$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/blrD0U-33_4ALsNFOOGlY0YPfjE.roa File: blrD0U-33_4ALsNFOOGlY0YPfjE.roa (raw, json) Hash identifier: hCPqYrjy3MfPAZuS+jV76ZOyezGAXeqAgMQtbCVJwps= Subject key identifier: 6E:5A:C3:D1:4F:B7:DF:FE:00:2E:C3:45:38:E1:A5:63:46:0F:7E:31 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 0FBB Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/blrD0U-33_4ALsNFOOGlY0YPfjE.roa Signing time: Fri 01 Sep 2023 08:29:29 +0000 ROA not before: Fri 01 Sep 2023 08:29:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 10133 IP address blocks: 2406:d400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Sep 1 08:29:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6E5AC3D14FB7DFFE002EC34538E1A563460F7E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:ca:d5:17:14:8e:55:f3:22:35:5e:1c:8a: f5:c0:5e:e0:03:50:19:b8:07:c0:d0:10:08:91:b5: 37:61:8f:c5:90:c7:47:ae:7b:07:d9:cd:3f:33:68: dc:0f:c9:48:0c:12:a1:ee:0b:33:57:5b:27:63:e4: 8d:85:0e:a4:91:1d:5e:2c:1f:e5:30:28:9f:c2:dd: d4:9d:25:bd:a7:4e:a8:a3:65:c1:60:5d:47:2f:a5: a2:e0:e4:97:11:07:95:03:c7:1d:f8:28:8b:cd:fe: 26:86:7d:4a:3b:87:a3:ae:71:d2:41:65:19:dd:a2: 7f:d3:0a:df:43:45:01:ad:6c:74:ea:b7:86:c1:70: 2f:a8:0e:47:8f:d5:0f:b7:63:a8:76:b6:b3:d0:c5: 33:94:9f:93:40:fa:13:c7:1d:97:43:79:e8:de:c0: b4:72:80:ab:10:78:89:0b:fb:0e:f7:44:c8:1c:98: 25:5e:20:fa:ee:a0:bf:74:9f:eb:ee:16:83:54:47: e6:a8:b9:54:7f:7a:f5:15:e9:ef:4a:df:43:d3:9e: 7a:e2:05:b3:84:d1:7a:1a:1c:d9:96:3e:2e:c3:fc: f3:45:ff:83:eb:36:d4:3c:99:c0:3b:70:ac:af:f4: 38:1b:06:26:24:2a:f6:df:b5:54:2c:08:be:34:c6: 82:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5A:C3:D1:4F:B7:DF:FE:00:2E:C3:45:38:E1:A5:63:46:0F:7E:31 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/blrD0U-33_4ALsNFOOGlY0YPfjE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d400::/32 Signature Algorithm: sha256WithRSAEncryption 10:45:eb:4b:8f:ff:c7:30:7b:35:1e:4b:09:2d:cd:76:8e:c6: 5c:cc:5e:b0:15:65:fb:af:a1:cb:31:2a:a3:d2:33:77:5d:d6: fd:58:55:38:05:9e:d7:be:fc:ef:2f:cb:31:23:05:ca:70:1b: a4:f4:4f:ac:e2:63:5f:4c:cf:cc:49:bb:d7:4e:84:41:58:5c: ed:80:1e:fc:6c:9a:7e:d8:41:99:bc:33:78:27:43:72:20:78: 6d:5a:9d:04:3b:4d:8f:59:6c:08:40:83:fb:72:10:e7:98:5f: 60:82:35:da:91:58:f0:ba:d8:9d:63:b2:eb:11:84:42:88:24: 60:fd:12:b8:ed:91:3b:0b:85:b8:27:89:56:e1:1d:a3:9e:c8: 76:c9:7f:84:8e:fb:42:86:24:81:1d:09:19:de:fa:e3:6b:75: d8:22:4a:bb:81:28:14:8a:94:dd:40:6d:c4:0d:69:bc:b6:8e: ea:7e:78:f7:52:9c:5f:aa:ea:d0:63:bc:d4:23:21:52:99:73: e0:d1:d8:18:5f:86:f0:34:99:45:a1:0e:1b:ea:fe:82:a8:08: be:d9:87:be:cc:2f:03:06:63:b3:9a:b5:06:f5:86:2a:38:8c: 34:16:1e:ce:f7:6b:bc:d6:7e:24:de:8b:07:f2:10:33:64:5a: f2:cb:ea:e1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzA5MDEw ODI5MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZFNUFDM0QxNEZCN0RG RkUwMDJFQzM0NTM4RTFBNTYzNDYwRjdFMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtdMrVFxSOVfMiNV4civXAXuADUBm4B8DQEAiRtTdhj8WQx0eu ewfZzT8zaNwPyUgMEqHuCzNXWydj5I2FDqSRHV4sH+UwKJ/C3dSdJb2nTqijZcFg XUcvpaLg5JcRB5UDxx34KIvN/iaGfUo7h6OucdJBZRndon/TCt9DRQGtbHTqt4bB cC+oDkeP1Q+3Y6h2trPQxTOUn5NA+hPHHZdDeejewLRygKsQeIkL+w73RMgcmCVe IPruoL90n+vuFoNUR+aouVR/evUV6e9K30PTnnriBbOE0XoaHNmWPi7D/PNF/4Pr NtQ8mcA7cKyv9DgbBiYkKvbftVQsCL40xoKDAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUblrD0U+33/4ALsNFOOGlY0YPfjEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9ibHJEMFUtMzNfNEFM c05GT09HbFkwWVBmakUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAbUADANBgkqhkiG9w0BAQsFAAOCAQEAEEXrS4//xzB7NR5LCS3Ndo7GXMxe sBVl+6+hyzEqo9Izd13W/VhVOAWe17787y/LMSMFynAbpPRPrOJjX0zPzEm7106E QVhc7YAe/GyafthBmbwzeCdDciB4bVqdBDtNj1lsCECD+3IQ55hfYII12pFY8LrY nWOy6xGEQogkYP0SuO2ROwuFuCeJVuEdo57Idsl/hI77QoYkgR0JGd7642t12CJK u4EoFIqU3UBtxA1pvLaO6n5491KcX6rq0GO81CMhUplz4NHYGF+G8DSZRaEOG+r+ gqgIvtmHvswvAwZjs5q1BvWGKjiMNBYezvdrvNZ+JN6LB/IQM2Ra8svq4Q== -----END CERTIFICATE-----Generated at Tue Jun 18 12:53:57 2024 by rpki-client on console-ams.rpki-client.org