$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/DV9TU6BCv_ln_mHc5u2WrDgtFrE.roa File: DV9TU6BCv_ln_mHc5u2WrDgtFrE.roa (raw, json) Hash identifier: 9HcA6XXnIQ5/0Agt8psks2z/xsi+sW1hbCQ6C33Glx8= Subject key identifier: 0D:5F:53:53:A0:42:BF:F9:67:FE:61:DC:E6:ED:96:AC:38:2D:16:B1 Certificate issuer: /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A Certificate serial: F3 Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/DV9TU6BCv_ln_mHc5u2WrDgtFrE.roa Signing time: Tue 21 Nov 2023 15:31:02 +0000 ROA not before: Tue 21 Nov 2023 15:31:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131657 IP address blocks: 2400:c9e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 08:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A Validity Not Before: Nov 21 15:31:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0D5F5353A042BFF967FE61DCE6ED96AC382D16B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:41:eb:3c:81:c2:af:df:f7:a5:66:92:5c: 47:7a:ce:19:fd:ca:de:89:c4:b7:25:52:39:16:1e: 22:24:25:d4:9f:fc:66:61:59:88:b5:be:5a:5b:8b: a6:a0:94:6d:9d:21:68:6f:11:21:54:72:7d:06:20: b6:d2:f9:c0:c1:9d:4e:ba:e2:df:1a:47:44:3e:0c: b9:23:92:60:9b:b8:da:66:6f:12:d9:d8:94:3c:f7: ab:a2:85:97:97:9c:7c:8c:89:cb:32:d5:00:8a:d3: 5d:46:20:de:a0:80:88:a5:f3:b5:e4:80:7b:e7:34: 93:01:34:fd:e9:f6:31:8e:2a:76:fb:a5:05:bd:40: 50:be:55:40:0c:f0:e5:57:02:6d:9a:2d:be:9f:c3: 44:ce:96:c5:e9:80:8f:a3:f3:0a:8f:60:e9:c5:8e: 77:ed:10:97:2e:63:17:b9:ff:7e:df:2e:05:23:30: aa:f1:27:8c:b6:00:63:ac:a5:a6:fe:12:1d:23:0f: 27:52:81:f8:56:ad:79:42:b6:00:3f:64:1f:37:7e: f6:ab:09:44:20:0c:c0:f9:88:d4:da:c6:9b:5e:6e: 87:30:6d:97:91:27:62:7f:cb:bd:6f:60:fb:12:8b: 38:21:4b:b4:7a:a0:29:18:3d:c8:38:d8:75:9d:45: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5F:53:53:A0:42:BF:F9:67:FE:61:DC:E6:ED:96:AC:38:2D:16:B1 X509v3 Authority Key Identifier: keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/DV9TU6BCv_ln_mHc5u2WrDgtFrE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:c9e0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:89:b7:38:4e:0e:1d:c2:12:8b:05:a9:f7:0f:2f:80:53:1e: 51:10:6a:1e:6f:c5:a9:8b:dc:0b:65:f3:8a:36:7a:ee:33:d9: d0:09:1e:40:76:3a:76:0c:d3:82:d0:05:c5:95:df:60:b6:92: 61:c5:46:60:a4:a9:e4:4c:fc:73:e2:f0:d0:ad:5d:5e:39:0e: 80:c2:76:d1:49:6a:09:ce:7e:2e:33:4f:99:61:03:39:58:c4: 53:fa:af:30:88:5e:5d:6f:4c:68:50:14:6a:b9:47:9f:8d:b6: 62:33:40:5e:cb:5a:e7:a1:8b:94:03:5e:f3:b7:92:81:47:8e: f4:da:d7:30:d4:d2:26:3c:05:d9:b7:e5:62:81:96:5d:cb:0e: c8:0b:22:db:2f:e4:51:b2:fa:e6:34:a7:22:05:06:cb:fb:ad: b5:c6:c3:65:34:dc:96:66:c7:f5:94:5a:ee:36:07:83:1f:e7: ca:c5:67:0c:e9:a0:c3:37:42:42:29:fc:3a:54:40:b8:32:b8: 73:ff:33:4c:8b:4a:31:90:cb:42:d7:5b:0c:5e:72:17:53:99: 7a:cc:ca:27:0a:1a:74:03:c5:36:ff:1b:6d:a8:34:4a:74:65: ff:63:e9:73:9c:1d:af:b8:90:8d:39:9d:c3:37:78:0b:42:16: fa:3c:26:ec -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTVB NkFDMzhFRTY4QzM2NENGNzkxODhGMDY0MjdFOUM3NjZENEMxQTAeFw0yMzExMjEx NTMxMDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBENUY1MzUzQTA0MkJG Rjk2N0ZFNjFEQ0U2RUQ5NkFDMzgyRDE2QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1hkHrPIHCr9/3pWaSXEd6zhn9yt6JxLclUjkWHiIkJdSf/GZh WYi1vlpbi6aglG2dIWhvESFUcn0GILbS+cDBnU664t8aR0Q+DLkjkmCbuNpmbxLZ 2JQ896uihZeXnHyMicsy1QCK011GIN6ggIil87XkgHvnNJMBNP3p9jGOKnb7pQW9 QFC+VUAM8OVXAm2aLb6fw0TOlsXpgI+j8wqPYOnFjnftEJcuYxe5/37fLgUjMKrx J4y2AGOspab+Eh0jDydSgfhWrXlCtgA/ZB83fvarCUQgDMD5iNTaxptebocwbZeR J2J/y71vYPsSizghS7R6oCkYPcg42HWdRVTjAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUDV9TU6BCv/ln/mHc5u2WrDgtFrEwHwYDVR0jBBgwFoAUpaasOO5ow2TPeRiP BkJ+nHZtTBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJJQ0tT SU5DL3BhYXNPTzVvdzJUUGVSaVBCa0otbkhadFRCby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcGFhc09PNW93MlRQZVJpUEJrSi1uSFp0VEJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJJQ0tTSU5DL0RWOVRVNkJDdl9s bl9tSGM1dTJXckRndEZyRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAMngMA0GCSqGSIb3DQEBCwUAA4IBAQB7ibc4Tg4dwhKLBan3Dy+AUx5R EGoeb8Wpi9wLZfOKNnruM9nQCR5Adjp2DNOC0AXFld9gtpJhxUZgpKnkTPxz4vDQ rV1eOQ6AwnbRSWoJzn4uM0+ZYQM5WMRT+q8wiF5db0xoUBRquUefjbZiM0Bey1rn oYuUA17zt5KBR4702tcw1NImPAXZt+VigZZdyw7ICyLbL+RRsvrmNKciBQbL+621 xsNlNNyWZsf1lFruNgeDH+fKxWcM6aDDN0JCKfw6VEC4Mrhz/zNMi0oxkMtC11sM XnIXU5l6zMonChp0A8U2/xttqDRKdGX/Y+lznB2vuJCNOZ3DN3gLQhb6PCbs -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:40 2024 by rpki-client on console-ams.rpki-client.org