$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ZITjGszt5do4cezppgmutxeizKo.roa File: ZITjGszt5do4cezppgmutxeizKo.roa (raw, json) Hash identifier: rp0gIqtRFPP+f+L0iWmh8qC9ITbLW8FO88JN+VH/94M= Subject key identifier: 64:84:E3:1A:CC:ED:E5:DA:38:71:EC:E9:A6:09:AE:B7:17:A2:CC:AA Certificate issuer: /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Certificate serial: 38 Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ZITjGszt5do4cezppgmutxeizKo.roa Signing time: Fri 13 Sep 2024 10:49:11 +0000 ROA not before: Fri 13 Sep 2024 10:49:11 +0000 ROA not after: Thu 28 Aug 2025 15:30:19 +0000 asID: 396982 IP address blocks: 2401:bf60:4ff5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 05:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Validity Not Before: Sep 13 10:49:11 2024 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=6484E31ACCEDE5DA3871ECE9A609AEB717A2CCAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:30:13:5c:1a:b0:c4:bc:57:d0:a7:61:62: 76:df:02:bc:e5:14:0d:a1:cc:33:23:aa:ee:45:c3: 4d:13:a0:7a:b0:35:2d:ef:78:cc:f7:2c:d2:05:9c: a1:c5:b7:1e:a8:d0:a7:64:cc:3f:cb:5d:a3:bc:1f: 3c:3d:15:c7:b2:00:cd:83:dd:15:04:d5:ee:32:2b: dc:97:ca:af:61:48:b2:05:b7:aa:e1:04:32:3a:68: 1f:1e:fd:68:70:4c:ac:cd:4b:cf:1a:dc:ee:35:94: 80:b8:91:8b:04:10:6e:af:f6:2d:65:19:f9:64:1b: 02:38:f8:df:2e:d9:4b:ff:b3:d0:67:29:73:ce:45: 50:0f:02:2c:05:23:6e:b1:52:78:e2:51:28:12:b3: 27:44:72:9a:ae:b6:52:b0:6a:95:ef:8b:04:bb:82: 6f:93:2f:f3:f2:6c:49:ce:b5:91:b8:6b:59:63:91: cf:e1:0e:78:ec:8d:6f:d0:93:6d:f3:bb:9a:d9:f1: 83:a0:cf:5c:b8:2d:e9:0b:12:3b:bd:5a:09:f9:38: 0c:3c:c2:49:4d:a9:e9:97:e8:f7:87:bd:6d:e8:7a: e7:e8:b5:fa:c6:81:15:b7:4f:1c:c5:8d:e4:f1:06: 02:80:49:cd:fd:e0:fd:b2:e4:fa:aa:ef:ee:48:38: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:84:E3:1A:CC:ED:E5:DA:38:71:EC:E9:A6:09:AE:B7:17:A2:CC:AA X509v3 Authority Key Identifier: keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/ZITjGszt5do4cezppgmutxeizKo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:bf60:4ff5::/48 Signature Algorithm: sha256WithRSAEncryption 35:e4:56:ec:b1:cf:5f:64:0f:12:c1:ec:df:5a:36:62:b0:d6: 92:b6:1a:f6:93:b4:75:73:52:f6:73:fe:8a:34:e4:7e:ad:47: 9e:e4:0a:00:60:e0:88:4d:ce:e3:1c:e9:51:7e:82:12:52:2a: cf:c3:00:63:1c:68:4c:50:8a:ee:7e:d8:7e:41:ac:9b:85:da: 47:b8:a3:12:7d:db:5c:f6:b8:f4:de:c9:bb:0d:4d:88:d5:ce: 5f:67:2f:d2:dd:73:08:81:44:fb:43:1a:5f:da:d9:f3:c5:5d: b4:39:12:ed:b1:43:04:ea:4f:11:b1:3b:76:7c:06:dc:73:d6: 5c:0b:05:04:88:ff:d4:a6:ac:78:90:a4:9d:29:c8:c7:d4:8f: ba:bc:2f:11:b0:e3:51:d2:f3:e9:2e:98:6b:d2:4e:69:b6:e2: c7:53:70:a6:27:d5:91:51:85:6e:a3:09:75:15:88:e3:c6:3e: 27:a1:90:6b:56:08:0c:1d:f2:43:58:41:03:e5:90:34:b1:48: e6:9e:57:3c:c7:f0:15:9b:29:81:1a:3a:16:cc:8b:14:02:fa: 9b:72:8b:3f:9f:e3:01:00:1d:33:bd:97:77:f0:65:64:27:4e: bb:62:f6:4c:94:30:87:98:71:a5:86:f4:b5:ed:af:66:a4:bc: 5f:e8:6a:a7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQzIw ODgxQTBFRkQwNjY0QTU5MUFGMzA5NUQyOTkzNUVGOUJDMzYxMB4XDTI0MDkxMzEw NDkxMVoXDTI1MDgyODE1MzAxOVowMzExMC8GA1UEAxMoNjQ4NEUzMUFDQ0VERTVE QTM4NzFFQ0U5QTYwOUFFQjcxN0EyQ0NBQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMlmMBNcGrDEvFfQp2Fidt8CvOUUDaHMMyOq7kXDTROgerA1Le94 zPcs0gWcocW3HqjQp2TMP8tdo7wfPD0Vx7IAzYPdFQTV7jIr3JfKr2FIsgW3quEE MjpoHx79aHBMrM1Lzxrc7jWUgLiRiwQQbq/2LWUZ+WQbAjj43y7ZS/+z0Gcpc85F UA8CLAUjbrFSeOJRKBKzJ0Rymq62UrBqle+LBLuCb5Mv8/JsSc61kbhrWWORz+EO eOyNb9CTbfO7mtnxg6DPXLgt6QsSO71aCfk4DDzCSU2p6Zfo94e9beh65+i1+saB FbdPHMWN5PEGAoBJzf3g/bLk+qrv7kg4KfsCAwEAAaOCAfkwggH1MB0GA1UdDgQW BBRkhOMazO3l2jhx7OmmCa63F6LMqjAfBgNVHSMEGDAWgBQsIIgaDv0GZKWRrzCV 0pk175vDYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DT0RFVVBU RUNIL0xDQ0lHZzc5Qm1TbGthOHdsZEtaTmUtYncyRS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTENDSUdnNzlCbVNsa2E4d2xkS1pOZS1idzJFLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQVEVDSC9aSVRqR3N6dDVk bzRjZXpwcGdtdXR4ZWl6S28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA AjAJAwcAJAG/YE/1MA0GCSqGSIb3DQEBCwUAA4IBAQA15Fbssc9fZA8SwezfWjZi sNaSthr2k7R1c1L2c/6KNOR+rUee5AoAYOCITc7jHOlRfoISUirPwwBjHGhMUIru fth+QaybhdpHuKMSfdtc9rj03sm7DU2I1c5fZy/S3XMIgUT7Qxpf2tnzxV20ORLt sUME6k8RsTt2fAbcc9ZcCwUEiP/Upqx4kKSdKcjH1I+6vC8RsONR0vPpLphr0k5p tuLHU3CmJ9WRUYVuowl1FYjjxj4noZBrVggMHfJDWEED5ZA0sUjmnlc8x/AVmymB GjoWzIsUAvqbcos/n+MBAB0zvZd38GVkJ067YvZMlDCHmHGlhvS17a9mpLxf6Gqn -----END CERTIFICATE-----Generated at Fri Nov 22 02:44:22 2024 by rpki-client on console-fra.rpki-client.org