$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/3MGp-gEwzAsubADpxIV2p8HSYPE.roa File: 3MGp-gEwzAsubADpxIV2p8HSYPE.roa (raw, json) Hash identifier: YGaaoNO3Q1+F2E8Qk2JuAJnG3WXZySPx1mreNU/D7T4= Subject key identifier: DC:C1:A9:FA:01:30:CC:0B:2E:6C:00:E9:C4:85:76:A7:C1:D2:60:F1 Certificate issuer: /CN=602CBCE32DD76D0BB39F5A706324248869119435 Certificate serial: 0B2D Authority key identifier: 60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/3MGp-gEwzAsubADpxIV2p8HSYPE.roa Signing time: Fri 01 Sep 2023 09:19:19 +0000 ROA not before: Fri 01 Sep 2023 09:19:19 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131587 IP address blocks: 2400:d580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602CBCE32DD76D0BB39F5A706324248869119435 Validity Not Before: Sep 1 09:19:19 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DCC1A9FA0130CC0B2E6C00E9C48576A7C1D260F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:eb:8c:29:23:ff:55:23:c9:3b:31:29:b0:35: 55:4b:20:b3:ee:91:ca:e2:9e:7a:dc:c2:fe:80:28: b8:ff:85:4d:32:9a:23:c7:a6:35:91:c5:94:c9:87: 6a:fe:0e:d1:f5:c9:45:64:48:37:6b:83:31:f2:ee: 08:83:4c:1b:ad:5d:59:6e:e0:b9:2b:fe:dc:2d:b8: 1c:b7:a1:34:58:20:d3:c3:d0:3b:0b:4a:f4:2e:2e: 7c:7b:83:11:cd:b8:ab:1f:a7:e7:3e:bd:b7:44:2f: 6f:94:79:bd:16:ea:dd:a4:eb:7f:c4:0a:94:94:e4: eb:14:ea:96:34:37:14:d7:0c:80:6d:f4:e2:3b:b0: 18:ed:66:8a:9c:4e:5c:90:f1:4d:41:62:7c:13:a7: 68:5e:95:e3:3f:c7:13:1d:5f:8c:d3:ff:d8:5f:92: 84:c3:40:12:d6:0b:81:61:af:c1:12:40:93:8e:ca: ba:ee:dc:43:ee:22:cc:db:3c:20:e5:c1:78:bb:4b: 62:17:3f:b5:ce:03:90:5d:ed:68:d0:3a:75:fa:78: 2c:d1:de:6b:70:8e:36:54:31:73:53:0f:a6:c1:b9: 1d:b7:0b:43:35:3d:e2:87:8c:aa:3c:07:8c:3c:43: 55:e8:55:ec:aa:9a:56:17:73:7c:ac:ab:c0:d4:55: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C1:A9:FA:01:30:CC:0B:2E:6C:00:E9:C4:85:76:A7:C1:D2:60:F1 X509v3 Authority Key Identifier: keyid:60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/3MGp-gEwzAsubADpxIV2p8HSYPE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:d580::/32 Signature Algorithm: sha256WithRSAEncryption 8e:53:fd:77:5f:6c:8b:43:ce:84:de:54:5c:17:42:07:ae:d4: 6a:f1:c7:38:55:63:fa:5a:de:50:2a:a1:f1:ce:02:f7:0c:e3: ac:ac:f4:fa:c4:27:ac:e3:86:8e:61:69:48:8c:84:f4:0e:3e: cc:94:53:77:98:e2:7c:ec:f8:04:d2:5c:9e:be:9b:82:8e:f8: 8e:31:63:9c:5c:15:15:1e:8f:cf:01:13:83:bd:37:d4:6f:83: e6:14:74:f6:73:c3:c8:86:14:4d:63:90:2e:3e:97:ce:91:f7: 60:65:da:28:45:06:0b:b7:dc:a1:6c:6d:26:4e:17:5a:d9:3c: ae:3f:43:54:0c:b0:02:6f:0a:c3:c0:bd:c0:2b:22:f1:4b:1f: 42:27:e0:8f:f7:49:6d:3d:8e:6c:33:b6:81:c2:72:b7:7d:a3: ab:f2:53:1d:65:19:d6:3e:f7:ba:10:23:d0:65:19:30:fe:10: 0d:c4:41:03:08:f8:13:f2:20:16:66:0f:be:3f:57:be:78:fa: 4f:e5:95:f8:34:6a:e4:e7:ff:7f:31:ce:34:62:e2:0b:6b:bd: 96:bf:6c:d1:08:c5:a4:55:3e:99:58:05:9f:c2:45:ed:c2:a4: 61:00:92:57:5c:4f:ab:20:ff:88:c9:c5:b3:37:00:e0:36:38: a9:59:0d:56 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAy Q0JDRTMyREQ3NkQwQkIzOUY1QTcwNjMyNDI0ODg2OTExOTQzNTAeFw0yMzA5MDEw OTE5MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERDQzFBOUZBMDEzMEND MEIyRTZDMDBFOUM0ODU3NkE3QzFEMjYwRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDw64wpI/9VI8k7MSmwNVVLILPukcrinnrcwv6AKLj/hU0ymiPH pjWRxZTJh2r+DtH1yUVkSDdrgzHy7giDTButXVlu4Lkr/twtuBy3oTRYINPD0DsL SvQuLnx7gxHNuKsfp+c+vbdEL2+Ueb0W6t2k63/ECpSU5OsU6pY0NxTXDIBt9OI7 sBjtZoqcTlyQ8U1BYnwTp2heleM/xxMdX4zT/9hfkoTDQBLWC4Fhr8ESQJOOyrru 3EPuIszbPCDlwXi7S2IXP7XOA5Bd7WjQOnX6eCzR3mtwjjZUMXNTD6bBuR23C0M1 PeKHjKo8B4w8Q1XoVeyqmlYXc3ysq8DUVRyPAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU3MGp+gEwzAsubADpxIV2p8HSYPEwHwYDVR0jBBgwFoAUYCy84y3XbQuzn1pw YyQkiGkRlDUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVHQUlD QkMvWUN5ODR5M1hiUXV6bjFwd1l5UWtpR2tSbERVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ZQ3k4NHkzWGJRdXpuMXB3WXlRa2lHa1JsRFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRUdBSUNCQy8zTUdwLWdFd3pBc3Vi QURweElWMnA4SFNZUEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJADVgDANBgkqhkiG9w0BAQsFAAOCAQEAjlP9d19si0POhN5UXBdCB67UavHH OFVj+lreUCqh8c4C9wzjrKz0+sQnrOOGjmFpSIyE9A4+zJRTd5jifOz4BNJcnr6b go74jjFjnFwVFR6PzwETg7031G+D5hR09nPDyIYUTWOQLj6XzpH3YGXaKEUGC7fc oWxtJk4XWtk8rj9DVAywAm8Kw8C9wCsi8UsfQifgj/dJbT2ObDO2gcJyt32jq/JT HWUZ1j73uhAj0GUZMP4QDcRBAwj4E/IgFmYPvj9Xvnj6T+WV+DRq5Of/fzHONGLi C2u9lr9s0QjFpFU+mVgFn8JF7cKkYQCSV1xPqyD/iMnFszcA4DY4qVkNVg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:47 2024 by rpki-client on console-ams.rpki-client.org