$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa File: OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa (raw, json) Hash identifier: OCd7KXMnzAY5+rUmzu8LEnNMeGMO0eTBO1z21RzHeA0= Subject key identifier: 3A:D6:39:0F:08:01:B1:1D:93:BF:70:4F:0B:2C:BF:0C:3B:BF:8F:1A Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0CDD Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa Signing time: Mon 26 Aug 2024 05:27:37 +0000 ROA not before: Mon 26 Aug 2024 05:27:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131596 IP address blocks: 61.58.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 26 05:27:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3AD6390F0801B11D93BF704F0B2CBF0C3BBF8F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:79:19:c4:26:96:69:35:78:a7:47:6b:60: 4c:5e:c1:9a:b0:8e:f2:e1:eb:50:e5:cd:a9:bf:a7: 56:0e:54:ef:f2:76:08:e3:ff:f3:e8:53:1c:50:54: 8f:b0:51:71:b1:85:f0:0c:b7:7f:6c:8f:c4:0e:25: eb:18:50:13:12:59:a4:62:12:80:db:a9:2f:7d:bd: ea:3c:2a:6b:18:44:27:ea:2e:0a:37:ea:b0:5f:5a: 5f:77:15:cf:04:01:97:10:f3:62:68:5a:6e:ee:88: b2:79:c5:06:ba:2a:9e:dc:c6:8c:04:44:e6:2c:d9: bf:34:c6:bc:74:14:a6:0a:32:40:c0:34:ae:3a:9a: 0a:76:aa:00:16:fb:8d:ca:6e:08:c4:41:05:4e:93: 09:49:50:c7:fa:6b:ac:9a:e1:d4:b8:8e:1f:8d:33: 26:8a:f7:d3:c4:ec:87:95:da:4a:58:af:7a:3b:2c: 4f:8a:79:94:ea:c4:aa:64:d1:a2:3a:3a:a4:1b:23: 03:5e:38:03:1a:aa:ff:1d:b3:28:ee:85:54:32:74: 38:4e:52:f8:f9:fa:81:c6:e6:c5:9a:c7:94:f5:5d: 8d:45:ef:a8:8f:6f:48:dc:a7:d7:bc:5e:50:11:86: 32:08:ee:47:f2:eb:16:2d:36:a4:39:ad:cc:da:09: d1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D6:39:0F:08:01:B1:1D:93:BF:70:4F:0B:2C:BF:0C:3B:BF:8F:1A X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/OtY5DwgBsR2Tv3BPCyy_DDu_jxo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.160.0/19 Signature Algorithm: sha256WithRSAEncryption 8e:a4:2b:22:a6:18:f2:08:cd:92:94:62:62:c1:ce:3c:96:f7: 2f:e0:42:11:69:90:a0:65:45:d4:69:b1:de:cb:16:1f:e3:ad: fc:d5:53:c5:00:a3:28:0f:d6:52:34:92:54:17:0c:10:8a:23: 0c:62:05:bc:6a:ec:e8:c0:04:14:39:87:ed:46:a4:31:87:ea: f2:df:2e:e3:be:89:ce:26:9a:10:a0:2b:f9:33:fd:7e:45:21: fe:f7:c3:61:ba:91:b2:97:af:71:79:19:a6:1d:96:cb:49:e5: ce:2a:e0:61:f9:7c:ba:82:2b:d1:21:13:f8:97:a0:b6:a4:65: 6f:b2:9c:db:6c:ef:68:a3:9a:35:52:28:75:e9:57:d7:ca:e3: 9f:70:bd:c0:32:28:3b:35:84:f1:39:2b:1c:1f:7d:03:04:59: 26:01:d9:3a:fb:4a:6f:b0:8e:d0:dc:13:82:ac:ec:a2:00:7b: 2f:e1:67:9b:89:c7:74:aa:57:db:0b:82:3e:db:79:4f:04:01: d7:f0:19:65:48:f8:2d:33:d5:0a:83:bf:e6:6b:1d:92:30:5b: 2e:03:6a:fa:6d:1d:e1:d1:f9:67:bb:4a:08:30:cc:97:ee:77: 5a:52:a8:cf:b0:f6:54:72:ac:16:18:5a:44:d0:9f:d8:70:81: f9:58:fc:ed -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA4MjYw NTI3MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNBRDYzOTBGMDgwMUIx MUQ5M0JGNzA0RjBCMkNCRjBDM0JCRjhGMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCY2XkZxCaWaTV4p0drYExewZqwjvLh61Dlzam/p1YOVO/ydgjj //PoUxxQVI+wUXGxhfAMt39sj8QOJesYUBMSWaRiEoDbqS99veo8KmsYRCfqLgo3 6rBfWl93Fc8EAZcQ82JoWm7uiLJ5xQa6Kp7cxowEROYs2b80xrx0FKYKMkDANK46 mgp2qgAW+43KbgjEQQVOkwlJUMf6a6ya4dS4jh+NMyaK99PE7IeV2kpYr3o7LE+K eZTqxKpk0aI6OqQbIwNeOAMaqv8dsyjuhVQydDhOUvj5+oHG5sWax5T1XY1F76iP b0jcp9e8XlARhjII7kfy6xYtNqQ5rczaCdGTAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUOtY5DwgBsR2Tv3BPCyy/DDu/jxowHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9PdFk1RHdnQnNSMlR2M0JQQ3l5 X0REdV9qeG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPTqg MA0GCSqGSIb3DQEBCwUAA4IBAQCOpCsiphjyCM2SlGJiwc48lvcv4EIRaZCgZUXU abHeyxYf46381VPFAKMoD9ZSNJJUFwwQiiMMYgW8auzowAQUOYftRqQxh+ry3y7j vonOJpoQoCv5M/1+RSH+98NhupGyl69xeRmmHZbLSeXOKuBh+Xy6givRIRP4l6C2 pGVvspzbbO9oo5o1Uih16VfXyuOfcL3AMig7NYTxOSscH30DBFkmAdk6+0pvsI7Q 3BOCrOyiAHsv4Webicd0qlfbC4I+23lPBAHX8BllSPgtM9UKg7/max2SMFsuA2r6 bR3h0flnu0oIMMyX7ndaUqjPsPZUcqwWGFpE0J/YcIH5WPzt -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org