$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/7jUGRDpTsiHE6Do9l0auV7tc1_o.roa File: 7jUGRDpTsiHE6Do9l0auV7tc1_o.roa (raw, json) Hash identifier: BO/MeFEzx37Siejr3lUWYxiGPDuZ/yq7z5bw6Bwr2B0= Subject key identifier: EE:35:06:44:3A:53:B2:21:C4:E8:3A:3D:97:46:AE:57:BB:5C:D7:FA Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0FD0 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7jUGRDpTsiHE6Do9l0auV7tc1_o.roa Signing time: Mon 26 Aug 2024 05:15:47 +0000 ROA not before: Mon 26 Aug 2024 05:15:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9674 IP address blocks: 2401:e180::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4048 (0xfd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:15:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EE3506443A53B221C4E83A3D9746AE57BB5CD7FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:20:bb:0a:41:2a:f6:cc:cd:32:4d:4f:82: 0f:89:8f:10:9a:f7:9d:af:7b:ca:2c:68:c7:01:ec: b8:29:ec:9f:9a:d0:b7:f7:6a:60:27:dc:74:82:e2: 35:d6:6e:92:6a:d8:06:05:36:c0:ba:be:ab:7a:7d: 91:0f:5a:e5:8d:be:36:9e:59:ab:5e:70:58:1a:8a: 89:3b:8c:14:70:b4:98:e1:ed:42:48:32:f8:ec:7f: 8d:02:18:53:8b:0d:67:af:60:cb:a4:f8:9c:81:e9: db:f8:16:72:57:f8:49:7a:0b:e2:ee:51:1d:1b:4f: a8:7f:84:ab:89:19:26:c8:eb:f0:f8:7b:d0:a4:f4: e5:2d:70:c6:a0:03:41:81:a2:8c:10:e6:2b:83:d1: a1:7f:35:f7:bb:89:a4:cc:35:66:19:e5:2c:4d:4d: 3b:51:ea:c7:61:fe:8f:71:e9:f2:72:0c:ac:35:16: 8f:fd:00:4c:99:8c:68:ce:2b:0c:d4:82:28:50:ac: d6:62:85:ad:f4:5c:da:57:7e:8f:0f:66:49:f9:0c: e5:35:5b:cf:11:f3:80:c5:36:44:7d:70:6f:41:62: 57:91:02:c3:c7:4e:3b:55:6e:d5:14:16:32:57:d2: 25:26:90:ee:78:c5:f4:30:7f:7d:43:d3:35:97:a4: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:35:06:44:3A:53:B2:21:C4:E8:3A:3D:97:46:AE:57:BB:5C:D7:FA X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7jUGRDpTsiHE6Do9l0auV7tc1_o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:e180::/32 Signature Algorithm: sha256WithRSAEncryption 7c:d2:f2:09:20:7a:e6:73:aa:82:fa:82:23:55:b9:9e:3a:55: b2:6c:b7:b6:74:04:9b:b8:79:d0:bb:b6:d7:31:61:c0:45:43: f0:c1:51:4b:65:85:1a:2f:53:10:95:a7:ba:7f:a3:d0:fc:db: 68:08:9d:75:4d:2d:c6:bb:19:43:af:3f:be:36:7d:5f:76:0d: b6:91:50:e6:24:36:df:1f:b4:1b:3c:0e:16:b1:ec:86:2a:5a: 7b:ee:ee:79:2f:34:8f:b7:bd:4f:8a:5f:3b:b4:6a:79:9a:c2: e8:9b:4b:2d:87:d3:24:fb:1a:b0:5f:43:09:c2:e0:45:41:2b: d7:83:e2:10:f0:f7:87:a7:d6:19:70:a5:cc:42:85:5e:fb:95: 76:34:7d:41:99:e7:3c:72:4c:58:2a:94:93:f3:1f:6e:78:72: a6:99:17:d5:45:a1:64:5d:15:0a:1e:21:09:7e:5b:ae:33:50: 3d:e7:3a:d3:c9:9d:eb:29:eb:71:b8:d0:66:1f:aa:58:fe:28: fa:fa:1a:d4:d1:2e:d3:36:4a:15:73:bd:28:bd:83:f7:6f:9d: af:6c:26:56:3c:63:d3:2c:47:26:7e:34:46:ca:d9:9b:e5:22: e4:bb:7b:60:59:2d:88:03:9d:e2:fc:d5:bd:19:42:46:06:d0: 64:9e:8e:59 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICD9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE1NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVFMzUwNjQ0M0E1M0Iy MjFDNEU4M0EzRDk3NDZBRTU3QkI1Q0Q3RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBliC7CkEq9szNMk1Pgg+JjxCa952ve8osaMcB7Lgp7J+a0Lf3 amAn3HSC4jXWbpJq2AYFNsC6vqt6fZEPWuWNvjaeWatecFgaiok7jBRwtJjh7UJI Mvjsf40CGFOLDWevYMuk+JyB6dv4FnJX+El6C+LuUR0bT6h/hKuJGSbI6/D4e9Ck 9OUtcMagA0GBoowQ5iuD0aF/Nfe7iaTMNWYZ5SxNTTtR6sdh/o9x6fJyDKw1Fo/9 AEyZjGjOKwzUgihQrNZiha30XNpXfo8PZkn5DOU1W88R84DFNkR9cG9BYleRAsPH TjtVbtUUFjJX0iUmkO54xfQwf31D0zWXpPTDAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQU7jUGRDpTsiHE6Do9l0auV7tc1/owHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVULzdqVUdSRHBUc2lIRTZEbzlsMGF1Vjd0 YzFfby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAeGAMA0G CSqGSIb3DQEBCwUAA4IBAQB80vIJIHrmc6qC+oIjVbmeOlWybLe2dASbuHnQu7bX MWHARUPwwVFLZYUaL1MQlae6f6PQ/NtoCJ11TS3GuxlDrz++Nn1fdg22kVDmJDbf H7QbPA4WseyGKlp77u55LzSPt71Pil87tGp5msLom0sth9Mk+xqwX0MJwuBFQSvX g+IQ8PeHp9YZcKXMQoVe+5V2NH1Bmec8ckxYKpST8x9ueHKmmRfVRaFkXRUKHiEJ fluuM1A95zrTyZ3rKetxuNBmH6pY/ij6+hrU0S7TNkoVc70ovYP3b52vbCZWPGPT LEcmfjRGytmb5SLku3tgWS2IA53i/NW9GUJGBtBkno5Z -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:04 2024 by rpki-client on console-ams.rpki-client.org