$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JDA/m6p6AeIWDut6dfuTkGG7IHumN7I.roa File: m6p6AeIWDut6dfuTkGG7IHumN7I.roa (raw, json) Hash identifier: pUajqDkKIQIiGLsu05+zJdPVnFNk2jm7fWR2JzBC5fo= Subject key identifier: 9B:AA:7A:01:E2:16:0E:EB:7A:75:FB:93:90:61:BB:20:7B:A6:37:B2 Certificate issuer: /CN=86F6D06B4049386A106E5ED22656A93D9F355274 Certificate serial: EE Authority key identifier: 86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/m6p6AeIWDut6dfuTkGG7IHumN7I.roa Signing time: Thu 14 Nov 2024 15:52:47 +0000 ROA not before: Thu 14 Nov 2024 15:52:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18041 IP address blocks: 2401:55e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86F6D06B4049386A106E5ED22656A93D9F355274 Validity Not Before: Nov 14 15:52:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9BAA7A01E2160EEB7A75FB939061BB207BA637B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:36:a8:a3:cd:70:a1:33:c0:26:75:04:6d: db:d6:ca:87:3c:93:d1:7a:4f:7a:a1:d4:cb:d1:95: 4a:30:2e:54:7c:11:f6:ba:c3:3a:d4:46:54:e7:88: 73:c4:d6:ec:33:3a:6a:80:68:eb:ec:b0:e5:3b:84: 17:5d:b5:39:44:49:73:8d:fb:9f:87:2a:50:17:ba: e3:fd:50:53:58:96:96:05:27:3f:5d:bf:05:9d:db: d0:2f:04:b9:58:67:c6:96:f7:7a:7d:3f:a2:09:8f: 91:58:07:4a:b7:b7:50:47:cf:44:d6:84:89:03:4c: 68:76:a8:f1:aa:3f:10:90:9e:10:7e:ac:62:53:52: 29:18:ec:3d:48:91:cb:aa:e2:d2:05:e2:ae:aa:b5: d0:ec:85:9f:94:e2:b7:0c:f0:31:99:1b:d3:99:bb: c2:77:84:13:5c:3e:54:e1:e7:a2:e8:a6:3a:9c:8d: ee:86:af:9a:b2:8d:67:55:a0:f2:e3:b2:17:bb:74: 78:22:5f:d0:20:a9:83:b6:5e:af:7b:18:50:c8:34: 44:3e:5f:ef:58:b9:03:35:dc:21:d3:be:69:16:9a: 32:63:0a:b7:26:1d:ba:62:6c:5e:bb:67:cc:79:2e: 78:44:5d:31:b4:d8:12:70:75:e7:70:d1:c4:69:87: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AA:7A:01:E2:16:0E:EB:7A:75:FB:93:90:61:BB:20:7B:A6:37:B2 X509v3 Authority Key Identifier: keyid:86:F6:D0:6B:40:49:38:6A:10:6E:5E:D2:26:56:A9:3D:9F:35:52:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hvbQa0BJOGoQbl7SJlapPZ81UnQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JDA/m6p6AeIWDut6dfuTkGG7IHumN7I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:55e0::/32 Signature Algorithm: sha256WithRSAEncryption 24:70:be:e2:3f:15:e0:42:0d:eb:96:06:d9:6d:6e:49:a5:18: 45:5d:3e:d7:2e:09:dc:13:6b:89:4c:c1:a2:22:50:8b:77:30: a5:6e:88:aa:48:aa:4d:7f:67:3b:4d:00:37:5a:51:28:e3:e9: a4:c4:a4:c6:49:09:5c:3f:59:78:5d:2f:a9:bc:d2:d6:11:03: 74:d0:d0:e1:4d:2c:b3:02:1b:bd:11:2b:ff:68:b8:0e:b5:cd: d4:cc:ff:b1:01:09:6c:1d:cd:d7:8e:af:fe:8d:aa:75:04:9e: 42:1e:fc:c6:30:6b:68:80:3b:9d:38:c4:99:a1:90:d3:c9:82: ed:22:f7:92:a5:6b:39:3d:42:05:a5:77:c5:21:72:cf:87:74: 89:82:c5:b4:3f:e9:5c:db:20:1b:91:73:c1:57:4b:c1:ed:db: fd:ac:4f:17:b5:4b:e1:5f:1e:5e:5a:77:bd:8e:67:7a:1f:01: b4:33:3f:92:9b:50:9c:54:bb:18:58:19:10:e5:b9:0d:54:a9: a9:2b:8f:b3:d0:dd:0d:61:93:23:2a:69:c1:e2:63:d0:8a:ae: 93:2c:06:41:69:bd:93:90:85:f1:64:23:01:fb:51:fa:c9:f4: 95:17:fa:70:01:a9:71:46:7d:d6:92:96:15:35:45:49:28:8b: 39:c1:cf:a1 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODZG NkQwNkI0MDQ5Mzg2QTEwNkU1RUQyMjY1NkE5M0Q5RjM1NTI3NDAeFw0yNDExMTQx NTUyNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCQUE3QTAxRTIxNjBF RUI3QTc1RkI5MzkwNjFCQjIwN0JBNjM3QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzrTaoo81woTPAJnUEbdvWyoc8k9F6T3qh1MvRlUowLlR8Efa6 wzrURlTniHPE1uwzOmqAaOvssOU7hBddtTlESXON+5+HKlAXuuP9UFNYlpYFJz9d vwWd29AvBLlYZ8aW93p9P6IJj5FYB0q3t1BHz0TWhIkDTGh2qPGqPxCQnhB+rGJT UikY7D1Ikcuq4tIF4q6qtdDshZ+U4rcM8DGZG9OZu8J3hBNcPlTh56Lopjqcje6G r5qyjWdVoPLjshe7dHgiX9AgqYO2Xq97GFDINEQ+X+9YuQM13CHTvmkWmjJjCrcm HbpibF67Z8x5LnhEXTG02BJwdedw0cRph8n1AgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUm6p6AeIWDut6dfuTkGG7IHumN7IwHwYDVR0jBBgwFoAUhvbQa0BJOGoQbl7S JlapPZ81UnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSkRBL2h2 YlFhMEJKT0dvUWJsN1NKbGFwUFo4MVVuUS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev aHZiUWEwQkpPR29RYmw3U0psYXBQWjgxVW5RLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvSkRBL202cDZBZUlXRHV0NmRmdVRrR0c3SUh1 bU43SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAVXgMA0G CSqGSIb3DQEBCwUAA4IBAQAkcL7iPxXgQg3rlgbZbW5JpRhFXT7XLgncE2uJTMGi IlCLdzClboiqSKpNf2c7TQA3WlEo4+mkxKTGSQlcP1l4XS+pvNLWEQN00NDhTSyz Ahu9ESv/aLgOtc3UzP+xAQlsHc3Xjq/+jap1BJ5CHvzGMGtogDudOMSZoZDTyYLt IveSpWs5PUIFpXfFIXLPh3SJgsW0P+lc2yAbkXPBV0vB7dv9rE8XtUvhXx5eWne9 jmd6HwG0Mz+Sm1CcVLsYWBkQ5bkNVKmpK4+z0N0NYZMjKmnB4mPQiq6TLAZBab2T kIXxZCMB+1H6yfSVF/pwAalxRn3WkpYVNUVJKIs5wc+h -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:40 2024 by rpki-client on console-fra.rpki-client.org