$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/zZ1fLY6_8WC81gt85g_8vPWH_yM.roa File: zZ1fLY6_8WC81gt85g_8vPWH_yM.roa (raw, json) Hash identifier: 88fDUm8ukhUjzUe0/gAHB1pV6Gx9XKkNUa2ozVFTC9w= Subject key identifier: CD:9D:5F:2D:8E:BF:F1:60:BC:D6:0B:7C:E6:0F:FC:BC:F5:87:FF:23 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 0435 Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/zZ1fLY6_8WC81gt85g_8vPWH_yM.roa Signing time: Fri 01 Sep 2023 08:03:42 +0000 ROA not before: Fri 01 Sep 2023 08:03:42 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 51044 IP address blocks: 2406:8dc0:2500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 03:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Sep 1 08:03:42 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CD9D5F2D8EBFF160BCD60B7CE60FFCBCF587FF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:0e:0a:39:38:b2:84:6c:98:79:49:5a:4b: 3d:2a:d7:23:cf:35:f0:a4:ec:c1:f1:e6:f1:5a:f0: a1:5f:20:1d:3a:54:bc:14:38:24:2f:1f:53:b5:2c: f0:7e:c9:6c:8a:ac:99:0d:af:bc:be:ca:ac:fe:b9: 6c:33:48:fa:71:81:18:33:6c:f3:b8:a8:68:1a:22: 47:de:a5:18:c4:e5:24:67:34:5a:bd:01:01:0d:77: 45:4c:66:cc:f6:ab:36:c7:5c:98:21:2b:38:db:20: 51:0e:fa:62:f9:a7:62:a5:88:2c:34:2a:db:79:3a: 31:8f:20:11:d7:2d:13:d5:b9:c7:b2:d5:86:1e:00: 76:a7:e0:80:51:11:f6:43:11:70:45:90:6f:d1:36: 64:00:3b:30:95:07:29:44:d6:6d:e4:0a:f8:85:fd: 58:e2:23:d7:9f:26:08:d1:0c:88:25:e4:f1:ee:85: c5:6b:86:53:06:fe:30:ba:26:16:3a:17:fa:87:da: 16:66:07:7d:74:4e:61:52:a2:e7:19:01:0c:b5:33: 05:9b:81:0f:69:a9:d0:88:d0:a0:e6:c3:98:b5:60: 19:9c:71:6b:65:2f:4d:3b:7f:a4:5d:ca:4c:fd:91: cd:f7:64:c7:8e:ad:1c:7e:0d:ba:a5:82:ab:2b:d9: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9D:5F:2D:8E:BF:F1:60:BC:D6:0B:7C:E6:0F:FC:BC:F5:87:FF:23 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/zZ1fLY6_8WC81gt85g_8vPWH_yM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:8dc0:2500::/40 Signature Algorithm: sha256WithRSAEncryption 1c:ff:87:0f:bb:25:0c:54:29:81:d1:98:01:6d:f4:82:f2:f3: e3:8b:e7:77:22:a2:19:6e:ac:06:f5:1c:62:96:b5:46:61:5b: 08:e4:49:40:78:1c:60:d3:3c:2c:cf:c0:e2:9e:f7:b6:30:80: 5b:bf:7c:48:4b:a0:d5:f9:41:95:b3:cd:54:3b:9c:bc:c5:6c: e0:ad:a9:e5:e8:25:11:c8:c3:25:54:b7:41:3c:4e:fb:d8:a3: 06:d3:1a:50:24:f4:e1:52:a9:e5:b3:19:0c:39:f5:b7:65:e7: b1:80:be:60:00:65:47:ef:db:6b:10:f1:8c:6e:a9:f0:c6:69: a4:29:6d:28:1d:e8:23:30:3a:6c:fc:09:79:8f:b8:32:13:2e: b3:c4:11:13:77:50:f9:04:fb:73:3b:30:4d:39:50:ea:da:74: 5d:27:b9:2c:7f:b8:d3:aa:75:0f:23:83:1a:5f:8b:39:67:91: 17:4d:bb:fd:8d:51:77:b0:a3:0e:17:89:2b:ef:a6:94:68:ff: d7:5a:42:93:b8:c0:cc:ed:a3:4e:b4:a0:7e:a3:d7:43:26:88: 69:34:41:48:75:b3:e0:6f:6a:64:38:c1:80:01:05:1e:9f:69: 5e:40:77:f0:b4:28:d3:5a:da:4a:01:50:ab:19:fe:1d:6d:96: 33:51:53:a2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMzA5MDEw ODAzNDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENEOUQ1RjJEOEVCRkYx NjBCQ0Q2MEI3Q0U2MEZGQ0JDRjU4N0ZGMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXvQ4KOTiyhGyYeUlaSz0q1yPPNfCk7MHx5vFa8KFfIB06VLwU OCQvH1O1LPB+yWyKrJkNr7y+yqz+uWwzSPpxgRgzbPO4qGgaIkfepRjE5SRnNFq9 AQENd0VMZsz2qzbHXJghKzjbIFEO+mL5p2KliCw0Ktt5OjGPIBHXLRPVucey1YYe AHan4IBREfZDEXBFkG/RNmQAOzCVBylE1m3kCviF/VjiI9efJgjRDIgl5PHuhcVr hlMG/jC6JhY6F/qH2hZmB310TmFSoucZAQy1MwWbgQ9pqdCI0KDmw5i1YBmccWtl L007f6Rdykz9kc33ZMeOrRx+Dbqlgqsr2eXXAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUzZ1fLY6/8WC81gt85g/8vPWH/yMwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MveloxZkxZNl84V0M4MWd0 ODVnXzh2UFdIX3lNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMG ACQGjcAlMA0GCSqGSIb3DQEBCwUAA4IBAQAc/4cPuyUMVCmB0ZgBbfSC8vPji+d3 IqIZbqwG9RxilrVGYVsI5ElAeBxg0zwsz8Dinve2MIBbv3xIS6DV+UGVs81UO5y8 xWzgranl6CURyMMlVLdBPE772KMG0xpQJPThUqnlsxkMOfW3ZeexgL5gAGVH79tr EPGMbqnwxmmkKW0oHegjMDps/Al5j7gyEy6zxBETd1D5BPtzOzBNOVDq2nRdJ7ks f7jTqnUPI4MaX4s5Z5EXTbv9jVF3sKMOF4kr76aUaP/XWkKTuMDM7aNOtKB+o9dD JohpNEFIdbPgb2pkOMGAAQUen2leQHfwtCjTWtpKAVCrGf4dbZYzUVOi -----END CERTIFICATE-----Generated at Fri May 17 10:15:26 2024 by rpki-client on console-ams.rpki-client.org