$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/po5ZXKPduUumUA8wSdxLTsx-El0.roa File: po5ZXKPduUumUA8wSdxLTsx-El0.roa (raw, json) Hash identifier: Gp6RyOQTnf5LWqVzJPimfawGHN88nymXKHbLDletgW0= Subject key identifier: A6:8E:59:5C:A3:DD:B9:4B:A6:50:0F:30:49:DC:4B:4E:CC:7E:12:5D Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234 Certificate serial: 10B8 Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/po5ZXKPduUumUA8wSdxLTsx-El0.roa Signing time: Mon 19 Feb 2024 12:58:23 +0000 ROA not before: Mon 19 Feb 2024 12:58:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131633 IP address blocks: 2404:2a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4280 (0x10b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234 Validity Not Before: Feb 19 12:58:23 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A68E595CA3DDB94BA6500F3049DC4B4ECC7E125D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:58:60:55:85:92:f5:02:3f:32:f6:52:d3:81: 9a:fe:14:b0:64:e7:be:52:da:fb:dd:5c:2c:8e:13: 6d:1b:c4:03:6f:28:47:fd:ea:7e:d7:40:fe:72:cf: 7f:db:f6:c8:d3:f6:ac:af:ba:6e:3e:70:d9:eb:1d: e0:5b:b6:f9:2f:c5:81:99:1f:6d:c6:48:29:5a:6a: 15:65:c3:27:47:dc:df:26:f8:39:3c:36:b2:95:50: a7:38:dd:81:ec:bb:dd:77:e8:ab:a0:50:42:6e:42: ac:44:85:a8:4c:01:b5:fb:5b:da:70:37:00:33:35: e0:5c:c9:81:6e:41:d2:ab:80:37:48:ec:48:7c:67: 83:78:09:b8:32:df:b6:cf:d1:29:03:d6:93:09:fc: 76:0f:c5:4a:ab:36:c4:5d:a5:38:e2:8e:13:97:05: 78:51:68:2d:d0:4f:cb:e3:27:60:a2:cb:0c:66:19: ff:49:f3:b4:86:c1:44:b0:a4:35:10:64:46:14:cc: 93:17:e7:3b:cf:c4:34:a6:3d:9a:c5:25:4b:76:78: 20:01:65:62:81:fd:86:b7:16:43:30:26:4c:88:ba: 5f:b2:ac:c9:e0:6b:20:e9:8a:2b:74:ac:02:d2:c9: aa:d1:c0:95:42:64:cc:ff:de:6d:4e:00:a3:2a:8e: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8E:59:5C:A3:DD:B9:4B:A6:50:0F:30:49:DC:4B:4E:CC:7E:12:5D X509v3 Authority Key Identifier: keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/po5ZXKPduUumUA8wSdxLTsx-El0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:2a40::/32 Signature Algorithm: sha256WithRSAEncryption 57:1f:9d:ef:9e:c1:41:2d:55:ca:88:61:2e:ec:0a:f5:e9:1d: ec:a6:8b:ac:de:6f:32:70:bc:c0:4c:b0:0f:4b:00:72:89:a5: 73:ed:fb:5b:22:bc:7b:40:12:2c:c0:e4:a4:f9:2c:eb:7e:0e: fe:cf:1c:df:e1:18:a7:1b:a5:19:5b:07:d3:dc:c2:ec:77:cd: 78:2f:6e:59:d4:39:7c:74:f7:b3:b5:de:64:f3:3e:3c:78:0c: 06:63:de:ee:a0:e4:cf:c1:c5:fb:84:c7:6f:73:1a:b8:8d:4e: 45:dc:2a:54:70:ed:4c:36:ef:9b:03:73:3d:de:fe:0f:ec:b8: 70:e9:a4:55:51:b5:14:02:94:9b:d1:82:65:15:4d:d3:83:de: f9:d1:dc:48:22:68:b7:c4:97:c2:75:b5:72:2a:12:d8:f4:e9: 9d:91:7f:ab:92:29:21:c4:4b:ad:c6:5c:f1:4a:f6:5d:e3:bb: a1:cb:66:97:ee:3a:2b:1a:bb:e7:29:c7:d4:73:fd:18:08:74: c2:a1:d3:68:0c:a7:0c:f3:cd:57:68:52:18:ea:d0:d6:f6:e8: b0:dc:d1:f7:b9:fe:39:2f:9c:2f:dd:4c:b1:eb:de:bc:8a:2b: 69:54:6a:19:3d:4d:bc:e9:f5:7c:d9:be:65:5c:25:ad:43:c0: e7:cf:0c:3f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICELgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3 MjFDNUREMzQ1OURGRjg1MzQ4RjFCMzlEREE5REQ1MDU4NjIzNDAeFw0yNDAyMTkx MjU4MjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2OEU1OTVDQTNEREI5 NEJBNjUwMEYzMDQ5REM0QjRFQ0M3RTEyNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmWGBVhZL1Aj8y9lLTgZr+FLBk575S2vvdXCyOE20bxANvKEf9 6n7XQP5yz3/b9sjT9qyvum4+cNnrHeBbtvkvxYGZH23GSClaahVlwydH3N8m+Dk8 NrKVUKc43YHsu9136KugUEJuQqxEhahMAbX7W9pwNwAzNeBcyYFuQdKrgDdI7Eh8 Z4N4Cbgy37bP0SkD1pMJ/HYPxUqrNsRdpTjijhOXBXhRaC3QT8vjJ2CiywxmGf9J 87SGwUSwpDUQZEYUzJMX5zvPxDSmPZrFJUt2eCABZWKB/Ya3FkMwJkyIul+yrMng ayDpiit0rALSyarRwJVCZMz/3m1OAKMqjtBJAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUpo5ZXKPduUumUA8wSdxLTsx+El0wHwYDVR0jBBgwFoAUTnIcXdNFnf+FNI8b Od2p3VBYYjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkcvVG5JY1hkTkZuZi1GTkk4Yk9kMnAzVkJZWWpRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9UbkljWGRORm5mLUZOSThiT2QycDNWQllZalEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HSklORy9wbzVaWEtQZHVVdW1V QTh3U2R4TFRzeC1FbDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAQqQDANBgkqhkiG9w0BAQsFAAOCAQEAVx+d757BQS1VyohhLuwK9ekd7KaL rN5vMnC8wEywD0sAcomlc+37WyK8e0ASLMDkpPks634O/s8c3+EYpxulGVsH09zC 7HfNeC9uWdQ5fHT3s7XeZPM+PHgMBmPe7qDkz8HF+4THb3MauI1ORdwqVHDtTDbv mwNzPd7+D+y4cOmkVVG1FAKUm9GCZRVN04Pe+dHcSCJot8SXwnW1cioS2PTpnZF/ q5IpIcRLrcZc8Ur2XeO7octml+46Kxq75ynH1HP9GAh0wqHTaAynDPPNV2hSGOrQ 1vbosNzR97n+OS+cL91MsevevIoraVRqGT1NvOn1fNm+ZVwlrUPA588MPw== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:01 2024 by rpki-client on console-fra.rpki-client.org