$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JDA/8lkmVnq7sw-2TSUWtI5OJz9YW5g.roa File: 8lkmVnq7sw-2TSUWtI5OJz9YW5g.roa (raw, json) Hash identifier: EE2Sw+kJtLfgBFkwShzbAPpa8tb1O2+TexqakqdoE2s= Subject key identifier: F2:59:26:56:7A:BB:B3:0F:B6:4D:25:16:B4:8E:4E:27:3F:58:5B:98 Certificate issuer: /CN=86F6D06B4049386A106E5ED22656A93D9F355274 Certificate serial: 07 Authority key identifier: 86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/8lkmVnq7sw-2TSUWtI5OJz9YW5g.roa Signing time: Wed 06 Dec 2023 07:14:00 +0000 ROA not before: Wed 06 Dec 2023 07:14:00 +0000 ROA not after: Thu 28 Nov 2024 15:30:20 +0000 asID: 18041 IP address blocks: 2401:55e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 01:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86F6D06B4049386A106E5ED22656A93D9F355274 Validity Not Before: Dec 6 07:14:00 2023 GMT Not After : Nov 28 15:30:20 2024 GMT Subject: CN=F25926567ABBB30FB64D2516B48E4E273F585B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:c9:19:08:99:27:44:cf:43:44:78:40:1b: 6d:99:81:ea:9d:31:39:85:c3:04:36:fe:38:63:1c: df:08:b8:97:b4:0a:26:c8:39:7d:71:3c:0b:8b:e9: fb:5a:0a:27:41:30:4d:d3:d0:29:dd:f4:95:dc:91: d2:b1:fb:fc:e2:43:87:39:64:48:0a:81:75:b5:f6: 26:2e:18:d4:8f:7f:3e:6e:f1:92:e8:3f:c9:c1:86: 13:78:9c:18:45:8c:58:b2:23:fc:3f:d8:b1:60:79: 18:da:23:5b:aa:78:a2:f9:67:b3:89:66:73:90:b3: 2d:3d:1c:45:33:e3:02:5e:e3:23:e0:b8:e0:14:ff: 5c:98:5d:59:eb:e4:e1:94:f1:82:f1:94:9f:81:2d: 00:86:35:1a:2f:25:89:c3:69:6a:40:49:df:d8:cb: 16:01:04:a0:07:69:44:73:81:d0:d5:91:ca:bc:d8: aa:7a:1c:15:26:0a:ff:ac:dc:51:f2:c6:28:2b:7d: e2:ee:02:01:78:5f:45:45:6a:26:10:26:1b:e0:c6: c9:7f:5e:8d:26:98:61:75:7d:06:fe:80:87:30:8a: 6e:8f:13:40:97:b3:98:04:f5:e5:17:f8:4b:a3:c8: 86:b0:9f:62:1f:9b:55:55:61:10:dd:59:62:5d:ca: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:59:26:56:7A:BB:B3:0F:B6:4D:25:16:B4:8E:4E:27:3F:58:5B:98 X509v3 Authority Key Identifier: keyid:86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/8lkmVnq7sw-2TSUWtI5OJz9YW5g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:55e0::/32 Signature Algorithm: sha256WithRSAEncryption b4:9d:91:87:4c:4c:a6:86:c3:ee:33:f2:5a:86:66:e6:ee:76: a7:6e:5e:14:f1:8b:55:55:a5:6d:0b:74:69:10:f9:03:7d:d1: f2:89:03:5b:5a:94:e3:a3:91:49:64:a1:ac:58:fd:df:c0:4c: 39:91:26:31:e3:df:5d:8b:e9:d7:23:a4:de:c8:6f:70:e4:91: 34:a0:31:d7:ed:ac:d2:0d:01:ef:bf:10:b5:d8:1c:f8:d5:69: 6b:fa:bb:ac:d0:f1:99:f6:9b:a2:3a:a9:eb:83:1e:58:15:56: 7a:4a:32:b6:01:70:17:9c:b6:50:c0:74:ee:40:42:fb:b2:ab: 29:0a:28:03:58:94:69:1e:6b:2d:67:42:d7:2c:25:cd:c4:03: a6:48:e9:e4:2d:7c:1d:e6:5b:a8:57:b4:07:1c:2b:d1:b1:b1: 0e:c1:34:e0:7b:c9:b4:56:90:6b:40:71:a6:de:eb:b9:f9:d2: 6d:da:ea:5a:88:c2:33:80:8d:f9:1e:56:73:31:19:db:c1:76: ae:90:40:26:aa:4a:9b:bf:1b:69:a7:f9:ee:08:d0:96:a8:fa: a4:c5:4f:8c:7d:3e:f6:99:cc:08:2a:cc:b9:8b:95:9e:50:fb: b0:45:7a:21:2f:b5:99:6b:b7:3b:2f:d8:65:ea:01:30:01:88: 2c:c3:c1:88 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NkY2 RDA2QjQwNDkzODZBMTA2RTVFRDIyNjU2QTkzRDlGMzU1Mjc0MB4XDTIzMTIwNjA3 MTQwMFoXDTI0MTEyODE1MzAyMFowMzExMC8GA1UEAxMoRjI1OTI2NTY3QUJCQjMw RkI2NEQyNTE2QjQ4RTRFMjczRjU4NUI5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALGcyRkImSdEz0NEeEAbbZmB6p0xOYXDBDb+OGMc3wi4l7QKJsg5 fXE8C4vp+1oKJ0EwTdPQKd30ldyR0rH7/OJDhzlkSAqBdbX2Ji4Y1I9/Pm7xkug/ ycGGE3icGEWMWLIj/D/YsWB5GNojW6p4ovlns4lmc5CzLT0cRTPjAl7jI+C44BT/ XJhdWevk4ZTxgvGUn4EtAIY1Gi8licNpakBJ39jLFgEEoAdpRHOB0NWRyrzYqnoc FSYK/6zcUfLGKCt94u4CAXhfRUVqJhAmG+DGyX9ejSaYYXV9Bv6AhzCKbo8TQJez mAT15Rf4S6PIhrCfYh+bVVVhEN1ZYl3KhF8CAwEAAaOCAekwggHlMB0GA1UdDgQW BBTyWSZWeruzD7ZNJRa0jk4nP1hbmDAfBgNVHSMEGDAWgBSG9tBrQEk4ahBuXtIm Vqk9nzVSdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KREEvaHZi UWEwQkpPR29RYmw3U0psYXBQWjgxVW5RLmNybDBgBggrBgEFBQcBAQRUMFIwUAYI KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9o dmJRYTBCSk9Hb1FibDdTSmxhcFBaODFVblEuY2VyMA4GA1UdDwEB/wQEAwIHgDCB mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS9KREEvOGxrbVZucTdzdy0yVFNVV3RJNU9KejlZ VzVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv bm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBVeAwDQYJ KoZIhvcNAQELBQADggEBALSdkYdMTKaGw+4z8lqGZubudqduXhTxi1VVpW0LdGkQ +QN90fKJA1talOOjkUlkoaxY/d/ATDmRJjHj312L6dcjpN7Ib3DkkTSgMdftrNIN Ae+/ELXYHPjVaWv6u6zQ8Zn2m6I6qeuDHlgVVnpKMrYBcBectlDAdO5AQvuyqykK KANYlGkeay1nQtcsJc3EA6ZI6eQtfB3mW6hXtAccK9GxsQ7BNOB7ybRWkGtAcabe 67n50m3a6lqIwjOAjfkeVnMxGdvBdq6QQCaqSpu/G2mn+e4I0Jao+qTFT4x9PvaZ zAgqzLmLlZ5Q+7BFeiEvtZlrtzsv2GXqATABiCzDwYg= -----END CERTIFICATE-----Generated at Wed May 22 22:19:25 2024 by rpki-client on console-ams.rpki-client.org