$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/skbOegMCvEECPNkLj6hqpjcsTzw.roa File: skbOegMCvEECPNkLj6hqpjcsTzw.roa (raw, json) Hash identifier: UbRw9Z2UZ0talRPh3atdD7QTsqkqtLq4iXfnmeUPxT8= Subject key identifier: B2:46:CE:7A:03:02:BC:41:02:3C:D9:0B:8F:A8:6A:A6:37:2C:4F:3C Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73 Certificate serial: 06C0 Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/skbOegMCvEECPNkLj6hqpjcsTzw.roa Signing time: Mon 26 Aug 2024 05:18:26 +0000 ROA not before: Mon 26 Aug 2024 05:18:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 134823 IP address blocks: 2406:48c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 11:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1728 (0x6c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73 Validity Not Before: Aug 26 05:18:26 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B246CE7A0302BC41023CD90B8FA86AA6372C4F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:f6:97:b6:3e:f0:ba:95:19:be:7e:e3:a8: e9:b0:06:72:d7:6e:cc:aa:6d:3a:27:b1:fa:c7:3d: d2:51:c2:6a:8d:26:2e:df:14:21:e8:a3:e3:ba:08: 2b:d4:c5:07:76:fa:0d:14:31:d6:2e:2c:44:00:2c: 89:a0:71:8a:08:0f:79:8d:5f:3b:00:3f:3d:cc:87: 61:a0:e7:0a:42:8b:76:01:d1:0e:b5:e8:e3:62:ce: 2a:89:d2:96:dc:1f:4b:af:04:90:f4:8b:0c:ee:43: 54:2a:ca:56:09:0b:17:30:89:f5:24:fe:be:6e:43: bb:8d:d6:9e:ef:7b:aa:11:a9:ce:ab:e5:3e:f1:3f: e5:6d:5d:1d:32:62:48:3b:55:98:2e:bf:5e:21:3d: 61:ab:db:0c:bc:61:84:09:da:16:0f:76:54:5f:71: 78:44:c6:16:f9:e4:1e:75:ed:d1:63:e9:aa:62:ac: 21:3f:b8:6c:d0:9f:11:71:30:b0:ce:a2:d2:c1:ea: 59:7a:54:a4:07:24:42:a8:ba:02:a7:22:c3:6f:d3: a5:73:56:03:09:91:61:7a:57:02:fb:80:13:aa:e6: bc:5a:4a:ca:73:c8:b6:c7:54:91:22:39:af:25:5f: d1:fa:8b:fe:99:ae:69:74:7d:f9:8c:8d:25:03:33: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:46:CE:7A:03:02:BC:41:02:3C:D9:0B:8F:A8:6A:A6:37:2C:4F:3C X509v3 Authority Key Identifier: keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/skbOegMCvEECPNkLj6hqpjcsTzw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 67:07:d5:05:7b:53:8d:63:6d:ac:44:a2:ec:ef:07:51:fb:ed: 29:8f:03:43:f3:f9:b4:d8:92:f9:49:44:c2:64:64:3b:02:8f: e5:07:78:bd:f7:82:e4:29:69:66:78:d3:66:69:32:93:e2:4d: cc:17:fa:05:05:80:86:39:4b:88:18:ec:c4:6b:75:6a:bd:24: 80:a2:07:91:77:96:60:a5:4e:89:25:72:dc:49:e9:a8:e0:3b: 2f:39:c2:2f:88:f9:7c:77:4a:80:12:f9:48:20:78:ba:6d:28: fb:25:4c:84:58:61:74:69:7b:b2:96:14:b8:55:94:a5:a9:76: 65:c0:f1:5e:f0:53:0d:6f:39:4e:98:20:44:a0:4f:b4:ec:37: 9b:67:74:ba:57:46:f5:3e:f3:57:0f:39:37:6d:81:c7:03:ad: 4b:9c:29:fe:78:00:63:d5:85:ef:b4:91:e2:66:4d:e5:73:7f: 91:88:51:66:29:f0:c7:8d:66:28:43:7a:09:4f:1d:86:e3:bf: d3:4c:bd:81:49:0f:5e:d9:35:3d:08:f9:04:a5:dd:ce:3d:af: e2:01:3f:0e:e0:7d:76:dc:6f:0b:8e:5f:9f:8f:78:51:87:49: 5a:55:a9:80:91:1d:49:6f:91:50:95:43:0a:22:fd:6c:f3:32: 9e:de:df:8d -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3 REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNDA4MjYw NTE4MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyNDZDRTdBMDMwMkJD NDEwMjNDRDkwQjhGQTg2QUE2MzcyQzRGM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Z/aXtj7wupUZvn7jqOmwBnLXbsyqbTonsfrHPdJRwmqNJi7f FCHoo+O6CCvUxQd2+g0UMdYuLEQALImgcYoID3mNXzsAPz3Mh2Gg5wpCi3YB0Q61 6ONiziqJ0pbcH0uvBJD0iwzuQ1QqylYJCxcwifUk/r5uQ7uN1p7ve6oRqc6r5T7x P+VtXR0yYkg7VZguv14hPWGr2wy8YYQJ2hYPdlRfcXhExhb55B517dFj6apirCE/ uGzQnxFxMLDOotLB6ll6VKQHJEKougKnIsNv06VzVgMJkWF6VwL7gBOq5rxaSspz yLbHVJEiOa8lX9H6i/6Zrml0ffmMjSUDMxvhAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUskbOegMCvEECPNkLj6hqpjcsTzwwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL3NrYk9lZ01DdkVFQ1BOa0xq NmhxcGpjc1R6dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk BkjAMA0GCSqGSIb3DQEBCwUAA4IBAQBnB9UFe1ONY22sRKLs7wdR++0pjwND8/m0 2JL5SUTCZGQ7Ao/lB3i994LkKWlmeNNmaTKT4k3MF/oFBYCGOUuIGOzEa3VqvSSA ogeRd5ZgpU6JJXLcSemo4DsvOcIviPl8d0qAEvlIIHi6bSj7JUyEWGF0aXuylhS4 VZSlqXZlwPFe8FMNbzlOmCBEoE+07DebZ3S6V0b1PvNXDzk3bYHHA61LnCn+eABj 1YXvtJHiZk3lc3+RiFFmKfDHjWYoQ3oJTx2G47/TTL2BSQ9e2TU9CPkEpd3OPa/i AT8O4H123G8Ljl+fj3hRh0laVamAkR1Jb5FQlUMKIv1s8zKe3t+N -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:33 2024 by rpki-client on console-ams.rpki-client.org