$ rpki-client -vvf rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa File: 326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa (raw, json) Hash identifier: Qjby29vfdE7TcMGFUb7P3ZY36wD3AsMu7W1JHnEl9g0= Subject key identifier: 36:01:91:92:18:99:D5:60:BE:B3:78:38:40:A9:BA:61:EB:97:86:D0 Certificate issuer: /CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2 Certificate serial: 6208E1EF587A0E3B758B9AA998BE1CE2D9984FBB Authority key identifier: 33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2 Authority info access: rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer Subject info access: rsync://rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa Signing time: Fri 15 Mar 2024 15:14:23 +0000 ROA not before: Fri 15 Mar 2024 15:09:23 +0000 ROA not after: Fri 14 Mar 2025 15:14:23 +0000 asID: 199376 IP address blocks: 2a12:dd47:3900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.crl rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.mft rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 10 Jun 2024 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:08:e1:ef:58:7a:0e:3b:75:8b:9a:a9:98:be:1c:e2:d9:98:4f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2 Validity Not Before: Mar 15 15:09:23 2024 GMT Not After : Mar 14 15:14:23 2025 GMT Subject: CN=360191921899D560BEB3783840A9BA61EB9786D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:53:0e:52:b3:53:36:1f:d9:8f:73:6d:d4: 79:0d:d9:8d:19:f3:a4:a9:e8:4e:8c:0f:01:5f:c9: 92:b7:34:5f:43:96:7b:7e:8d:7c:3a:78:5b:4f:63: 3e:1c:dd:0d:ab:25:21:6c:95:75:08:ed:3f:15:f4: 81:ae:77:b3:66:42:8b:67:f3:11:4a:64:c6:7f:90: 7b:03:5d:cb:4d:61:e6:45:78:b1:f8:12:a5:0d:12: cb:c4:ad:da:8f:5e:b3:bd:34:e7:84:3f:a2:ab:31: 94:b4:23:07:f5:2e:19:fd:ef:34:1e:c8:d7:1f:9c: 58:98:9d:e6:0f:5e:d8:64:26:ff:c8:38:ff:c6:57: d1:d8:c7:5c:b4:4b:7b:c7:ab:49:59:4a:dc:c8:f8: ff:fd:ff:94:ec:2e:fd:c8:99:e5:d6:54:5c:3a:f2: a2:21:2e:a9:0d:a6:76:66:0c:0b:c8:6f:1e:4d:fa: ba:d0:32:7f:4c:0b:c9:a8:49:e6:ad:26:9e:e7:72: 4b:8a:3e:1b:30:0d:b9:8d:5a:91:06:9d:b8:d7:f9: 5d:23:6d:ad:e6:20:87:b8:23:92:53:a9:ea:83:3a: f8:cb:e1:8f:1a:a6:bf:95:43:76:15:ae:88:1f:71: ba:51:b8:24:27:ca:8c:34:70:69:fa:27:da:af:02: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:01:91:92:18:99:D5:60:BE:B3:78:38:40:A9:BA:61:EB:97:86:D0 X509v3 Authority Key Identifier: keyid:33:2D:0D:DB:8B:DE:F4:CC:79:84:74:C9:59:79:FD:CC:E3:EB:B0:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/AS199762/2/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.co/repo/AS945/1/332D0DDB8BDEF4CC798474C95979FDCCE3EBB0C2.cer Subject Information Access: Signed Object - URI:rsync://rpki.co/repo/AS199762/2/326131323a646434373a333930303a3a2f34302d3438203d3e20313939333736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:3900::/40 Signature Algorithm: sha256WithRSAEncryption 4d:fd:44:23:5e:ec:4c:9d:6d:47:2a:bd:de:c8:29:59:ad:2d: 1c:54:d6:b2:3a:5b:98:4c:53:df:f1:04:71:5c:74:94:4a:d8: 7a:38:df:e3:2b:c4:10:df:f4:72:e6:ed:0b:7f:e9:50:00:a5: fc:89:2c:27:28:bf:02:37:5b:0d:cd:29:d7:2e:d6:7c:74:6e: 3b:0a:47:51:b9:09:7c:34:a9:de:7b:99:7d:df:e9:a8:10:3f: 6c:fc:2d:53:44:5e:c3:5c:7e:a7:45:db:32:61:7c:9c:8f:3c: cd:c8:b2:f4:64:bc:dc:4f:7f:cf:70:e3:8a:98:e2:91:d5:5d: 01:21:80:f7:f1:fd:8c:d1:fe:43:05:9f:ec:bf:8d:cf:e6:70: 74:f6:b5:eb:e5:97:43:ee:24:3d:de:77:c1:f4:c3:89:cc:09: ae:32:95:68:77:3b:66:82:c9:c1:5f:e1:c9:8a:53:92:77:32: 2f:ac:07:97:02:1d:70:30:c4:17:a6:1a:3a:f9:f9:d2:30:33: 67:8a:1a:9a:b2:ea:6f:b5:39:60:5a:a6:f1:97:5d:4e:65:75: 77:3b:16:0e:96:c9:ca:81:1c:88:6c:0b:34:04:f3:38:2f:e5: 36:40:8c:f8:56:20:c2:e7:49:b1:bb:05:c8:44:e0:aa:e9:ff: 00:16:ca:52 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgIUYgjh71h6Djt1i5qpmL4c4tmYT7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyRDBEREI4QkRFRjRDQzc5ODQ3NEM5NTk3OUZEQ0NF M0VCQjBDMjAeFw0yNDAzMTUxNTA5MjNaFw0yNTAzMTQxNTE0MjNaMDMxMTAvBgNV BAMTKDM2MDE5MTkyMTg5OUQ1NjBCRUIzNzgzODQwQTlCQTYxRUI5Nzg2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCebFMOUrNTNh/Zj3Nt1HkN2Y0Z 86Sp6E6MDwFfyZK3NF9Dlnt+jXw6eFtPYz4c3Q2rJSFslXUI7T8V9IGud7NmQotn 8xFKZMZ/kHsDXctNYeZFeLH4EqUNEsvErdqPXrO9NOeEP6KrMZS0Iwf1Lhn97zQe yNcfnFiYneYPXthkJv/IOP/GV9HYx1y0S3vHq0lZStzI+P/9/5TsLv3ImeXWVFw6 8qIhLqkNpnZmDAvIbx5N+rrQMn9MC8moSeatJp7nckuKPhswDbmNWpEGnbjX+V0j ba3mIIe4I5JTqeqDOvjL4Y8apr+VQ3YVrogfcbpRuCQnyow0cGn6J9qvAs7lAgMB AAGjggHaMIIB1jAdBgNVHQ4EFgQUNgGRkhiZ1WC+s3g4QKm6YeuXhtAwHwYDVR0j BBgwFoAUMy0N24ve9Mx5hHTJWXn9zOPrsMIwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMTk5NzYyLzIvMzMy RDBEREI4QkRFRjRDQzc5ODQ3NEM5NTk3OUZEQ0NFM0VCQjBDMi5jcmwwZQYIKwYB BQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28vcmVwby9BUzk0 NS8xLzMzMkQwRERCOEJERUY0Q0M3OTg0NzRDOTU5NzlGRENDRTNFQkIwQzIuY2Vy MIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jby9y ZXBvL0FTMTk5NzYyLzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzMzM5MzAzMDNhM2Ey ZjM0MzAyZDM0MzgyMDNkM2UyMDMxMzkzOTMzMzczNi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3Uc5 MA0GCSqGSIb3DQEBCwUAA4IBAQBN/UQjXuxMnW1HKr3eyClZrS0cVNayOluYTFPf 8QRxXHSUSth6ON/jK8QQ3/Ry5u0Lf+lQAKX8iSwnKL8CN1sNzSnXLtZ8dG47CkdR uQl8NKnee5l93+moED9s/C1TRF7DXH6nRdsyYXycjzzNyLL0ZLzcT3/PcOOKmOKR 1V0BIYD38f2M0f5DBZ/sv43P5nB09rXr5ZdD7iQ93nfB9MOJzAmuMpVodztmgsnB X+HJilOSdzIvrAeXAh1wMMQXpho6+fnSMDNnihqasupvtTlgWqbxl11OZXV3OxYO lsnKgRyIbAs0BPM4L+U2QIz4ViDC50mxuwXIROCq6f8AFspS -----END CERTIFICATE-----Generated at Mon Jun 10 05:17:22 2024 by rpki-client on console-ams.rpki-client.org