$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/WWvd0CdvqrRx2eEIhNwv6FtOeOA.roa File: WWvd0CdvqrRx2eEIhNwv6FtOeOA.roa (raw, json) Hash identifier: S2dhXj/Ni55/AQqwJBx8LWucPrw94D0x9cRkhOLACWM= Subject key identifier: 59:6B:DD:D0:27:6F:AA:B4:71:D9:E1:08:84:DC:2F:E8:5B:4E:78:E0 Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 056B Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/WWvd0CdvqrRx2eEIhNwv6FtOeOA.roa Signing time: Fri 01 Sep 2023 09:00:33 +0000 ROA not before: Fri 01 Sep 2023 09:00:33 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 206729 IP address blocks: 2401:95c0:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Sep 1 09:00:33 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=596BDDD0276FAAB471D9E10884DC2FE85B4E78E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:41:c1:a7:4f:bb:26:3a:00:3e:5c:8b:4e: e8:c7:42:92:55:8c:b3:99:e4:5a:c4:ef:f1:f1:3e: fb:58:e4:74:2f:42:fb:ab:0c:72:fb:ec:29:68:7e: 9f:aa:ee:6b:16:36:ca:a9:bc:4c:a4:db:6a:28:50: 6c:41:84:83:36:77:c8:44:2e:88:f7:39:16:1b:68: ed:d7:ac:32:61:e0:f5:35:7e:e5:1f:97:ce:d0:13: 48:a8:2d:0a:c9:70:d9:3e:66:a2:e8:34:ae:da:40: cc:79:1e:f5:4e:79:93:08:c5:0b:af:a6:7e:5b:43: 1b:30:98:fb:52:fd:89:2f:f1:c5:39:58:1c:ad:18: 10:02:a9:bf:2e:ab:28:04:08:92:ac:8e:fe:57:7f: fc:d0:c2:88:15:49:2c:43:f9:a0:75:a0:f5:67:ed: 67:a3:7e:ee:62:48:1a:1f:52:49:54:58:f9:01:2b: 44:1a:03:63:6b:41:63:c0:a8:5b:29:da:b7:97:dd: 67:62:c1:bf:57:9f:5a:87:3e:26:c3:62:d7:e9:f9: 26:dd:7f:d3:96:05:98:40:4d:8a:28:9b:2a:19:13: cf:d2:f7:cc:7f:c9:98:22:c2:e9:8a:2b:c5:8f:2f: 7b:fc:14:91:3b:06:e4:8d:35:23:80:38:09:e1:8d: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6B:DD:D0:27:6F:AA:B4:71:D9:E1:08:84:DC:2F:E8:5B:4E:78:E0 X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/WWvd0CdvqrRx2eEIhNwv6FtOeOA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:95c0:f001::/48 Signature Algorithm: sha256WithRSAEncryption c5:68:15:1c:dd:a9:12:2c:d9:4d:15:06:81:54:ae:80:90:9e: d2:11:33:a4:78:4f:7c:07:75:da:c2:d9:24:45:94:05:39:ab: 20:32:a2:8d:a4:de:a8:2c:7b:99:be:5e:14:01:ec:3f:59:27: c5:a3:2b:d5:5f:e8:da:3c:6d:bc:ed:c4:d8:ec:d9:0a:3e:e9: e6:69:f6:a9:79:12:17:06:df:46:52:5b:70:a0:4b:09:84:2f: 45:72:c8:81:be:d6:72:76:d6:7c:98:25:94:d4:ef:ca:e7:7c: bf:a7:6f:c4:42:85:68:e3:36:b1:b3:c1:86:db:37:08:ae:e6: 75:53:9d:90:f7:fa:97:b3:d0:26:8b:78:2d:21:e2:15:53:a6: 8b:02:9c:cb:17:39:85:53:7c:0e:f7:83:c5:24:48:15:91:a9: 62:16:ff:da:ab:ea:9d:cf:7b:19:ff:88:98:44:b6:3d:3a:72: 81:a4:bd:86:f1:a3:ce:1d:dc:35:02:80:50:65:d3:f9:a0:aa: b1:8b:1c:e3:79:94:d7:cc:4a:3e:65:df:e9:d4:d1:66:bb:e6: e6:a3:ea:ee:67:f8:64:6d:b9:a9:92:d5:4e:39:db:16:b6:26: 03:ad:b9:5f:e2:36:86:c6:57:29:e6:be:cf:29:ce:ad:70:2b: af:ef:57:14 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBWswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yMzA5MDEw OTAwMzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU5NkJEREQwMjc2RkFB QjQ3MUQ5RTEwODg0REMyRkU4NUI0RTc4RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7NkHBp0+7JjoAPlyLTujHQpJVjLOZ5FrE7/HxPvtY5HQvQvur DHL77Clofp+q7msWNsqpvEyk22ooUGxBhIM2d8hELoj3ORYbaO3XrDJh4PU1fuUf l87QE0ioLQrJcNk+ZqLoNK7aQMx5HvVOeZMIxQuvpn5bQxswmPtS/Ykv8cU5WByt GBACqb8uqygECJKsjv5Xf/zQwogVSSxD+aB1oPVn7Wejfu5iSBofUklUWPkBK0Qa A2NrQWPAqFsp2reX3Wdiwb9Xn1qHPibDYtfp+Sbdf9OWBZhATYoomyoZE8/S98x/ yZgiwumKK8WPL3v8FJE7BuSNNSOAOAnhjU9BAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUWWvd0CdvqrRx2eEIhNwv6FtOeOAwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL1dXdmQwQ2R2cXJSeDJlRUlo Tnd2NkZ0T2VPQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk AZXA8AEwDQYJKoZIhvcNAQELBQADggEBAMVoFRzdqRIs2U0VBoFUroCQntIRM6R4 T3wHddrC2SRFlAU5qyAyoo2k3qgse5m+XhQB7D9ZJ8WjK9Vf6No8bbztxNjs2Qo+ 6eZp9ql5EhcG30ZSW3CgSwmEL0VyyIG+1nJ21nyYJZTU78rnfL+nb8RChWjjNrGz wYbbNwiu5nVTnZD3+pez0CaLeC0h4hVTposCnMsXOYVTfA73g8UkSBWRqWIW/9qr 6p3Pexn/iJhEtj06coGkvYbxo84d3DUCgFBl0/mgqrGLHON5lNfMSj5l3+nU0Wa7 5uaj6u5n+GRtuamS1U452xa2JgOtuV/iNobGVynmvs8pzq1wK6/vVxQ= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:45 2024 by rpki-client on console-ams.rpki-client.org