$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/M9CLrTKgO6c7zTkspop12ZnygT4.roa File: M9CLrTKgO6c7zTkspop12ZnygT4.roa (raw, json) Hash identifier: zL/5b79vnKGn8xfk3E8oYHj+BZ8YTiLx6P5IX+K19MY= Subject key identifier: 33:D0:8B:AD:32:A0:3B:A7:3B:CD:39:2C:A6:8A:75:D9:99:F2:81:3E Certificate issuer: /CN=A736CFF1948740614D0321E63B8403EB9AB9748D Certificate serial: CA Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/M9CLrTKgO6c7zTkspop12ZnygT4.roa Signing time: Fri 01 Sep 2023 08:31:11 +0000 ROA not before: Fri 01 Sep 2023 08:31:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38136 IP address blocks: 2400:bea0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D Validity Not Before: Sep 1 08:31:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=33D08BAD32A03BA73BCD392CA68A75D999F2813E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:f2:3c:4b:8b:0d:51:10:97:d2:63:77:49: 45:cc:7c:d3:25:c9:0e:88:b8:d6:3a:0d:a1:1e:d5: f7:47:9e:e3:89:db:65:ab:1c:e9:6d:96:cc:a6:48: 90:89:72:21:1c:d7:e9:41:07:d5:26:b9:63:ac:c6: 93:d5:b5:4e:81:d3:d8:62:f8:26:d0:bd:08:b6:d3: 85:63:d9:d1:4f:f6:b3:79:6a:21:5a:9b:9c:39:52: cc:e8:09:85:0b:7d:0b:bf:3f:cf:d9:7d:a5:8b:7b: ee:5c:63:e0:99:17:64:cf:a8:1d:08:cc:05:56:e8: 57:6f:77:8a:7d:10:68:ec:cc:4a:47:8a:6a:37:f8: 88:64:47:6b:55:78:10:78:fa:6f:4a:2c:b7:c4:9b: 82:54:33:cc:60:79:b4:4a:b3:36:4e:d7:7f:50:5c: c8:25:b5:dc:a0:31:9c:7c:0a:93:20:45:91:83:0a: 93:8f:53:39:39:b6:1c:23:a3:f7:0e:d8:1c:66:ef: 57:b9:ce:66:35:5a:54:81:6d:cd:8b:1a:8e:00:a5: 37:2c:1f:36:71:37:cf:b1:4d:29:6d:c7:40:d9:ec: 2c:f6:48:95:f4:d3:ea:c7:2c:30:f4:29:e0:df:ef: 22:5f:a1:0e:1f:a5:04:c6:50:77:bc:84:8c:33:8f: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D0:8B:AD:32:A0:3B:A7:3B:CD:39:2C:A6:8A:75:D9:99:F2:81:3E X509v3 Authority Key Identifier: keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/M9CLrTKgO6c7zTkspop12ZnygT4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:bea0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:2f:fa:9c:10:f0:19:bd:41:3b:41:ea:93:7b:c4:62:52:eb: a4:89:2d:b4:de:5a:d4:23:55:7d:ed:1c:83:c6:79:10:a6:89: 40:0d:dd:5c:32:87:e9:1a:fb:ca:ca:e1:7f:62:e9:8f:60:6a: 30:8b:c2:1e:3d:43:44:28:e9:36:1b:0f:e4:5a:56:34:21:40: 00:9b:2f:e0:66:7e:1d:5d:b8:d1:16:85:ca:11:9b:b7:19:4c: 63:36:08:04:bb:fd:38:67:52:3a:bb:ae:dd:b0:ea:9a:61:a8: e8:fa:f1:08:f0:22:52:74:09:e6:f4:28:b2:e8:97:f4:d8:12: fd:d7:2f:07:f8:73:ba:b7:27:c8:fb:5b:1c:3f:f4:0d:c5:e7: 03:76:59:bd:55:83:2f:2a:e6:55:c0:f8:ad:f7:7b:54:5f:c0: fe:20:4e:ad:90:5a:42:c1:88:e6:f4:ac:4f:2a:04:40:1f:4f: 60:05:65:05:aa:8f:53:c0:b1:83:54:31:99:fb:0f:eb:59:37: c0:5d:64:03:2f:3b:07:b4:da:4c:45:35:09:a0:dd:c7:99:2a: 73:96:b1:4f:f8:11:00:ee:dd:b0:7a:34:ec:34:18:1e:34:fe: 74:15:c7:39:52:be:8d:fa:f6:1d:6b:5e:a7:20:ba:5c:90:c2: b4:a4:99:8e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTcz NkNGRjE5NDg3NDA2MTREMDMyMUU2M0I4NDAzRUI5QUI5NzQ4RDAeFw0yMzA5MDEw ODMxMTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMzRDA4QkFEMzJBMDNC QTczQkNEMzkyQ0E2OEE3NUQ5OTlGMjgxM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1IfI8S4sNURCX0mN3SUXMfNMlyQ6IuNY6DaEe1fdHnuOJ22Wr HOltlsymSJCJciEc1+lBB9UmuWOsxpPVtU6B09hi+CbQvQi204Vj2dFP9rN5aiFa m5w5UszoCYULfQu/P8/ZfaWLe+5cY+CZF2TPqB0IzAVW6Fdvd4p9EGjszEpHimo3 +IhkR2tVeBB4+m9KLLfEm4JUM8xgebRKszZO139QXMgltdygMZx8CpMgRZGDCpOP Uzk5thwjo/cO2Bxm71e5zmY1WlSBbc2LGo4ApTcsHzZxN8+xTSltx0DZ7Cz2SJX0 0+rHLDD0KeDf7yJfoQ4fpQTGUHe8hIwzj3srAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUM9CLrTKgO6c7zTkspop12ZnygT4wHwYDVR0jBBgwFoAUpzbP8ZSHQGFNAyHm O4QD65q5dI0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DSEVO VEVLL3B6YlA4WlNIUUdGTkF5SG1PNFFENjVxNWRJMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcHpiUDhaU0hRR0ZOQXlIbU80UUQ2NXE1ZEkwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DSEVOVEVLL005Q0xyVEtnTzZj N3pUa3Nwb3AxMlpueWdUNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAL6gMA0GCSqGSIb3DQEBCwUAA4IBAQBPL/qcEPAZvUE7QeqTe8RiUuuk iS203lrUI1V97RyDxnkQpolADd1cMofpGvvKyuF/YumPYGowi8IePUNEKOk2Gw/k WlY0IUAAmy/gZn4dXbjRFoXKEZu3GUxjNggEu/04Z1I6u67dsOqaYajo+vEI8CJS dAnm9Ciy6Jf02BL91y8H+HO6tyfI+1scP/QNxecDdlm9VYMvKuZVwPit93tUX8D+ IE6tkFpCwYjm9KxPKgRAH09gBWUFqo9TwLGDVDGZ+w/rWTfAXWQDLzsHtNpMRTUJ oN3HmSpzlrFP+BEA7t2wejTsNBgeNP50Fcc5Ur6N+vYda16nILpckMK0pJmO -----END CERTIFICATE-----Generated at Tue May 21 08:01:32 2024 by rpki-client on console-fra.rpki-client.org