$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/sTu8zYaLtU8VSPbysn1HklB9Qb0.roa File: sTu8zYaLtU8VSPbysn1HklB9Qb0.roa (raw, json) Hash identifier: C6YPjCEyICmSg25iEBcg9ot0P8IWTyWeibR6Slk9HaA= Subject key identifier: B1:3B:BC:CD:86:8B:B5:4F:15:48:F6:F2:B2:7D:47:92:50:7D:41:BD Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0CD2 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/sTu8zYaLtU8VSPbysn1HklB9Qb0.roa Signing time: Mon 26 Aug 2024 05:27:35 +0000 ROA not before: Mon 26 Aug 2024 05:27:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131596 IP address blocks: 61.58.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Aug 26 05:27:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B13BBCCD868BB54F1548F6F2B27D4792507D41BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:e4:50:73:89:8f:9b:ac:b8:55:43:6b:7f: ae:d5:2f:ea:e0:b6:11:84:8e:a4:d3:8f:c1:e0:ef: 50:d1:7b:51:a8:51:d4:35:de:20:1d:53:2e:77:e7: a7:14:78:af:32:23:f6:22:ae:ca:02:56:d5:11:f1: f1:ff:63:3f:ba:23:c4:86:42:e6:bd:26:70:07:4b: f7:4b:a7:f7:c7:e0:3e:06:74:32:0d:31:d9:38:90: ba:b5:88:d0:51:49:7f:64:04:7e:c8:c1:4b:77:1b: b2:20:db:82:59:03:d0:83:4d:a5:a7:1b:09:bf:75: bc:f4:8a:04:22:c4:11:63:00:6d:13:a8:5b:1a:28: ea:27:4e:a5:9a:92:73:07:18:82:7b:4e:88:c7:5c: e6:8f:36:6e:78:91:b2:41:35:64:be:74:93:ca:b8: 73:f0:8d:06:e4:59:d9:86:1f:39:ec:e9:4b:71:36: e9:c5:50:c5:17:66:e9:2c:48:f3:b9:39:79:63:d1: 15:59:01:60:3d:5c:0e:b4:25:d1:2c:da:27:22:63: 55:5c:f0:3e:88:72:d2:93:b1:3f:9a:16:22:ae:26: 06:24:ea:81:9f:45:69:15:04:33:d0:5c:51:79:ca: f1:bd:b8:c2:fa:06:cd:73:d0:32:75:d2:61:f7:61: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3B:BC:CD:86:8B:B5:4F:15:48:F6:F2:B2:7D:47:92:50:7D:41:BD X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/sTu8zYaLtU8VSPbysn1HklB9Qb0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.58.72.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:77:f4:99:f8:1c:b6:9d:17:56:b8:97:d8:1f:94:d3:b8:d4: 7c:fd:c7:f3:fb:a4:5a:bb:03:ed:25:37:66:d9:fc:43:05:1c: a5:a0:30:e7:48:5c:73:d0:3c:19:57:e3:ff:86:72:e5:c1:df: b3:d3:e6:fd:ad:e9:4d:cf:92:11:96:e1:1d:8b:28:a4:94:31: 16:55:f7:2e:44:61:20:e0:4e:6e:76:08:f2:ce:0f:ae:04:0a: b2:f6:84:e8:40:87:ee:fb:34:69:26:fa:43:3d:64:72:f2:58: 9c:a1:df:27:d8:79:48:09:91:71:72:12:e2:4a:d4:74:fa:b8: ba:41:1d:01:3e:eb:55:38:9c:bd:da:a8:01:3d:12:28:46:f4: a1:c4:58:4f:33:27:aa:95:b8:47:05:c9:ca:54:05:44:4e:89: c7:47:43:96:f3:96:90:a0:e1:7f:f5:65:a7:8d:70:12:4a:d9: fa:d3:02:f9:79:81:66:bd:93:84:6e:0f:7a:0c:c2:d8:4f:04: 75:07:f2:f3:48:f5:d2:7b:09:5f:c0:83:6d:e9:48:51:ca:00: 47:1f:6f:c0:36:64:6c:7e:12:3b:48:05:7a:a6:d2:94:d1:52: 13:47:8b:fc:20:e8:29:c8:bb:40:42:99:17:be:1b:af:a7:5b: cf:38:30:40 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yNDA4MjYw NTI3MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxM0JCQ0NEODY4QkI1 NEYxNTQ4RjZGMkIyN0Q0NzkyNTA3RDQxQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDF8uRQc4mPm6y4VUNrf67VL+rgthGEjqTTj8Hg71DRe1GoUdQ1 3iAdUy5356cUeK8yI/YirsoCVtUR8fH/Yz+6I8SGQua9JnAHS/dLp/fH4D4GdDIN Mdk4kLq1iNBRSX9kBH7IwUt3G7Ig24JZA9CDTaWnGwm/dbz0igQixBFjAG0TqFsa KOonTqWaknMHGIJ7TojHXOaPNm54kbJBNWS+dJPKuHPwjQbkWdmGHzns6UtxNunF UMUXZuksSPO5OXlj0RVZAWA9XA60JdEs2iciY1Vc8D6IctKTsT+aFiKuJgYk6oGf RWkVBDPQXFF5yvG9uML6Bs1z0DJ10mH3YcHHAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUsTu8zYaLtU8VSPbysn1HklB9Qb0wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9zVHU4ellhTHRVOFZTUGJ5c24x SGtsQjlRYjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPTpI MA0GCSqGSIb3DQEBCwUAA4IBAQAtd/SZ+By2nRdWuJfYH5TTuNR8/cfz+6RauwPt JTdm2fxDBRyloDDnSFxz0DwZV+P/hnLlwd+z0+b9relNz5IRluEdiyiklDEWVfcu RGEg4E5udgjyzg+uBAqy9oToQIfu+zRpJvpDPWRy8licod8n2HlICZFxchLiStR0 +ri6QR0BPutVOJy92qgBPRIoRvShxFhPMyeqlbhHBcnKVAVETonHR0OW85aQoOF/ 9WWnjXASStn60wL5eYFmvZOEbg96DMLYTwR1B/LzSPXSewlfwINt6UhRygBHH2/A NmRsfhI7SAV6ptKU0VITR4v8IOgpyLtAQpkXvhuvp1vPODBA -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org