$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa File: YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa (raw, json) Hash identifier: /qT20B61u7BugZW8Ye9ykR/aqQBy4UFvp4aah6rXNAs= Subject key identifier: 60:7F:1D:60:05:AA:0B:01:2F:48:D2:01:60:34:14:9E:BF:D9:55:FC Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0CD7 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa Signing time: Mon 26 Aug 2024 05:27:36 +0000 ROA not before: Mon 26 Aug 2024 05:27:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 59.102.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 26 05:27:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=607F1D6005AA0B012F48D2016034149EBFD955FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:dc:59:e2:8f:56:93:29:42:d1:00:80:25: f3:de:25:f1:ee:2d:60:7d:4e:b6:f6:48:01:a6:55: c8:e0:17:00:ff:8b:8e:61:4c:a4:b9:11:a6:e5:0d: 39:e5:09:96:c1:9f:e3:1e:0f:5e:0b:e1:e0:63:3b: 8e:40:43:2e:b9:68:27:83:d5:c9:07:55:97:6f:7b: 36:6b:39:11:b9:7c:5d:76:0d:c1:af:3a:6b:fb:2e: 7b:1f:c7:3d:d3:02:39:38:dd:13:e3:46:8c:5f:c4: 73:34:ff:0c:02:38:82:26:6a:9f:6d:41:60:0f:ad: 9b:2c:93:a0:e4:68:26:ed:53:a7:5a:81:b6:a1:0c: 01:2d:55:e1:be:5f:47:be:ce:c2:72:4e:8b:18:b4: 95:43:88:ca:80:f1:13:df:eb:ca:f9:72:42:86:2b: 55:dd:2c:d8:88:89:e9:a2:3a:3f:2f:9b:6d:88:0b: 5e:17:57:72:f6:8d:4d:43:1e:87:c0:2f:09:41:e8: 2d:77:a9:de:b1:ed:16:b3:da:55:f3:39:53:03:fa: 08:b6:60:83:ac:69:5d:37:b8:50:61:ce:44:b1:98: d4:be:22:b8:e6:d6:0f:6b:33:4d:36:a2:ee:8e:e5: 63:82:88:2d:56:a1:82:02:dc:22:38:48:6e:40:cf: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7F:1D:60:05:AA:0B:01:2F:48:D2:01:60:34:14:9E:BF:D9:55:FC X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/YH8dYAWqCwEvSNIBYDQUnr_ZVfw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 59.102.128.0/21 Signature Algorithm: sha256WithRSAEncryption 9d:44:e2:3a:1a:38:0e:e2:a7:eb:99:ae:9f:c0:11:c9:cd:dd: 66:45:aa:b5:c5:ca:8b:76:bd:0a:d6:b3:f1:ea:d8:74:d0:99: ac:82:14:a1:49:87:ee:66:a4:20:fb:8e:c3:80:33:6c:af:37: 8d:c7:6b:45:e5:8e:ae:40:50:a9:1d:14:8f:7c:cf:f5:7e:90: a4:3b:b4:e4:bf:45:71:e2:f1:c1:8a:ff:b7:6d:e3:89:f3:24: 0f:b6:6a:32:60:76:7e:b2:3f:45:df:34:9d:c0:01:91:c0:dc: f3:e9:8b:2f:65:2d:21:7d:56:61:f3:98:8e:ff:cf:02:a1:11: 30:a1:72:a7:93:8e:e4:4d:90:48:fb:0b:3b:90:a8:4f:99:87: 8f:ba:ed:0e:1a:e6:27:6c:8a:fc:66:ff:b1:2f:b3:2f:67:8f: fa:b3:ec:0e:0a:05:b9:ff:ba:81:27:62:f9:bf:90:f7:47:88: 80:d9:db:0e:dd:6c:c7:40:a8:a4:67:68:61:47:64:94:1a:ba: 51:0c:b2:af:90:32:ce:5c:36:9a:e2:65:03:f5:2a:aa:5e:71: 29:2b:7f:7d:81:2f:9c:5d:a1:18:9d:fa:b9:88:ff:1d:c1:38: f8:64:4a:ab:41:23:94:1d:c7:82:2b:f2:49:15:40:bb:e2:11: 39:28:73:90 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA4MjYw NTI3MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYwN0YxRDYwMDVBQTBC MDEyRjQ4RDIwMTYwMzQxNDlFQkZEOTU1RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiMdxZ4o9WkylC0QCAJfPeJfHuLWB9Trb2SAGmVcjgFwD/i45h TKS5EablDTnlCZbBn+MeD14L4eBjO45AQy65aCeD1ckHVZdvezZrORG5fF12DcGv Omv7Lnsfxz3TAjk43RPjRoxfxHM0/wwCOIImap9tQWAPrZssk6DkaCbtU6dagbah DAEtVeG+X0e+zsJyTosYtJVDiMqA8RPf68r5ckKGK1XdLNiIiemiOj8vm22IC14X V3L2jU1DHofALwlB6C13qd6x7Raz2lXzOVMD+gi2YIOsaV03uFBhzkSxmNS+Irjm 1g9rM002ou6O5WOCiC1WoYIC3CI4SG5Az0vtAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUYH8dYAWqCwEvSNIBYDQUnr/ZVfwwHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9ZSDhkWUFXcUN3RXZTTklCWURR VW5yX1pWZncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDO2aA MA0GCSqGSIb3DQEBCwUAA4IBAQCdROI6GjgO4qfrma6fwBHJzd1mRaq1xcqLdr0K 1rPx6th00JmsghShSYfuZqQg+47DgDNsrzeNx2tF5Y6uQFCpHRSPfM/1fpCkO7Tk v0Vx4vHBiv+3beOJ8yQPtmoyYHZ+sj9F3zSdwAGRwNzz6YsvZS0hfVZh85iO/88C oREwoXKnk47kTZBI+ws7kKhPmYePuu0OGuYnbIr8Zv+xL7MvZ4/6s+wOCgW5/7qB J2L5v5D3R4iA2dsO3WzHQKikZ2hhR2SUGrpRDLKvkDLOXDaa4mUD9SqqXnEpK399 gS+cXaEYnfq5iP8dwTj4ZEqrQSOUHceCK/JJFUC74hE5KHOQ -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org