$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/dMUBncc6RLOqIWlxwo6FcXA1_z0.roa File: dMUBncc6RLOqIWlxwo6FcXA1_z0.roa (raw, json) Hash identifier: 6vfXLt91L6/y+quo1R6JXWAY+MhbOWXrWR8wPa3q6g8= Subject key identifier: 74:C5:01:9D:C7:3A:44:B3:AA:21:69:71:C2:8E:85:71:70:35:FF:3D Certificate issuer: /CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2 Certificate serial: 0102 Authority key identifier: A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/dMUBncc6RLOqIWlxwo6FcXA1_z0.roa Signing time: Mon 23 Sep 2024 05:20:29 +0000 ROA not before: Mon 23 Sep 2024 05:20:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 2401:3a20::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2 Validity Not Before: Sep 23 05:20:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=74C5019DC73A44B3AA216971C28E85717035FF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:b6:22:46:7f:7e:9d:c7:34:3c:cd:ab:bd: 76:4d:90:96:99:22:d4:30:07:7d:4a:45:b2:eb:f0: aa:db:65:08:6a:96:73:43:9c:b5:6c:f4:21:93:57: b9:2c:15:dd:5d:28:bb:66:f5:c0:28:0e:0b:d4:8b: 91:99:5f:47:93:f8:de:ab:1a:8e:ed:35:94:3e:da: 24:74:f8:b1:dc:0f:66:e0:d6:db:f1:7e:e5:4c:24: 9c:9b:99:1c:a8:65:cc:20:6e:87:3f:25:47:0c:d5: a6:02:03:61:79:76:cd:cf:32:0a:bc:4e:ef:15:46: 2a:65:19:23:c9:01:fa:df:69:3d:30:c2:52:87:e0: ac:48:b7:50:85:f7:03:8e:b1:18:d0:39:fe:f3:25: e7:d5:ca:b0:72:4b:14:03:9c:7b:16:ac:38:b9:b9: f5:ca:9c:c3:9b:72:5e:1a:3e:c9:28:96:62:ce:3f: c8:a8:5d:ab:eb:b1:f8:cf:c9:18:05:a2:ab:6b:79: 47:d6:15:e9:11:94:97:d7:ab:0d:7e:22:0d:93:19: 44:d1:08:e2:3e:ef:3b:34:65:c2:04:94:30:ca:c7: b4:47:64:df:6c:d0:23:ae:3c:d4:61:c4:34:da:ea: 7d:d2:b9:af:9c:4e:4a:ad:48:f1:9b:07:e5:69:b1: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C5:01:9D:C7:3A:44:B3:AA:21:69:71:C2:8E:85:71:70:35:FF:3D X509v3 Authority Key Identifier: keyid:A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/dMUBncc6RLOqIWlxwo6FcXA1_z0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:3a20::/32 Signature Algorithm: sha256WithRSAEncryption 78:01:79:3f:d9:78:8e:fa:f7:24:b8:ce:2c:19:c2:d4:e7:27: 99:a7:9d:fd:5f:3b:be:48:ab:fe:7a:4b:10:e5:5b:49:3a:23: 7f:52:2a:e7:0a:b6:10:08:49:f4:6c:91:90:dc:73:0b:07:0c: d8:d3:49:c8:c9:ce:03:02:84:9f:cc:47:ae:51:10:33:c5:0c: a8:c2:7d:d0:bf:b3:31:78:d6:82:28:86:ac:bd:d8:9e:41:f1: 21:60:f5:45:bf:cc:3c:5b:4b:50:de:f0:03:a6:9e:a3:a4:21: be:41:d2:13:8c:21:ac:6a:9b:fc:32:a1:2e:ad:25:ec:90:c8: 94:c0:a4:71:58:4f:54:0c:e8:30:76:c7:f8:a3:3e:c5:7a:49: 0b:a9:0f:b5:96:9f:05:c5:3f:2c:08:ee:b1:8e:22:e1:55:ab: d0:72:7d:96:61:8e:13:bf:ec:64:f6:6e:00:5b:68:df:5b:ea: 72:e8:c2:96:ea:fb:b5:9c:02:9e:ca:2d:ff:f4:45:e9:59:74: 3d:eb:cd:29:8e:f7:67:45:35:0b:1d:f0:d7:3b:54:20:ba:d2: e7:a7:ed:8f:53:e8:5f:36:98:9c:57:ff:f5:29:69:a5:4f:c2: 56:42:de:98:ec:d6:7f:00:b2:c2:b6:f5:1c:7f:43:e2:26:cb: c3:d3:69:47 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTM5 RTRGQzA1NzA0OUUwNTYwRTYxRDM5NjlEMTNBNUUyRjExQUNEMjAeFw0yNDA5MjMw NTIwMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc0QzUwMTlEQzczQTQ0 QjNBQTIxNjk3MUMyOEU4NTcxNzAzNUZGM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCeT7YiRn9+ncc0PM2rvXZNkJaZItQwB31KRbLr8KrbZQhqlnND nLVs9CGTV7ksFd1dKLtm9cAoDgvUi5GZX0eT+N6rGo7tNZQ+2iR0+LHcD2bg1tvx fuVMJJybmRyoZcwgboc/JUcM1aYCA2F5ds3PMgq8Tu8VRiplGSPJAfrfaT0wwlKH 4KxIt1CF9wOOsRjQOf7zJefVyrBySxQDnHsWrDi5ufXKnMObcl4aPskolmLOP8io XavrsfjPyRgFoqtreUfWFekRlJfXqw1+Ig2TGUTRCOI+7zs0ZcIElDDKx7RHZN9s 0COuPNRhxDTa6n3Sua+cTkqtSPGbB+VpseRrAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUdMUBncc6RLOqIWlxwo6FcXA1/z0wHwYDVR0jBBgwFoAUo55PwFcEngVg5h05 adE6Xi8RrNIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURX QUxLL281NVB3RmNFbmdWZzVoMDVhZEU2WGk4UnJOSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvbzU1UHdGY0VuZ1ZnNWgwNWFkRTZYaThSck5JLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0xPVURXQUxLL2RNVUJuY2M2UkxP cUlXbHh3bzZGY1hBMV96MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkATogMA0GCSqGSIb3DQEBCwUAA4IBAQB4AXk/2XiO+vckuM4sGcLU5yeZ p539Xzu+SKv+eksQ5VtJOiN/UirnCrYQCEn0bJGQ3HMLBwzY00nIyc4DAoSfzEeu URAzxQyown3Qv7MxeNaCKIasvdieQfEhYPVFv8w8W0tQ3vADpp6jpCG+QdITjCGs apv8MqEurSXskMiUwKRxWE9UDOgwdsf4oz7FekkLqQ+1lp8FxT8sCO6xjiLhVavQ cn2WYY4Tv+xk9m4AW2jfW+py6MKW6vu1nAKeyi3/9EXpWXQ9680pjvdnRTULHfDX O1QgutLnp+2PU+hfNpicV//1KWmlT8JWQt6Y7NZ/ALLCtvUcf0PiJsvD02lH -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:03 2024 by rpki-client on console-ams.rpki-client.org