$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/ZKaKFLxsl3fp-hJmPkyyLEfHmho.roa File: ZKaKFLxsl3fp-hJmPkyyLEfHmho.roa (raw, json) Hash identifier: wZXJKLzdX/BLbrBNI4/w+8+Ti99IbYvkOOcAa/kpewM= Subject key identifier: 64:A6:8A:14:BC:6C:97:77:E9:FA:12:66:3E:4C:B2:2C:47:C7:9A:1A Certificate issuer: /CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42 Certificate serial: 0103 Authority key identifier: CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/ZKaKFLxsl3fp-hJmPkyyLEfHmho.roa Signing time: Mon 23 Sep 2024 05:22:22 +0000 ROA not before: Mon 23 Sep 2024 05:22:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 2401:39a0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42 Validity Not Before: Sep 23 05:22:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=64A68A14BC6C9777E9FA12663E4CB22C47C79A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:48:9e:38:90:b7:ca:4a:48:0b:dd:6d:65: a3:f9:e8:8b:d6:2b:86:6a:8f:42:32:96:79:ba:01: 7f:4a:33:16:16:a2:dc:0b:52:f7:bc:b7:e6:a0:15: 7d:ff:1e:6b:a5:4a:87:8a:9d:b3:1d:aa:57:e8:d7: ae:a1:e7:79:b2:4a:a2:79:6b:a8:04:a5:b5:9f:5e: 75:fd:67:d1:32:f8:d0:cd:55:f9:1e:7a:7c:de:8b: 42:4e:a2:08:16:03:b7:21:41:8c:c9:7f:90:6c:e5: fc:d1:31:e2:33:7f:67:88:c8:b7:93:f5:af:ab:a4: 89:33:a5:9e:76:a1:1f:df:5d:e9:7e:2f:3c:9e:b8: 3e:49:2f:b3:3c:eb:61:00:ec:a8:2d:1f:99:91:d7: 26:b5:46:5a:c2:02:76:e0:9f:f5:e7:a3:7c:c7:41: be:a2:2a:e0:ae:b3:72:96:ce:9b:6c:8f:b9:f7:e0: b3:73:6e:c7:aa:94:a4:fb:b1:35:1c:74:65:32:43: 65:fc:32:78:f2:78:63:8b:df:26:d4:a2:f5:76:85: 2b:58:a9:ea:6c:6d:21:45:39:a5:a0:01:13:00:6d: 4d:56:3a:e7:a2:17:58:bd:71:04:62:91:1e:02:f3: 87:8f:a5:44:18:01:5b:d3:24:89:65:db:44:8d:02: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A6:8A:14:BC:6C:97:77:E9:FA:12:66:3E:4C:B2:2C:47:C7:9A:1A X509v3 Authority Key Identifier: keyid:CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/ZKaKFLxsl3fp-hJmPkyyLEfHmho.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:39a0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:bf:b6:24:2f:ce:7f:95:85:ae:9d:30:c8:d5:db:55:0c:56: 3f:ca:1b:69:b7:09:49:e4:25:e4:60:07:96:34:c8:27:0d:78: 6b:dc:00:5d:8d:5e:f7:58:c1:39:47:0a:58:3e:f9:ab:32:5d: 02:c9:36:89:5a:43:00:54:ec:e1:21:d0:ef:49:f6:1f:44:1a: fd:8a:5e:b9:c7:8f:14:49:fd:39:0b:24:4f:6f:1b:aa:f9:99: 18:f1:b2:c8:b6:0a:f6:b3:41:3c:a4:c4:a5:1d:47:61:ee:f4: cf:73:9a:c7:1a:4a:98:27:aa:a4:a3:c6:19:62:25:86:73:b7: 63:ae:6d:4a:cd:03:0e:9d:06:3c:92:92:99:19:63:ee:ab:b0: 3d:9a:05:0c:84:b7:71:43:c9:c6:bf:ca:41:e4:fb:3f:e0:66: f8:6b:ff:a3:b2:97:60:c3:0a:86:df:90:57:bc:e2:e9:67:1a: 78:f0:83:b7:f3:2a:30:7c:06:6a:1f:63:4d:65:57:d0:cd:0f: cc:c9:5e:a3:4f:c2:65:e1:eb:10:48:7e:e3:bf:05:3f:1e:05: 5e:7f:60:cf:cb:d1:e8:0b:99:07:df:3b:0c:02:ca:7c:9e:08: b6:d3:ff:27:b7:51:c7:e8:1b:6f:24:e4:31:86:8a:bb:d9:4d: c2:c7:9a:5c -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FB ODQwNUNCRDhDRTZBRTFFQTNBOURBQTY3Nzk3NTZFQzZFREM0MjAeFw0yNDA5MjMw NTIyMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0QTY4QTE0QkM2Qzk3 NzdFOUZBMTI2NjNFNENCMjJDNDdDNzlBMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMJ0ieOJC3ykpIC91tZaP56IvWK4Zqj0Iylnm6AX9KMxYWotwL Uve8t+agFX3/HmulSoeKnbMdqlfo166h53mySqJ5a6gEpbWfXnX9Z9Ey+NDNVfke enzei0JOoggWA7chQYzJf5Bs5fzRMeIzf2eIyLeT9a+rpIkzpZ52oR/fXel+Lzye uD5JL7M862EA7KgtH5mR1ya1RlrCAnbgn/Xno3zHQb6iKuCus3KWzptsj7n34LNz bseqlKT7sTUcdGUyQ2X8MnjyeGOL3ybUovV2hStYqepsbSFFOaWgARMAbU1WOuei F1i9cQRikR4C84ePpUQYAVvTJIll20SNAlhXAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUZKaKFLxsl3fp+hJmPkyyLEfHmhowHwYDVR0jBBgwFoAUyqhAXL2M5q4eo6na pneXVuxu3EIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFVBTkdE RVhJQS95cWhBWEwyTTVxNGVvNm5hcG5lWFZ1eHUzRUkuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL3lxaEFYTDJNNXE0ZW82bmFwbmVYVnV4dTNFSS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hVQU5HREVYSUEvWkthS0ZMeHNs M2ZwLWhKbVBreXlMRWZIbWhvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQBOaAwDQYJKoZIhvcNAQELBQADggEBAA6/tiQvzn+Vha6dMMjV21UM Vj/KG2m3CUnkJeRgB5Y0yCcNeGvcAF2NXvdYwTlHClg++asyXQLJNolaQwBU7OEh 0O9J9h9EGv2KXrnHjxRJ/TkLJE9vG6r5mRjxssi2CvazQTykxKUdR2Hu9M9zmsca SpgnqqSjxhliJYZzt2OubUrNAw6dBjySkpkZY+6rsD2aBQyEt3FDyca/ykHk+z/g Zvhr/6Oyl2DDCobfkFe84ulnGnjwg7fzKjB8BmofY01lV9DND8zJXqNPwmXh6xBI fuO/BT8eBV5/YM/L0egLmQffOwwCynyeCLbT/ye3UcfoG28k5DGGirvZTcLHmlw= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:08 2024 by rpki-client on console-ams.rpki-client.org