$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/pzzcTLqLS_0MAriowbU-5iZwfl8.roa File: pzzcTLqLS_0MAriowbU-5iZwfl8.roa (raw, json) Hash identifier: Pc1h7dZCWRx2SQiSE2/EIW3dHBh6MZbsXdmVXzN4qeU= Subject key identifier: A7:3C:DC:4C:BA:8B:4B:FD:0C:02:B8:A8:C1:B5:3E:E6:26:70:7E:5F Certificate issuer: /CN=6D1243152906B6566A2B3E19CC468E46DE709D04 Certificate serial: 0103 Authority key identifier: 6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/pzzcTLqLS_0MAriowbU-5iZwfl8.roa Signing time: Mon 23 Sep 2024 05:18:44 +0000 ROA not before: Mon 23 Sep 2024 05:18:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 2401:39e0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1243152906B6566A2B3E19CC468E46DE709D04 Validity Not Before: Sep 23 05:18:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A73CDC4CBA8B4BFD0C02B8A8C1B53EE626707E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c4:93:a9:25:2a:1f:23:ee:ff:c0:1a:8c:f5: ed:a5:d2:be:9c:e1:2b:7e:46:4c:ae:6d:44:01:ed: 95:26:27:e4:d2:7f:2b:80:d5:f2:e7:03:3a:17:0d: 26:04:fa:dc:1a:3e:9e:b4:a5:9c:40:c1:b8:89:57: cb:7c:0b:c4:d0:f1:df:d9:54:4f:d1:52:66:53:02: c0:c8:d2:c7:97:4d:cf:c0:24:2e:86:e6:88:d4:65: 0f:be:cf:bd:99:f7:a5:81:96:c5:06:2c:0b:3d:57: 02:50:14:eb:8b:46:75:fd:4f:66:0d:9b:9f:4c:ab: 51:56:42:c0:eb:58:97:ed:0b:f2:e1:44:cf:76:f5: 54:91:a3:8b:73:0a:8f:10:8f:c0:0f:e6:17:0e:34: a0:32:1c:89:c0:6a:28:55:6e:4b:c6:e3:cc:04:c4: 16:d7:57:c8:65:ba:6a:26:1d:b8:c6:e3:42:b6:39: aa:d0:2b:b7:a9:e9:d5:da:d2:a7:43:ac:5b:df:9b: 50:a4:5b:4a:72:2b:6a:6c:38:e4:77:24:dd:58:0c: f7:b8:e3:9d:cc:b9:a9:60:e9:6a:59:40:56:9e:25: a7:76:9c:bd:6f:66:ff:10:56:8b:3f:ac:49:2b:bc: a4:ff:13:e5:f6:4a:bc:34:2b:be:0b:a7:05:83:1c: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:DC:4C:BA:8B:4B:FD:0C:02:B8:A8:C1:B5:3E:E6:26:70:7E:5F X509v3 Authority Key Identifier: keyid:6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/pzzcTLqLS_0MAriowbU-5iZwfl8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:39e0::/32 Signature Algorithm: sha256WithRSAEncryption 9a:6d:c0:a6:bf:25:05:7c:85:e7:63:97:cc:6a:9f:87:4b:55: bc:52:66:c4:c7:aa:72:2f:06:c9:ed:43:b0:fc:f2:1b:31:86: 75:ce:d6:f3:07:0b:72:f3:da:14:5c:40:b6:0c:3f:05:70:a9: ae:a5:9c:46:f4:d7:3b:b0:96:5d:36:23:c9:98:6b:0c:7c:4a: 66:97:07:36:a7:6d:61:b8:0a:a8:a3:e7:95:89:7d:6d:ab:c3: f9:5d:63:5f:0a:28:30:b9:f6:b7:64:f7:18:d8:3f:60:6e:80: 61:8e:0e:dc:71:15:85:a6:1e:ec:8a:a6:99:8f:49:46:e7:6a: 95:5b:30:55:2c:e7:1b:ef:5d:77:e5:a2:00:79:f7:da:07:cc: 88:4c:20:32:3e:60:bc:bd:4a:e5:0c:5c:2b:ae:5b:65:aa:36: 9a:cc:08:5e:73:c6:ba:30:99:f9:ce:b4:16:ed:97:ee:df:b2: 1f:56:f4:a9:84:1f:43:91:27:06:0c:e1:4e:10:4b:25:71:93: 2a:a2:3b:c8:13:05:ef:78:db:d0:0e:35:34:be:35:07:ee:2e: b7:40:1a:27:d1:60:14:84:95:bd:00:df:51:db:e1:12:75:de: c1:91:7a:90:0a:9d:80:a2:17:ed:5b:1e:73:fc:cf:3e:fb:61: 73:93:ee:11 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQx MjQzMTUyOTA2QjY1NjZBMkIzRTE5Q0M0NjhFNDZERTcwOUQwNDAeFw0yNDA5MjMw NTE4NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE3M0NEQzRDQkE4QjRC RkQwQzAyQjhBOEMxQjUzRUU2MjY3MDdFNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOxJOpJSofI+7/wBqM9e2l0r6c4St+RkyubUQB7ZUmJ+TSfyuA 1fLnAzoXDSYE+twaPp60pZxAwbiJV8t8C8TQ8d/ZVE/RUmZTAsDI0seXTc/AJC6G 5ojUZQ++z72Z96WBlsUGLAs9VwJQFOuLRnX9T2YNm59Mq1FWQsDrWJftC/LhRM92 9VSRo4tzCo8Qj8AP5hcONKAyHInAaihVbkvG48wExBbXV8hlumomHbjG40K2OarQ K7ep6dXa0qdDrFvfm1CkW0pyK2psOOR3JN1YDPe4453Mualg6WpZQFaeJad2nL1v Zv8QVos/rEkrvKT/E+X2Srw0K74LpwWDHKfdAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUpzzcTLqLS/0MAriowbU+5iZwfl8wHwYDVR0jBBgwFoAUbRJDFSkGtlZqKz4Z zEaORt5wnQQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFVTSEVO R1hJTi9iUkpERlNrR3RsWnFLejRaekVhT1J0NXduUVEuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2JSSkRGU2tHdGxacUt6NFp6RWFPUnQ1d25RUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hVU0hFTkdYSU4vcHp6Y1RMcUxT XzBNQXJpb3diVS01aVp3Zmw4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQBOeAwDQYJKoZIhvcNAQELBQADggEBAJptwKa/JQV8hedjl8xqn4dL VbxSZsTHqnIvBsntQ7D88hsxhnXO1vMHC3Lz2hRcQLYMPwVwqa6lnEb01zuwll02 I8mYawx8SmaXBzanbWG4Cqij55WJfW2rw/ldY18KKDC59rdk9xjYP2BugGGODtxx FYWmHuyKppmPSUbnapVbMFUs5xvvXXflogB599oHzIhMIDI+YLy9SuUMXCuuW2Wq NprMCF5zxrowmfnOtBbtl+7fsh9W9KmEH0ORJwYM4U4QSyVxkyqiO8gTBe9429AO NTS+NQfuLrdAGifRYBSElb0A31Hb4RJ13sGRepAKnYCiF+1bHnP8zz77YXOT7hE= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:39 2024 by rpki-client on console-fra.rpki-client.org