$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/GOYKvJe25ihGY7oLWE59MX9OMLA.roa File: GOYKvJe25ihGY7oLWE59MX9OMLA.roa (raw, json) Hash identifier: aIS3Bovb7kSR0avJQuTuMI0NCcXuZ/YEHp3gfqPGvuw= Subject key identifier: 18:E6:0A:BC:97:B6:E6:28:46:63:BA:0B:58:4E:7D:31:7F:4E:30:B0 Certificate issuer: /CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9 Certificate serial: F7 Authority key identifier: F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/GOYKvJe25ihGY7oLWE59MX9OMLA.roa Signing time: Wed 30 Oct 2024 15:49:42 +0000 ROA not before: Wed 30 Oct 2024 15:49:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 2401:4f20::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F95F0AA4EEE346F077A0CEEC8D06CC498F9B1AB9 Validity Not Before: Oct 30 15:49:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=18E60ABC97B6E6284663BA0B584E7D317F4E30B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:df:a5:e7:c3:48:01:1f:1e:aa:6c:f4:37:94: 71:41:bc:b0:23:d0:cc:b5:8a:43:22:5b:a5:72:fc: c2:de:2d:8b:ce:87:bb:46:e6:a9:60:c1:4c:16:7b: 3d:f6:0c:32:f3:bc:7d:1b:44:7f:d8:ae:39:69:00: 2a:d7:f0:43:8a:4b:11:98:4e:d8:45:10:34:4d:24: 85:ce:53:06:74:63:64:6b:32:ef:80:ee:6a:cf:a9: 70:f1:e4:40:44:dd:c5:14:ad:5c:e5:fc:97:2e:69: b0:9e:7e:3c:77:7f:60:38:cd:f6:23:40:9d:d3:e0: 1a:a1:f3:56:67:e4:ff:96:a4:57:30:e6:d5:ab:1b: a5:9b:34:57:dd:9a:47:87:9b:f6:0e:92:27:1b:c9: 0a:a7:b0:aa:13:df:7f:6a:b1:83:b2:a9:1f:23:97: 08:27:9a:f2:08:d4:b5:75:9e:cd:3a:7c:a1:ef:e6: cb:85:1d:10:a8:16:91:db:77:8d:71:5a:0e:1c:83: 65:38:53:66:a3:38:7d:da:42:86:f5:99:4e:6b:b3: d3:30:6d:0a:e9:63:29:05:3d:5e:33:db:55:75:da: 18:7f:25:9e:54:89:df:ea:87:2a:89:86:03:4b:97: a8:f0:ee:b0:14:33:7b:8f:ac:8f:6b:5f:3d:0a:41: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E6:0A:BC:97:B6:E6:28:46:63:BA:0B:58:4E:7D:31:7F:4E:30:B0 X509v3 Authority Key Identifier: keyid:F9:5F:0A:A4:EE:E3:46:F0:77:A0:CE:EC:8D:06:CC:49:8F:9B:1A:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/-V8KpO7jRvB3oM7sjQbMSY-bGrk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-V8KpO7jRvB3oM7sjQbMSY-bGrk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KAIWEI/GOYKvJe25ihGY7oLWE59MX9OMLA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:4f20::/32 Signature Algorithm: sha256WithRSAEncryption 4f:6f:4e:4d:23:d7:f1:e3:a2:88:bc:05:67:f3:74:10:cc:74: 44:3a:2e:27:6a:4d:73:06:02:a2:b3:b3:79:67:58:2b:fd:31: a8:a9:b6:df:22:8f:5f:76:8e:40:39:03:9d:b3:20:35:dc:e2: 8a:91:f9:f7:1e:f3:0f:10:e5:75:7a:d2:a3:64:41:ca:ab:1f: 6b:e7:8c:8b:12:93:f3:35:fc:8d:1f:2d:4d:56:3c:ee:f1:b9: ff:1b:8f:55:c5:4b:2b:e8:dc:ab:fa:86:4f:8e:e9:d6:7f:7f: e4:95:7f:11:32:65:91:45:3c:58:1d:90:43:b8:88:1b:65:60: 1f:07:c0:2d:8d:25:6c:1d:3f:dc:a3:73:e1:3b:27:53:f5:5b: 95:f2:a0:91:38:e4:4f:4f:77:89:e1:a7:bc:d4:02:e3:61:a5: f7:17:6f:17:6a:4d:5f:3d:2a:e9:be:37:21:4c:f3:30:41:fd: 68:1b:98:5a:68:7a:fb:10:11:08:9d:b9:f7:a7:0d:a1:c4:c6: e9:51:4a:34:6c:12:80:45:53:18:33:6b:cf:ff:b2:c3:4c:81: f0:08:3b:35:63:3d:65:e3:5e:27:4c:6e:3a:71:85:03:7b:c2: 6c:fc:9a:73:e1:2a:28:71:bc:6d:f8:a1:9f:e9:8b:a1:7b:7f: af:5d:48:0e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjk1 RjBBQTRFRUUzNDZGMDc3QTBDRUVDOEQwNkNDNDk4RjlCMUFCOTAeFw0yNDEwMzAx NTQ5NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4RTYwQUJDOTdCNkU2 Mjg0NjYzQkEwQjU4NEU3RDMxN0Y0RTMwQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD236Xnw0gBHx6qbPQ3lHFBvLAj0My1ikMiW6Vy/MLeLYvOh7tG 5qlgwUwWez32DDLzvH0bRH/YrjlpACrX8EOKSxGYTthFEDRNJIXOUwZ0Y2RrMu+A 7mrPqXDx5EBE3cUUrVzl/JcuabCefjx3f2A4zfYjQJ3T4Bqh81Zn5P+WpFcw5tWr G6WbNFfdmkeHm/YOkicbyQqnsKoT339qsYOyqR8jlwgnmvII1LV1ns06fKHv5suF HRCoFpHbd41xWg4cg2U4U2ajOH3aQob1mU5rs9MwbQrpYykFPV4z21V12hh/JZ5U id/qhyqJhgNLl6jw7rAUM3uPrI9rXz0KQWBDAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUGOYKvJe25ihGY7oLWE59MX9OMLAwHwYDVR0jBBgwFoAU+V8KpO7jRvB3oM7s jQbMSY+bGrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FJV0VJ Ly1WOEtwTzdqUnZCM29NN3NqUWJNU1ktYkdyay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvLVY4S3BPN2pSdkIzb003c2pRYk1TWS1iR3JrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FJV0VJL0dPWUt2SmUyNWloR1k3b0xX RTU5TVg5T01MQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk AU8gMA0GCSqGSIb3DQEBCwUAA4IBAQBPb05NI9fx46KIvAVn83QQzHREOi4nak1z BgKis7N5Z1gr/TGoqbbfIo9fdo5AOQOdsyA13OKKkfn3HvMPEOV1etKjZEHKqx9r 54yLEpPzNfyNHy1NVjzu8bn/G49VxUsr6Nyr+oZPjunWf3/klX8RMmWRRTxYHZBD uIgbZWAfB8AtjSVsHT/co3PhOydT9VuV8qCROORPT3eJ4ae81ALjYaX3F28Xak1f PSrpvjchTPMwQf1oG5haaHr7EBEInbn3pw2hxMbpUUo0bBKARVMYM2vP/7LDTIHw CDs1Yz1l414nTG46cYUDe8Js/Jpz4Soocbxt+KGf6Yuhe3+vXUgO -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:08 2024 by rpki-client on console-ams.rpki-client.org