$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa File: iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa (raw, json) Hash identifier: gcK7vHMcWl1akgykNS4OEN8/D7a9aEmD+Dq/WrnLjl0= Subject key identifier: 89:16:60:CD:07:D3:68:D8:F4:CF:E0:5B:52:56:FF:68:20:3C:40:D4 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 056D Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa Signing time: Fri 01 Sep 2023 08:59:47 +0000 ROA not before: Fri 01 Sep 2023 08:59:47 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 20473 IP address blocks: 2406:48c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 09:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1389 (0x56d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Sep 1 08:59:47 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=891660CD07D368D8F4CFE05B5256FF68203C40D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8a:01:1d:62:06:60:3c:27:28:01:4b:95:b8: 1e:68:51:1e:11:5f:98:70:ff:99:f1:4f:ff:44:55: 05:0c:05:79:62:c0:48:25:3d:ec:a3:39:f8:b4:dc: d9:27:53:a3:58:47:26:5b:e4:3f:ff:26:40:57:9f: 09:da:fa:8d:23:55:23:be:a5:4d:9c:07:71:23:c6: f7:d9:43:85:6a:92:49:35:df:14:09:29:77:20:22: 70:80:c0:11:20:5c:48:19:71:f2:fb:4e:bb:50:8a: 5e:4c:5e:6f:f5:70:47:de:a0:f1:b4:e9:6b:00:3f: d0:40:5c:14:9c:ac:e9:c5:a4:c4:f5:b6:47:91:10: 95:59:35:7f:50:3f:e8:b6:88:16:d0:86:21:8f:db: ed:86:71:d1:d4:37:4f:1f:07:41:04:98:81:2e:7f: 02:ea:33:b5:00:e2:93:ef:bd:d9:b1:84:3c:9f:7e: 23:26:03:e0:39:7c:b0:60:92:0d:f2:52:e4:d9:f9: be:7a:f8:b2:dd:96:32:49:a4:6f:07:b7:5c:f2:d9: 8f:3e:da:61:34:44:47:84:20:b3:c9:6e:a3:b1:ea: de:82:38:4e:e7:e1:86:82:da:d1:ec:56:2f:c3:8a: 52:66:b3:66:3d:c2:19:e9:dd:a6:c5:ab:03:52:81: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:16:60:CD:07:D3:68:D8:F4:CF:E0:5B:52:56:FF:68:20:3C:40:D4 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/iRZgzQfTaNj0z-BbUlb_aCA8QNQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:6a:44:5b:76:9d:ba:e9:ef:0f:db:0d:bb:51:66:99:e5:8d: 51:d7:c5:39:99:0e:1f:d5:2f:ec:bb:30:97:e1:09:08:28:89: aa:b6:84:b5:9b:87:0a:6d:e8:29:9c:fc:e4:0d:80:66:61:16: 99:b0:33:65:42:d5:c5:b9:30:74:1a:31:26:5d:a1:60:5b:69: f2:9f:e8:65:27:e6:1a:7b:c4:e7:6c:b4:60:3b:12:64:33:ed: 0a:1a:bb:f1:da:f7:dc:5e:12:15:0c:93:7e:5d:7a:d3:6f:90: fb:75:25:ac:a8:07:36:5c:33:97:fc:59:92:22:dc:f2:0d:a6: d5:53:d5:9e:40:68:a4:0d:73:07:4d:2b:70:35:e1:cd:25:e8: 2c:3c:9e:32:c4:40:b4:8a:8f:c5:03:92:ae:05:d3:7e:cf:fe: 11:c0:57:1f:da:fe:c0:45:67:3a:ea:62:82:d6:62:eb:6c:b9: dc:43:6f:19:97:77:21:13:08:e5:3f:0b:2a:13:b4:77:90:3c: d2:f0:d1:2b:20:6a:f2:7c:1d:12:c0:45:e8:b3:ed:90:2c:88: 72:da:f3:b1:7b:31:0e:f1:dc:78:ec:2b:7d:88:85:5e:2c:6d: c4:38:06:f8:78:45:46:96:b8:94:9c:d5:2e:f5:5b:0e:5a:43: 21:f1:d7:4c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzA5MDEw ODU5NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg5MTY2MENEMDdEMzY4 RDhGNENGRTA1QjUyNTZGRjY4MjAzQzQwRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjigEdYgZgPCcoAUuVuB5oUR4RX5hw/5nxT/9EVQUMBXliwEgl PeyjOfi03NknU6NYRyZb5D//JkBXnwna+o0jVSO+pU2cB3EjxvfZQ4Vqkkk13xQJ KXcgInCAwBEgXEgZcfL7TrtQil5MXm/1cEfeoPG06WsAP9BAXBScrOnFpMT1tkeR EJVZNX9QP+i2iBbQhiGP2+2GcdHUN08fB0EEmIEufwLqM7UA4pPvvdmxhDyffiMm A+A5fLBgkg3yUuTZ+b56+LLdljJJpG8Ht1zy2Y8+2mE0REeEILPJbqOx6t6COE7n 4YaC2tHsVi/DilJms2Y9whnp3abFqwNSgYqDAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUiRZgzQfTaNj0z+BbUlb/aCA8QNQwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL2lSWmd6UWZUYU5qMHotQmJV bGJfYUNBOFFOUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BkjAMA0GCSqGSIb3DQEBCwUAA4IBAQB7akRbdp266e8P2w27UWaZ5Y1R18U5mQ4f 1S/suzCX4QkIKImqtoS1m4cKbegpnPzkDYBmYRaZsDNlQtXFuTB0GjEmXaFgW2ny n+hlJ+Yae8TnbLRgOxJkM+0KGrvx2vfcXhIVDJN+XXrTb5D7dSWsqAc2XDOX/FmS ItzyDabVU9WeQGikDXMHTStwNeHNJegsPJ4yxEC0io/FA5KuBdN+z/4RwFcf2v7A RWc66mKC1mLrbLncQ28Zl3chEwjlPwsqE7R3kDzS8NErIGryfB0SwEXos+2QLIhy 2vOxezEO8dx47Ct9iIVeLG3EOAb4eEVGlriUnNUu9VsOWkMh8ddM -----END CERTIFICATE-----Generated at Mon May 6 01:02:47 2024 by rpki-client on console-ams.rpki-client.org