$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/3JmFNj9FYb2cgZVl-ZYeCHWtlCo.roa File: 3JmFNj9FYb2cgZVl-ZYeCHWtlCo.roa (raw, json) Hash identifier: srv5h+AU2AbpD1oOtDoeZN2xqv8eKmdeuMQDm2rqnvM= Subject key identifier: DC:99:85:36:3F:45:61:BD:9C:81:95:65:F9:96:1E:08:75:AD:94:2A Certificate issuer: /CN=A082F5D992E6BC25E08997538616180702E857C3 Certificate serial: 02AE Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/3JmFNj9FYb2cgZVl-ZYeCHWtlCo.roa Signing time: Fri 01 Sep 2023 08:31:37 +0000 ROA not before: Fri 01 Sep 2023 08:31:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38839 IP address blocks: 2406:d7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 14:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3 Validity Not Before: Sep 1 08:31:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DC9985363F4561BD9C819565F9961E0875AD942A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3b:29:68:62:58:44:19:a7:d5:05:6a:16:2b: 8a:34:02:ac:2d:e6:6b:dc:23:fe:de:9f:89:f1:fc: 02:40:00:61:6e:3e:98:1a:72:9d:58:63:7e:e8:4f: a5:36:28:1b:1c:45:60:82:d7:87:97:7c:19:98:3f: 8a:5f:09:1c:5a:6b:35:4b:c4:c1:fc:bf:ac:88:81: cd:ad:82:c7:95:9c:52:17:8c:1a:9d:8f:e8:08:2a: 00:b3:c0:71:3b:8f:15:4f:67:56:52:f8:6f:c6:4d: 16:b9:2f:4d:b3:4f:e9:1a:9e:42:60:c5:98:50:7b: 80:a7:23:1d:6c:10:77:31:71:9e:4a:49:6c:f3:c7: f8:a1:29:7e:8a:bb:c5:13:5e:7c:42:b3:e8:a3:99: f9:cc:55:78:2a:d9:6d:cd:93:71:09:bb:00:da:f5: 5a:ca:9a:65:24:e6:84:8d:19:1a:0f:76:47:9a:dd: 1a:eb:6f:bc:29:2a:53:57:6e:96:c0:09:79:57:44: 63:8f:93:f8:80:43:ee:c3:04:ae:ea:f9:cc:cb:97: eb:17:09:9c:92:3f:57:bf:b9:6b:ed:4a:8f:f5:9c: 84:81:67:ed:e0:8e:64:08:12:d2:97:35:22:64:67: 93:0a:1f:e0:7f:c3:53:de:6f:0a:c1:d3:ac:82:0e: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:99:85:36:3F:45:61:BD:9C:81:95:65:F9:96:1E:08:75:AD:94:2A X509v3 Authority Key Identifier: keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/3JmFNj9FYb2cgZVl-ZYeCHWtlCo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d7c0::/32 Signature Algorithm: sha256WithRSAEncryption 33:c3:a5:66:82:e2:61:cc:61:d7:33:9b:95:ef:52:cc:e9:74: 66:7d:c3:06:ad:8b:cd:6d:f5:7f:36:e0:2e:86:b7:8c:b5:c1: f1:2c:c0:79:0b:ff:18:14:5c:20:3a:81:65:ed:d2:2c:30:73: 01:10:ad:d5:e1:95:29:e8:d6:93:ad:42:88:b5:6f:06:1c:f9: 07:c7:22:33:f0:1d:4b:dc:90:54:a1:ee:39:4d:7e:25:6c:7a: 31:cc:39:22:d9:74:73:f2:ec:e9:48:fd:d3:ac:e7:bf:ec:13: 07:5c:44:91:58:ea:21:16:b2:3e:02:5d:51:fd:be:03:d2:f5: 18:95:a6:b3:14:a6:c1:61:7b:d7:9c:ce:0c:2d:6c:30:49:25: 0f:52:bb:a9:db:bf:6e:ab:7c:c0:60:e2:25:72:4d:3d:f5:32: 2a:1e:f6:b6:4c:e8:82:c9:e3:8f:52:4c:e5:04:d4:5d:f5:85: c1:95:8e:cd:ca:dc:24:25:a1:89:61:dc:23:ec:ed:fb:4a:ab: f8:e7:16:fc:32:9f:98:55:e3:2c:7e:0c:10:9c:bc:31:3a:8f: 94:a6:26:20:14:de:5a:ce:8a:c3:46:3a:16:1f:f0:5c:32:15: 23:d3:3b:5e:64:ce:dc:d2:f0:b2:5a:08:a5:62:c4:af:e7:e9: 0a:00:fd:4e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA4 MkY1RDk5MkU2QkMyNUUwODk5NzUzODYxNjE4MDcwMkU4NTdDMzAeFw0yMzA5MDEw ODMxMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERDOTk4NTM2M0Y0NTYx QkQ5QzgxOTU2NUY5OTYxRTA4NzVBRDk0MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD7OyloYlhEGafVBWoWK4o0Aqwt5mvcI/7en4nx/AJAAGFuPpga cp1YY37oT6U2KBscRWCC14eXfBmYP4pfCRxaazVLxMH8v6yIgc2tgseVnFIXjBqd j+gIKgCzwHE7jxVPZ1ZS+G/GTRa5L02zT+kankJgxZhQe4CnIx1sEHcxcZ5KSWzz x/ihKX6Ku8UTXnxCs+ijmfnMVXgq2W3Nk3EJuwDa9VrKmmUk5oSNGRoPdkea3Rrr b7wpKlNXbpbACXlXRGOPk/iAQ+7DBK7q+czLl+sXCZySP1e/uWvtSo/1nISBZ+3g jmQIEtKXNSJkZ5MKH+B/w1PebwrB06yCDuxrAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU3JmFNj9FYb2cgZVl+ZYeCHWtlCowHwYDVR0jBBgwFoAUoIL12ZLmvCXgiZdT hhYYBwLoV8MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVL L29JTDEyWkxtdkNYZ2laZFRoaFlZQndMb1Y4TS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0lMMTJaTG12Q1hnaVpkVGhoWVlCd0xvVjhNLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVLLzNKbUZOajlGWWIyY2daVmwt WlllQ0hXdGxDby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BtfAMA0GCSqGSIb3DQEBCwUAA4IBAQAzw6VmguJhzGHXM5uV71LM6XRmfcMGrYvN bfV/NuAuhreMtcHxLMB5C/8YFFwgOoFl7dIsMHMBEK3V4ZUp6NaTrUKItW8GHPkH xyIz8B1L3JBUoe45TX4lbHoxzDki2XRz8uzpSP3TrOe/7BMHXESRWOohFrI+Al1R /b4D0vUYlaazFKbBYXvXnM4MLWwwSSUPUrup279uq3zAYOIlck099TIqHva2TOiC yeOPUkzlBNRd9YXBlY7NytwkJaGJYdwj7O37Sqv45xb8Mp+YVeMsfgwQnLwxOo+U piYgFN5azorDRjoWH/BcMhUj0zteZM7c0vCyWgilYsSv5+kKAP1O -----END CERTIFICATE-----Generated at Sat Jun 1 23:25:29 2024 by rpki-client on console-ams.rpki-client.org