$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/0dRALIpK4HmN5-Sr1TedNUwRFxg.roa File: 0dRALIpK4HmN5-Sr1TedNUwRFxg.roa (raw, json) Hash identifier: 0PTnxefQL3HxVYRTbk1CKte3YQIKvxrTwkR9nVW9Tis= Subject key identifier: D1:D4:40:2C:8A:4A:E0:79:8D:E7:E4:AB:D5:37:9D:35:4C:11:17:18 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 06D2 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/0dRALIpK4HmN5-Sr1TedNUwRFxg.roa Signing time: Mon 26 Aug 2024 05:18:30 +0000 ROA not before: Mon 26 Aug 2024 05:18:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131657 IP address blocks: 2406:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 26 05:18:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D1D4402C8A4AE0798DE7E4ABD5379D354C111718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:f4:8c:bb:53:97:73:63:37:d8:a4:33:dd: 94:d3:41:00:c9:8b:f6:9b:f9:07:2e:9f:78:d1:b5: 49:3d:b3:93:e3:08:f2:fb:3b:19:97:00:0f:e3:33: 94:ec:f6:31:33:c9:30:1e:07:55:e3:b0:27:d9:cd: 14:d2:ea:c2:d2:13:db:0a:40:fe:45:9c:4c:b2:06: ab:87:45:4d:45:a1:48:0c:c0:b7:6f:7b:f5:7e:af: 48:16:b9:5d:05:b4:ad:1d:bd:2f:52:6c:07:f7:5f: 83:94:9d:fc:c4:67:b0:dd:4b:b5:8b:39:a8:c0:01: 58:35:00:4b:6a:0a:87:56:a8:8c:81:92:b8:df:fc: e1:aa:6f:48:b7:0b:e5:91:a2:1e:2b:03:d7:1f:32: ea:b8:51:0b:f1:cd:59:3f:d2:4c:6e:9d:73:54:29: d6:f3:d9:97:2e:d7:d5:42:f7:29:96:8e:5f:f5:3e: b5:57:19:1c:c4:4b:af:96:ce:b1:f6:02:0f:40:77: 42:1a:4a:31:3d:f4:94:69:bf:35:d0:f6:1c:f3:26: fc:af:54:82:6d:13:66:89:5d:50:5d:22:a2:a3:7c: 88:7d:41:97:cb:42:ef:f5:52:54:ea:6b:7e:7e:17: e9:de:83:5a:ec:1e:6f:bc:12:ee:15:59:d5:e1:de: c2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D4:40:2C:8A:4A:E0:79:8D:E7:E4:AB:D5:37:9D:35:4C:11:17:18 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/0dRALIpK4HmN5-Sr1TedNUwRFxg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 4e:e6:7a:c5:2b:9f:5f:3e:b1:d1:bc:8c:db:ff:85:a1:27:66: 97:6c:7b:0c:1b:d5:c3:01:b5:2a:1a:d0:3d:1d:a1:22:ea:19: 91:80:13:f7:fb:ca:64:8d:7e:6b:db:6f:fa:d7:e9:6a:7a:b0: c2:6a:8f:ea:45:b1:59:b0:6f:1e:8d:af:73:38:fa:3c:61:80: 54:09:2b:90:b5:62:62:4c:a0:1d:3c:8a:31:44:bf:6b:36:43: 18:15:ad:44:36:77:e0:6a:cf:97:f0:27:07:7d:4d:ea:9f:e1: 76:f6:9c:ff:6d:ce:ce:09:de:81:1b:44:b3:68:a3:ba:d3:71: 30:96:9a:61:eb:30:55:8a:a9:19:e6:5c:d2:81:d3:21:68:ea: 07:0a:0c:76:2b:cd:2f:25:36:e5:98:be:0f:3a:01:f1:16:a5: 48:85:a9:27:96:fd:c1:57:b0:bc:a4:fb:2c:ed:b4:9c:32:a0: cf:23:a8:e7:c7:c6:70:d1:ef:e0:f4:9a:cb:d5:ff:f8:80:ca: 8d:31:31:c5:3a:93:a5:ba:65:ca:5e:c7:d4:8d:cc:36:e2:b8: dd:ce:85:d2:40:38:7d:61:9b:0c:03:52:ab:e8:70:59:0a:b0: 76:6b:c8:6c:a3:71:1a:bd:57:13:67:e6:62:a1:d3:1d:2a:f7: 1e:d3:a0:38 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNDA4MjYw NTE4MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQxRDQ0MDJDOEE0QUUw Nzk4REU3RTRBQkQ1Mzc5RDM1NEMxMTE3MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNv/SMu1OXc2M32KQz3ZTTQQDJi/ab+Qcun3jRtUk9s5PjCPL7 OxmXAA/jM5Ts9jEzyTAeB1XjsCfZzRTS6sLSE9sKQP5FnEyyBquHRU1FoUgMwLdv e/V+r0gWuV0FtK0dvS9SbAf3X4OUnfzEZ7DdS7WLOajAAVg1AEtqCodWqIyBkrjf /OGqb0i3C+WRoh4rA9cfMuq4UQvxzVk/0kxunXNUKdbz2Zcu19VC9ymWjl/1PrVX GRzES6+WzrH2Ag9Ad0IaSjE99JRpvzXQ9hzzJvyvVIJtE2aJXVBdIqKjfIh9QZfL Qu/1UlTqa35+F+neg1rsHm+8Eu4VWdXh3sLPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU0dRALIpK4HmN5+Sr1TedNUwRFxgwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLzBkUkFMSXBLNEhtTjUtU3Ix VGVkTlV3UkZ4Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BkjAAAAwDQYJKoZIhvcNAQELBQADggEBAE7mesUrn18+sdG8jNv/haEnZpdsewwb 1cMBtSoa0D0doSLqGZGAE/f7ymSNfmvbb/rX6Wp6sMJqj+pFsVmwbx6Nr3M4+jxh gFQJK5C1YmJMoB08ijFEv2s2QxgVrUQ2d+Bqz5fwJwd9Teqf4Xb2nP9tzs4J3oEb RLNoo7rTcTCWmmHrMFWKqRnmXNKB0yFo6gcKDHYrzS8lNuWYvg86AfEWpUiFqSeW /cFXsLyk+yzttJwyoM8jqOfHxnDR7+D0msvV//iAyo0xMcU6k6W6Zcpex9SNzDbi uN3OhdJAOH1hmwwDUqvocFkKsHZryGyjcRq9VxNn5mKh0x0q9x7ToDg= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:32 2024 by rpki-client on console-ams.rpki-client.org