$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JCA/aOpAE4_ZV5OFguED7i4Og0CRpU0.roa File: aOpAE4_ZV5OFguED7i4Og0CRpU0.roa (raw, json) Hash identifier: RXhwXxY3tByiPrA24GfZlt+lbM+GgLON7OqH/Ro1sIc= Subject key identifier: 68:EA:40:13:8F:D9:57:93:85:82:E1:03:EE:2E:0E:83:40:91:A5:4D Certificate issuer: /CN=83ACFC46609C1649AB4616D20D64C9D15D834C64 Certificate serial: 0107 Authority key identifier: 83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/aOpAE4_ZV5OFguED7i4Og0CRpU0.roa Signing time: Mon 26 Aug 2024 05:19:16 +0000 ROA not before: Mon 26 Aug 2024 05:19:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 2401:26a0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83ACFC46609C1649AB4616D20D64C9D15D834C64 Validity Not Before: Aug 26 05:19:16 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=68EA40138FD957938582E103EE2E0E834091A54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:21:c1:e3:4f:8c:de:55:84:2c:ec:ff:9c: 94:c1:a5:b4:f8:27:98:82:8e:f4:70:dc:d8:cf:3a: f6:b8:ad:61:37:1a:79:0e:b6:77:60:19:9a:aa:a4: 11:e2:ba:4b:a8:14:0f:be:a4:14:bb:8c:ac:fc:ed: ff:87:a2:17:63:20:bf:01:dc:84:d8:9f:3c:5d:86: b1:e8:08:f0:3c:92:3b:47:9f:65:95:73:fe:4f:59: e7:81:f5:9a:42:71:ac:42:8e:0f:91:41:86:4e:02: 14:2a:f1:ea:e4:c4:1e:16:73:b3:c3:a4:0e:c4:c3: 78:e0:19:6c:6f:7b:8c:eb:32:0e:fc:90:c0:ed:f0: 7a:0e:25:d9:02:d8:e5:2b:f4:f2:65:4c:f4:c0:bb: 96:90:c6:8c:dc:dc:29:6e:ea:78:0f:68:f2:fe:ae: 6d:cb:3c:5c:cb:f1:13:83:80:eb:64:55:ce:75:be: 1b:84:4e:44:66:06:8d:2c:94:7d:53:cd:00:eb:96: ed:8a:ef:02:4b:69:0f:80:86:f8:29:40:bd:fd:21: 36:78:f8:fe:60:80:ca:21:c2:63:9e:22:eb:fa:0e: 11:fc:07:79:cc:cc:40:52:95:c0:98:ab:38:ae:1f: a8:14:9c:73:79:ed:e8:7f:52:2c:86:bc:b0:b2:12: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EA:40:13:8F:D9:57:93:85:82:E1:03:EE:2E:0E:83:40:91:A5:4D X509v3 Authority Key Identifier: keyid:83:AC:FC:46:60:9C:16:49:AB:46:16:D2:0D:64:C9:D1:5D:83:4C:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/g6z8RmCcFkmrRhbSDWTJ0V2DTGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JCA/aOpAE4_ZV5OFguED7i4Og0CRpU0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:26a0::/32 Signature Algorithm: sha256WithRSAEncryption 05:d6:b4:cb:a7:b0:36:d0:52:7a:91:99:42:96:9e:80:41:67: 69:71:61:b7:31:04:38:42:89:15:8b:27:f3:fd:3a:50:a2:51: 85:f5:41:c5:6f:1c:d7:3a:04:f5:08:2a:b7:cd:da:95:47:d3: 80:f0:14:5b:10:83:d2:93:4e:5a:10:44:22:5b:11:2f:53:c1: 4e:da:93:22:da:b0:49:33:73:19:c3:16:68:ae:9d:b2:1c:bd: a9:e1:22:a7:3b:84:e0:89:9d:a5:15:44:14:3d:54:d7:c2:f8: 1d:45:33:9a:7c:c4:a7:a1:23:e6:f0:97:82:02:1b:f9:a0:2f: 28:43:41:85:bf:6d:b8:78:7f:92:7b:88:97:c1:7d:da:51:23: fa:ea:7b:f4:74:7b:fb:26:24:11:b3:7d:25:af:1e:8f:a3:d3: 73:68:93:bc:8b:34:6a:dc:c8:5a:e3:05:af:5a:5f:24:df:60: 3d:3d:9a:a2:1a:95:ea:e2:28:ba:9e:a0:80:33:57:de:ca:64: 6b:9b:4d:1b:e7:b3:49:85:10:81:0f:e9:12:7a:26:0b:a5:84: f6:a3:c6:d7:96:31:a4:1e:29:ef:ea:5c:8e:70:2b:00:e3:0d: 8a:d8:0b:ff:3c:00:05:20:b4:15:71:f3:36:b7:9a:a4:66:fa: be:cf:45:2c -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODNB Q0ZDNDY2MDlDMTY0OUFCNDYxNkQyMEQ2NEM5RDE1RDgzNEM2NDAeFw0yNDA4MjYw NTE5MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY4RUE0MDEzOEZEOTU3 OTM4NTgyRTEwM0VFMkUwRTgzNDA5MUE1NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7QCHB40+M3lWELOz/nJTBpbT4J5iCjvRw3NjPOva4rWE3GnkO tndgGZqqpBHiukuoFA++pBS7jKz87f+HohdjIL8B3ITYnzxdhrHoCPA8kjtHn2WV c/5PWeeB9ZpCcaxCjg+RQYZOAhQq8erkxB4Wc7PDpA7Ew3jgGWxve4zrMg78kMDt 8HoOJdkC2OUr9PJlTPTAu5aQxozc3Clu6ngPaPL+rm3LPFzL8RODgOtkVc51vhuE TkRmBo0slH1TzQDrlu2K7wJLaQ+AhvgpQL39ITZ4+P5ggMohwmOeIuv6DhH8B3nM zEBSlcCYqziuH6gUnHN57eh/UiyGvLCyEsDfAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUaOpAE4/ZV5OFguED7i4Og0CRpU0wHwYDVR0jBBgwFoAUg6z8RmCcFkmrRhbS DWTJ0V2DTGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkNBL2c2 ejhSbUNjRmttclJoYlNEV1RKMFYyRFRHUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZzZ6OFJtQ2NGa21yUmhiU0RXVEowVjJEVEdRLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkNBL2FPcEFFNF9aVjVPRmd1RUQ3aTRPZzBD UnBVMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkASagMA0G CSqGSIb3DQEBCwUAA4IBAQAF1rTLp7A20FJ6kZlClp6AQWdpcWG3MQQ4QokViyfz /TpQolGF9UHFbxzXOgT1CCq3zdqVR9OA8BRbEIPSk05aEEQiWxEvU8FO2pMi2rBJ M3MZwxZorp2yHL2p4SKnO4TgiZ2lFUQUPVTXwvgdRTOafMSnoSPm8JeCAhv5oC8o Q0GFv224eH+Se4iXwX3aUSP66nv0dHv7JiQRs30lrx6Po9NzaJO8izRq3Mha4wWv Wl8k32A9PZqiGpXq4ii6nqCAM1feymRrm00b57NJhRCBD+kSeiYLpYT2o8bXljGk Hinv6lyOcCsA4w2K2Av/PAAFILQVcfM2t5qkZvq+z0Us -----END CERTIFICATE-----Generated at Fri Sep 20 09:06:42 2024 by rpki-client on console-ams.rpki-client.org