$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/ftq59rDXGGKuAh6UW8iPkxzGVwk.roa File: ftq59rDXGGKuAh6UW8iPkxzGVwk.roa (raw, json) Hash identifier: UO+9Kr162xftsMJBgpcvu8qrEe41dhprJp4jI2mW7PA= Subject key identifier: 7E:DA:B9:F6:B0:D7:18:62:AE:02:1E:94:5B:C8:8F:93:1C:C6:57:09 Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0BA2 Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/ftq59rDXGGKuAh6UW8iPkxzGVwk.roa Signing time: Fri 01 Sep 2023 09:44:04 +0000 ROA not before: Fri 01 Sep 2023 09:44:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38047 IP address blocks: 2402:c340:cdef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 10:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Sep 1 09:44:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7EDAB9F6B0D71862AE021E945BC88F931CC65709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dd:1d:e0:fe:f2:72:90:cd:c7:7a:8b:fb:70: a9:95:77:9a:5c:e0:89:3d:96:8d:f7:bb:84:2c:d5: 63:10:bf:a7:75:6e:d7:08:33:2c:76:df:e7:a1:70: f5:0c:1d:04:fd:66:32:f1:18:c2:73:5f:08:59:81: 90:f0:a9:23:ec:fa:54:79:35:99:d4:c7:39:44:7c: bd:aa:3e:00:f9:c4:ce:e8:cf:2e:99:27:49:74:71: e5:04:29:8d:d4:dc:b0:39:45:da:1b:ff:24:39:52: 56:93:69:47:9a:5e:0f:76:e6:db:05:67:45:6e:0f: 06:c2:1c:29:76:6c:d2:f6:ab:6d:fe:48:8f:37:1c: 3f:d3:a3:fd:e1:3f:7c:fb:63:d4:a9:38:27:4f:d9: f6:0a:23:8e:92:f8:94:d0:9c:96:94:59:27:a9:c3: 14:1e:15:a5:0d:49:c6:b3:a9:e4:68:07:6b:ff:26: 3b:8e:dc:9f:2c:f1:e3:17:73:da:40:0f:ac:66:02: cf:17:fe:42:16:fe:2b:d1:b8:98:3e:22:fb:fe:e9: 74:49:77:aa:37:7a:ee:f8:c7:72:93:11:41:43:a7: 4c:b1:78:b9:89:cd:91:a6:5f:38:53:b2:8b:cc:43: 49:5e:2d:06:1c:05:e6:f7:38:48:ca:9b:68:5b:f4: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DA:B9:F6:B0:D7:18:62:AE:02:1E:94:5B:C8:8F:93:1C:C6:57:09 X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/ftq59rDXGGKuAh6UW8iPkxzGVwk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:c340:cdef::/48 Signature Algorithm: sha256WithRSAEncryption 0d:47:7b:80:e2:d5:e2:d5:18:c3:55:d2:72:f1:4d:7f:0c:b8: 6b:c0:48:e0:a4:83:8c:0d:33:75:74:ec:1b:4a:62:69:5a:70: a8:39:e9:15:81:f2:66:1c:83:62:30:b7:fd:14:aa:fc:e0:d5: d2:39:98:36:3b:e6:af:eb:f7:b0:63:61:8d:8a:62:67:b7:ce: 5e:60:fa:77:08:eb:93:27:4d:84:6a:88:ef:e8:17:2b:fc:9e: 6a:72:38:82:48:01:8b:bc:46:3d:f9:c2:84:06:e3:4a:68:55: 6e:10:18:83:10:02:f6:f0:48:d7:5d:a8:b5:9a:cd:1f:5a:40: eb:33:dc:1f:8a:1b:7c:fb:77:a8:09:a9:48:b4:5d:34:ce:a3: f0:8a:0e:34:2c:90:38:58:d6:5e:29:f7:ae:05:c5:31:db:02: 34:1b:4b:2e:69:ef:29:76:c6:37:26:20:f9:94:69:fe:b6:0f: a1:e2:5a:f5:10:a5:6c:3c:36:b9:c1:c9:e3:cb:61:e3:1d:04: 21:ee:fb:65:2d:6a:06:b9:9f:2f:8c:3d:27:d5:9d:24:1c:84: ba:6e:d8:53:a1:8c:09:53:f1:11:97:d9:2c:3e:7d:01:03:59: 32:5b:81:69:31:b6:8b:9d:af:09:07:fa:d1:3a:7e:3a:28:b0: 4f:19:c5:b5 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMzA5MDEw OTQ0MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdFREFCOUY2QjBENzE4 NjJBRTAyMUU5NDVCQzg4RjkzMUNDNjU3MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ3R3g/vJykM3Heov7cKmVd5pc4Ik9lo33u4Qs1WMQv6d1btcI Myx23+ehcPUMHQT9ZjLxGMJzXwhZgZDwqSPs+lR5NZnUxzlEfL2qPgD5xM7ozy6Z J0l0ceUEKY3U3LA5Rdob/yQ5UlaTaUeaXg925tsFZ0VuDwbCHCl2bNL2q23+SI83 HD/To/3hP3z7Y9SpOCdP2fYKI46S+JTQnJaUWSepwxQeFaUNScazqeRoB2v/JjuO 3J8s8eMXc9pAD6xmAs8X/kIW/ivRuJg+Ivv+6XRJd6o3eu74x3KTEUFDp0yxeLmJ zZGmXzhTsovMQ0leLQYcBeb3OEjKm2hb9HapAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUftq59rDXGGKuAh6UW8iPkxzGVwkwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL2Z0cTU5ckRYR0dL dUFoNlVXOGlQa3h6R1Z3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkAsNAze8wDQYJKoZIhvcNAQELBQADggEBAA1He4Di1eLVGMNV0nLxTX8M uGvASOCkg4wNM3V07BtKYmlacKg56RWB8mYcg2Iwt/0Uqvzg1dI5mDY75q/r97Bj YY2KYme3zl5g+ncI65MnTYRqiO/oFyv8nmpyOIJIAYu8Rj35woQG40poVW4QGIMQ AvbwSNddqLWazR9aQOsz3B+KG3z7d6gJqUi0XTTOo/CKDjQskDhY1l4p964FxTHb AjQbSy5p7yl2xjcmIPmUaf62D6HiWvUQpWw8NrnByePLYeMdBCHu+2Utaga5ny+M PSfVnSQchLpu2FOhjAlT8RGX2Sw+fQEDWTJbgWkxtoudrwkH+tE6fjoosE8ZxbU= -----END CERTIFICATE-----Generated at Sun Jun 23 15:32:04 2024 by rpki-client on console-ams.rpki-client.org