$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/gEe4qyBw_9tZo4CxRujKJwxnHKU.roa File: gEe4qyBw_9tZo4CxRujKJwxnHKU.roa (raw, json) Hash identifier: zFEmSwyqIZHWFFrCOtEQ48z9JNdNW/G2CTiXD+SF5fQ= Subject key identifier: 80:47:B8:AB:20:70:FF:DB:59:A3:80:B1:46:E8:CA:27:0C:67:1C:A5 Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Certificate serial: 027F Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/gEe4qyBw_9tZo4CxRujKJwxnHKU.roa Signing time: Mon 26 Aug 2024 05:19:07 +0000 ROA not before: Mon 26 Aug 2024 05:19:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 2400:5ea0:852a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 17:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF Validity Not Before: Aug 26 05:19:07 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8047B8AB2070FFDB59A380B146E8CA270C671CA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:89:74:92:1d:d4:f5:99:e0:57:5a:d7:4d: c7:67:fa:33:cc:d4:e0:6b:bd:4c:23:16:c8:cd:91: 8c:c4:90:12:b9:74:a3:17:75:53:70:1a:03:fb:c7: ca:57:aa:46:af:21:e4:fc:22:a4:95:89:09:cf:26: 79:d1:c1:dd:5f:2e:ff:a2:fe:26:5c:aa:0e:99:1e: cc:a3:db:cd:c4:d7:2c:d8:72:64:b9:97:57:21:35: cc:d9:9a:43:22:44:3c:ab:74:1b:01:aa:c2:4e:80: 59:1e:3b:3b:0b:59:ae:10:34:dd:d9:bb:0d:2e:ab: f5:e4:24:d2:55:1d:23:98:83:ba:10:e2:19:e2:6d: 6b:9b:3a:43:81:bc:bb:b0:e1:45:19:db:ca:6e:d9: 5a:cd:4c:4b:d3:4e:e7:f4:66:11:60:58:ca:b1:f9: 6e:dc:c9:fe:b3:21:fe:10:6a:a9:3b:61:7f:36:cc: 20:f4:16:37:61:22:ca:cb:1c:3e:56:2f:17:b7:7b: 5c:c6:53:3e:64:e7:4e:15:90:e5:be:9f:2e:86:3e: e9:da:e7:6f:45:af:d8:43:99:d3:2b:79:3b:a0:9f: b4:08:6c:50:55:0a:17:6d:c6:b7:29:96:91:0a:1b: 18:91:ef:02:d5:96:71:b5:cc:23:1a:9b:ec:21:fe: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:47:B8:AB:20:70:FF:DB:59:A3:80:B1:46:E8:CA:27:0C:67:1C:A5 X509v3 Authority Key Identifier: keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/gEe4qyBw_9tZo4CxRujKJwxnHKU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:5ea0:852a::/48 Signature Algorithm: sha256WithRSAEncryption 45:b3:df:d5:a6:a0:ed:d4:62:b6:6a:34:f3:21:53:5b:ca:c2: de:7f:af:cf:d6:ae:e8:44:d1:a8:08:39:e9:c1:74:ad:3f:a9: 74:87:f3:2a:d5:c7:99:24:02:a5:2e:db:da:d3:d9:fa:77:42: e6:00:12:80:9c:ac:8e:73:e9:8d:70:fc:41:21:06:cd:12:8e: ec:4b:a8:32:91:40:dd:44:37:2a:02:24:6f:6c:3e:73:d2:05: 6a:25:58:e1:f6:cb:60:e4:f5:0c:d3:68:79:da:17:3d:7c:d8: e1:a3:db:01:80:e3:80:16:e8:ec:55:ec:63:f5:fa:17:aa:c5: 8f:5f:ef:ab:d5:67:04:d9:a7:06:8b:b7:4b:0f:51:2c:e1:10: ec:2e:56:d7:7b:fe:61:d0:43:67:fb:f7:69:99:9d:47:bc:43: 49:26:78:b4:84:ee:b8:71:d1:09:42:5c:f9:7d:52:07:f3:19: 83:8c:64:88:ef:0c:d7:14:d8:74:81:4e:84:cb:3e:e7:61:d1: b6:7b:9e:83:83:b1:a7:fb:48:9c:9b:42:dc:66:34:11:6a:d1: d6:a2:e3:3e:65:f2:e6:57:4f:e7:f7:2a:0f:86:fd:54:da:f5: 3d:0b:5b:65:6d:f1:f6:85:40:8f:51:dc:5f:3d:47:d3:e9:4f: 89:9a:b0:e4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Ux N0Q5MjNBQTBCQzZCMEEwOEI1QTE4N0JFRTlDQURFOEQ1MEVBRjAeFw0yNDA4MjYw NTE5MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwNDdCOEFCMjA3MEZG REI1OUEzODBCMTQ2RThDQTI3MEM2NzFDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkWol0kh3U9ZngV1rXTcdn+jPM1OBrvUwjFsjNkYzEkBK5dKMX dVNwGgP7x8pXqkavIeT8IqSViQnPJnnRwd1fLv+i/iZcqg6ZHsyj283E1yzYcmS5 l1chNczZmkMiRDyrdBsBqsJOgFkeOzsLWa4QNN3Zuw0uq/XkJNJVHSOYg7oQ4hni bWubOkOBvLuw4UUZ28pu2VrNTEvTTuf0ZhFgWMqx+W7cyf6zIf4Qaqk7YX82zCD0 FjdhIsrLHD5WLxe3e1zGUz5k504VkOW+ny6GPuna529Fr9hDmdMreTugn7QIbFBV ChdtxrcplpEKGxiR7wLVlnG1zCMam+wh/jW9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUgEe4qyBw/9tZo4CxRujKJwxnHKUwHwYDVR0jBBgwFoAUfhfZI6oLxrCgi1oY e+6crejVDq8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNI L2ZoZlpJNm9MeHJDZ2kxb1llLTZjcmVqVkRxOC5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZmhmWkk2b0x4ckNnaTFvWWUtNmNyZWpWRHE4LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNISVNIL2dFZTRxeUJ3Xzl0Wm80Q3hS dWpLSnd4bkhLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk AF6ghSowDQYJKoZIhvcNAQELBQADggEBAEWz39WmoO3UYrZqNPMhU1vKwt5/r8/W ruhE0agIOenBdK0/qXSH8yrVx5kkAqUu29rT2fp3QuYAEoCcrI5z6Y1w/EEhBs0S juxLqDKRQN1ENyoCJG9sPnPSBWolWOH2y2Dk9QzTaHnaFz182OGj2wGA44AW6OxV 7GP1+heqxY9f76vVZwTZpwaLt0sPUSzhEOwuVtd7/mHQQ2f792mZnUe8Q0kmeLSE 7rhx0QlCXPl9UgfzGYOMZIjvDNcU2HSBToTLPudh0bZ7noODsaf7SJybQtxmNBFq 0dai4z5l8uZXT+f3Kg+G/VTa9T0LW2Vt8faFQI9R3F89R9PpT4masOQ= -----END CERTIFICATE-----Generated at Sat Sep 28 14:43:50 2024 by rpki-client on console-ams.rpki-client.org