$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/cm6ueeL1yQjgecK1y6JTSuWYETk.roa File: cm6ueeL1yQjgecK1y6JTSuWYETk.roa (raw, json) Hash identifier: 0aDwXDOU51TOd7z6EW1hT/Nt8wbnkQayAprWuz9/fjA= Subject key identifier: 72:6E:AE:79:E2:F5:C9:08:E0:79:C2:B5:CB:A2:53:4A:E5:98:11:39 Certificate issuer: /CN=1A610A62A8A72CD36C1D22C7085EDF1809518994 Certificate serial: 08AB Authority key identifier: 1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/cm6ueeL1yQjgecK1y6JTSuWYETk.roa Signing time: Fri 01 Sep 2023 08:54:30 +0000 ROA not before: Fri 01 Sep 2023 08:54:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131667 IP address blocks: 2405:a040::/32 maxlen: 36 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A610A62A8A72CD36C1D22C7085EDF1809518994 Validity Not Before: Sep 1 08:54:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=726EAE79E2F5C908E079C2B5CBA2534AE5981139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:0d:fd:e9:82:79:30:d8:4d:e1:9b:6d:dc: a5:6f:35:72:50:db:58:e9:26:21:6e:09:3c:1a:33: 16:1c:9e:c6:fa:2f:dd:aa:1b:b6:eb:0e:ad:e5:d3: eb:0c:c0:22:ec:3d:65:39:e5:60:39:56:0c:1b:9b: 7b:78:6d:cb:06:ad:4f:e3:28:b8:08:33:1b:43:54: de:9f:9d:b8:ff:05:d0:8d:fd:de:7e:de:b0:b3:0b: 05:4d:13:df:40:05:f7:34:f9:2c:1d:bc:a3:93:6f: 98:52:54:45:29:24:73:42:21:0d:5f:0b:6f:8f:3a: c4:b9:56:e9:58:dc:f8:dc:1d:8c:94:38:57:66:dc: 52:68:57:b0:f8:69:95:a2:99:a8:84:82:ba:f1:0d: 74:09:42:82:53:fd:18:aa:9b:eb:df:68:12:83:0b: 52:d4:72:a5:df:79:93:a0:f7:f4:91:8c:c2:68:06: 02:0e:0c:f5:f4:66:d9:c4:8e:24:d8:25:19:bb:2b: 39:e3:a1:f7:4d:82:9a:64:9e:52:a7:97:13:f7:66: 96:50:c8:5f:bd:00:6e:fb:cb:ab:a4:d3:e4:3f:aa: 38:04:eb:c1:85:36:a5:d0:19:07:95:7c:d7:94:18: 24:02:b7:b7:31:b2:bc:db:56:9e:5c:7f:1b:87:05: 86:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6E:AE:79:E2:F5:C9:08:E0:79:C2:B5:CB:A2:53:4A:E5:98:11:39 X509v3 Authority Key Identifier: keyid:1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/cm6ueeL1yQjgecK1y6JTSuWYETk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:a040::/32 Signature Algorithm: sha256WithRSAEncryption 9b:ff:58:27:f5:d6:16:95:60:a6:e5:8f:f2:5d:b9:c1:5b:29: d3:29:f8:97:6c:eb:10:89:3d:61:19:51:3b:6e:e9:e5:d9:25: 93:fe:35:ac:dc:cc:b8:80:63:13:76:bc:24:59:27:2a:eb:3b: a2:ef:5a:db:53:a2:23:a4:b4:81:dd:a4:6e:58:43:03:12:1e: cf:cd:7b:51:b2:eb:a5:aa:ec:0a:ca:c4:2d:c1:bc:a3:37:86: 1a:93:c6:7c:f6:ad:bd:19:d7:c6:5e:55:1c:95:6f:92:78:f9: 6f:cc:b1:88:c8:bd:61:cc:93:94:fd:1c:3d:e1:ae:a7:d5:e5: c8:a3:22:9e:b3:9f:48:10:d8:d5:f7:fc:c5:80:6e:57:25:30: 1e:77:18:27:e6:79:9b:60:c7:46:56:04:3a:e9:b5:e8:6c:b8: 16:5b:56:0a:2d:de:87:bd:68:32:ca:af:ac:02:36:da:0b:16: b3:d2:d4:7e:2b:29:1e:65:d7:1c:fb:c3:60:3d:83:26:73:bd: b7:48:0c:d6:02:57:1c:e1:67:e7:4d:e2:69:98:1f:8c:ef:0c: da:d6:0d:5b:78:5b:ef:fa:6b:ec:64:18:95:ac:23:2f:fa:0c: c7:49:67:7e:e7:7a:30:b4:90:aa:01:29:68:cd:8e:ea:e0:73: 9d:0f:49:9f -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICCKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUE2 MTBBNjJBOEE3MkNEMzZDMUQyMkM3MDg1RURGMTgwOTUxODk5NDAeFw0yMzA5MDEw ODU0MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcyNkVBRTc5RTJGNUM5 MDhFMDc5QzJCNUNCQTI1MzRBRTU5ODExMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcOw396YJ5MNhN4Ztt3KVvNXJQ21jpJiFuCTwaMxYcnsb6L92q G7brDq3l0+sMwCLsPWU55WA5Vgwbm3t4bcsGrU/jKLgIMxtDVN6fnbj/BdCN/d5+ 3rCzCwVNE99ABfc0+SwdvKOTb5hSVEUpJHNCIQ1fC2+POsS5VulY3PjcHYyUOFdm 3FJoV7D4aZWimaiEgrrxDXQJQoJT/Riqm+vfaBKDC1LUcqXfeZOg9/SRjMJoBgIO DPX0ZtnEjiTYJRm7KznjofdNgppknlKnlxP3ZpZQyF+9AG77y6uk0+Q/qjgE68GF NqXQGQeVfNeUGCQCt7cxsrzbVp5cfxuHBYZdAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUcm6ueeL1yQjgecK1y6JTSuWYETkwHwYDVR0jBBgwFoAUGmEKYqinLNNsHSLH CF7fGAlRiZQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1JPTkVY VC9HbUVLWXFpbkxOTnNIU0xIQ0Y3ZkdBbFJpWlEuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dtRUtZcWluTE5Oc0hTTEhDRjdmR0FsUmlaUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0dST05FWFQvY202dWVlTDF5UWpnZWNL MXk2SlRTdVdZRVRrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQFoEAwDQYJKoZIhvcNAQELBQADggEBAJv/WCf11haVYKblj/JducFbKdMp+Jds 6xCJPWEZUTtu6eXZJZP+NazczLiAYxN2vCRZJyrrO6LvWttToiOktIHdpG5YQwMS Hs/Ne1Gy66Wq7ArKxC3BvKM3hhqTxnz2rb0Z18ZeVRyVb5J4+W/MsYjIvWHMk5T9 HD3hrqfV5cijIp6zn0gQ2NX3/MWAblclMB53GCfmeZtgx0ZWBDrptehsuBZbVgot 3oe9aDLKr6wCNtoLFrPS1H4rKR5l1xz7w2A9gyZzvbdIDNYCVxzhZ+dN4mmYH4zv DNrWDVt4W+/6a+xkGJWsIy/6DMdJZ37nejC0kKoBKWjNjurgc50PSZ8= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:44 2024 by rpki-client on console-ams.rpki-client.org