$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/BjqVQXEFkKn6Ky8AL_C1H9rstlA.roa File: BjqVQXEFkKn6Ky8AL_C1H9rstlA.roa (raw, json) Hash identifier: IaM0HyPMef40rVuG+EpYxJMT0x3sibZvnr+jEuOI6Fw= Subject key identifier: 06:3A:95:41:71:05:90:A9:FA:2B:2F:00:2F:F0:B5:1F:DA:EC:B6:50 Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA Certificate serial: 054B Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/BjqVQXEFkKn6Ky8AL_C1H9rstlA.roa Signing time: Mon 26 Aug 2024 05:09:27 +0000 ROA not before: Mon 26 Aug 2024 05:09:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38136 IP address blocks: 2406:8dc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA Validity Not Before: Aug 26 05:09:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=063A9541710590A9FA2B2F002FF0B51FDAECB650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:33:99:f0:09:28:3b:83:34:38:ee:b0:c4: fb:cb:68:4b:b0:67:6a:02:5a:3f:6a:d0:5d:83:04: 36:cb:3c:8b:10:58:68:f4:4d:bd:1a:38:0a:a3:3c: e4:8f:b3:6d:fd:d8:c7:8f:08:35:d8:d8:e6:78:cd: e0:8c:dc:3c:63:ec:16:ed:5b:83:5b:e3:de:07:a8: 8a:6d:36:84:92:8e:f4:2d:6b:e0:64:1e:eb:d8:fe: 8c:17:10:08:f7:77:9e:59:7b:cd:e9:8e:a1:31:42: bc:c2:e3:36:93:d9:94:c4:a9:66:2b:20:d0:4f:2a: ef:53:b3:de:25:00:d7:14:b7:2c:8a:f8:f0:84:6f: 3e:63:17:9a:4b:bb:7e:2b:85:b1:3e:c2:f8:42:ec: 69:63:d8:12:09:73:76:e2:6a:39:29:8d:9d:ed:8f: 2e:e0:40:d4:a6:0f:03:27:4f:f7:42:df:1c:f8:7b: 63:b6:35:1e:a7:6d:26:a8:f7:e2:83:03:4f:77:67: 16:38:f3:21:d6:57:b7:eb:fe:13:c9:ee:20:e4:9b: da:cc:e7:a5:33:39:7f:88:01:0f:ff:6c:0e:d6:ce: 3d:e9:16:68:2e:e1:23:c5:9a:7d:81:e8:6a:67:d4: 4f:9b:53:89:12:bb:e8:42:54:a6:f4:92:f2:58:e1: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3A:95:41:71:05:90:A9:FA:2B:2F:00:2F:F0:B5:1F:DA:EC:B6:50 X509v3 Authority Key Identifier: keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/BjqVQXEFkKn6Ky8AL_C1H9rstlA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:8dc0::/32 Signature Algorithm: sha256WithRSAEncryption 9d:e2:49:57:49:69:49:35:0c:62:5f:2f:f8:a5:fe:a9:87:93: 7c:b5:5b:09:bc:e4:e7:8a:29:90:bb:32:3d:04:af:d3:57:2f: 90:d1:ba:00:4c:35:a7:c1:85:73:f3:55:d1:ae:46:63:f8:05: 64:3c:e3:cb:23:a1:99:b5:ff:58:10:e8:0e:b8:79:82:20:e4: f4:d1:e9:59:4b:8f:84:73:0d:d0:2b:e7:07:5e:85:2c:33:9c: f0:f8:0a:66:00:fa:c8:3c:7e:3c:fb:51:52:15:a3:bf:d4:55: 57:67:df:45:c9:57:9f:e6:e6:1f:d3:2d:1c:12:30:80:83:3f: 94:99:47:c8:5a:3c:1c:63:66:47:8c:5f:b3:52:34:8a:3c:6a: 30:9a:12:48:61:dc:0f:a0:96:61:a8:5c:6e:c4:7b:c4:23:3b: 8b:cf:09:91:02:67:89:b7:47:8a:e5:af:1f:fa:fd:60:c0:19: 79:03:d0:5b:88:fa:b0:77:ba:4d:68:e5:62:f6:b9:c1:4c:d2: fe:fa:61:13:68:74:01:fd:25:ef:5b:0c:fb:5f:27:63:4b:9a: 5b:f2:16:5f:08:c7:a8:3e:16:02:49:e0:c2:44:8f:e7:89:03: 51:c5:21:3d:30:e4:9e:4c:19:b9:0d:9f:49:94:07:39:1d:68: 72:be:fd:d3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yNDA4MjYw NTA5MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA2M0E5NTQxNzEwNTkw QTlGQTJCMkYwMDJGRjBCNTFGREFFQ0I2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7PDOZ8AkoO4M0OO6wxPvLaEuwZ2oCWj9q0F2DBDbLPIsQWGj0 Tb0aOAqjPOSPs2392MePCDXY2OZ4zeCM3Dxj7BbtW4Nb494HqIptNoSSjvQta+Bk HuvY/owXEAj3d55Ze83pjqExQrzC4zaT2ZTEqWYrINBPKu9Ts94lANcUtyyK+PCE bz5jF5pLu34rhbE+wvhC7Glj2BIJc3biajkpjZ3tjy7gQNSmDwMnT/dC3xz4e2O2 NR6nbSao9+KDA093ZxY48yHWV7fr/hPJ7iDkm9rM56UzOX+IAQ//bA7Wzj3pFmgu 4SPFmn2B6Gpn1E+bU4kSu+hCVKb0kvJY4aLRAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUBjqVQXEFkKn6Ky8AL/C1H9rstlAwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvQmpxVlFYRUZrS242S3k4 QUxfQzFIOXJzdGxBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQGjcAwDQYJKoZIhvcNAQELBQADggEBAJ3iSVdJaUk1DGJfL/il/qmHk3y1Wwm8 5OeKKZC7Mj0Er9NXL5DRugBMNafBhXPzVdGuRmP4BWQ848sjoZm1/1gQ6A64eYIg 5PTR6VlLj4RzDdAr5wdehSwznPD4CmYA+sg8fjz7UVIVo7/UVVdn30XJV5/m5h/T LRwSMICDP5SZR8haPBxjZkeMX7NSNIo8ajCaEkhh3A+glmGoXG7Ee8QjO4vPCZEC Z4m3R4rlrx/6/WDAGXkD0FuI+rB3uk1o5WL2ucFM0v76YRNodAH9Je9bDPtfJ2NL mlvyFl8Ix6g+FgJJ4MJEj+eJA1HFIT0w5J5MGbkNn0mUBzkdaHK+/dM= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:34 2024 by rpki-client on console-fra.rpki-client.org