$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/I3eTVqSAbzQo4ibHI8ybn3ee12Q.roa File: I3eTVqSAbzQo4ibHI8ybn3ee12Q.roa (raw, json) Hash identifier: Uthnip0AO1whuDM4FKjm/ygAlri0eK+cWdgdlByGp4o= Subject key identifier: 23:77:93:56:A4:80:6F:34:28:E2:26:C7:23:CC:9B:9F:77:9E:D7:64 Certificate issuer: /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B Certificate serial: 02B0 Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/I3eTVqSAbzQo4ibHI8ybn3ee12Q.roa Signing time: Mon 26 Aug 2024 05:19:01 +0000 ROA not before: Mon 26 Aug 2024 05:19:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38042 IP address blocks: 2400:37a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 15:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B Validity Not Before: Aug 26 05:19:01 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=23779356A4806F3428E226C723CC9B9F779ED764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:78:fb:fd:d9:02:2b:5c:6f:06:dc:7e:31: ae:69:bf:7a:8f:7d:55:72:36:0a:a2:f8:44:c9:3e: 95:ec:7c:31:3f:57:14:7c:79:29:08:d7:9c:ea:6f: 27:26:3b:ca:95:be:e2:b2:5f:55:07:55:8d:4d:d3: 6c:d9:73:d6:08:41:11:6e:6f:3a:2f:fb:8c:5c:fd: 5a:78:c1:5d:48:61:34:69:09:ee:91:81:0b:d0:be: 44:ea:3b:d5:74:f5:36:97:bd:76:b7:f4:a2:6d:f4: b6:01:bd:28:62:ce:f9:9f:2a:82:81:59:ef:01:8f: d6:1b:2b:60:c2:9e:49:8d:ee:62:34:95:d4:e5:96: 7a:8f:0d:cb:20:aa:fe:31:df:22:f2:09:cb:70:c8: f7:38:0f:89:f1:a8:a9:4c:b4:3c:90:4a:df:13:f4: 60:aa:d8:d0:a3:eb:92:05:7a:28:9d:e5:8f:33:8e: 0c:48:4a:8a:89:f8:c6:f0:ca:8f:9b:a9:e8:ba:6d: 2d:24:c2:01:0e:28:9e:57:18:e6:d3:ed:48:08:9e: f9:2d:34:ae:de:7f:10:b4:19:05:e3:bb:03:d2:60: 64:76:f6:5c:bc:3d:c9:fb:4b:7c:13:bd:c4:d6:72: 4c:df:64:d6:68:dd:16:d1:55:a1:32:de:64:b8:3c: 3b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:77:93:56:A4:80:6F:34:28:E2:26:C7:23:CC:9B:9F:77:9E:D7:64 X509v3 Authority Key Identifier: keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/I3eTVqSAbzQo4ibHI8ybn3ee12Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:37a0::/32 Signature Algorithm: sha256WithRSAEncryption d4:05:a0:a9:51:5f:f2:4c:a8:36:6f:2a:4f:98:dc:a5:32:e1: 68:d4:72:f5:10:fe:27:23:fc:da:c2:dc:fc:af:5a:6f:12:38: 9f:86:b2:f4:31:58:9b:ce:cd:f1:54:c5:68:02:43:51:5e:99: 47:94:c2:74:53:bc:ef:2f:fa:b2:b1:ab:12:e9:0e:79:bd:3d: cb:cf:7d:93:8e:10:0f:ea:35:6b:e8:35:6f:0b:02:36:e0:64: 87:cd:fd:cf:2b:16:67:3f:78:be:44:7d:3f:b1:bc:96:c7:e5: 58:68:0a:5f:97:2e:08:59:d8:eb:4b:1d:6d:23:a6:d9:2d:28: 29:d8:a9:f6:e8:9a:b1:e7:13:ee:54:10:41:9f:b6:c3:79:0b: 25:11:ca:b1:ac:cd:39:f9:d1:4b:51:3c:aa:65:fc:e5:e4:66: da:69:04:66:b0:3a:18:37:64:31:01:0d:08:ab:1f:2e:5f:5c: 79:87:41:bf:54:b4:7b:e5:7a:8d:b3:d4:fb:12:a7:86:22:11: c9:bf:95:b6:67:ab:db:1b:2b:df:dc:d4:63:d1:2a:2b:04:14: 47:32:56:2d:b0:42:86:d0:48:d5:a1:32:24:43:8a:fd:fc:b0: 1d:9c:03:60:f3:25:32:40:11:02:f0:c9:6a:fb:63:b6:2f:fc: 0d:f2:df:42 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICArAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjJD NTEyOThEOTdBMTAyOTAyNzMxRkRDNDlCREZBQjM5RDUyQUIyQjAeFw0yNDA4MjYw NTE5MDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIzNzc5MzU2QTQ4MDZG MzQyOEUyMjZDNzIzQ0M5QjlGNzc5RUQ3NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1+nj7/dkCK1xvBtx+Ma5pv3qPfVVyNgqi+ETJPpXsfDE/VxR8 eSkI15zqbycmO8qVvuKyX1UHVY1N02zZc9YIQRFubzov+4xc/Vp4wV1IYTRpCe6R gQvQvkTqO9V09TaXvXa39KJt9LYBvShizvmfKoKBWe8Bj9YbK2DCnkmN7mI0ldTl lnqPDcsgqv4x3yLyCctwyPc4D4nxqKlMtDyQSt8T9GCq2NCj65IFeiid5Y8zjgxI SoqJ+Mbwyo+bqei6bS0kwgEOKJ5XGObT7UgInvktNK7efxC0GQXjuwPSYGR29ly8 Pcn7S3wTvcTWckzfZNZo3RbRVaEy3mS4PDt1AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUI3eTVqSAbzQo4ibHI8ybn3ee12QwHwYDVR0jBBgwFoAUIsUSmNl6ECkCcx/c Sb36s51SqyswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DUlMv SXNVU21ObDZFQ2tDY3hfY1NiMzZzNTFTcXlzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9Jc1VTbU5sNkVDa0NjeF9jU2IzNnM1MVNxeXMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTUNSUy9JM2VUVnFTQWJ6UW80aWJISTh5 Ym4zZWUxMlEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAA3 oDANBgkqhkiG9w0BAQsFAAOCAQEA1AWgqVFf8kyoNm8qT5jcpTLhaNRy9RD+JyP8 2sLc/K9abxI4n4ay9DFYm87N8VTFaAJDUV6ZR5TCdFO87y/6srGrEukOeb09y899 k44QD+o1a+g1bwsCNuBkh839zysWZz94vkR9P7G8lsflWGgKX5cuCFnY60sdbSOm 2S0oKdip9uiasecT7lQQQZ+2w3kLJRHKsazNOfnRS1E8qmX85eRm2mkEZrA6GDdk MQENCKsfLl9ceYdBv1S0e+V6jbPU+xKnhiIRyb+Vtmer2xsr39zUY9EqKwQURzJW LbBChtBI1aEyJEOK/fywHZwDYPMlMkARAvDJavtjti/8DfLfQg== -----END CERTIFICATE-----Generated at Fri Sep 20 14:59:29 2024 by rpki-client on console-ams.rpki-client.org