$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/OZrPxuWaC_QODVBZbCXwN5HHE-s.roa File: OZrPxuWaC_QODVBZbCXwN5HHE-s.roa (raw, json) Hash identifier: 2ZehRSLFUhh2VnmZ7WdHu5r5XvVFKruvVQcCX17k1pg= Subject key identifier: 39:9A:CF:C6:E5:9A:0B:F4:0E:0D:50:59:6C:25:F0:37:91:C7:13:EB Certificate issuer: /CN=1A610A62A8A72CD36C1D22C7085EDF1809518994 Certificate serial: 09A2 Authority key identifier: 1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/OZrPxuWaC_QODVBZbCXwN5HHE-s.roa Signing time: Mon 26 Aug 2024 05:17:09 +0000 ROA not before: Mon 26 Aug 2024 05:17:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131667 IP address blocks: 2405:a040::/32 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A610A62A8A72CD36C1D22C7085EDF1809518994 Validity Not Before: Aug 26 05:17:09 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=399ACFC6E59A0BF40E0D50596C25F03791C713EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:47:a2:ac:4f:a1:5a:f3:75:1f:1c:20:62: b1:c4:ca:5a:bc:0a:47:94:13:fb:cb:1b:10:ee:ab: 76:ed:11:3f:a1:98:20:1f:3a:78:c4:61:0b:8e:76: d2:ef:38:c1:7a:78:c7:e8:54:e9:2f:d8:83:6c:e5: 88:40:ba:17:dd:ec:84:88:a6:ec:6c:66:27:cb:76: 16:36:1a:dc:1b:40:de:72:0e:24:85:c3:a2:06:27: a1:57:ff:16:3e:a6:6a:2d:f0:28:e3:56:0c:d4:af: fd:00:1d:17:08:1f:44:40:13:b7:8d:9c:b2:4c:91: c7:d4:d7:b3:09:37:77:0e:77:93:99:50:0d:85:38: 87:48:2d:cf:aa:f4:b4:5c:bf:de:53:13:f9:c7:e7: 99:ab:c5:83:ef:90:ef:92:04:f6:e5:50:f2:05:6e: 27:c6:9a:9b:3a:9b:08:0b:df:f9:46:cf:db:7b:97: ab:b5:33:71:16:b0:82:33:4d:b9:b2:75:17:d3:02: 22:41:5a:79:f6:e4:03:21:04:7b:8e:c4:f6:48:1f: 1a:fc:15:9a:ce:cc:a9:0a:98:8b:32:c5:be:5f:68: ec:24:1a:db:34:b7:41:5d:44:9d:4a:28:bb:d8:79: ab:2b:b0:9a:88:b5:aa:16:bb:b8:ac:f3:a1:08:d5: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:CF:C6:E5:9A:0B:F4:0E:0D:50:59:6C:25:F0:37:91:C7:13:EB X509v3 Authority Key Identifier: keyid:1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/OZrPxuWaC_QODVBZbCXwN5HHE-s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:a040::/32 Signature Algorithm: sha256WithRSAEncryption 7f:ac:ea:07:16:10:21:fb:d5:08:99:60:0a:c8:83:36:b0:8b: 64:ee:18:e1:f4:96:90:00:50:8f:2f:c2:96:ad:18:50:07:0d: 8d:62:f1:ae:8a:1b:3f:9f:fd:8a:ac:dd:4f:c8:f0:20:5e:db: cf:ac:a0:4e:c2:e3:bc:3f:df:33:9e:9c:89:c7:c8:d3:c9:f8: b8:bb:4e:a8:08:6e:28:d8:58:25:24:6d:33:f1:d4:4c:b5:72: 76:c2:62:95:0d:a2:99:b3:19:e1:39:36:45:da:e4:c9:b5:c4: e2:07:17:d1:81:97:0c:d8:86:93:24:a3:8e:c1:8b:b1:7b:92: 90:77:e6:d5:8e:c0:2f:7d:62:9d:ad:93:39:1a:33:b6:24:74: 3c:14:1f:b6:c0:da:35:f9:f4:93:7e:0b:51:84:9d:ae:99:1d: 7b:24:94:33:c7:dd:f0:3c:40:57:71:db:5d:a6:9c:45:ab:62: ad:bc:ce:40:bd:10:1e:dc:c0:ae:78:8f:0a:b0:fd:44:03:04: 8b:e3:34:fa:b5:91:73:8b:e0:22:ba:8e:ea:ac:14:bb:ee:9f: a3:58:5a:2e:ba:ac:74:e3:9d:cb:f7:04:80:aa:9d:09:11:e8: b0:e8:e8:27:de:3e:17:d3:7f:ad:f0:d2:51:44:a9:f4:7a:b6: 9c:3b:c5:a6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUE2 MTBBNjJBOEE3MkNEMzZDMUQyMkM3MDg1RURGMTgwOTUxODk5NDAeFw0yNDA4MjYw NTE3MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM5OUFDRkM2RTU5QTBC RjQwRTBENTA1OTZDMjVGMDM3OTFDNzEzRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqnUeirE+hWvN1HxwgYrHEylq8CkeUE/vLGxDuq3btET+hmCAf OnjEYQuOdtLvOMF6eMfoVOkv2INs5YhAuhfd7ISIpuxsZifLdhY2GtwbQN5yDiSF w6IGJ6FX/xY+pmot8CjjVgzUr/0AHRcIH0RAE7eNnLJMkcfU17MJN3cOd5OZUA2F OIdILc+q9LRcv95TE/nH55mrxYPvkO+SBPblUPIFbifGmps6mwgL3/lGz9t7l6u1 M3EWsIIzTbmydRfTAiJBWnn25AMhBHuOxPZIHxr8FZrOzKkKmIsyxb5faOwkGts0 t0FdRJ1KKLvYeasrsJqItaoWu7is86EI1cq9AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUOZrPxuWaC/QODVBZbCXwN5HHE+swHwYDVR0jBBgwFoAUGmEKYqinLNNsHSLH CF7fGAlRiZQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1JPTkVY VC9HbUVLWXFpbkxOTnNIU0xIQ0Y3ZkdBbFJpWlEuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dtRUtZcWluTE5Oc0hTTEhDRjdmR0FsUmlaUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0dST05FWFQvT1pyUHh1V2FDX1FPRFZC WmJDWHdONUhIRS1zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQFoEAwDQYJKoZIhvcNAQELBQADggEBAH+s6gcWECH71QiZYArIgzawi2TuGOH0 lpAAUI8vwpatGFAHDY1i8a6KGz+f/Yqs3U/I8CBe28+soE7C47w/3zOenInHyNPJ +Li7TqgIbijYWCUkbTPx1Ey1cnbCYpUNopmzGeE5NkXa5Mm1xOIHF9GBlwzYhpMk o47Bi7F7kpB35tWOwC99Yp2tkzkaM7YkdDwUH7bA2jX59JN+C1GEna6ZHXsklDPH 3fA8QFdx212mnEWrYq28zkC9EB7cwK54jwqw/UQDBIvjNPq1kXOL4CK6juqsFLvu n6NYWi66rHTjncv3BICqnQkR6LDo6CfePhfTf63w0lFEqfR6tpw7xaY= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:51 2024 by rpki-client on console-fra.rpki-client.org