$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/d7qlDkV9FRqnXqEv8aMp79JyDPw.roa File: d7qlDkV9FRqnXqEv8aMp79JyDPw.roa (raw, json) Hash identifier: HLgv8gQ/e/HiNZ0N5Q9pxOIuLXXsEeIzQfmpYb9Kdng= Subject key identifier: 77:BA:A5:0E:45:7D:15:1A:A7:5E:A1:2F:F1:A3:29:EF:D2:72:0C:FC Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 0D20 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/d7qlDkV9FRqnXqEv8aMp79JyDPw.roa Signing time: Mon 15 Jan 2024 21:24:51 +0000 ROA not before: Mon 15 Jan 2024 21:24:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131591 IP address blocks: 2404:0:8000::/36 maxlen: 56 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3360 (0xd20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Jan 15 21:24:51 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=77BAA50E457D151AA75EA12FF1A329EFD2720CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:64:0e:82:c6:3f:c9:96:f6:04:88:51:dc: fd:e5:f2:b4:a3:6e:df:57:4b:01:b0:39:31:6e:53: 13:c0:9f:84:fc:4a:32:03:6a:3b:71:aa:9c:32:cf: b5:a0:3f:5e:69:bc:90:19:f6:00:22:db:dc:fa:9c: db:9d:72:98:b3:1f:4c:94:2b:b8:e9:96:e9:55:7a: f4:b4:76:60:5a:e9:bd:0a:76:4a:7b:ab:fd:10:52: 16:3a:f2:a8:a5:60:13:39:a1:f1:96:8a:5b:96:23: 0e:d1:0b:9e:47:5c:84:69:b3:02:52:95:ac:30:b0: 32:a3:43:14:ad:32:54:1d:57:e3:3c:5b:e3:cb:14: 25:3c:36:48:82:c0:24:e3:b5:bc:40:1b:4d:61:db: 49:b8:3e:97:b1:77:19:d0:d8:96:dd:54:89:69:9a: 62:65:f4:28:f2:3c:bc:20:9f:ec:15:e7:4e:5b:20: 2a:f5:32:5e:5a:7f:5e:ab:0b:9d:88:ce:16:7b:76: c6:3b:cf:2f:4d:f8:53:65:94:96:d8:5c:89:30:85: 41:3b:aa:53:8b:8c:66:33:20:5a:f5:d3:02:3a:2c: 49:42:c3:58:fe:b5:3b:54:73:ff:a7:54:aa:7c:50: 7e:f4:e5:c4:62:da:c8:a3:2f:8b:1c:a8:51:a5:16: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BA:A5:0E:45:7D:15:1A:A7:5E:A1:2F:F1:A3:29:EF:D2:72:0C:FC X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/d7qlDkV9FRqnXqEv8aMp79JyDPw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:0:8000::/36 Signature Algorithm: sha256WithRSAEncryption 05:a5:5d:71:d1:a9:f6:21:1a:bd:34:ed:22:1c:79:0d:a3:e4: 48:9e:7c:ba:62:c3:d3:27:7b:c7:dd:62:72:37:77:cb:08:c7: 92:a6:e8:c8:4f:3a:1c:fe:fd:55:eb:34:e0:e1:d9:c8:50:c3: 01:89:51:1c:93:6b:4b:97:b1:ef:af:91:49:02:d4:e8:ce:fb: 45:00:9b:f7:a0:d0:2c:9a:52:a2:bc:9f:19:7d:cc:c2:11:a4: 0e:42:20:e1:a7:16:61:88:09:2f:75:a7:0c:53:70:94:9d:bc: 6b:ac:ed:74:a7:31:8e:0d:62:26:b7:2d:70:c1:03:27:95:6e: da:b9:9c:1d:21:ee:51:d7:17:d8:85:f1:8c:a3:d6:cf:53:be: 3d:e0:b4:2c:55:9a:37:6b:b9:c4:eb:2a:ae:1b:5f:32:94:72: a3:88:e9:75:61:7c:85:99:26:c2:e8:98:1a:7e:12:f1:f2:88: 37:7b:68:84:19:77:80:eb:79:0b:c4:59:ec:be:5e:34:f8:f1: 86:e9:bc:de:2b:fe:70:88:21:8e:aa:dc:c5:1f:a4:e8:49:d6: 04:66:a5:79:0c:0f:cc:1d:99:40:b1:05:da:a8:a7:4c:b8:4e: 13:2e:e5:b5:d4:fb:6c:6a:74:03:dd:85:06:11:bf:20:72:f3: fc:bd:70:59 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICDSAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDAxMTUy MTI0NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDc3QkFBNTBFNDU3RDE1 MUFBNzVFQTEyRkYxQTMyOUVGRDI3MjBDRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC05mQOgsY/yZb2BIhR3P3l8rSjbt9XSwGwOTFuUxPAn4T8SjID ajtxqpwyz7WgP15pvJAZ9gAi29z6nNudcpizH0yUK7jplulVevS0dmBa6b0Kdkp7 q/0QUhY68qilYBM5ofGWiluWIw7RC55HXIRpswJSlawwsDKjQxStMlQdV+M8W+PL FCU8NkiCwCTjtbxAG01h20m4PpexdxnQ2JbdVIlpmmJl9CjyPLwgn+wV505bICr1 Ml5af16rC52IzhZ7dsY7zy9N+FNllJbYXIkwhUE7qlOLjGYzIFr10wI6LElCw1j+ tTtUc/+nVKp8UH705cRi2sijL4scqFGlFuWnAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUd7qlDkV9FRqnXqEv8aMp79JyDPwwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2Q3cWxEa1Y5RlJxblhxRXY4YU1wNzlK eURQdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQkBAAAgDAN BgkqhkiG9w0BAQsFAAOCAQEABaVdcdGp9iEavTTtIhx5DaPkSJ58umLD0yd7x91i cjd3ywjHkqboyE86HP79Ves04OHZyFDDAYlRHJNrS5ex76+RSQLU6M77RQCb96DQ LJpSoryfGX3MwhGkDkIg4acWYYgJL3WnDFNwlJ28a6ztdKcxjg1iJrctcMEDJ5Vu 2rmcHSHuUdcX2IXxjKPWz1O+PeC0LFWaN2u5xOsqrhtfMpRyo4jpdWF8hZkmwuiY Gn4S8fKIN3tohBl3gOt5C8RZ7L5eNPjxhum83iv+cIghjqrcxR+k6EnWBGaleQwP zB2ZQLEF2qinTLhOEy7ltdT7bGp0A92FBhG/IHLz/L1wWQ== -----END CERTIFICATE-----Generated at Mon May 20 08:58:19 2024 by rpki-client on console-ams.rpki-client.org