$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/910gb_KbvWKTV8ok0NLr-4DdqFg.roa File: 910gb_KbvWKTV8ok0NLr-4DdqFg.roa (raw, json) Hash identifier: tafShDsokOJCK3tjqSULabP3/ETBYzf5uJpARBXR018= Subject key identifier: F7:5D:20:6F:F2:9B:BD:62:93:57:CA:24:D0:D2:EB:FB:80:DD:A8:58 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 0440 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/910gb_KbvWKTV8ok0NLr-4DdqFg.roa Signing time: Fri 01 Sep 2023 08:03:46 +0000 ROA not before: Fri 01 Sep 2023 08:03:46 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38136 IP address blocks: 2406:8dc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 03:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Sep 1 08:03:46 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F75D206FF29BBD629357CA24D0D2EBFB80DDA858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:e9:1f:d2:58:de:47:77:d7:a6:0d:ff:f9: 2c:49:7c:8e:73:0b:c6:c8:3e:61:55:a7:dc:54:5b: 7d:cb:16:77:3c:10:64:83:68:3b:6e:57:af:e0:2d: 18:77:3f:48:22:9f:6c:2b:f9:86:07:e5:b2:51:d4: ab:6f:e4:69:45:11:0c:72:70:f7:ab:34:05:3f:6e: 82:a7:58:f9:d4:2f:99:3e:39:a6:a5:00:59:6d:e5: ef:b2:c4:95:62:99:45:d8:18:e2:37:4a:48:e3:da: 40:d4:f9:45:79:59:d4:e0:75:0c:cf:24:d3:14:f9: 1b:37:7b:95:75:92:19:47:37:88:ee:cf:29:17:41: 83:de:a6:27:ae:da:c2:8f:ed:37:95:2c:da:71:65: 95:33:43:0c:6e:ce:88:58:72:69:31:0a:b6:d5:e6: 6c:79:aa:9e:54:9d:09:40:d4:c3:0a:ef:78:4a:6b: 8e:29:59:9a:bb:26:fe:b4:ae:11:61:67:1a:41:2c: fc:3b:74:fd:16:d2:ea:01:61:d0:0e:6a:97:95:e1: cf:02:4b:3b:6a:81:f4:8e:27:86:e3:b3:48:f2:8d: 61:37:28:de:85:49:19:50:8e:4b:73:a7:45:27:96: 4f:f0:67:01:0d:af:2e:e9:6c:4b:5a:f0:3e:8b:31: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5D:20:6F:F2:9B:BD:62:93:57:CA:24:D0:D2:EB:FB:80:DD:A8:58 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/910gb_KbvWKTV8ok0NLr-4DdqFg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:8dc0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:00:a4:1d:07:84:d4:30:6c:2d:84:31:ce:c9:bf:5e:6a:77: e4:a7:22:1c:df:5d:92:a8:cb:77:43:37:26:7e:4f:b7:c1:6b: 46:02:57:64:72:65:a0:2a:5b:73:04:d5:58:be:d4:b5:50:97: bf:2f:97:71:99:2f:ff:2d:bc:99:c0:7d:a3:61:97:40:d8:55: 6d:83:9d:c7:a5:41:79:ae:ba:98:14:97:b4:61:b1:c8:ff:33: 8d:02:72:43:2c:0a:3e:78:e3:56:d7:73:24:cb:ec:9c:6f:2e: 7d:18:17:1a:05:42:31:f1:66:24:8c:62:ba:d5:d2:9c:73:de: a3:56:d5:c8:4f:b8:46:e9:63:32:ac:f6:c4:46:d9:76:af:82: 72:b6:9a:83:d8:b8:d1:90:be:a7:34:e0:22:49:45:d9:12:0c: fb:5d:cf:f0:a5:34:22:3e:28:3e:44:f8:be:bc:d1:c9:e9:e5: 53:60:71:80:2b:e2:2b:cc:71:e5:73:12:04:5b:5c:8e:13:86: c3:9f:0e:ab:84:68:b7:9e:e7:62:57:93:5a:31:d2:5e:52:df: 9d:df:de:f0:4c:f6:af:a9:7f:72:76:39:e0:bf:29:39:80:f6: bf:dc:63:b1:40:74:23:49:58:7b:d7:37:77:56:e3:c4:2d:78: 65:d0:a9:f5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw ODAzNDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEY3NUQyMDZGRjI5QkJE NjI5MzU3Q0EyNEQwRDJFQkZCODBEREE4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDkOkf0ljeR3fXpg3/+SxJfI5zC8bIPmFVp9xUW33LFnc8EGSD aDtuV6/gLRh3P0gin2wr+YYH5bJR1Ktv5GlFEQxycPerNAU/boKnWPnUL5k+Oaal AFlt5e+yxJVimUXYGOI3Skjj2kDU+UV5WdTgdQzPJNMU+Rs3e5V1khlHN4juzykX QYPepieu2sKP7TeVLNpxZZUzQwxuzohYcmkxCrbV5mx5qp5UnQlA1MMK73hKa44p WZq7Jv60rhFhZxpBLPw7dP0W0uoBYdAOapeV4c8CSztqgfSOJ4bjs0jyjWE3KN6F SRlQjktzp0Unlk/wZwENry7pbEta8D6LMTGRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU910gb/KbvWKTV8ok0NLr+4DdqFgwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvOTEwZ2JfS2J2V0tUVjhv azBOTHItNERkcUZnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQGjcAwDQYJKoZIhvcNAQELBQADggEBAH8ApB0HhNQwbC2EMc7Jv15qd+SnIhzf XZKoy3dDNyZ+T7fBa0YCV2RyZaAqW3ME1Vi+1LVQl78vl3GZL/8tvJnAfaNhl0DY VW2DncelQXmuupgUl7Rhscj/M40CckMsCj5441bXcyTL7JxvLn0YFxoFQjHxZiSM YrrV0pxz3qNW1chPuEbpYzKs9sRG2XavgnK2moPYuNGQvqc04CJJRdkSDPtdz/Cl NCI+KD5E+L680cnp5VNgcYAr4ivMceVzEgRbXI4ThsOfDquEaLee52JXk1ox0l5S 353f3vBM9q+pf3J2OeC/KTmA9r/cY7FAdCNJWHvXN3dW48QteGXQqfU= -----END CERTIFICATE-----Generated at Fri May 17 09:34:25 2024 by rpki-client on console-fra.rpki-client.org