$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/AYCcglI15zG7FkfSolvfNj-yPzk.roa File: AYCcglI15zG7FkfSolvfNj-yPzk.roa (raw, json) Hash identifier: ih9QPry4s91CCDMoxdDdu7GvHs51gahQocJuq3Sgies= Subject key identifier: 01:80:9C:82:52:35:E7:31:BB:16:47:D2:A2:5B:DF:36:3F:B2:3F:39 Certificate issuer: /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Certificate serial: 0F10 Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/AYCcglI15zG7FkfSolvfNj-yPzk.roa Signing time: Mon 26 Aug 2024 05:12:42 +0000 ROA not before: Mon 26 Aug 2024 05:12:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24168 IP address blocks: 2404:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3856 (0xf10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059 Validity Not Before: Aug 26 05:12:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=01809C825235E731BB1647D2A25BDF363FB23F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:4f:b4:b9:cd:0d:d6:6b:f0:f1:7f:f9:a6: ac:d9:2d:ba:10:d8:20:a2:e3:56:44:d1:52:cc:46: a7:93:13:fe:4c:c3:82:54:6a:98:b1:6c:45:70:87: 06:4a:b7:79:59:3b:5b:f8:9b:33:00:5d:89:3c:59: f2:54:19:4e:9c:0e:5c:80:8c:0b:f6:95:c2:18:0d: c5:2b:ce:fe:18:73:8a:25:29:9a:51:d7:71:6c:4b: 4f:f3:8c:0d:f6:c1:71:c4:32:8f:dd:66:3b:54:31: 39:53:2f:15:80:e2:86:f9:2f:8c:52:02:1d:77:3f: 67:3c:f4:58:24:73:f5:11:aa:47:b7:b3:e1:5e:b9: 79:64:a9:1c:8f:30:bf:61:49:39:cb:f4:3e:80:90: 83:18:20:ba:29:c3:7e:c5:10:78:40:5c:92:4e:7e: ac:f8:4d:98:77:0e:10:e9:d3:6d:11:76:7f:d5:e7: 9d:2e:69:b2:1c:09:50:7a:c6:5e:b9:20:0e:b1:41: a3:b6:33:6f:e0:0b:61:5a:5d:a6:c1:8e:e6:c0:25: 74:a9:3b:61:c5:32:36:d6:2a:cb:6a:3a:6a:a3:a9: e3:dc:3a:a9:ba:ec:df:13:c4:5c:6a:5d:f6:8c:44: 52:ec:50:97:5a:fd:05:99:bf:88:20:47:12:74:8b: f7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:80:9C:82:52:35:E7:31:BB:16:47:D2:A2:5B:DF:36:3F:B2:3F:39 X509v3 Authority Key Identifier: keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/AYCcglI15zG7FkfSolvfNj-yPzk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:8cc0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:20:ec:51:a8:f6:31:73:dc:10:db:fe:44:bd:ac:f6:c9:18: ad:a2:a0:52:94:31:e8:0d:44:39:af:92:20:32:31:1b:01:4c: 3c:7a:7e:f4:b6:b2:b8:e8:87:47:72:b6:34:82:aa:57:87:36: aa:6c:4a:99:16:1b:2c:f8:24:de:2a:a3:ea:bf:1c:32:30:48: 2e:92:41:04:d9:0d:34:50:ea:d2:dd:c7:ad:b4:a6:5f:58:58: 98:0b:16:88:3d:a7:1d:85:6f:da:da:00:7b:97:9a:5a:95:0e: 9b:b9:32:35:75:fd:ba:75:bf:64:5d:8e:19:e4:c1:15:b2:71: b0:f0:89:f8:bd:9a:c2:b9:f6:91:d3:22:0f:47:f4:69:3d:94: 4f:12:1d:63:2d:d7:02:be:64:1c:ef:bd:2a:0f:12:3c:3a:cf: 2d:86:ef:07:63:33:f8:78:c3:20:bf:64:d6:8c:c2:74:e9:05: 4e:df:72:a9:c9:63:b3:b4:3b:23:0b:23:91:12:cb:b1:57:72: 89:d1:90:44:4a:bb:38:d1:a4:bf:ac:4d:86:76:a5:0f:22:a5: 9e:af:bf:09:4d:4a:da:ef:62:b5:ef:07:6f:1a:cb:40:82:85: 52:e6:e0:b4:40:24:fa:3d:1a:d2:ab:66:93:5f:a7:47:e1:35: 29:7c:13:5e -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICDxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDRG MEREMEY0RkI4MDEwMjVENTg2RUY5OTlDNUVFRTAyRDdDMjA1OTAeFw0yNDA4MjYw NTEyNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAxODA5QzgyNTIzNUU3 MzFCQjE2NDdEMkEyNUJERjM2M0ZCMjNGMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCW50+0uc0N1mvw8X/5pqzZLboQ2CCi41ZE0VLMRqeTE/5Mw4JU apixbEVwhwZKt3lZO1v4mzMAXYk8WfJUGU6cDlyAjAv2lcIYDcUrzv4Yc4olKZpR 13FsS0/zjA32wXHEMo/dZjtUMTlTLxWA4ob5L4xSAh13P2c89Fgkc/URqke3s+Fe uXlkqRyPML9hSTnL9D6AkIMYILopw37FEHhAXJJOfqz4TZh3DhDp020Rdn/V550u abIcCVB6xl65IA6xQaO2M2/gC2FaXabBjubAJXSpO2HFMjbWKstqOmqjqePcOqm6 7N8TxFxqXfaMRFLsUJda/QWZv4ggRxJ0i/fLAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUAYCcglI15zG7FkfSolvfNj+yPzkwHwYDVR0jBBgwFoAU1PDdD0+4AQJdWG75 mcXu4C18IFkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdULzFQ RGREMC00QVFKZFdHNzVtY1h1NEMxOElGay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev MVBEZEQwLTRBUUpkV0c3NW1jWHU0QzE4SUZrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRFdUL0FZQ2NnbEkxNXpHN0ZrZlNvbHZmTmot eVB6ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBIzAMA0G CSqGSIb3DQEBCwUAA4IBAQAvIOxRqPYxc9wQ2/5Evaz2yRitoqBSlDHoDUQ5r5Ig MjEbAUw8en70trK46IdHcrY0gqpXhzaqbEqZFhss+CTeKqPqvxwyMEgukkEE2Q00 UOrS3cettKZfWFiYCxaIPacdhW/a2gB7l5palQ6buTI1df26db9kXY4Z5MEVsnGw 8In4vZrCufaR0yIPR/RpPZRPEh1jLdcCvmQc770qDxI8Os8thu8HYzP4eMMgv2TW jMJ06QVO33KpyWOztDsjCyOREsuxV3KJ0ZBESrs40aS/rE2GdqUPIqWer78JTUra 72K17wdvGstAgoVS5uC0QCT6PRrSq2aTX6dH4TUpfBNe -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:30 2024 by rpki-client on console-ams.rpki-client.org