$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/lDllXJnTHy8mWhDn2-s_qaxPwFo.roa File: lDllXJnTHy8mWhDn2-s_qaxPwFo.roa (raw, json) Hash identifier: EzJ8mHEUWZZULwnB/fOWm6qgXutWSDDoAIUpdnfrUGs= Subject key identifier: 94:39:65:5C:99:D3:1F:2F:26:5A:10:E7:DB:EB:3F:A9:AC:4F:C0:5A Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 106D Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lDllXJnTHy8mWhDn2-s_qaxPwFo.roa Signing time: Mon 26 Aug 2024 05:16:24 +0000 ROA not before: Mon 26 Aug 2024 05:16:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17709 IP address blocks: 2404:0:1000::/40 maxlen: 56 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4205 (0x106d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 26 05:16:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9439655C99D31F2F265A10E7DBEB3FA9AC4FC05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e4:f6:aa:0e:00:3a:cf:4b:84:15:64:1c:fb: f9:17:ed:d3:65:fb:46:00:05:88:55:0a:e9:3f:47: 5c:43:2e:72:fd:25:14:c2:fb:65:55:91:3c:64:d9: e2:cc:1c:a6:cc:11:dd:c1:75:02:90:6d:76:c2:f8: 83:04:d0:b8:92:86:3f:24:fb:01:ee:49:33:94:f6: ad:4e:30:54:49:bd:29:bf:44:98:2e:89:19:cf:66: 78:f2:f7:c9:80:16:98:61:af:28:e3:c4:8d:c6:70: e3:05:6d:7b:b2:7f:99:7b:be:f7:ad:fa:86:e7:9b: f4:6a:de:70:54:b1:da:c3:d7:90:6e:f7:15:27:76: e0:17:29:b9:6f:a3:a5:d8:46:ab:48:0e:98:21:5e: 89:ed:0b:6b:eb:33:9b:0d:18:41:f8:09:ad:f3:5a: 14:70:3b:79:8a:ad:f4:85:1b:0e:fd:61:c2:33:9f: ee:5f:f8:d2:cf:db:2f:4a:4e:f5:8b:bb:1b:28:3a: 0f:3c:30:07:82:5e:fe:78:83:25:fe:97:ea:a1:09: 51:c6:54:59:25:14:b0:84:bc:24:53:63:03:c3:43: b6:2e:67:55:95:cf:64:6b:83:e1:8e:94:42:95:9d: fe:b7:78:d6:40:27:9a:1d:d9:d2:5d:7d:62:56:33: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:39:65:5C:99:D3:1F:2F:26:5A:10:E7:DB:EB:3F:A9:AC:4F:C0:5A X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/lDllXJnTHy8mWhDn2-s_qaxPwFo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:0:1000::/40 Signature Algorithm: sha256WithRSAEncryption 72:88:5b:b8:41:68:41:d2:67:b7:a4:58:32:c6:3d:3f:47:ab: 25:27:9c:06:17:7c:5d:c1:45:57:46:2a:86:02:02:ab:55:fa: 63:0a:e7:bd:6c:8b:d1:41:83:bb:83:ef:39:2b:2a:6c:d0:b3: e5:84:16:7b:d9:41:49:69:b7:fa:0f:5a:f1:e2:9a:61:b7:ae: a3:e1:06:78:6d:aa:5a:09:13:86:87:b4:71:e5:0f:ab:b3:87: 02:33:7e:44:ea:cf:83:fe:b4:83:f3:7d:48:91:fb:39:e6:79: cb:b9:e6:49:fb:e6:3e:22:df:7f:a5:b5:98:b3:47:a8:f7:ad: 2d:53:d3:66:2c:64:f1:d9:0f:92:92:cc:57:d7:8d:58:52:f9: 43:88:87:6c:fd:f6:c9:7f:9a:5c:e7:df:21:75:bf:2a:dc:da: 3c:a2:ce:a9:41:67:75:7a:8a:ce:da:01:1f:58:84:ee:27:c2: 71:f5:2e:ee:77:a5:13:6e:8f:3b:4e:b8:a5:a0:b1:dd:a5:a8: 76:03:96:74:49:32:d1:ef:98:ed:a2:a5:25:7c:60:a4:8f:13: 64:95:f1:f7:08:33:90:dc:f0:f6:14:24:ea:82:a8:cd:36:1a: ba:d3:68:84:d7:cf:81:f8:86:ad:a7:a4:09:60:27:39:30:cb: 25:e9:0f:71 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNDA4MjYw NTE2MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk0Mzk2NTVDOTlEMzFG MkYyNjVBMTBFN0RCRUIzRkE5QUM0RkMwNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDj5PaqDgA6z0uEFWQc+/kX7dNl+0YABYhVCuk/R1xDLnL9JRTC +2VVkTxk2eLMHKbMEd3BdQKQbXbC+IME0LiShj8k+wHuSTOU9q1OMFRJvSm/RJgu iRnPZnjy98mAFphhryjjxI3GcOMFbXuyf5l7vvet+obnm/Rq3nBUsdrD15Bu9xUn duAXKblvo6XYRqtIDpghXontC2vrM5sNGEH4Ca3zWhRwO3mKrfSFGw79YcIzn+5f +NLP2y9KTvWLuxsoOg88MAeCXv54gyX+l+qhCVHGVFklFLCEvCRTYwPDQ7YuZ1WV z2Rrg+GOlEKVnf63eNZAJ5od2dJdfWJWM8bZAgMBAAGjggHqMIIB5jAdBgNVHQ4E FgQUlDllXJnTHy8mWhDn2+s/qaxPwFowHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL2xEbGxYSm5USHk4bVdoRG4yLXNfcWF4 UHdGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAkBAAAEDAN BgkqhkiG9w0BAQsFAAOCAQEAcohbuEFoQdJnt6RYMsY9P0erJSecBhd8XcFFV0Yq hgICq1X6YwrnvWyL0UGDu4PvOSsqbNCz5YQWe9lBSWm3+g9a8eKaYbeuo+EGeG2q WgkThoe0ceUPq7OHAjN+ROrPg/60g/N9SJH7OeZ5y7nmSfvmPiLff6W1mLNHqPet LVPTZixk8dkPkpLMV9eNWFL5Q4iHbP32yX+aXOffIXW/KtzaPKLOqUFndXqKztoB H1iE7ifCcfUu7nelE26PO064paCx3aWodgOWdEky0e+Y7aKlJXxgpI8TZJXx9wgz kNzw9hQk6oKozTYautNohNfPgfiGraekCWAnOTDLJekPcQ== -----END CERTIFICATE-----Generated at Fri Nov 22 14:13:08 2024 by rpki-client on console-fra.rpki-client.org