$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/URekvRchP3pirdy4NJ0H22LZryo.roa File: URekvRchP3pirdy4NJ0H22LZryo.roa (raw, json) Hash identifier: rYYt+u1OAStUNBSs0/8IPi1as7+unGA5QiBhEg/jxIg= Subject key identifier: 51:17:A4:BD:17:21:3F:7A:62:AD:DC:B8:34:9D:07:DB:62:D9:AF:2A Certificate issuer: /CN=6D1243152906B6566A2B3E19CC468E46DE709D04 Certificate serial: F0 Authority key identifier: 6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/URekvRchP3pirdy4NJ0H22LZryo.roa Signing time: Wed 04 Sep 2024 09:16:39 +0000 ROA not before: Wed 04 Sep 2024 09:16:39 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 2401:39e0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1243152906B6566A2B3E19CC468E46DE709D04 Validity Not Before: Sep 4 09:16:39 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5117A4BD17213F7A62ADDCB8349D07DB62D9AF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b8:53:30:57:90:40:24:d5:d1:79:96:25:dd: 65:ff:d4:75:9a:e0:48:b2:d3:70:28:9c:23:16:f3: 73:8e:f3:0e:3b:a6:97:53:8f:11:7d:c1:82:2b:9b: 8c:74:12:c5:96:35:5b:db:e5:ac:af:57:4a:c8:c1: 33:ab:ba:42:16:94:d4:05:22:42:06:13:87:a0:6b: bc:a6:4c:7a:a1:e1:9c:8f:75:27:6d:e8:83:3e:69: 4e:69:07:06:21:67:85:8a:11:e9:47:34:45:19:76: 52:23:cd:66:f5:28:9a:9b:5f:90:85:10:57:1a:f8: f5:26:a9:b2:20:1d:dd:b7:96:6e:3c:8b:ee:1a:66: 98:35:ce:e2:8d:a4:95:dd:5e:de:f6:a5:85:05:82: d1:05:dd:de:8e:67:47:9d:47:72:92:e6:c3:c6:07: f4:6f:93:f5:57:dd:75:c4:e1:4d:9a:07:77:84:37: 40:53:f7:74:9b:4b:89:a6:e9:49:e1:3c:a9:c6:15: 9c:e1:43:f9:3d:df:e2:ab:e3:14:ce:50:7d:63:31: 85:75:02:33:45:18:fa:6c:54:7b:82:e1:4f:24:94: bd:ec:5c:d5:e1:f4:47:33:14:29:fe:25:e2:ca:c4: f2:67:a3:b9:ad:cf:15:e5:66:c1:bb:60:b5:76:b6: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:17:A4:BD:17:21:3F:7A:62:AD:DC:B8:34:9D:07:DB:62:D9:AF:2A X509v3 Authority Key Identifier: keyid:6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/URekvRchP3pirdy4NJ0H22LZryo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:39e0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:b5:8e:74:a4:5f:54:e7:09:22:a4:a4:41:d8:50:8a:39:27: a2:aa:70:40:e7:d6:ed:8a:ae:df:f4:e3:91:64:d5:7e:d0:72: 25:7e:c8:1a:c4:57:47:7e:91:b5:23:5c:ec:d7:e0:fe:2d:8d: f0:7f:41:fe:ac:e0:a5:82:2b:0f:1e:0d:63:02:d5:23:33:f1: f3:25:89:01:26:4e:cb:db:44:81:ee:3d:5e:f5:eb:79:68:5a: ee:d4:b0:1d:e9:ec:6d:f3:64:cf:65:7e:ef:7a:41:8d:b0:9e: 11:11:a0:8c:2d:96:8e:ec:c4:3a:34:6e:92:ea:ed:ef:09:d9: 6a:1e:c9:2f:97:e4:fb:a2:93:3c:53:17:a7:4a:2b:c7:c9:ef: e5:11:ab:44:f4:7f:55:e1:8d:7d:16:d1:00:e1:6c:66:5e:2f: 88:c2:4b:37:a2:98:d7:18:68:07:2b:23:49:25:04:d2:8c:dc: b4:25:58:33:82:16:37:6e:7c:c9:54:04:a6:a5:1d:4f:3f:cf: a9:40:91:4c:19:b1:81:ff:62:db:c2:78:49:e1:13:7c:42:c1: dc:9e:29:e9:e6:c8:d4:03:93:8d:92:44:f4:a7:c9:57:51:93: bf:89:42:12:2e:cc:f0:a1:14:0f:b7:3d:62:8c:d6:6b:a7:a1: a9:07:92:82 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQx MjQzMTUyOTA2QjY1NjZBMkIzRTE5Q0M0NjhFNDZERTcwOUQwNDAeFw0yNDA5MDQw OTE2MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUxMTdBNEJEMTcyMTNG N0E2MkFERENCODM0OUQwN0RCNjJEOUFGMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWuFMwV5BAJNXReZYl3WX/1HWa4Eiy03AonCMW83OO8w47ppdT jxF9wYIrm4x0EsWWNVvb5ayvV0rIwTOrukIWlNQFIkIGE4ega7ymTHqh4ZyPdSdt 6IM+aU5pBwYhZ4WKEelHNEUZdlIjzWb1KJqbX5CFEFca+PUmqbIgHd23lm48i+4a Zpg1zuKNpJXdXt72pYUFgtEF3d6OZ0edR3KS5sPGB/Rvk/VX3XXE4U2aB3eEN0BT 93SbS4mm6UnhPKnGFZzhQ/k93+Kr4xTOUH1jMYV1AjNFGPpsVHuC4U8klL3sXNXh 9EczFCn+JeLKxPJno7mtzxXlZsG7YLV2tq9xAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUURekvRchP3pirdy4NJ0H22LZryowHwYDVR0jBBgwFoAUbRJDFSkGtlZqKz4Z zEaORt5wnQQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFVTSEVO R1hJTi9iUkpERlNrR3RsWnFLejRaekVhT1J0NXduUVEuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2JSSkRGU2tHdGxacUt6NFp6RWFPUnQ1d25RUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hVU0hFTkdYSU4vVVJla3ZSY2hQ M3BpcmR5NE5KMEgyMkxacnlvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQBOeAwDQYJKoZIhvcNAQELBQADggEBAIu1jnSkX1TnCSKkpEHYUIo5 J6KqcEDn1u2Krt/045Fk1X7QciV+yBrEV0d+kbUjXOzX4P4tjfB/Qf6s4KWCKw8e DWMC1SMz8fMliQEmTsvbRIHuPV7163loWu7UsB3p7G3zZM9lfu96QY2wnhERoIwt lo7sxDo0bpLq7e8J2WoeyS+X5PuikzxTF6dKK8fJ7+URq0T0f1XhjX0W0QDhbGZe L4jCSzeimNcYaAcrI0klBNKM3LQlWDOCFjdufMlUBKalHU8/z6lAkUwZsYH/YtvC eEnhE3xCwdyeKenmyNQDk42SRPSnyVdRk7+JQhIuzPChFA+3PWKM1munoakHkoI= -----END CERTIFICATE-----Generated at Fri Sep 20 08:12:13 2024 by rpki-client on console-fra.rpki-client.org