$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/DwRicNAgyWmPPmFUNe72ugBuiJs.roa File: DwRicNAgyWmPPmFUNe72ugBuiJs.roa (raw, json) Hash identifier: HE1D8zDqzHYFlwL1SdB0T08VH/m/ZFsH1FeTFsEJTDA= Subject key identifier: 0F:04:62:70:D0:20:C9:69:8F:3E:61:54:35:EE:F6:BA:00:6E:88:9B Certificate issuer: /CN=A61402819401D363CB1F9BFBD538875F41F211C3 Certificate serial: 0BE4 Authority key identifier: A6:14:02:81:94:01:D3:63:CB:1F:9B:FB:D5:38:87:5F:41:F2:11:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/DwRicNAgyWmPPmFUNe72ugBuiJs.roa Signing time: Mon 26 Aug 2024 05:26:45 +0000 ROA not before: Mon 26 Aug 2024 05:26:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 56179 IP address blocks: 211.76.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/phQCgZQB02PLH5v71TiHX0HyEcM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/phQCgZQB02PLH5v71TiHX0HyEcM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3044 (0xbe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61402819401D363CB1F9BFBD538875F41F211C3 Validity Not Before: Aug 26 05:26:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=0F046270D020C9698F3E615435EEF6BA006E889B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5c:d0:7f:85:72:71:c3:76:a7:a5:b5:f4:5a: ec:19:7e:2e:9c:c3:95:31:43:45:1f:40:ac:4d:b0: 6e:6e:ab:b5:49:65:fd:00:df:09:5b:0f:c2:75:52: cf:e4:bb:73:6c:27:62:4e:6f:33:00:1b:46:2d:10: 17:65:13:e0:37:2d:a6:99:ca:dd:28:39:2f:e1:8b: f0:59:59:e3:fb:c8:bd:36:7f:df:d7:91:4c:f2:ed: de:f4:45:c1:24:4d:5d:ad:a0:cc:12:5c:0a:94:22: 32:28:0e:6a:c7:8e:a5:09:68:dc:2e:8c:42:ba:78: 63:ca:7f:12:1e:ee:cf:bf:72:d9:0d:88:1c:bc:57: 20:c8:21:96:b8:01:6a:f4:8f:13:39:fb:34:48:f3: 3d:f8:cf:03:67:d9:64:8c:8d:b7:f1:d3:0f:21:0b: 28:a8:a8:29:16:2e:9a:20:e2:4e:82:6c:06:24:55: 30:98:ab:50:26:45:45:fc:85:04:ad:ae:ac:18:ca: 58:9e:92:d3:38:69:82:94:5a:e9:d3:ae:8a:5c:94: db:de:41:f8:43:f8:3e:db:bc:8a:be:cc:b5:05:7f: f8:96:cb:a8:b7:78:fa:36:d1:51:11:2a:3b:cf:0d: 8c:6d:80:db:70:35:e2:f4:af:18:34:dd:75:9f:60: 04:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:04:62:70:D0:20:C9:69:8F:3E:61:54:35:EE:F6:BA:00:6E:88:9B X509v3 Authority Key Identifier: keyid:A6:14:02:81:94:01:D3:63:CB:1F:9B:FB:D5:38:87:5F:41:F2:11:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/phQCgZQB02PLH5v71TiHX0HyEcM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/phQCgZQB02PLH5v71TiHX0HyEcM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYMPHOX/DwRicNAgyWmPPmFUNe72ugBuiJs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.128.0/20 Signature Algorithm: sha256WithRSAEncryption 77:7a:5b:d2:86:18:dd:11:ee:47:a7:77:93:96:1e:1f:2f:0f: 44:32:01:ca:9b:bf:6a:4c:03:ec:36:0a:fd:89:7a:36:f8:eb: b2:ae:52:88:ae:fe:4a:b2:73:40:55:26:5a:86:14:0d:75:42: ae:db:91:75:77:7e:30:68:87:61:07:7b:69:99:61:ca:b9:ca: ed:fd:f2:24:ed:9c:bb:10:3b:06:53:d2:a7:3e:b1:37:96:3b: 9a:88:de:bf:dc:f8:4a:a6:53:4f:c7:c3:9c:61:f1:92:3e:dc: f4:85:a8:33:5e:e6:47:ed:81:6e:6b:a7:1a:85:91:e6:2f:df: df:cb:58:ff:be:86:d4:cb:92:56:61:af:20:63:06:3d:cd:0e: 29:12:e7:7a:f6:56:5d:13:cb:cf:c7:6a:da:5d:67:05:37:ad: 67:0d:76:36:cc:97:0c:dd:5c:b7:aa:89:46:12:7b:b7:28:92: fd:0d:49:63:99:ee:2e:ee:05:6c:c0:8e:d0:7f:c7:25:0d:43: 0d:10:c8:91:68:94:47:d3:35:e7:38:98:b0:e2:3a:fc:f4:55: af:b8:0c:89:78:c3:17:4f:87:79:99:d8:c2:52:ba:cb:c2:4a: f6:b8:aa:9a:ab:1f:58:c5:a1:39:9f:f7:5d:1b:a9:1b:c2:55: 5d:e4:52:07 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTYx NDAyODE5NDAxRDM2M0NCMUY5QkZCRDUzODg3NUY0MUYyMTFDMzAeFw0yNDA4MjYw NTI2NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBGMDQ2MjcwRDAyMEM5 Njk4RjNFNjE1NDM1RUVGNkJBMDA2RTg4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD0XNB/hXJxw3anpbX0WuwZfi6cw5UxQ0UfQKxNsG5uq7VJZf0A 3wlbD8J1Us/ku3NsJ2JObzMAG0YtEBdlE+A3LaaZyt0oOS/hi/BZWeP7yL02f9/X kUzy7d70RcEkTV2toMwSXAqUIjIoDmrHjqUJaNwujEK6eGPKfxIe7s+/ctkNiBy8 VyDIIZa4AWr0jxM5+zRI8z34zwNn2WSMjbfx0w8hCyioqCkWLpog4k6CbAYkVTCY q1AmRUX8hQStrqwYyliektM4aYKUWunTropclNveQfhD+D7bvIq+zLUFf/iWy6i3 ePo20VERKjvPDYxtgNtwNeL0rxg03XWfYARTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUDwRicNAgyWmPPmFUNe72ugBuiJswHwYDVR0jBBgwFoAUphQCgZQB02PLH5v7 1TiHX0HyEcMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1lNUEhP WC9waFFDZ1pRQjAyUExINXY3MVRpSFgwSHlFY00uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3BoUUNnWlFCMDJQTEg1djcxVGlIWDBIeUVjTS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NZTVBIT1gvRHdSaWNOQWd5V21QUG1G VU5lNzJ1Z0J1aUpzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BNNMgDANBgkqhkiG9w0BAQsFAAOCAQEAd3pb0oYY3RHuR6d3k5YeHy8PRDIBypu/ akwD7DYK/Yl6Nvjrsq5SiK7+SrJzQFUmWoYUDXVCrtuRdXd+MGiHYQd7aZlhyrnK 7f3yJO2cuxA7BlPSpz6xN5Y7mojev9z4SqZTT8fDnGHxkj7c9IWoM17mR+2Bbmun GoWR5i/f38tY/76G1MuSVmGvIGMGPc0OKRLnevZWXRPLz8dq2l1nBTetZw12NsyX DN1ct6qJRhJ7tyiS/Q1JY5nuLu4FbMCO0H/HJQ1DDRDIkWiUR9M15ziYsOI6/PRV r7gMiXjDF0+HeZnYwlK6y8JK9riqmqsfWMWhOZ/3XRupG8JVXeRSBw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org