$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/qik-x-JwxJjquicMYVitsr8qciY.roa File: qik-x-JwxJjquicMYVitsr8qciY.roa (raw, json) Hash identifier: dwZlqyJ7P5jCp9o+/bmv2jHni84xDgfo2jW+wHxHYnM= Subject key identifier: AA:29:3E:C7:E2:70:C4:98:EA:BA:27:0C:61:58:AD:B2:BF:2A:72:26 Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C Certificate serial: 0674 Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/qik-x-JwxJjquicMYVitsr8qciY.roa Signing time: Mon 26 Aug 2024 05:18:39 +0000 ROA not before: Mon 26 Aug 2024 05:18:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9678 IP address blocks: 2401:95c0:2d03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C Validity Not Before: Aug 26 05:18:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AA293EC7E270C498EABA270C6158ADB2BF2A7226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:dd:e1:d3:65:b0:9f:a1:07:e2:6d:8e:f9: db:b9:15:06:cd:c4:4a:68:ea:c2:1c:d7:c1:27:5e: 3d:73:fe:59:26:f4:c6:bb:57:d0:ee:8c:18:83:47: d8:6a:8f:50:8d:7e:1a:54:84:ea:0e:48:2d:84:e9: f5:d7:58:c8:44:ea:9a:50:57:ad:bc:1d:d4:ba:59: 98:aa:b7:62:b0:02:ef:ef:7c:09:d5:5f:38:17:33: 5f:40:66:d2:45:20:8d:23:dd:fc:0d:92:85:4e:02: d1:0f:13:05:57:cf:37:a4:de:20:75:c1:6a:15:0c: 77:f8:d7:eb:e1:41:eb:2f:f7:f1:fc:e6:4c:3d:ae: 25:a0:7b:56:e9:3d:5a:48:20:04:06:a5:25:66:20: eb:83:b8:76:df:db:51:5e:b8:c8:2e:89:5b:24:8f: 60:12:f7:be:3c:e9:b4:7c:4d:40:f4:ff:d0:ab:63: 56:c3:6c:2a:47:7e:eb:30:28:fb:b8:05:aa:ae:14: 0f:b6:83:8b:2f:2d:f3:1a:fc:9f:b0:8f:26:47:70: ee:07:f3:62:5f:f1:e7:91:4e:4c:fe:fe:e0:4f:6d: 93:64:c0:88:89:60:ad:7f:cc:db:70:79:04:5e:b2: d9:e6:5a:c8:9b:3e:30:bd:00:b5:83:83:c1:6b:00: d8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:3E:C7:E2:70:C4:98:EA:BA:27:0C:61:58:AD:B2:BF:2A:72:26 X509v3 Authority Key Identifier: keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/qik-x-JwxJjquicMYVitsr8qciY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:95c0:2d03::/48 Signature Algorithm: sha256WithRSAEncryption de:f5:15:8a:e7:87:d8:6f:80:60:e2:69:02:92:a6:3a:35:76: 63:e0:d8:72:ec:a6:f3:62:47:59:37:28:f0:ea:87:21:1a:59: 43:11:d1:4a:e7:bf:c8:bc:6d:da:51:fd:94:5e:24:c7:91:56: 07:f7:74:46:c4:b9:e8:ee:84:fa:11:54:eb:24:25:4b:d6:89: 88:13:d5:ce:8d:ca:0e:2e:b0:1d:6e:af:70:1d:17:39:62:ed: cd:73:fe:73:03:45:fa:f5:9d:a6:64:65:da:06:8a:29:0c:25: 9c:33:3d:d8:44:ca:c5:00:a7:ce:b4:ad:ef:98:83:95:7a:3e: 37:03:34:ff:f3:df:97:b9:fa:5c:f9:d0:60:7b:6b:20:29:a6: ea:80:49:22:d1:1e:67:73:73:79:e1:dc:71:1d:91:1a:ec:21: 9c:7b:35:86:c1:41:b6:f9:cc:67:30:2f:1b:a5:06:7b:b7:b1: f7:fd:6e:19:b5:ff:90:c3:43:a1:36:27:a1:37:3d:73:71:d8: 93:c9:64:ee:9d:33:1d:77:6c:c6:fe:c8:16:b0:38:9e:67:df: 64:51:5e:cc:3d:c0:26:9b:19:49:0e:cf:5f:84:14:44:bd:cd: 12:9f:41:b1:ac:3c:a8:56:13:f3:b6:e8:df:d0:9c:60:c5:12: 36:fb:9b:4b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJF RDI4RkZDQzA0MEUzNjAzMkM0MjYxNTQ5NTU2MkJDQzZFRjQ1QzAeFw0yNDA4MjYw NTE4MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFBMjkzRUM3RTI3MEM0 OThFQUJBMjcwQzYxNThBREIyQkYyQTcyMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCU1t3h02Wwn6EH4m2O+du5FQbNxEpo6sIc18EnXj1z/lkm9Ma7 V9DujBiDR9hqj1CNfhpUhOoOSC2E6fXXWMhE6ppQV628HdS6WZiqt2KwAu/vfAnV XzgXM19AZtJFII0j3fwNkoVOAtEPEwVXzzek3iB1wWoVDHf41+vhQesv9/H85kw9 riWge1bpPVpIIAQGpSVmIOuDuHbf21FeuMguiVskj2AS97486bR8TUD0/9CrY1bD bCpHfuswKPu4BaquFA+2g4svLfMa/J+wjyZHcO4H82Jf8eeRTkz+/uBPbZNkwIiJ YK1/zNtweQRestnmWsibPjC9ALWDg8FrANh1AgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUqik+x+JwxJjquicMYVitsr8qciYwHwYDVR0jBBgwFoAUq+0o/8wEDjYDLEJh VJVWK8xu9FwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElO L3EtMG9fOHdFRGpZRExFSmhWSlZXSzh4dTlGdy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvcS0wb184d0VEallETEVKaFZKVldLOHh1OUZ3LmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9TVElOL3Fpay14LUp3eEpqcXVpY01Z Vml0c3I4cWNpWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk AZXALQMwDQYJKoZIhvcNAQELBQADggEBAN71FYrnh9hvgGDiaQKSpjo1dmPg2HLs pvNiR1k3KPDqhyEaWUMR0Urnv8i8bdpR/ZReJMeRVgf3dEbEuejuhPoRVOskJUvW iYgT1c6Nyg4usB1ur3AdFzli7c1z/nMDRfr1naZkZdoGiikMJZwzPdhEysUAp860 re+Yg5V6PjcDNP/z35e5+lz50GB7ayAppuqASSLRHmdzc3nh3HEdkRrsIZx7NYbB Qbb5zGcwLxulBnu3sff9bhm1/5DDQ6E2J6E3PXNx2JPJZO6dMx13bMb+yBawOJ5n 32RRXsw9wCabGUkOz1+EFES9zRKfQbGsPKhWE/O26N/QnGDFEjb7m0s= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:39 2024 by rpki-client on console-fra.rpki-client.org