$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/bYwAw2TXrVZpfNhzm_DeG7_960A.roa File: bYwAw2TXrVZpfNhzm_DeG7_960A.roa (raw, json) Hash identifier: ak+e3oO3cbXUtUoUzp1PQ7oE4QhFIa6zCz6cY7NRHEE= Subject key identifier: 6D:8C:00:C3:64:D7:AD:56:69:7C:D8:73:9B:F0:DE:1B:BF:FD:EB:40 Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Certificate serial: 0B58 Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/bYwAw2TXrVZpfNhzm_DeG7_960A.roa Signing time: Fri 01 Sep 2023 08:36:08 +0000 ROA not before: Fri 01 Sep 2023 08:36:08 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17416 IP address blocks: 2405:4d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2904 (0xb58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791 Validity Not Before: Sep 1 08:36:08 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6D8C00C364D7AD56697CD8739BF0DE1BBFFDEB40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:56:f0:b1:98:8b:d1:7c:fa:fd:50:02:ea: 5f:7d:41:43:73:14:a6:db:ec:5e:5d:a6:d9:3f:89: 94:92:06:cf:f5:ba:a1:31:6f:bb:99:18:67:84:6c: da:0c:79:eb:a3:06:d2:48:ee:a4:61:92:5c:68:5c: 45:bd:e1:86:bd:e0:02:e2:fd:49:93:ff:01:db:5c: 29:27:f5:ab:b2:38:3c:6c:98:1d:51:ac:93:19:44: 72:ce:78:e2:30:2e:18:06:4a:19:72:a6:b2:f9:84: 62:32:18:81:b0:4b:df:d7:58:ad:c9:df:f2:4c:d7: ea:07:fa:41:5c:a7:d6:64:2d:7f:68:6e:ab:97:44: ca:b5:4e:b1:d8:21:22:93:39:c0:cc:34:03:07:0f: c6:59:79:08:e7:13:81:c1:b2:ad:f7:82:46:1f:cc: f9:e0:3e:fb:4a:a5:24:e1:c2:6f:15:d5:d2:58:91: 3b:ec:ca:3b:dc:0b:31:cd:65:87:45:9e:ad:e2:73: b7:8b:6b:56:26:35:c4:3d:9f:68:8f:22:4b:4e:55: 16:5e:11:ba:ea:e4:10:d3:eb:e4:03:7a:9d:bc:ad: 6d:ce:a1:5e:e4:25:4e:71:b4:e6:5b:e0:92:43:d4: 1f:b9:9e:3a:23:d9:7d:d3:d5:3a:58:e8:cc:f1:ae: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8C:00:C3:64:D7:AD:56:69:7C:D8:73:9B:F0:DE:1B:BF:FD:EB:40 X509v3 Authority Key Identifier: keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/bYwAw2TXrVZpfNhzm_DeG7_960A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:4d00::/32 Signature Algorithm: sha256WithRSAEncryption 6d:3a:b9:a9:f4:52:69:9b:6a:68:ca:33:1b:df:07:bd:c9:04: a0:4e:35:57:18:e5:56:fc:d7:24:38:4f:a5:0e:ad:f1:7a:ea: 9d:9b:80:68:5b:c9:8c:0c:f4:42:67:26:ef:09:9a:a9:47:c6: a9:8e:c1:a4:b2:63:4c:52:b1:ee:37:b4:e7:70:e3:06:43:c2: 63:ff:eb:1a:fd:fa:b3:0c:ee:e6:53:20:3e:60:34:6a:6b:37: c6:48:a8:7d:6e:a5:d9:b8:bc:cb:fa:8d:58:60:23:4e:7e:f1: 5b:fe:ab:47:b7:e0:6f:39:06:cc:b7:8d:f7:7d:5b:81:7b:32: 52:69:4d:a1:6c:a2:c7:77:31:9f:64:9e:85:b7:d2:ac:c6:c0: 79:ed:47:ea:5f:04:bd:5f:a4:76:60:ab:ad:44:0c:2c:d9:02: d7:2e:68:17:e5:cd:06:ca:20:70:1d:81:74:42:0f:28:50:3e: 0c:21:65:c0:c3:10:11:49:de:87:d3:15:8c:0b:20:b9:58:9a: 1a:4e:95:e4:fd:a5:f3:d4:b5:b8:2f:06:1d:9c:2b:6c:4b:84: e6:29:37:09:cf:4e:3b:4c:76:05:ae:8e:84:45:df:c1:45:0c: 20:5f:5b:a7:20:8f:8b:f5:57:b3:7b:b0:9e:09:57:39:5e:81: ec:97:fb:89 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICC1gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1 RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yMzA5MDEw ODM2MDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZEOEMwMEMzNjREN0FE NTY2OTdDRDg3MzlCRjBERTFCQkZGREVCNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClkVbwsZiL0Xz6/VAC6l99QUNzFKbb7F5dptk/iZSSBs/1uqEx b7uZGGeEbNoMeeujBtJI7qRhklxoXEW94Ya94ALi/UmT/wHbXCkn9auyODxsmB1R rJMZRHLOeOIwLhgGShlyprL5hGIyGIGwS9/XWK3J3/JM1+oH+kFcp9ZkLX9obquX RMq1TrHYISKTOcDMNAMHD8ZZeQjnE4HBsq33gkYfzPngPvtKpSThwm8V1dJYkTvs yjvcCzHNZYdFnq3ic7eLa1YmNcQ9n2iPIktOVRZeEbrq5BDT6+QDep28rW3OoV7k JU5xtOZb4JJD1B+5njoj2X3T1TpY6Mzxrq0vAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUbYwAw2TXrVZpfNhzm/DeG7/960AwHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9iWXdBdzJUWHJWWnBmTmh6bV9E ZUc3Xzk2MEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAVN ADANBgkqhkiG9w0BAQsFAAOCAQEAbTq5qfRSaZtqaMozG98HvckEoE41VxjlVvzX JDhPpQ6t8XrqnZuAaFvJjAz0Qmcm7wmaqUfGqY7BpLJjTFKx7je053DjBkPCY//r Gv36swzu5lMgPmA0ams3xkiofW6l2bi8y/qNWGAjTn7xW/6rR7fgbzkGzLeN931b gXsyUmlNoWyix3cxn2SehbfSrMbAee1H6l8EvV+kdmCrrUQMLNkC1y5oF+XNBsog cB2BdEIPKFA+DCFlwMMQEUneh9MVjAsguViaGk6V5P2l89S1uC8GHZwrbEuE5ik3 Cc9OO0x2Ba6OhEXfwUUMIF9bpyCPi/VXs3uwnglXOV6B7Jf7iQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:41 2024 by rpki-client on console-ams.rpki-client.org