$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/KkCYrEdW4UfXoi0Oi_d2I42ifIk.roa File: KkCYrEdW4UfXoi0Oi_d2I42ifIk.roa (raw, json) Hash identifier: yGfiFdqG2YJYlKM1v6kNGtoa/byqgIy/QYLNCoQyg8E= Subject key identifier: 2A:40:98:AC:47:56:E1:47:D7:A2:2D:0E:8B:F7:76:23:8D:A2:7C:89 Certificate issuer: /CN=A736CFF1948740614D0321E63B8403EB9AB9748D Certificate serial: 01C4 Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/KkCYrEdW4UfXoi0Oi_d2I42ifIk.roa Signing time: Mon 26 Aug 2024 05:11:36 +0000 ROA not before: Mon 26 Aug 2024 05:11:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 983 IP address blocks: 2400:bea0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D Validity Not Before: Aug 26 05:11:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2A4098AC4756E147D7A22D0E8BF776238DA27C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:56:fe:94:f3:92:66:ce:86:41:77:db:8e: 66:82:74:a5:f7:8f:b4:42:9d:77:7a:ad:0b:6f:d2: d1:10:29:a4:42:64:9d:16:17:aa:d7:5f:a1:84:b1: 81:43:0f:9f:33:86:a9:94:50:8a:b7:89:38:75:cf: 94:9b:6d:ba:22:42:64:ad:9b:b3:f5:14:e4:74:2d: dd:30:b3:07:c9:89:eb:9d:87:47:92:dd:32:6b:76: 4d:eb:b5:67:29:c5:2a:58:89:03:4d:02:4c:96:b8: 1a:03:02:ff:84:e6:18:2c:dd:a6:35:51:29:f3:0b: bb:cb:88:f4:63:d5:72:2d:df:2a:60:a3:70:87:7c: 9d:21:79:f0:58:36:8e:8b:4f:89:3b:34:69:98:a9: 0b:8a:96:08:c2:90:83:00:c3:97:f7:87:c9:f5:4c: 36:01:5f:d0:f6:05:1f:7b:3c:06:be:5c:03:07:13: 17:92:37:07:6f:1d:80:87:fa:3e:5c:3e:11:9a:38: 1d:c2:e0:fa:9e:44:21:52:14:51:59:28:a4:ce:ca: 69:7a:81:79:ca:8a:c7:16:07:3f:52:44:cf:72:1f: 96:ec:7a:f9:e6:c3:e6:fc:8b:c9:8c:63:54:5b:fb: 24:52:ab:61:68:6f:37:2d:af:99:fc:34:8d:d2:ac: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:40:98:AC:47:56:E1:47:D7:A2:2D:0E:8B:F7:76:23:8D:A2:7C:89 X509v3 Authority Key Identifier: keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/KkCYrEdW4UfXoi0Oi_d2I42ifIk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:bea0::/32 Signature Algorithm: sha256WithRSAEncryption 90:60:d1:bd:a4:6f:2d:88:c5:f6:d9:2e:63:ce:c4:01:b5:d7: cc:b6:ee:28:5c:8c:39:8f:bc:5d:2e:09:f1:21:dd:66:dc:d6: f7:8b:64:ac:a0:54:05:4c:f1:f1:d5:d7:b5:e8:bd:1f:86:1f: 14:ce:74:6a:80:08:20:10:52:55:93:f4:74:fb:53:01:6b:13: e6:f8:59:6b:f8:00:67:82:49:b7:fc:13:f6:09:16:5a:15:11: 31:6a:f8:11:2e:29:b1:50:57:7f:3b:d9:d1:94:1e:c5:45:14: e3:a8:ec:f4:24:69:38:f3:bb:19:71:72:8c:28:2e:fe:6a:2d: ad:6c:d1:67:22:db:de:17:8f:93:6c:f8:01:65:38:34:ea:6f: 53:22:5c:5a:23:06:d9:64:a7:aa:2c:84:dc:df:9f:89:56:6d: f9:97:2c:76:c0:bc:a5:30:94:5e:12:43:48:c1:f7:af:63:8a: 38:f4:02:b5:a5:ff:29:b4:5f:63:5e:05:43:6a:cd:68:ba:42: 63:2d:db:d3:5d:8b:5b:39:b5:ce:e0:50:fd:7b:28:4c:f1:58: 08:e2:94:4e:c4:ef:79:d4:56:8d:77:82:25:65:66:db:3b:fb: 6c:21:36:c6:6a:c5:25:51:59:27:cf:a5:6e:1d:5a:10:7e:de: 12:88:ce:05 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTcz NkNGRjE5NDg3NDA2MTREMDMyMUU2M0I4NDAzRUI5QUI5NzQ4RDAeFw0yNDA4MjYw NTExMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJBNDA5OEFDNDc1NkUx NDdEN0EyMkQwRThCRjc3NjIzOERBMjdDODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAbFb+lPOSZs6GQXfbjmaCdKX3j7RCnXd6rQtv0tEQKaRCZJ0W F6rXX6GEsYFDD58zhqmUUIq3iTh1z5SbbboiQmStm7P1FOR0Ld0wswfJieudh0eS 3TJrdk3rtWcpxSpYiQNNAkyWuBoDAv+E5hgs3aY1USnzC7vLiPRj1XIt3ypgo3CH fJ0hefBYNo6LT4k7NGmYqQuKlgjCkIMAw5f3h8n1TDYBX9D2BR97PAa+XAMHExeS NwdvHYCH+j5cPhGaOB3C4PqeRCFSFFFZKKTOyml6gXnKiscWBz9SRM9yH5bsevnm w+b8i8mMY1Rb+yRSq2Fobzctr5n8NI3SrIfRAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUKkCYrEdW4UfXoi0Oi/d2I42ifIkwHwYDVR0jBBgwFoAUpzbP8ZSHQGFNAyHm O4QD65q5dI0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DSEVO VEVLL3B6YlA4WlNIUUdGTkF5SG1PNFFENjVxNWRJMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcHpiUDhaU0hRR0ZOQXlIbU80UUQ2NXE1ZEkwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DSEVOVEVLL0trQ1lyRWRXNFVm WG9pME9pX2QySTQyaWZJay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAL6gMA0GCSqGSIb3DQEBCwUAA4IBAQCQYNG9pG8tiMX22S5jzsQBtdfM tu4oXIw5j7xdLgnxId1m3Nb3i2SsoFQFTPHx1de16L0fhh8UznRqgAggEFJVk/R0 +1MBaxPm+Flr+ABngkm3/BP2CRZaFRExavgRLimxUFd/O9nRlB7FRRTjqOz0JGk4 87sZcXKMKC7+ai2tbNFnItveF4+TbPgBZTg06m9TIlxaIwbZZKeqLITc35+JVm35 lyx2wLylMJReEkNIwfevY4o49AK1pf8ptF9jXgVDas1oukJjLdvTXYtbObXO4FD9 eyhM8VgI4pROxO951FaNd4IlZWbbO/tsITbGasUlUVknz6VuHVoQft4SiM4F -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:06 2024 by rpki-client on console-fra.rpki-client.org