$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/GioVl2_S2V5w6qhAxegRNXH0pn8.roa File: GioVl2_S2V5w6qhAxegRNXH0pn8.roa (raw, json) Hash identifier: A6ICUJGRIZ7mYuSWqALzxGhZyScJxoMFf+C92dkC4wg= Subject key identifier: 1A:2A:15:97:6F:D2:D9:5E:70:EA:A8:40:C5:E8:11:35:71:F4:A6:7F Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0BA3 Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/GioVl2_S2V5w6qhAxegRNXH0pn8.roa Signing time: Fri 01 Sep 2023 09:44:04 +0000 ROA not before: Fri 01 Sep 2023 09:44:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 2402:c340:54::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2979 (0xba3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Sep 1 09:44:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1A2A15976FD2D95E70EAA840C5E8113571F4A67F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:70:ab:fd:93:33:91:91:e6:b1:03:d5:ad: 43:da:f4:8c:7e:d3:5f:33:60:56:8e:4b:00:f0:70: 26:c8:b0:1e:f0:bd:d8:75:74:1a:9a:02:1e:58:fd: de:e7:e7:a7:fa:cd:2a:46:66:17:2a:96:24:f6:4b: 3d:7f:56:14:fd:4b:cc:44:ff:2d:c8:ad:19:2c:d8: d4:a7:01:3e:28:fc:ae:a1:2d:5d:6f:93:99:0a:ee: 06:44:bc:1b:1e:ad:03:f1:3b:03:12:a6:a1:48:de: 6f:5e:64:bc:3b:21:31:83:87:bd:8f:6f:41:9a:95: 49:65:c6:cb:b1:06:9f:89:eb:81:91:87:26:61:6e: 28:79:0f:84:15:a1:0b:2f:f6:98:2f:2f:c7:1b:17: e5:83:32:1f:5c:83:05:7d:83:5a:8f:6f:fb:13:cb: 73:85:21:b2:17:68:5e:3c:84:9d:a7:b9:17:dc:e2: 53:69:e0:69:66:a0:54:f4:cd:7f:73:66:ac:c9:d5: e4:85:ef:9b:8b:3d:78:c9:a0:20:9d:dd:1f:4b:88: 99:80:62:8b:09:59:81:0f:c9:5e:d2:9f:5e:9b:1a: 88:46:cf:e3:f9:80:ef:ad:4c:1e:4f:7e:7d:32:f9: 68:73:d4:bb:7c:d4:a9:6c:93:36:b0:bc:a1:6f:ae: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:15:97:6F:D2:D9:5E:70:EA:A8:40:C5:E8:11:35:71:F4:A6:7F X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/GioVl2_S2V5w6qhAxegRNXH0pn8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:c340:54::/48 Signature Algorithm: sha256WithRSAEncryption 66:c6:76:64:19:e1:57:89:ae:da:12:63:09:a1:55:6b:84:d2: 4a:a1:e3:b7:51:97:8f:f0:2f:47:7e:3f:48:f3:13:f2:3f:09: 80:af:6f:c1:68:51:cd:88:02:f1:05:75:b2:99:b7:d3:66:32: a4:57:15:41:f4:60:c7:fc:a3:d6:75:db:12:7a:dc:a9:99:5d: 81:2c:17:54:d9:8d:03:db:cc:7c:42:cf:72:44:a5:36:66:30: 40:0e:52:d7:b9:c1:d4:c7:a5:f0:6b:47:05:78:48:ad:75:a4: 95:d0:ec:a3:b1:64:a2:e0:0b:a9:f3:c9:ff:b6:15:05:37:78: 34:88:62:5b:b8:70:a7:d8:8e:46:50:f7:d2:f8:3a:50:83:e3: 1e:5a:28:1c:31:62:4a:4f:32:41:4a:ed:89:27:6c:6b:1a:49: 67:63:58:0d:77:43:3e:4e:cc:c1:b5:b1:d6:a8:7e:60:66:15: 73:aa:1c:cc:c1:d6:88:01:aa:9f:8e:26:84:1a:2a:9a:e7:c6: ac:77:72:a3:35:81:bc:9a:96:a5:20:56:b8:3a:68:e5:80:dc: cd:23:6b:ea:f1:8d:a2:6c:63:6b:2a:39:be:c6:bd:d2:51:9b: 58:96:42:53:6d:01:4c:92:6a:5b:95:5f:3f:82:77:47:92:4b: b8:ae:cf:e4 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMzA5MDEw OTQ0MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFBMkExNTk3NkZEMkQ5 NUU3MEVBQTg0MEM1RTgxMTM1NzFGNEE2N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwEHCr/ZMzkZHmsQPVrUPa9Ix+018zYFaOSwDwcCbIsB7wvdh1 dBqaAh5Y/d7n56f6zSpGZhcqliT2Sz1/VhT9S8xE/y3IrRks2NSnAT4o/K6hLV1v k5kK7gZEvBserQPxOwMSpqFI3m9eZLw7ITGDh72Pb0GalUllxsuxBp+J64GRhyZh bih5D4QVoQsv9pgvL8cbF+WDMh9cgwV9g1qPb/sTy3OFIbIXaF48hJ2nuRfc4lNp 4GlmoFT0zX9zZqzJ1eSF75uLPXjJoCCd3R9LiJmAYosJWYEPyV7Sn16bGohGz+P5 gO+tTB5Pfn0y+Whz1Lt81KlskzawvKFvrk5tAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUGioVl2/S2V5w6qhAxegRNXH0pn8wHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL0dpb1ZsMl9TMlY1 dzZxaEF4ZWdSTlhIMHBuOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkAsNAAFQwDQYJKoZIhvcNAQELBQADggEBAGbGdmQZ4VeJrtoSYwmhVWuE 0kqh47dRl4/wL0d+P0jzE/I/CYCvb8FoUc2IAvEFdbKZt9NmMqRXFUH0YMf8o9Z1 2xJ63KmZXYEsF1TZjQPbzHxCz3JEpTZmMEAOUte5wdTHpfBrRwV4SK11pJXQ7KOx ZKLgC6nzyf+2FQU3eDSIYlu4cKfYjkZQ99L4OlCD4x5aKBwxYkpPMkFK7YknbGsa SWdjWA13Qz5OzMG1sdaofmBmFXOqHMzB1ogBqp+OJoQaKprnxqx3cqM1gbyalqUg Vrg6aOWA3M0ja+rxjaJsY2sqOb7GvdJRm1iWQlNtAUySaluVXz+Cd0eSS7iuz+Q= -----END CERTIFICATE-----Generated at Sun Jun 23 15:32:04 2024 by rpki-client on console-ams.rpki-client.org