$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/n7VUYT4ANpAcZ4oGrujIpfGnCSI.roa File: n7VUYT4ANpAcZ4oGrujIpfGnCSI.roa (raw, json) Hash identifier: qt+d8C5efQpdkZqyqpo8LyZ3VXdBVe9ERcIVBNm1w6k= Subject key identifier: 9F:B5:54:61:3E:00:36:90:1C:67:8A:06:AE:E8:C8:A5:F1:A7:09:22 Certificate issuer: /CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99 Certificate serial: 0180 Authority key identifier: 57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/n7VUYT4ANpAcZ4oGrujIpfGnCSI.roa Signing time: Fri 01 Sep 2023 08:25:45 +0000 ROA not before: Fri 01 Sep 2023 08:25:45 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 63893 IP address blocks: 2400:5060::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=578183A0FE5DA4A0F3C0546FB6EC26CBD1232F99 Validity Not Before: Sep 1 08:25:45 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9FB554613E0036901C678A06AEE8C8A5F1A70922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:c6:19:79:2d:7d:bb:1e:89:ad:df:24:ea: 7b:8c:70:fc:0f:89:bd:59:e8:91:4a:b9:19:ef:90: 2e:7c:82:f9:94:44:50:55:e2:27:42:89:79:62:20: 72:fa:41:2f:62:fc:8f:9d:da:d2:56:f2:61:df:93: fe:e9:50:a5:98:76:73:6f:cb:4b:cd:56:d4:72:0a: d1:73:83:7b:23:3a:21:d7:6e:33:51:47:a8:5b:c2: 85:b9:dd:30:73:5b:d8:3e:c0:97:11:7d:dd:bb:ea: 0c:11:a7:14:ad:d4:3c:71:c2:ea:cf:1e:91:ed:cf: 06:c0:7f:1a:8c:c4:8c:42:0c:5d:dc:60:0c:8b:8e: a7:4d:11:89:b3:55:8d:bd:c5:f3:7e:df:d4:bc:a7: b9:63:93:ff:e2:ba:98:d6:27:d1:7c:62:94:a9:54: de:ff:d6:e6:d8:df:17:9d:52:d2:29:96:e7:90:42: 11:8b:39:c5:4b:76:bf:ad:eb:74:de:48:51:92:81: 3a:fa:5f:92:13:67:df:a9:10:2b:35:7e:97:0f:b5: 5a:30:07:ce:06:c6:0a:05:23:48:aa:85:5f:14:5f: 62:65:a4:93:9b:6a:6e:7c:a2:ad:4a:a0:5c:50:57: 21:9c:52:0d:30:64:5e:e0:fc:b4:08:50:8e:f2:9f: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B5:54:61:3E:00:36:90:1C:67:8A:06:AE:E8:C8:A5:F1:A7:09:22 X509v3 Authority Key Identifier: keyid:57:81:83:A0:FE:5D:A4:A0:F3:C0:54:6F:B6:EC:26:CB:D1:23:2F:99 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/V4GDoP5dpKDzwFRvtuwmy9EjL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V4GDoP5dpKDzwFRvtuwmy9EjL5k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138470/n7VUYT4ANpAcZ4oGrujIpfGnCSI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:5060::/32 Signature Algorithm: sha256WithRSAEncryption 37:84:ab:43:7a:c6:25:87:02:78:17:37:0d:8a:e3:44:d1:f2: f3:a2:76:9e:ad:90:1f:39:87:fe:bb:e8:18:22:1b:1e:79:b3: 7d:46:c6:6e:f6:a4:00:78:7b:9e:b7:24:33:d0:18:bb:f8:ec: f7:56:ea:48:c3:a3:2a:ee:da:30:c9:62:7a:5b:d2:0a:13:dc: de:40:73:bc:30:b5:a8:c0:ca:e5:5f:ee:e4:a4:b9:34:69:2a: 25:8d:c9:af:79:f0:b3:4c:8e:7f:7d:76:2e:18:c9:22:61:8c: 4c:58:6e:92:f0:88:77:1e:5e:16:aa:89:a3:7a:eb:40:f2:9b: e9:17:1f:a2:da:2c:4b:85:7a:c3:82:dd:1f:7c:f0:67:99:cc: a3:21:a9:30:32:d4:27:47:ec:4b:57:a2:f0:d2:6a:d2:e8:99: 24:eb:51:25:07:3d:69:f9:cf:2b:a5:05:08:cf:f9:53:25:e1: 40:35:a1:bb:13:5c:7c:14:95:59:31:b1:f1:60:00:1e:46:72: fb:b6:5a:b6:f5:9c:bd:d9:7e:81:0a:05:3e:5f:97:40:e6:c5: 05:2c:3e:a4:c7:29:37:8a:f7:89:74:02:ad:4a:96:d3:f5:ce: a6:49:2e:0b:04:87:8f:11:32:05:37:19:85:c6:4d:84:65:71: b9:64:19:5c -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTc4 MTgzQTBGRTVEQTRBMEYzQzA1NDZGQjZFQzI2Q0JEMTIzMkY5OTAeFw0yMzA5MDEw ODI1NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlGQjU1NDYxM0UwMDM2 OTAxQzY3OEEwNkFFRThDOEE1RjFBNzA5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7G8YZeS19ux6Jrd8k6nuMcPwPib1Z6JFKuRnvkC58gvmURFBV 4idCiXliIHL6QS9i/I+d2tJW8mHfk/7pUKWYdnNvy0vNVtRyCtFzg3sjOiHXbjNR R6hbwoW53TBzW9g+wJcRfd276gwRpxSt1DxxwurPHpHtzwbAfxqMxIxCDF3cYAyL jqdNEYmzVY29xfN+39S8p7ljk//iupjWJ9F8YpSpVN7/1ubY3xedUtIplueQQhGL OcVLdr+t63TeSFGSgTr6X5ITZ9+pECs1fpcPtVowB84GxgoFI0iqhV8UX2JlpJOb am58oq1KoFxQVyGcUg0wZF7g/LQIUI7ynx6TAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUn7VUYT4ANpAcZ4oGrujIpfGnCSIwHwYDVR0jBBgwFoAUV4GDoP5dpKDzwFRv tuwmy9EjL5kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ3MC9WNEdEb1A1ZHBLRHp3RlJ2dHV3bXk5RWpMNWsuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1Y0R0RvUDVkcEtEendGUnZ0dXdteTlFakw1ay5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0NzAvbjdWVVlUNEFO cEFjWjRvR3J1aklwZkduQ1NJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAUGAwDQYJKoZIhvcNAQELBQADggEBADeEq0N6xiWHAngXNw2K40TR 8vOidp6tkB85h/676BgiGx55s31Gxm72pAB4e563JDPQGLv47PdW6kjDoyru2jDJ Ynpb0goT3N5Ac7wwtajAyuVf7uSkuTRpKiWNya958LNMjn99di4YySJhjExYbpLw iHceXhaqiaN660Dym+kXH6LaLEuFesOC3R988GeZzKMhqTAy1CdH7EtXovDSatLo mSTrUSUHPWn5zyulBQjP+VMl4UA1obsTXHwUlVkxsfFgAB5Gcvu2Wrb1nL3ZfoEK BT5fl0DmxQUsPqTHKTeK94l0Aq1KltP1zqZJLgsEh48RMgU3GYXGTYRlcblkGVw= -----END CERTIFICATE-----Generated at Mon Jun 3 12:43:59 2024 by rpki-client on console-fra.rpki-client.org