$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/UEJQzCOhNAm_Y_QwbRk0AXeByd0.roa File: UEJQzCOhNAm_Y_QwbRk0AXeByd0.roa (raw, json) Hash identifier: vcuWJ0RltyVk+N+gR5Rjqlr0XpPE6f/JiWPajhLSzhw= Subject key identifier: 50:42:50:CC:23:A1:34:09:BF:63:F4:30:6D:19:34:01:77:81:C9:DD Certificate issuer: /CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Certificate serial: 0B50 Authority key identifier: A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/UEJQzCOhNAm_Y_QwbRk0AXeByd0.roa Signing time: Fri 01 Sep 2023 08:35:11 +0000 ROA not before: Fri 01 Sep 2023 08:35:11 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 20473 IP address blocks: 2403:a2c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6ED14DB12101A125D3112DC4CC5602D30D8B477 Validity Not Before: Sep 1 08:35:11 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=504250CC23A13409BF63F4306D1934017781C9DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:06:95:83:0a:15:c5:ef:94:e3:0c:b8:57:4e: 52:29:84:51:f7:58:8b:d0:c2:f1:3d:51:09:52:dc: 42:ae:bb:a5:6e:c4:50:54:42:4a:12:f6:91:8a:21: 56:de:a5:8a:2e:2c:65:b1:c7:79:09:fb:e3:69:ef: 6a:86:53:98:8b:d8:e2:e3:d0:27:8d:6d:97:bf:d9: 87:2b:73:8d:8e:80:a0:dd:f8:98:36:bc:fb:12:0e: 80:b6:f8:6b:99:73:66:7c:3e:44:25:3f:c9:fb:0c: 17:a2:16:75:c7:83:55:65:f8:01:72:18:d1:2e:67: 12:33:b4:87:90:7f:18:9f:6a:33:9b:07:8b:b4:75: a4:39:de:a1:8c:38:82:9a:33:bc:ae:2a:42:02:7a: 52:53:af:d7:c9:9b:c0:c5:1f:9c:9d:21:3b:c6:8f: 14:de:37:7b:98:86:10:09:78:7f:31:02:64:62:d8: d7:2d:fa:4f:2c:64:5f:9b:4f:da:d4:bc:ed:d6:af: 22:d7:63:df:a2:0c:ae:a2:09:7d:32:90:9b:49:8c: 3b:3d:40:0d:1f:3a:0c:c4:be:b7:8e:06:20:a7:2e: ed:ba:b2:f9:74:06:13:ab:05:3e:0a:0c:f0:33:88: b8:bb:fa:53:b0:34:02:1c:fd:a9:79:5e:b3:1a:59: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:42:50:CC:23:A1:34:09:BF:63:F4:30:6D:19:34:01:77:81:C9:DD X509v3 Authority Key Identifier: keyid:A6:ED:14:DB:12:10:1A:12:5D:31:12:DC:4C:C5:60:2D:30:D8:B4:77 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/pu0U2xIQGhJdMRLcTMVgLTDYtHc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pu0U2xIQGhJdMRLcTMVgLTDYtHc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DENPAIO/UEJQzCOhNAm_Y_QwbRk0AXeByd0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:a2c0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:e1:db:d8:9a:d0:2c:3a:68:60:35:ea:22:62:b8:36:42:4c: 40:1b:b7:73:96:39:c8:cc:52:4c:e2:69:8f:a8:06:b2:fb:0d: 48:75:b8:8e:46:5c:28:9e:12:24:53:5d:d1:32:c7:2a:be:24: 3f:7e:4c:7a:d7:01:e4:fa:24:1e:ab:94:ec:1f:52:2f:d7:9d: 09:0d:2b:63:7f:41:b0:23:af:0c:43:21:8b:f3:67:a6:03:55: f9:9e:00:38:66:d4:7f:2c:73:35:a4:16:f9:ce:e3:12:67:95: c5:e7:8b:2d:66:0e:4d:1e:49:25:dc:5b:d6:4f:1f:e2:f4:7a: 17:4b:98:87:7a:d8:a4:a6:64:bf:7a:76:61:22:5c:8b:fa:f6: 1d:52:97:5b:2c:f6:2f:54:27:d3:96:97:2e:a7:c5:84:ac:80: 96:65:48:c6:be:0b:6c:8c:bf:08:f9:0d:11:48:e1:d2:ca:8a: 75:e4:44:44:5d:95:e9:62:60:49:99:30:f0:cd:f3:15:27:3d: 63:cf:83:f4:ce:c3:55:06:4a:63:c7:a5:c3:dd:2b:5a:6b:06: 34:75:ec:e7:44:85:f2:b1:c0:cf:35:89:f5:b9:e6:f7:7d:d0: e0:ed:00:f9:99:de:92:51:fd:1f:ad:6c:f3:89:b9:cb:0c:21: e4:cc:f4:dd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTZF RDE0REIxMjEwMUExMjVEMzExMkRDNENDNTYwMkQzMEQ4QjQ3NzAeFw0yMzA5MDEw ODM1MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUwNDI1MENDMjNBMTM0 MDlCRjYzRjQzMDZEMTkzNDAxNzc4MUM5REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2BpWDChXF75TjDLhXTlIphFH3WIvQwvE9UQlS3EKuu6VuxFBU QkoS9pGKIVbepYouLGWxx3kJ++Np72qGU5iL2OLj0CeNbZe/2Ycrc42OgKDd+Jg2 vPsSDoC2+GuZc2Z8PkQlP8n7DBeiFnXHg1Vl+AFyGNEuZxIztIeQfxifajObB4u0 daQ53qGMOIKaM7yuKkICelJTr9fJm8DFH5ydITvGjxTeN3uYhhAJeH8xAmRi2Nct +k8sZF+bT9rUvO3WryLXY9+iDK6iCX0ykJtJjDs9QA0fOgzEvreOBiCnLu26svl0 BhOrBT4KDPAziLi7+lOwNAIc/al5XrMaWchbAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUUEJQzCOhNAm/Y/QwbRk0AXeByd0wHwYDVR0jBBgwFoAUpu0U2xIQGhJdMRLc TMVgLTDYtHcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvREVOUEFJ Ty9wdTBVMnhJUUdoSmRNUkxjVE1WZ0xURFl0SGMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3B1MFUyeElRR2hKZE1STGNUTVZnTFREWXRIYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0RFTlBBSU8vVUVKUXpDT2hOQW1fWV9R d2JSazBBWGVCeWQwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQDosAwDQYJKoZIhvcNAQELBQADggEBAH/h29ia0Cw6aGA16iJiuDZCTEAbt3OW OcjMUkziaY+oBrL7DUh1uI5GXCieEiRTXdEyxyq+JD9+THrXAeT6JB6rlOwfUi/X nQkNK2N/QbAjrwxDIYvzZ6YDVfmeADhm1H8sczWkFvnO4xJnlcXniy1mDk0eSSXc W9ZPH+L0ehdLmId62KSmZL96dmEiXIv69h1Sl1ss9i9UJ9OWly6nxYSsgJZlSMa+ C2yMvwj5DRFI4dLKinXkRERdleliYEmZMPDN8xUnPWPPg/TOw1UGSmPHpcPdK1pr BjR17OdEhfKxwM81ifW55vd90ODtAPmZ3pJR/R+tbPOJucsMIeTM9N0= -----END CERTIFICATE-----Generated at Mon May 6 01:02:46 2024 by rpki-client on console-ams.rpki-client.org