$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/BYscnij_y6NTl75-sGtJrVBihlc.roa File: BYscnij_y6NTl75-sGtJrVBihlc.roa (raw, json) Hash identifier: KSAN3VpvfZ+L7SlMF6Zz/zpx4vl8aW/z4yFV/iICPwE= Subject key identifier: 05:8B:1C:9E:28:FF:CB:A3:53:97:BE:7E:B0:6B:49:AD:50:62:86:57 Certificate issuer: /CN=A082F5D992E6BC25E08997538616180702E857C3 Certificate serial: 03A7 Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/BYscnij_y6NTl75-sGtJrVBihlc.roa Signing time: Mon 26 Aug 2024 05:11:51 +0000 ROA not before: Mon 26 Aug 2024 05:11:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38008 IP address blocks: 2406:d7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 11:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 935 (0x3a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3 Validity Not Before: Aug 26 05:11:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=058B1C9E28FFCBA35397BE7EB06B49AD50628657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bf:7f:61:73:45:50:0e:8a:7e:47:6b:f3:d8: 7f:53:2d:9c:a3:a9:c7:b2:f9:d1:4d:b9:23:1f:49: 6d:32:58:6a:0e:aa:07:f2:32:0e:1d:79:6d:a9:16: cf:fa:06:69:b3:08:ff:a7:df:61:b8:d7:77:9b:2f: 61:00:aa:03:8a:c3:54:a2:7e:88:b8:8f:68:ae:05: 4b:c0:57:a3:41:d5:5e:87:02:39:ef:08:9b:3a:4e: 8d:e3:58:15:2d:74:c5:8c:9e:31:25:fc:d7:a1:d6: ed:df:4a:af:f9:a7:80:4a:16:be:60:70:7b:af:3e: f4:39:af:33:03:e3:14:c3:60:33:d7:c0:c2:f6:46: 76:5c:17:8b:92:91:07:d2:42:6b:fe:a3:55:50:ec: 25:df:d9:15:1b:2c:38:1d:1d:78:76:e8:df:90:ff: c2:a6:48:c1:0f:53:3d:9e:13:b5:0c:83:26:4f:71: 83:27:b9:8e:1b:cf:e2:75:8f:1c:5f:48:1e:e3:d4: 14:8b:8e:29:e7:5f:70:98:ff:ef:4d:6e:b7:e6:29: ae:a6:b5:ab:0f:a7:fb:aa:04:6e:31:af:fd:1f:0e: c9:d2:96:26:e0:41:ef:e7:f0:37:98:74:7b:62:af: 7e:5e:40:03:25:62:e4:f6:98:b3:92:68:0f:2b:ae: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8B:1C:9E:28:FF:CB:A3:53:97:BE:7E:B0:6B:49:AD:50:62:86:57 X509v3 Authority Key Identifier: keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/BYscnij_y6NTl75-sGtJrVBihlc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d7c0::/32 Signature Algorithm: sha256WithRSAEncryption 33:c5:e8:6c:e2:48:36:d7:f4:5f:70:81:fb:1c:65:6d:49:10: eb:65:8f:2b:15:8d:4a:71:9c:a3:2d:b0:88:0e:2d:b5:89:23: 68:bf:7d:b8:cf:43:f9:5d:bc:d5:4c:97:05:cf:f1:52:f0:ef: 0d:98:41:24:f0:1e:fb:e5:8d:cb:58:f9:3d:b9:b4:a3:d3:bf: 1c:98:80:40:b0:64:67:bd:1f:05:d1:52:bc:b2:96:bc:59:23: 18:9e:9c:f8:93:f3:21:34:d2:3e:a3:85:38:5d:de:15:da:c9: 0c:1c:62:66:0c:71:97:38:ad:ff:03:65:91:a6:e8:8f:35:4f: 15:5a:ec:d3:3b:e9:73:fd:16:f2:82:cf:29:2d:a6:03:2c:3d: 35:54:f6:83:bb:cf:a9:9e:5a:85:0a:c0:35:d6:34:43:a8:ab: 42:e5:c0:31:80:5f:b3:ac:31:26:85:be:98:e6:43:a4:08:7c: 3c:3b:7f:e7:d7:b3:85:f2:fb:c0:18:70:e0:0f:f2:be:a9:5d: 09:04:8f:6b:14:fa:3e:d0:c6:8f:34:c0:e1:cb:05:bc:5f:ba: 61:9a:cf:67:a3:0d:f6:98:6c:03:16:3c:b5:7c:fe:26:9c:73: c6:e6:41:01:54:c8:8e:51:0d:99:21:a5:28:8e:cc:86:4e:0a: 10:af:0a:a1 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTA4 MkY1RDk5MkU2QkMyNUUwODk5NzUzODYxNjE4MDcwMkU4NTdDMzAeFw0yNDA4MjYw NTExNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1OEIxQzlFMjhGRkNC QTM1Mzk3QkU3RUIwNkI0OUFENTA2Mjg2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhv39hc0VQDop+R2vz2H9TLZyjqcey+dFNuSMfSW0yWGoOqgfy Mg4deW2pFs/6BmmzCP+n32G413ebL2EAqgOKw1Sifoi4j2iuBUvAV6NB1V6HAjnv CJs6To3jWBUtdMWMnjEl/Neh1u3fSq/5p4BKFr5gcHuvPvQ5rzMD4xTDYDPXwML2 RnZcF4uSkQfSQmv+o1VQ7CXf2RUbLDgdHXh26N+Q/8KmSMEPUz2eE7UMgyZPcYMn uY4bz+J1jxxfSB7j1BSLjinnX3CY/+9NbrfmKa6mtasPp/uqBG4xr/0fDsnSlibg Qe/n8DeYdHtir35eQAMlYuT2mLOSaA8rrgZLAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUBYscnij/y6NTl75+sGtJrVBihlcwHwYDVR0jBBgwFoAUoIL12ZLmvCXgiZdT hhYYBwLoV8MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVL L29JTDEyWkxtdkNYZ2laZFRoaFlZQndMb1Y4TS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0Evb0lMMTJaTG12Q1hnaVpkVGhoWVlCd0xvVjhNLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1NQVEVLL0JZc2NuaWpfeTZOVGw3NS1z R3RKclZCaWhsYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BtfAMA0GCSqGSIb3DQEBCwUAA4IBAQAzxehs4kg21/RfcIH7HGVtSRDrZY8rFY1K cZyjLbCIDi21iSNov324z0P5XbzVTJcFz/FS8O8NmEEk8B775Y3LWPk9ubSj078c mIBAsGRnvR8F0VK8spa8WSMYnpz4k/MhNNI+o4U4Xd4V2skMHGJmDHGXOK3/A2WR puiPNU8VWuzTO+lz/Rbygs8pLaYDLD01VPaDu8+pnlqFCsA11jRDqKtC5cAxgF+z rDEmhb6Y5kOkCHw8O3/n17OF8vvAGHDgD/K+qV0JBI9rFPo+0MaPNMDhywW8X7ph ms9now32mGwDFjy1fP4mnHPG5kEBVMiOUQ2ZIaUojsyGTgoQrwqh -----END CERTIFICATE-----Generated at Mon Nov 25 06:08:43 2024 by rpki-client on console-fra.rpki-client.org