$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa File: Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa (raw, json) Hash identifier: gK6JXgH7aBSjbjFuFvGu5V4fUDs5146GWu5E+bb2hcE= Subject key identifier: 63:1D:EB:ED:B4:EE:D4:B1:F6:B7:98:91:35:E5:BA:D2:16:73:F2:65 Certificate issuer: /CN=602CBCE32DD76D0BB39F5A706324248869119435 Certificate serial: 0C24 Authority key identifier: 60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa Signing time: Mon 26 Aug 2024 05:20:43 +0000 ROA not before: Mon 26 Aug 2024 05:20:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131587 IP address blocks: 2400:d580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602CBCE32DD76D0BB39F5A706324248869119435 Validity Not Before: Aug 26 05:20:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=631DEBEDB4EED4B1F6B7989135E5BAD21673F265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:dd:6c:77:89:5b:db:79:c7:3d:2c:cd:4a: 01:5a:3a:ba:a1:7e:a0:81:06:5b:45:36:e7:db:15: e8:5d:b2:5f:27:56:b8:e7:c6:ff:34:59:c3:53:0e: f4:a2:46:36:33:9a:b2:7c:49:8d:80:6b:54:a9:12: f3:61:11:23:ec:25:28:d5:96:35:9b:d3:32:e3:ef: 50:59:3e:d3:6e:fd:90:8c:cf:c4:9a:22:e7:1f:15: 4b:d3:30:dc:bf:a4:95:b8:59:64:a7:0e:ec:79:15: 1a:a0:d6:ae:12:27:28:5e:aa:45:90:14:f4:10:9d: 13:0e:53:72:be:8e:81:f5:d3:43:fd:a8:36:86:a4: a0:0c:60:cd:7b:0d:86:28:51:38:a8:ca:68:bc:88: a7:94:ec:f3:83:09:9d:42:67:8f:62:fc:a1:f1:04: d0:39:ba:87:66:12:88:b9:b0:c4:7f:9b:4a:8a:2e: 70:a1:ee:63:fb:32:a9:a1:25:40:ee:3d:66:58:a4: 6e:81:f7:de:cf:b3:45:56:82:11:1a:8e:b0:e0:20: 64:7f:f6:d8:9d:4f:01:2f:4b:6a:dd:ec:13:f0:72: 06:57:20:24:c8:ea:57:16:ba:da:b3:85:3b:9d:88: c0:80:04:66:3c:c1:87:24:a8:eb:30:fc:4b:0f:ae: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1D:EB:ED:B4:EE:D4:B1:F6:B7:98:91:35:E5:BA:D2:16:73:F2:65 X509v3 Authority Key Identifier: keyid:60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/Yx3r7bTu1LH2t5iRNeW60hZz8mU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:d580::/32 Signature Algorithm: sha256WithRSAEncryption 0e:d2:50:da:c7:de:88:e1:a5:6c:56:76:05:38:e8:6a:6b:ea: d6:d8:60:d2:ed:88:56:29:4c:de:0f:ae:15:6c:0f:b5:f7:f4: fe:e2:11:31:ac:2c:f8:26:c6:c8:07:8b:fc:7f:ae:1b:e6:a5: 59:e9:35:3f:68:e7:ab:90:3b:c7:5b:f7:f4:2c:97:86:93:09: c6:e9:a3:e5:7c:c8:dd:5a:8a:e2:1e:2e:55:b1:63:f9:a4:d1: 26:71:31:43:aa:30:44:04:d2:c9:6f:d0:fd:36:22:d8:2e:e4: e9:6e:6a:e1:a0:6b:b4:ad:a7:02:5b:c5:e5:51:57:fc:8d:49: ba:f9:56:48:8e:88:6c:fa:41:b7:9b:a0:9f:80:58:2d:6a:b1: e7:bd:6b:f2:ef:9f:c0:3d:47:d3:c9:7a:4e:58:87:d9:ec:0f: 21:86:99:5e:33:a1:06:ba:6b:7b:fe:ee:73:6e:f2:5c:29:fa: 5a:06:67:49:37:3d:5e:dc:7e:ac:98:27:53:24:f2:0c:41:d8: 53:30:9c:0f:e6:b3:45:55:34:f4:1b:b6:e7:3e:76:29:8b:76: 78:fb:8c:2d:d3:3e:6b:76:91:f2:d6:0d:2c:c0:18:8f:f2:f9: 16:99:4c:4f:c1:fe:1d:ee:e3:af:24:04:ea:09:22:b0:5c:da: 69:8f:07:ba -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAy Q0JDRTMyREQ3NkQwQkIzOUY1QTcwNjMyNDI0ODg2OTExOTQzNTAeFw0yNDA4MjYw NTIwNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzMURFQkVEQjRFRUQ0 QjFGNkI3OTg5MTM1RTVCQUQyMTY3M0YyNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9RN1sd4lb23nHPSzNSgFaOrqhfqCBBltFNufbFehdsl8nVrjn xv80WcNTDvSiRjYzmrJ8SY2Aa1SpEvNhESPsJSjVljWb0zLj71BZPtNu/ZCMz8Sa IucfFUvTMNy/pJW4WWSnDux5FRqg1q4SJyheqkWQFPQQnRMOU3K+joH100P9qDaG pKAMYM17DYYoUTioymi8iKeU7PODCZ1CZ49i/KHxBNA5uodmEoi5sMR/m0qKLnCh 7mP7MqmhJUDuPWZYpG6B997Ps0VWghEajrDgIGR/9tidTwEvS2rd7BPwcgZXICTI 6lcWutqzhTudiMCABGY8wYckqOsw/EsPrgEfAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUYx3r7bTu1LH2t5iRNeW60hZz8mUwHwYDVR0jBBgwFoAUYCy84y3XbQuzn1pw YyQkiGkRlDUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVHQUlD QkMvWUN5ODR5M1hiUXV6bjFwd1l5UWtpR2tSbERVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9ZQ3k4NHkzWGJRdXpuMXB3WXlRa2lHa1JsRFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRUdBSUNCQy9ZeDNyN2JUdTFMSDJ0 NWlSTmVXNjBoWno4bVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJADVgDANBgkqhkiG9w0BAQsFAAOCAQEADtJQ2sfeiOGlbFZ2BTjoamvq1thg 0u2IVilM3g+uFWwPtff0/uIRMaws+CbGyAeL/H+uG+alWek1P2jnq5A7x1v39CyX hpMJxumj5XzI3VqK4h4uVbFj+aTRJnExQ6owRATSyW/Q/TYi2C7k6W5q4aBrtK2n AlvF5VFX/I1JuvlWSI6IbPpBt5ugn4BYLWqx571r8u+fwD1H08l6TliH2ewPIYaZ XjOhBrpre/7uc27yXCn6WgZnSTc9Xtx+rJgnUyTyDEHYUzCcD+azRVU09Bu25z52 KYt2ePuMLdM+a3aR8tYNLMAYj/L5FplMT8H+He7jryQE6gkisFzaaY8Hug== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:40 2024 by rpki-client on console-fra.rpki-client.org