$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/lzuCs6TKsS_EbjraDzg7I_Li3vM.roa File: lzuCs6TKsS_EbjraDzg7I_Li3vM.roa (raw, json) Hash identifier: yu31k4BWNziN4uwA5b1kfwTeF03clQVPfGAAXPFkE5I= Subject key identifier: 97:3B:82:B3:A4:CA:B1:2F:C4:6E:3A:DA:0F:38:3B:23:F2:E2:DE:F3 Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 0571 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/lzuCs6TKsS_EbjraDzg7I_Li3vM.roa Signing time: Fri 01 Sep 2023 08:59:48 +0000 ROA not before: Fri 01 Sep 2023 08:59:48 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 134823 IP address blocks: 2406:48c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 21:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Sep 1 08:59:48 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=973B82B3A4CAB12FC46E3ADA0F383B23F2E2DEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b5:a0:b1:98:95:5b:62:20:a0:30:31:33:44: 4a:76:1b:9f:74:50:54:e5:ea:26:69:62:75:cd:d2: e5:de:3f:db:58:b5:03:22:e6:d0:d6:7f:19:cf:7e: 86:85:e5:2c:02:a8:70:eb:0b:ab:86:01:5f:9e:1b: d6:cd:3a:20:d3:d4:03:6c:4f:ec:4a:d2:a4:ca:a0: f2:23:6d:70:7e:27:07:03:c8:7e:16:dc:76:0f:35: 81:61:1e:65:91:36:a0:17:bb:aa:cd:22:6e:7e:29: 01:79:37:f6:90:89:7c:55:1e:c2:9e:57:8f:b2:27: 32:51:42:15:d5:46:82:04:39:60:7a:8c:c6:78:6b: 91:91:92:ad:59:9c:ed:e1:35:4e:6d:f1:a8:57:9f: 02:e7:0a:f8:cc:67:7a:05:3a:44:ee:8d:50:2f:2f: 52:73:3b:22:97:66:bb:98:61:ef:e3:a1:77:81:17: 61:6d:95:1d:f5:1b:a8:c4:2e:55:09:1a:1c:66:56: 5c:1c:e8:56:51:17:5b:70:3c:97:44:85:c2:e9:c0: 8a:f7:b4:41:9e:35:b6:b7:f5:76:3e:20:c6:a6:32: ee:a1:0b:5a:53:70:6e:dd:e2:d2:a0:8f:ef:60:e0: dc:73:eb:6b:cd:3c:8f:47:08:ea:f5:57:2e:00:21: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3B:82:B3:A4:CA:B1:2F:C4:6E:3A:DA:0F:38:3B:23:F2:E2:DE:F3 X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/lzuCs6TKsS_EbjraDzg7I_Li3vM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 75:15:bc:74:f3:c2:e8:d6:40:43:1f:c5:ce:b7:26:ea:8f:77: 84:4b:8f:dd:3b:d6:f4:81:8c:72:49:96:7e:8a:ce:10:17:7d: 6c:4b:b8:ab:c1:a5:68:c5:72:4b:aa:f1:5d:fe:6b:45:fe:33: 44:ef:17:63:a9:e7:fb:a0:1c:cd:13:ed:f0:85:cd:1a:37:23: a7:07:a7:2c:83:42:99:29:bb:ea:0f:41:21:dc:f6:5c:ef:0b: cc:29:5c:cd:4d:1a:95:ad:f7:6a:8a:0d:16:7a:6f:b6:b2:19: f4:30:e2:4b:e4:50:e3:2f:c5:b9:24:d1:63:2c:2a:8e:ba:9b: 26:5d:70:28:ba:0a:61:5c:a1:83:51:e1:eb:67:bf:21:dc:ce: 1e:87:7d:d6:93:66:d5:16:92:7f:03:f0:ec:43:74:20:c1:21: d9:b4:1c:9b:44:55:65:09:ba:52:4c:67:85:6c:ce:b4:1c:00: d7:ad:b3:a9:e8:ae:16:ac:f5:56:75:2a:79:4d:78:7d:e3:96: c4:3a:c3:f5:b0:1b:df:1a:06:d5:6e:d5:d6:4e:2e:43:16:40: 47:18:e3:15:4c:ea:90:84:fa:6c:75:6c:2c:77:8a:1b:43:21: b1:7e:49:33:3c:7f:b9:bd:a0:4d:27:22:b7:da:27:c8:9a:50: dc:05:91:cc -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMzA5MDEw ODU5NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk3M0I4MkIzQTRDQUIx MkZDNDZFM0FEQTBGMzgzQjIzRjJFMkRFRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDytaCxmJVbYiCgMDEzREp2G590UFTl6iZpYnXN0uXeP9tYtQMi 5tDWfxnPfoaF5SwCqHDrC6uGAV+eG9bNOiDT1ANsT+xK0qTKoPIjbXB+JwcDyH4W 3HYPNYFhHmWRNqAXu6rNIm5+KQF5N/aQiXxVHsKeV4+yJzJRQhXVRoIEOWB6jMZ4 a5GRkq1ZnO3hNU5t8ahXnwLnCvjMZ3oFOkTujVAvL1JzOyKXZruYYe/joXeBF2Ft lR31G6jELlUJGhxmVlwc6FZRF1twPJdEhcLpwIr3tEGeNba39XY+IMamMu6hC1pT cG7d4tKgj+9g4Nxz62vNPI9HCOr1Vy4AIQojAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUlzuCs6TKsS/EbjraDzg7I/Li3vMwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL2x6dUNzNlRLc1NfRWJqcmFE emc3SV9MaTN2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BkjAMA0GCSqGSIb3DQEBCwUAA4IBAQB1Fbx088Lo1kBDH8XOtybqj3eES4/dO9b0 gYxySZZ+is4QF31sS7irwaVoxXJLqvFd/mtF/jNE7xdjqef7oBzNE+3whc0aNyOn B6csg0KZKbvqD0Eh3PZc7wvMKVzNTRqVrfdqig0Wem+2shn0MOJL5FDjL8W5JNFj LCqOupsmXXAougphXKGDUeHrZ78h3M4eh33Wk2bVFpJ/A/DsQ3QgwSHZtBybRFVl CbpSTGeFbM60HADXrbOp6K4WrPVWdSp5TXh945bEOsP1sBvfGgbVbtXWTi5DFkBH GOMVTOqQhPpsdWwsd4obQyGxfkkzPH+5vaBNJyK32ifImlDcBZHM -----END CERTIFICATE-----Generated at Tue May 7 14:32:35 2024 by rpki-client on console-fra.rpki-client.org