$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/E0tLE6-RYQpkCPJKSCmCwIL5eOA.roa File: E0tLE6-RYQpkCPJKSCmCwIL5eOA.roa (raw, json) Hash identifier: YA9lpePsdZXNZDH9ZVqnBdhD6cE52RnrWxQ3YXEMYqc= Subject key identifier: 13:4B:4B:13:AF:91:61:0A:64:08:F2:4A:48:29:82:C0:82:F9:78:E0 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0C7C Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/E0tLE6-RYQpkCPJKSCmCwIL5eOA.roa Signing time: Fri 01 Sep 2023 08:26:37 +0000 ROA not before: Fri 01 Sep 2023 08:26:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18429 IP address blocks: 2407:4900::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 02:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Sep 1 08:26:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=134B4B13AF91610A6408F24A482982C082F978E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:aa:46:58:d7:56:51:22:1d:e7:33:63:e9: be:1c:c5:d0:1d:c1:20:aa:cb:a6:6b:f4:bd:2d:59: 7f:02:53:26:67:9b:3e:56:81:2a:83:a0:bd:1a:97: 1e:23:5d:4c:50:2f:da:65:73:e1:ae:c0:cb:63:79: 68:4b:9a:f8:a9:0c:1a:23:39:92:3e:5e:58:84:03: dd:c0:7a:da:23:ca:5d:6c:c8:44:6b:26:a2:c2:8a: 3e:b9:fc:6e:4d:73:52:aa:2b:e6:8e:03:cb:7d:53: 42:90:bc:ba:84:cf:1b:7f:33:2e:e7:39:ef:f4:bd: 24:c2:de:c2:83:56:f5:b5:35:57:cd:f7:c6:d1:ef: 89:ee:f6:04:4e:d1:a7:b7:3c:f1:5c:11:23:4a:ae: 73:46:c3:c2:7b:f0:d0:4d:47:a9:1c:8e:05:87:81: 08:41:e8:1e:00:bd:68:3b:cd:69:8a:81:a6:ac:bb: d0:24:ea:68:dd:35:8c:05:b4:6a:b6:08:46:4d:e6: cd:73:43:c2:a2:65:36:1a:53:08:77:87:45:d5:ad: e4:66:e0:d0:ba:78:4c:4b:3e:e8:20:52:22:59:35: 2d:79:4a:4b:2b:88:5a:8b:f9:4b:c6:05:ba:4f:0b: 82:ee:4a:59:da:78:41:9f:1b:83:c4:ad:65:60:58: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:4B:13:AF:91:61:0A:64:08:F2:4A:48:29:82:C0:82:F9:78:E0 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/E0tLE6-RYQpkCPJKSCmCwIL5eOA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4900::/32 Signature Algorithm: sha256WithRSAEncryption 1d:cc:35:06:8c:e4:c5:d1:c9:03:d8:22:29:8f:e3:69:b2:87: cb:eb:8c:a9:72:56:60:34:d0:5c:e0:30:50:39:32:97:6c:7d: 16:8c:86:0b:f9:39:5d:49:ca:c9:41:88:0b:dd:64:84:35:45: 79:9d:1d:de:38:55:d4:6e:3e:ea:a9:1f:c2:69:98:1c:ba:a4: 54:d3:18:6d:4d:94:8c:f7:1c:c5:fd:f3:22:ba:27:0b:2a:82: 37:e1:9a:cd:95:1d:88:05:8d:7f:37:d2:dc:1a:2f:40:e3:cb: 47:22:bd:71:32:5f:97:d3:a6:ee:8f:81:dc:78:54:34:01:5e: 72:44:e8:8b:06:ae:45:39:2c:d3:00:1e:5c:74:b7:ef:aa:48: 78:9d:3a:ac:0b:eb:ee:37:f8:d1:c5:ab:fc:39:43:96:7b:48: ef:b0:f6:b1:37:56:15:5f:27:37:fb:5e:d2:9a:dd:22:dc:37: 11:ae:f0:b4:5c:ea:92:7c:5d:65:39:11:de:ab:28:27:3e:45: c4:28:2c:73:b4:3c:40:25:22:ad:53:bf:56:64:9b:70:0d:f3: 55:dc:24:6a:e5:68:28:a4:4e:41:65:54:72:53:b0:32:64:f8: ac:65:c2:d4:07:02:da:37:0c:79:06:76:9b:1a:52:46:7d:2d: e5:0a:52:c1 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMzA5MDEw ODI2MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDEzNEI0QjEzQUY5MTYx MEE2NDA4RjI0QTQ4Mjk4MkMwODJGOTc4RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDakapGWNdWUSId5zNj6b4cxdAdwSCqy6Zr9L0tWX8CUyZnmz5W gSqDoL0alx4jXUxQL9plc+GuwMtjeWhLmvipDBojOZI+XliEA93Aetojyl1syERr JqLCij65/G5Nc1KqK+aOA8t9U0KQvLqEzxt/My7nOe/0vSTC3sKDVvW1NVfN98bR 74nu9gRO0ae3PPFcESNKrnNGw8J78NBNR6kcjgWHgQhB6B4AvWg7zWmKgaasu9Ak 6mjdNYwFtGq2CEZN5s1zQ8KiZTYaUwh3h0XVreRm4NC6eExLPuggUiJZNS15Sksr iFqL+UvGBbpPC4LuSlnaeEGfG4PErWVgWAc1AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUE0tLE6+RYQpkCPJKSCmCwIL5eOAwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9FMHRMRTYtUllRcGtDUEpLU0Nt Q3dJTDVlT0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAdJ ADANBgkqhkiG9w0BAQsFAAOCAQEAHcw1BozkxdHJA9giKY/jabKHy+uMqXJWYDTQ XOAwUDkyl2x9FoyGC/k5XUnKyUGIC91khDVFeZ0d3jhV1G4+6qkfwmmYHLqkVNMY bU2UjPccxf3zIronCyqCN+GazZUdiAWNfzfS3BovQOPLRyK9cTJfl9Om7o+B3HhU NAFeckToiwauRTks0wAeXHS376pIeJ06rAvr7jf40cWr/DlDlntI77D2sTdWFV8n N/te0prdItw3Ea7wtFzqknxdZTkR3qsoJz5FxCgsc7Q8QCUirVO/VmSbcA3zVdwk auVoKKROQWVUclOwMmT4rGXC1AcC2jcMeQZ2mxpSRn0t5QpSwQ== -----END CERTIFICATE-----Generated at Mon Jun 3 12:43:59 2024 by rpki-client on console-fra.rpki-client.org