 2024 05:26:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18182 IP address blocks: 61.64.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B Validity Not Before: Aug 26 05:26:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7204C2637D2A108666B568DDAFF757A6E872EA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:5f:b4:40:fb:8b:48:ab:55:97:2b:9e:bc: 1a:c0:cf:54:37:14:59:83:8a:9c:bd:b7:b0:9f:98: 63:7c:a2:d1:dc:0f:bd:9e:98:55:53:b8:d1:e0:01: a7:d0:d6:14:27:59:22:c8:bb:d0:8a:a9:4b:43:dc: 81:f5:64:f6:66:b0:08:aa:3f:dc:53:cf:b6:89:46: 7d:d8:0a:ea:b6:27:4a:31:b7:d9:c9:5f:bd:19:30: 8b:7a:68:00:dc:99:94:41:26:90:b0:86:1b:20:03: e0:27:eb:45:92:5b:9a:10:55:5a:38:75:78:d9:23: 67:b8:b0:e7:7c:d0:c4:21:f5:bf:75:98:32:b2:42: 5e:98:a4:74:4c:0c:32:50:a8:80:9c:b7:5a:d6:96: 04:8a:4f:eb:97:a0:1b:da:2c:b8:9b:69:ed:65:4b: 99:0c:3c:4c:77:8b:dd:10:f4:f9:6f:09:64:23:00: ab:2f:0b:db:8a:d2:9f:a0:39:32:f6:b8:43:96:74: 96:5b:8a:9d:4a:be:18:5b:7d:f7:3f:c9:7a:2a:bb: 7a:04:a4:3d:a8:37:4b:bc:d4:bd:18:6e:62:5b:9a: d9:66:a7:b2:2e:44:91:5f:8d:bf:f3:9c:f1:dd:7c: 9e:e3:83:04:67:a7:41:33:52:ac:cb:8e:da:58:05: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:04:C2:63:7D:2A:10:86:66:B5:68:DD:AF:F7:57:A6:E8:72:EA:0E X509v3 Authority Key Identifier: keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/cgTCY30qEIZmtWjdr_dXpuhy6g4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.64.64.0/18 Signature Algorithm: sha256WithRSAEncryption 00:f2:49:0b:df:11:a2:a4:b8:47:8b:4f:16:ca:05:fb:c5:3d: a7:f7:52:29:f6:73:be:17:bb:33:21:f7:03:70:a9:01:1c:f7: 7b:31:7d:3a:2a:72:f0:55:fe:df:fb:dd:01:3d:bb:dd:69:4f: a2:0a:3e:b0:36:da:6d:14:88:5d:24:45:f8:7a:8e:97:74:47: 4d:b6:d2:da:39:23:f5:e4:13:ef:44:f3:3e:dc:c4:aa:cf:ae: d2:c8:ec:9f:73:67:45:e2:28:2d:56:75:5e:4c:e4:f6:92:f7: 3a:e3:07:d3:30:b7:a5:3a:70:3e:91:63:d2:c7:cb:60:8f:f9: c4:dd:ed:fe:ce:36:e6:61:71:b6:46:72:02:74:e9:85:88:cf: ca:40:23:e1:78:93:44:50:14:ff:e7:8f:75:59:a5:79:ba:28: b4:c6:7c:fe:95:72:26:52:12:68:d3:a7:bb:fb:91:43:cd:36: e6:89:26:a7:cf:b5:6e:a6:c3:7e:83:86:9b:2a:e9:77:c2:e7: 82:0f:0e:44:06:6c:8c:18:88:55:f9:ba:aa:c0:44:1e:47:45: 05:a8:9c:d5:78:08:58:ec:87:b5:32:6c:d5:83:6a:e7:2e:3e: 44:84:56:36:2f:89:3a:a8:ad:af:14:fd:90:54:e6:66:54:31: 96:e2:f1:ba -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yNDA4MjYw NTI2MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyMDRDMjYzN0QyQTEw ODY2NkI1NjhEREFGRjc1N0E2RTg3MkVBMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0jF+0QPuLSKtVlyuevBrAz1Q3FFmDipy9t7CfmGN8otHcD72e mFVTuNHgAafQ1hQnWSLIu9CKqUtD3IH1ZPZmsAiqP9xTz7aJRn3YCuq2J0oxt9nJ X70ZMIt6aADcmZRBJpCwhhsgA+An60WSW5oQVVo4dXjZI2e4sOd80MQh9b91mDKy Ql6YpHRMDDJQqICct1rWlgSKT+uXoBvaLLibae1lS5kMPEx3i90Q9PlvCWQjAKsv C9uK0p+gOTL2uEOWdJZbip1Kvhhbffc/yXoqu3oEpD2oN0u81L0YbmJbmtlmp7Iu RJFfjb/znPHdfJ7jgwRnp0EzUqzLjtpYBQ0zAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUcgTCY30qEIZmtWjdr/dXpuhy6g4wHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5 B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC9jZ1RDWTMwcUVJWm10V2pkcl9k WHB1aHk2ZzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGPUBA MA0GCSqGSIb3DQEBCwUAA4IBAQAA8kkL3xGipLhHi08WygX7xT2n91Ip9nO+F7sz IfcDcKkBHPd7MX06KnLwVf7f+90BPbvdaU+iCj6wNtptFIhdJEX4eo6XdEdNttLa OSP15BPvRPM+3MSqz67SyOyfc2dF4igtVnVeTOT2kvc64wfTMLelOnA+kWPSx8tg j/nE3e3+zjbmYXG2RnICdOmFiM/KQCPheJNEUBT/5491WaV5uii0xnz+lXImUhJo 06e7+5FDzTbmiSanz7VupsN+g4abKul3wueCDw5EBmyMGIhV+bqqwEQeR0UFqJzV eAhY7Ie1MmzVg2rnLj5EhFY2L4k6qK2vFP2QVOZmVDGW4vG6 -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org