$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/1hnkuSDbPPk63gEP4Mw5pMxhVhI.roa File: 1hnkuSDbPPk63gEP4Mw5pMxhVhI.roa (raw, json) Hash identifier: 4YAP8jIOt3Sw2dVfJrJ7CzsP/SjCgJQ69VAfg//TXAs= Subject key identifier: D6:19:E4:B9:20:DB:3C:F9:3A:DE:01:0F:E0:CC:39:A4:CC:61:56:12 Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Certificate serial: 0C44 Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/1hnkuSDbPPk63gEP4Mw5pMxhVhI.roa Signing time: Mon 26 Aug 2024 05:09:42 +0000 ROA not before: Mon 26 Aug 2024 05:09:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9264 IP address blocks: 2001:c08::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 09:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Validity Not Before: Aug 26 05:09:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D619E4B920DB3CF93ADE010FE0CC39A4CC615612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:7e:9e:fb:ec:44:5c:28:22:b0:32:f9:c2: 87:87:5e:a6:7d:be:26:6b:2e:f7:ec:35:7e:31:0c: 59:da:53:70:6e:a7:94:29:cf:f7:0f:d3:5e:c1:90: 5c:37:fd:0e:2d:aa:70:07:86:dd:e6:2a:1d:fb:35: b7:0f:cd:52:c0:a9:be:fc:b1:85:09:cd:08:a4:69: 31:48:65:fc:25:43:bf:15:8f:cc:bf:3e:4b:b4:40: 12:d7:a9:98:e4:90:de:c7:0c:88:16:e4:4f:40:ae: d2:44:af:ee:14:69:6f:d8:08:f8:3a:50:0d:d2:a7: a7:e7:bc:83:6a:bd:29:f7:6a:d2:60:6c:36:30:8a: 2a:c7:71:dc:2c:54:dc:cf:96:98:45:ef:5d:a9:00: 38:9f:96:8c:c4:27:bd:50:07:ef:b2:54:71:8e:ee: 91:f0:2e:1b:ca:bc:18:8b:81:e0:c7:df:f8:60:db: 53:33:18:d2:e3:ef:ed:4e:63:73:b9:37:cd:73:da: 56:c5:1f:b1:6b:c2:ef:39:dd:62:1a:92:b4:0d:d0: dd:0a:19:c3:40:b4:36:66:86:24:74:98:82:db:62: 39:7d:60:ae:77:28:29:be:51:8a:0d:cf:4e:b2:0f: f9:90:cf:eb:c4:24:db:1f:8a:64:3f:c4:a8:12:a4: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:19:E4:B9:20:DB:3C:F9:3A:DE:01:0F:E0:CC:39:A4:CC:61:56:12 X509v3 Authority Key Identifier: keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/1hnkuSDbPPk63gEP4Mw5pMxhVhI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:c08::/32 Signature Algorithm: sha256WithRSAEncryption a9:e1:d5:8d:c6:85:54:c1:8a:69:db:96:2d:8f:90:4c:5f:98: 6e:81:4d:2c:33:ef:df:e0:8a:43:5d:7d:aa:68:14:8a:9e:90: c8:de:fc:fa:f8:97:44:4a:b1:36:0c:25:e0:05:31:89:7a:5a: da:80:de:b0:27:ec:36:15:c2:e9:e5:23:82:bc:75:12:de:32: a3:d3:31:10:d7:40:0e:e4:78:8c:71:01:c1:fc:6b:c6:90:33: 5f:cb:f1:61:9b:99:2c:58:3f:da:25:50:0e:ef:9f:39:c5:4a: 72:94:58:29:f4:d4:00:32:92:06:99:7c:65:53:a4:83:fb:eb: 56:c3:96:93:44:88:3b:c8:b5:6c:fa:37:fb:8a:38:20:1c:74: 4b:9f:55:2e:ea:09:a8:f2:17:82:c9:10:c1:c1:8b:45:66:0d: a0:20:16:fd:56:85:84:71:9f:f0:a6:25:fe:54:ca:8d:24:fd: 92:00:d5:ad:a4:ec:40:36:e1:da:83:a2:ec:c0:05:3c:cf:c4: 5d:49:55:82:16:e9:27:78:f8:0d:22:31:88:73:55:ea:28:a1: 83:fb:c0:bb:f8:4f:e6:8b:a0:73:9d:75:0c:4b:bc:51:51:bf: a6:a0:ac:09:75:ef:34:68:9a:0c:aa:66:07:23:fd:d3:21:d2: 24:4f:99:10 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5 ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNDA4MjYw NTA5NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2MTlFNEI5MjBEQjND RjkzQURFMDEwRkUwQ0MzOUE0Q0M2MTU2MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZdX6e++xEXCgisDL5woeHXqZ9viZrLvfsNX4xDFnaU3Bup5Qp z/cP017BkFw3/Q4tqnAHht3mKh37NbcPzVLAqb78sYUJzQikaTFIZfwlQ78Vj8y/ Pku0QBLXqZjkkN7HDIgW5E9ArtJEr+4UaW/YCPg6UA3Sp6fnvINqvSn3atJgbDYw iirHcdwsVNzPlphF712pADiflozEJ71QB++yVHGO7pHwLhvKvBiLgeDH3/hg21Mz GNLj7+1OY3O5N81z2lbFH7Frwu853WIakrQN0N0KGcNAtDZmhiR0mILbYjl9YK53 KCm+UYoNz06yD/mQz+vEJNsfimQ/xKgSpFCjAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU1hnkuSDbPPk63gEP4Mw5pMxhVhIwHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC8xaG5rdVNEYlBQazYzZ0VQNE13 NXBNeGhWaEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEM CDANBgkqhkiG9w0BAQsFAAOCAQEAqeHVjcaFVMGKaduWLY+QTF+YboFNLDPv3+CK Q119qmgUip6QyN78+viXREqxNgwl4AUxiXpa2oDesCfsNhXC6eUjgrx1Et4yo9Mx ENdADuR4jHEBwfxrxpAzX8vxYZuZLFg/2iVQDu+fOcVKcpRYKfTUADKSBpl8ZVOk g/vrVsOWk0SIO8i1bPo3+4o4IBx0S59VLuoJqPIXgskQwcGLRWYNoCAW/VaFhHGf 8KYl/lTKjST9kgDVraTsQDbh2oOi7MAFPM/EXUlVghbpJ3j4DSIxiHNV6iihg/vA u/hP5ougc511DEu8UVG/pqCsCXXvNGiaDKpmByP90yHSJE+ZEA== -----END CERTIFICATE-----Generated at Sat Sep 21 07:22:01 2024 by rpki-client on console-ams.rpki-client.org