$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEYUN/IXMhGw3dA27CPuKl70WoNClYgWA.roa File: IXMhGw3dA27CPuKl70WoNClYgWA.roa (raw, json) Hash identifier: fdwlK6MZNvJsyPIrzfQpzU8r70lT7A/CMLtLrq2TbnA= Subject key identifier: 21:73:21:1B:0D:DD:03:6E:C2:3E:E2:A5:EF:45:A8:34:29:58:81:60 Certificate issuer: /CN=AE0A7B3E88A24A81BE91A09695691D5D1845194D Certificate serial: 03 Authority key identifier: AE:0A:7B:3E:88:A2:4A:81:BE:91:A0:96:95:69:1D:5D:18:45:19:4D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rgp7PoiiSoG-kaCWlWkdXRhFGU0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/IXMhGw3dA27CPuKl70WoNClYgWA.roa Signing time: Mon 21 Oct 2024 09:19:52 +0000 ROA not before: Mon 21 Oct 2024 09:19:52 +0000 ROA not after: Tue 14 Oct 2025 15:30:32 +0000 asID: 152616 IP address blocks: 2401:cd20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/rgp7PoiiSoG-kaCWlWkdXRhFGU0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/rgp7PoiiSoG-kaCWlWkdXRhFGU0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rgp7PoiiSoG-kaCWlWkdXRhFGU0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 12:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE0A7B3E88A24A81BE91A09695691D5D1845194D Validity Not Before: Oct 21 09:19:52 2024 GMT Not After : Oct 14 15:30:32 2025 GMT Subject: CN=2173211B0DDD036EC23EE2A5EF45A83429588160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:8d:9b:ea:a5:88:3f:4e:b5:8e:48:4b:95: 10:82:9c:47:f7:dd:26:be:a3:2a:06:96:2a:f0:ea: a5:7e:62:a2:0b:c8:a8:72:18:27:e7:cc:6c:87:f2: 64:0a:2c:27:7f:d0:b7:cf:f3:e1:4b:76:9d:41:e5: f0:f4:b2:7e:3f:b7:30:df:30:07:1b:2d:33:a2:e5: 77:da:ba:ea:c4:c2:75:08:1c:e0:45:5b:6e:10:ed: 2c:5b:6b:f4:09:7f:fc:cb:3e:57:8e:42:94:8a:51: 1f:eb:5c:71:b7:ef:8e:44:6d:3c:0b:09:68:96:6d: fa:60:f3:c5:76:4f:1b:42:4e:bd:a8:66:87:cd:c1: 00:f5:77:fa:c9:d2:d8:33:a3:ad:e5:42:13:fd:41: 68:c5:58:c3:f6:65:c4:b8:66:33:00:32:c7:24:c1: c1:5b:b4:6a:5f:49:d7:26:2f:ae:81:bf:b3:bb:c4: 4b:cc:b9:0c:09:c9:a1:a0:0d:9b:25:57:27:99:de: ac:98:bd:f3:08:b9:ac:a1:6f:ba:8c:04:b8:5b:ee: 15:eb:07:a9:5f:80:a6:da:97:de:4f:8b:55:75:22: 41:3a:f5:ab:86:96:3c:20:77:d7:18:2c:49:03:5a: 24:ae:59:ed:50:9d:61:7a:00:c2:6a:12:a9:cd:7d: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:73:21:1B:0D:DD:03:6E:C2:3E:E2:A5:EF:45:A8:34:29:58:81:60 X509v3 Authority Key Identifier: keyid:AE:0A:7B:3E:88:A2:4A:81:BE:91:A0:96:95:69:1D:5D:18:45:19:4D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/rgp7PoiiSoG-kaCWlWkdXRhFGU0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rgp7PoiiSoG-kaCWlWkdXRhFGU0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/IXMhGw3dA27CPuKl70WoNClYgWA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:cd20::/32 Signature Algorithm: sha256WithRSAEncryption 69:75:4f:fa:ff:55:38:15:27:66:cc:5c:55:33:85:25:0f:69: a5:e8:2b:70:99:1c:b5:66:1a:a9:06:6d:40:90:46:13:9b:0b: d9:48:be:c3:1f:8a:c9:63:cb:5e:31:10:4c:2b:4e:18:9f:fe: 5a:97:2c:92:a4:2c:70:32:c9:6b:e4:c8:88:8c:e0:08:d4:18: 80:da:5b:ca:e8:bf:8f:4f:d4:9b:8a:b2:38:07:a6:33:fa:89: a4:17:81:2e:1d:fe:9b:b3:b0:e6:fc:b8:79:15:9c:5f:8d:c0: 74:aa:1f:b6:c6:19:aa:a6:3b:64:a8:c3:83:e6:c2:2d:fd:63: 60:a9:7e:23:36:d8:3d:9e:e6:dd:c0:43:a2:99:41:1c:c5:65: 68:75:55:21:ba:28:3d:f8:fe:82:9c:eb:2f:9a:5a:a2:6e:36: ea:19:a8:68:9d:a7:6e:78:80:39:6b:c1:18:e0:fc:fc:c9:c1: a9:01:88:70:71:28:2e:ba:c7:3c:ea:26:0a:45:83:c3:db:11: d2:16:b6:32:49:cc:49:09:79:37:48:22:aa:c2:18:78:62:ac: 12:36:ab:27:6e:62:dc:3a:2b:e6:9d:ae:43:8c:db:a5:03:48: 3b:7c:0d:6f:8f:cd:4a:82:35:f7:9d:fd:6a:73:6d:72:76:39: 06:0a:90:cb -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRTBB N0IzRTg4QTI0QTgxQkU5MUEwOTY5NTY5MUQ1RDE4NDUxOTREMB4XDTI0MTAyMTA5 MTk1MloXDTI1MTAxNDE1MzAzMlowMzExMC8GA1UEAxMoMjE3MzIxMUIwREREMDM2 RUMyM0VFMkE1RUY0NUE4MzQyOTU4ODE2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALgujZvqpYg/TrWOSEuVEIKcR/fdJr6jKgaWKvDqpX5iogvIqHIY J+fMbIfyZAosJ3/Qt8/z4Ut2nUHl8PSyfj+3MN8wBxstM6Lld9q66sTCdQgc4EVb bhDtLFtr9Al//Ms+V45ClIpRH+tccbfvjkRtPAsJaJZt+mDzxXZPG0JOvahmh83B APV3+snS2DOjreVCE/1BaMVYw/ZlxLhmMwAyxyTBwVu0al9J1yYvroG/s7vES8y5 DAnJoaANmyVXJ5nerJi98wi5rKFvuowEuFvuFesHqV+AptqX3k+LVXUiQTr1q4aW PCB31xgsSQNaJK5Z7VCdYXoAwmoSqc190YcCAwEAAaOCAe0wggHpMB0GA1UdDgQW BBQhcyEbDd0DbsI+4qXvRag0KViBYDAfBgNVHSMEGDAWgBSuCns+iKJKgb6RoJaV aR1dGEUZTTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MRVlVTi9y Z3A3UG9paVNvRy1rYUNXbFdrZFhSaEZHVTAuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L3JncDdQb2lpU29HLWthQ1dsV2tkWFJoRkdVMC5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0xFWVVOL0lYTWhHdzNkQTI3Q1B1S2w3MFdv TkNsWWdXQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAc0g MA0GCSqGSIb3DQEBCwUAA4IBAQBpdU/6/1U4FSdmzFxVM4UlD2ml6CtwmRy1Zhqp Bm1AkEYTmwvZSL7DH4rJY8teMRBMK04Yn/5alyySpCxwMslr5MiIjOAI1BiA2lvK 6L+PT9SbirI4B6Yz+omkF4EuHf6bs7Dm/Lh5FZxfjcB0qh+2xhmqpjtkqMOD5sIt /WNgqX4jNtg9nubdwEOimUEcxWVodVUhuig9+P6CnOsvmlqibjbqGahonadueIA5 a8EY4Pz8ycGpAYhwcSguusc86iYKRYPD2xHSFrYyScxJCXk3SCKqwhh4YqwSNqsn bmLcOivmna5DjNulA0g7fA1vj81KgjX3nf1qc21ydjkGCpDL -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org