$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/ZuYfElbzREIJ-ZOsF_lXaav4mZo.roa File: ZuYfElbzREIJ-ZOsF_lXaav4mZo.roa (raw, json) Hash identifier: Wv3CR2J7kK3at6Wc2iPc5eJNjWRP9nJrqctgUZ7Pk1M= Subject key identifier: 66:E6:1F:12:56:F3:44:42:09:F9:93:AC:17:F9:57:69:AB:F8:99:9A Certificate issuer: /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989 Certificate serial: 0C2C Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/ZuYfElbzREIJ-ZOsF_lXaav4mZo.roa Signing time: Fri 25 Oct 2024 03:01:05 +0000 ROA not before: Fri 25 Oct 2024 03:01:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 147035 IP address blocks: 2403:8ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989 Validity Not Before: Oct 25 03:01:05 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=66E61F1256F3444209F993AC17F95769ABF8999A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:c1:06:91:28:cd:08:7b:a6:16:c1:a3:e4: e1:d4:01:9b:6d:fb:04:90:40:62:ed:fe:86:2d:86: f4:54:9d:83:44:91:30:0d:4b:ba:9f:b0:f9:df:ca: 0f:35:dc:e6:3c:1e:41:87:8e:01:59:70:d7:7c:68: 6a:e3:27:84:85:38:bb:3d:c6:85:59:fd:9f:96:74: 7e:26:9d:c8:9c:39:ae:7e:22:d4:77:80:03:2c:f2: 5d:9f:69:5e:d3:2e:5e:8b:cd:37:3e:8f:9a:f6:2c: 14:2f:57:f8:65:15:c7:f5:fc:09:b1:39:e3:d3:5a: 85:25:d8:0a:7a:c0:09:c8:78:b7:99:ee:91:57:2e: d6:1e:e9:09:71:0b:fe:60:a8:b4:19:26:ec:dc:64: ac:40:15:2e:08:47:cf:c7:e5:98:ac:85:7f:94:66: 8e:62:06:19:12:65:34:f2:5d:b4:43:5b:70:83:a6: bc:1b:c2:c9:cc:66:a4:b2:f6:25:68:74:4b:17:31: 7d:71:b1:bb:1a:33:5f:dd:ea:8d:fd:3d:40:74:e9: f6:f5:ac:a3:62:5f:8f:14:ce:26:94:d2:48:ad:30: 65:76:80:1d:f2:a3:5e:e3:54:3e:b0:26:c4:d9:25: c1:a9:dd:1a:b5:d4:ea:fc:dd:99:b3:cf:2a:58:6a: 48:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E6:1F:12:56:F3:44:42:09:F9:93:AC:17:F9:57:69:AB:F8:99:9A X509v3 Authority Key Identifier: keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/ZuYfElbzREIJ-ZOsF_lXaav4mZo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:8ec0::/48 Signature Algorithm: sha256WithRSAEncryption 7c:07:cb:12:0a:e1:e7:42:21:d4:cb:46:57:d9:7a:54:cc:74: ce:41:7d:d6:c9:1d:f3:ff:9a:b3:c7:12:73:d5:cb:09:c4:1e: 4e:32:a8:29:7a:6b:67:7d:fa:bd:47:07:20:55:e9:28:62:bc: 5b:8f:49:e5:b3:78:fa:0e:f8:75:c7:12:65:d4:cf:fa:5b:f1: 1a:96:2a:c4:f5:2d:e9:34:81:24:54:a3:ae:66:00:67:8d:c4: e4:05:ef:81:cd:5d:05:f3:3d:00:dc:37:db:f9:db:7e:ff:0f: 86:d0:03:0d:b8:6b:dc:e7:1d:aa:f3:81:57:cc:e7:f4:b3:a2: 66:3e:df:1e:00:ba:e4:2d:86:90:71:ae:78:9e:76:40:92:02: 24:6f:34:7e:fc:54:5a:87:1d:c6:88:bc:f5:36:a4:db:0b:77: 64:44:38:61:98:92:4a:91:9a:57:eb:75:2f:9e:46:99:d1:a7: 8b:85:ea:a1:65:ba:52:94:79:5f:a1:71:60:a2:ed:24:65:7d: ee:77:57:1e:3b:9e:65:bc:c1:0b:d0:e8:c3:f5:9f:ba:5f:51: 4b:a5:b9:b8:b1:b5:6d:2d:de:cf:2f:88:75:6d:40:bd:84:93: 93:53:e8:82:67:59:b3:05:e3:40:a2:99:ea:47:0b:8a:dd:17: 92:df:1d:79 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDU4 NjYyQjhEQTA1RTQwMjlGM0ZBNEQ1NkE1MTIxREQ0QkQ2ODk4OTAeFw0yNDEwMjUw MzAxMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2RTYxRjEyNTZGMzQ0 NDIwOUY5OTNBQzE3Rjk1NzY5QUJGODk5OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKZ8EGkSjNCHumFsGj5OHUAZtt+wSQQGLt/oYthvRUnYNEkTAN S7qfsPnfyg813OY8HkGHjgFZcNd8aGrjJ4SFOLs9xoVZ/Z+WdH4mncicOa5+ItR3 gAMs8l2faV7TLl6LzTc+j5r2LBQvV/hlFcf1/AmxOePTWoUl2Ap6wAnIeLeZ7pFX LtYe6QlxC/5gqLQZJuzcZKxAFS4IR8/H5ZishX+UZo5iBhkSZTTyXbRDW3CDprwb wsnMZqSy9iVodEsXMX1xsbsaM1/d6o39PUB06fb1rKNiX48UziaU0kitMGV2gB3y o17jVD6wJsTZJcGp3Rq11Or83ZmzzypYakjbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZuYfElbzREIJ+ZOsF/lXaav4mZowHwYDVR0jBBgwFoAUBYZiuNoF5AKfP6TV alEh3UvWiYkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNTTUFV L0JZWml1Tm9GNUFLZlA2VFZhbEVoM1V2V2lZay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQllaaXVOb0Y1QUtmUDZUVmFsRWgzVXZXaVlrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNTTUFVL1p1WWZFbGJ6UkVJSi1aT3NG X2xYYWF2NG1aby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk A47AAAAwDQYJKoZIhvcNAQELBQADggEBAHwHyxIK4edCIdTLRlfZelTMdM5BfdbJ HfP/mrPHEnPVywnEHk4yqCl6a2d9+r1HByBV6ShivFuPSeWzePoO+HXHEmXUz/pb 8RqWKsT1Lek0gSRUo65mAGeNxOQF74HNXQXzPQDcN9v5237/D4bQAw24a9znHarz gVfM5/SzomY+3x4AuuQthpBxrniedkCSAiRvNH78VFqHHcaIvPU2pNsLd2REOGGY kkqRmlfrdS+eRpnRp4uF6qFlulKUeV+hcWCi7SRlfe53Vx47nmW8wQvQ6MP1n7pf UUulubixtW0t3s8viHVtQL2Ek5NT6IJnWbMF40CimepHC4rdF5LfHXk= -----END CERTIFICATE-----Generated at Mon Nov 25 19:59:00 2024 by rpki-client on console-ams.rpki-client.org