$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/NvK7cTSUJ8P2XKmS62FZ0Co30wQ.roa File: NvK7cTSUJ8P2XKmS62FZ0Co30wQ.roa (raw, json) Hash identifier: dYxWNG8u3K9GBTw2ug0B/Esnh8PCMuhh1kXK7B4Exvw= Subject key identifier: 36:F2:BB:71:34:94:27:C3:F6:5C:A9:92:EB:61:59:D0:2A:37:D3:04 Certificate issuer: /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Certificate serial: 0C48 Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/NvK7cTSUJ8P2XKmS62FZ0Co30wQ.roa Signing time: Mon 26 Aug 2024 05:09:43 +0000 ROA not before: Mon 26 Aug 2024 05:09:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9264 IP address blocks: 2400:4500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 09:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3144 (0xc48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A Validity Not Before: Aug 26 05:09:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=36F2BB71349427C3F65CA992EB6159D02A37D304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:e7:72:96:34:eb:47:9d:66:bd:22:68:8e: 95:7a:9f:3f:3c:fa:86:2c:fa:80:0f:47:1e:25:e6: d2:cf:d9:72:7b:d3:03:8c:a7:fb:c8:ac:e4:53:30: ca:b4:34:d7:0f:31:cb:2f:1b:88:55:b9:68:b2:75: 0b:43:33:62:d5:93:b2:25:9e:23:79:4a:0e:ec:1f: f9:3e:63:70:c9:4a:dc:21:3d:23:5d:d4:78:2a:90: 09:e7:7a:f9:4d:d5:d4:2e:63:eb:8d:61:7d:c7:47: ed:98:2c:ee:28:a7:9b:40:50:14:6e:35:3c:c0:d4: 24:d5:4f:5e:2f:ac:de:8b:42:11:30:db:62:91:3c: cf:c0:99:f0:f0:ad:5a:6e:fb:bc:05:4e:1a:ea:f3: cc:e0:ee:d4:87:43:cd:96:3e:ae:85:97:19:79:67: 99:66:a8:39:f1:da:a1:cd:89:fa:fb:6f:ae:49:87: 12:01:18:d7:b5:c0:ae:fa:42:16:0e:ca:f8:35:db: bd:6e:6f:30:24:73:a7:10:54:94:b8:7b:50:7e:61: 0d:ee:dd:02:c9:26:3b:e2:d0:4a:e6:7f:ef:50:b4: 7e:15:d0:2e:06:67:42:40:3d:5e:44:38:3b:45:e9: dd:28:03:cd:db:32:6b:37:58:fa:a5:db:3b:e3:c9: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F2:BB:71:34:94:27:C3:F6:5C:A9:92:EB:61:59:D0:2A:37:D3:04 X509v3 Authority Key Identifier: keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/NvK7cTSUJ8P2XKmS62FZ0Co30wQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:4500::/32 Signature Algorithm: sha256WithRSAEncryption 0e:50:29:72:e5:73:5c:8c:5e:ea:cb:62:5e:1d:53:01:46:9d: cb:b9:78:43:95:2c:81:d8:e7:b7:f1:27:c1:69:96:48:3a:61: e4:5b:09:1f:d3:c1:d1:24:96:0f:e3:6d:14:d0:86:b0:9b:cf: f7:74:77:d5:b0:4f:64:29:4a:4c:46:c8:cc:a1:c8:5b:a7:46: 7b:b3:eb:06:cd:9f:8d:69:5f:d1:90:16:0e:a4:56:a7:82:c9: f9:fa:22:68:73:db:b6:66:ed:0d:4f:1c:5a:6e:aa:38:04:e7: ae:02:61:c5:15:d4:32:cd:f3:d2:07:72:a1:d0:e5:b0:b9:72: 6d:28:fe:6e:11:a5:51:03:af:53:c2:93:35:b1:01:71:a6:28: d1:75:f9:30:d9:a8:10:8e:f5:f1:b1:49:0f:e5:05:e5:a6:c6: aa:a5:d4:24:03:9b:f6:fd:6b:c3:f3:cb:c6:56:f7:b2:29:fe: 02:83:a6:fa:a9:88:9a:7f:7a:3f:05:c5:02:0c:d6:05:2d:b5: 94:13:31:ab:9b:5f:b8:a6:be:2d:09:da:49:a5:28:c5:62:3a: 40:20:b4:88:33:35:8a:cf:38:7d:36:21:52:cc:9b:c3:0b:5a: c1:6f:b6:a5:60:4f:50:01:0a:6a:3c:b7:65:b0:86:9b:13:b5: eb:bc:0a:65 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDEgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzA5 ODRGMDA4Q0EyOEY2NDc1REI0MjYzNTNCRkQxQzQzM0Q4QkMxQTAeFw0yNDA4MjYw NTA5NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM2RjJCQjcxMzQ5NDI3 QzNGNjVDQTk5MkVCNjE1OUQwMkEzN0QzMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsrudyljTrR51mvSJojpV6nz88+oYs+oAPRx4l5tLP2XJ70wOM p/vIrORTMMq0NNcPMcsvG4hVuWiydQtDM2LVk7IlniN5Sg7sH/k+Y3DJStwhPSNd 1HgqkAnnevlN1dQuY+uNYX3HR+2YLO4op5tAUBRuNTzA1CTVT14vrN6LQhEw22KR PM/AmfDwrVpu+7wFThrq88zg7tSHQ82WPq6Flxl5Z5lmqDnx2qHNifr7b65JhxIB GNe1wK76QhYOyvg1271ubzAkc6cQVJS4e1B+YQ3u3QLJJjvi0Ermf+9QtH4V0C4G Z0JAPV5EODtF6d0oA83bMms3WPql2zvjyVrPAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUNvK7cTSUJ8P2XKmS62FZ0Co30wQwHwYDVR0jBBgwFoAUcJhPAIyij2R120Jj U7/RxDPYvBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNORVQv Y0poUEFJeWlqMlIxMjBKalU3X1J4RFBZdkJvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9jSmhQQUl5aWoyUjEyMEpqVTdfUnhEUFl2Qm8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BU05FVC9Odks3Y1RTVUo4UDJYS21TNjJG WjBDbzMwd1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJABF ADANBgkqhkiG9w0BAQsFAAOCAQEADlApcuVzXIxe6stiXh1TAUady7l4Q5Usgdjn t/EnwWmWSDph5FsJH9PB0SSWD+NtFNCGsJvP93R31bBPZClKTEbIzKHIW6dGe7Pr Bs2fjWlf0ZAWDqRWp4LJ+foiaHPbtmbtDU8cWm6qOATnrgJhxRXUMs3z0gdyodDl sLlybSj+bhGlUQOvU8KTNbEBcaYo0XX5MNmoEI718bFJD+UF5abGqqXUJAOb9v1r w/PLxlb3sin+AoOm+qmImn96PwXFAgzWBS21lBMxq5tfuKa+LQnaSaUoxWI6QCC0 iDM1is84fTYhUsybwwtawW+2pWBPUAEKajy3ZbCGmxO167wKZQ== -----END CERTIFICATE-----Generated at Sat Sep 21 06:24:01 2024 by rpki-client on console-fra.rpki-client.org