$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8SyPu6i7bIhdXLGZcl0tBrrNns0.roa File: 8SyPu6i7bIhdXLGZcl0tBrrNns0.roa (raw, json) Hash identifier: maa/dbm94wEjta4FvnZFQi3z1cHhYBZuCwf3VF+7brw= Subject key identifier: F1:2C:8F:BB:A8:BB:6C:88:5D:5C:B1:99:72:5D:2D:06:BA:CD:9E:CD Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1163 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8SyPu6i7bIhdXLGZcl0tBrrNns0.roa Signing time: Mon 26 Aug 2024 05:10:44 +0000 ROA not before: Mon 26 Aug 2024 05:10:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 10133 IP address blocks: 2406:d400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4451 (0x1163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 26 05:10:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F12C8FBBA8BB6C885D5CB199725D2D06BACD9ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:71:d6:dc:4f:07:82:9f:62:4b:0e:62:0f: bc:9f:e8:a4:82:80:e2:ae:07:55:66:27:1d:3c:e1: cc:8f:c5:c3:fd:e2:27:26:5a:56:cf:97:63:32:88: 8b:1a:47:19:73:90:a1:34:17:04:2a:4e:3f:bb:5c: a7:70:56:2e:af:4b:b6:93:7c:f2:e8:04:c5:be:3d: 07:36:8b:bd:53:7a:ab:63:b0:ea:fa:30:e1:de:1e: ce:9a:2b:b9:11:7a:25:ab:41:15:d6:29:e4:f5:2a: 3e:85:c1:4f:7f:ce:af:fd:db:8d:7f:9c:c6:d4:fc: b2:10:0d:5d:01:5b:6d:a3:10:45:d0:1c:54:62:28: f0:10:c3:6f:d2:67:2c:a3:ca:f1:91:35:5f:05:e2: bc:7a:30:6d:0f:36:8f:b8:80:25:a0:1f:d5:ac:6f: ce:44:ad:6a:0f:82:a4:a9:9e:38:e8:dd:28:a6:c6: c3:14:f7:e0:15:38:ca:3d:03:ba:5a:97:bf:13:b2: 26:89:fc:b1:63:b8:5e:71:18:c7:7a:2a:0f:b2:a6: 84:ce:af:35:89:71:aa:fb:72:bd:20:65:79:2e:7e: ea:3d:f5:9f:ed:10:f6:3e:9c:bb:70:7d:ba:53:ef: 9f:d6:33:a5:54:2d:6e:5f:e8:21:45:54:4d:e3:1f: 64:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2C:8F:BB:A8:BB:6C:88:5D:5C:B1:99:72:5D:2D:06:BA:CD:9E:CD X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8SyPu6i7bIhdXLGZcl0tBrrNns0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d400::/32 Signature Algorithm: sha256WithRSAEncryption 93:83:1e:e5:d5:f5:7c:60:eb:99:ec:78:1a:63:f1:23:26:95: 72:d1:cb:46:73:47:11:81:e3:ff:44:b0:27:a3:83:9f:5c:06: dd:27:50:bb:06:b0:97:e6:e1:d8:50:09:bb:5d:55:0a:2b:54: a5:f8:83:d1:50:08:90:c9:50:7e:90:36:0e:8d:68:d4:ca:21: cd:26:41:71:13:93:b0:38:c9:04:07:27:78:50:ab:47:0e:35: 0e:b6:3c:e8:0f:5f:8d:8f:33:64:51:a8:a9:90:81:17:96:9b: 89:62:1c:4f:89:1d:b5:5e:b3:c0:e0:60:70:d5:f9:72:a8:0f: ca:0e:e4:41:42:97:e8:9e:00:31:fe:02:5b:ab:25:55:44:65: 02:c9:85:07:c9:54:75:8a:26:db:6e:e9:92:e1:63:f1:61:2f: 6b:66:2a:ec:d6:51:b0:3c:cc:82:9e:a9:76:ce:b9:bd:5a:c8: 94:75:27:1c:b1:8c:81:df:5e:7a:3c:81:d7:1c:ad:3f:e1:3f: 4d:dd:4f:08:dc:6e:5e:bb:94:08:55:db:6f:a8:9d:e7:c9:99: 38:73:54:a7:f2:d3:d1:d4:39:77:d0:c4:20:5c:84:54:5c:c1: 1c:d3:82:98:04:c8:8e:02:36:51:83:f5:3a:b0:78:39:a8:22: d8:1f:24:66 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNDA4MjYw NTEwNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYxMkM4RkJCQThCQjZD ODg1RDVDQjE5OTcyNUQyRDA2QkFDRDlFQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJxXHW3E8Hgp9iSw5iD7yf6KSCgOKuB1VmJx084cyPxcP94icm WlbPl2MyiIsaRxlzkKE0FwQqTj+7XKdwVi6vS7aTfPLoBMW+PQc2i71TeqtjsOr6 MOHeHs6aK7kReiWrQRXWKeT1Kj6FwU9/zq/9241/nMbU/LIQDV0BW22jEEXQHFRi KPAQw2/SZyyjyvGRNV8F4rx6MG0PNo+4gCWgH9Wsb85ErWoPgqSpnjjo3SimxsMU 9+AVOMo9A7pal78TsiaJ/LFjuF5xGMd6Kg+ypoTOrzWJcar7cr0gZXkufuo99Z/t EPY+nLtwfbpT75/WM6VULW5f6CFFVE3jH2T5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU8SyPu6i7bIhdXLGZcl0tBrrNns0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy84U3lQdTZpN2JJaGRY TEdaY2wwdEJyck5uczAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAbUADANBgkqhkiG9w0BAQsFAAOCAQEAk4Me5dX1fGDrmex4GmPxIyaVctHL RnNHEYHj/0SwJ6ODn1wG3SdQuwawl+bh2FAJu11VCitUpfiD0VAIkMlQfpA2Do1o 1MohzSZBcROTsDjJBAcneFCrRw41DrY86A9fjY8zZFGoqZCBF5abiWIcT4kdtV6z wOBgcNX5cqgPyg7kQUKX6J4AMf4CW6slVURlAsmFB8lUdYom227pkuFj8WEva2Yq 7NZRsDzMgp6pds65vVrIlHUnHLGMgd9eejyB1xytP+E/Td1PCNxuXruUCFXbb6id 58mZOHNUp/LT0dQ5d9DEIFyEVFzBHNOCmATIjgI2UYP1OrB4Oagi2B8kZg== -----END CERTIFICATE-----Generated at Fri Sep 27 23:36:41 2024 by rpki-client on console-fra.rpki-client.org