$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/yZgTzgb9Jz4v5klUgAZhY2aHEO4.roa File: yZgTzgb9Jz4v5klUgAZhY2aHEO4.roa (raw, json) Hash identifier: JX/xDvBkwHCFC3p6EFGTJ2gbLGjgJrbfihDRn0gZRco= Subject key identifier: C9:98:13:CE:06:FD:27:3E:2F:E6:49:54:80:06:61:63:66:87:10:EE Certificate issuer: /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234 Certificate serial: 1142 Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/yZgTzgb9Jz4v5klUgAZhY2aHEO4.roa Signing time: Mon 26 Aug 2024 05:20:48 +0000 ROA not before: Mon 26 Aug 2024 05:20:48 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131633 IP address blocks: 2404:2a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4418 (0x1142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234 Validity Not Before: Aug 26 05:20:48 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C99813CE06FD273E2FE6495480066163668710EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:bc:8b:ac:7a:cd:96:b3:c7:a5:b2:ae:b5: b4:e4:b9:25:8f:6a:35:da:ec:e0:f1:dd:de:38:91: 0a:ad:23:b3:7a:34:fc:d5:76:53:00:e6:ac:cc:c8: 10:47:1d:a4:60:ea:cb:75:74:bb:4a:e7:fb:af:cb: b0:0e:ed:77:6e:d8:cd:52:3c:79:db:20:4c:3b:07: d8:82:54:ae:13:2f:ea:06:93:88:94:cb:30:32:8a: 5c:f7:a0:3c:a2:23:e8:d8:94:88:2b:f8:fa:53:b7: e9:8c:93:61:be:c6:fc:a6:7d:1d:d6:ed:51:c8:6d: 38:c5:ee:21:4c:ba:21:b6:6e:20:18:1d:61:c3:b5: 18:c7:8c:c6:0b:25:2b:c7:3b:cd:c9:1c:af:f8:14: 6a:d5:d4:3c:33:a9:92:6a:d7:c6:bc:17:25:1f:e5: 09:69:18:0c:66:35:1f:7e:5a:43:51:c9:21:1d:67: 1d:c6:76:d2:15:b7:57:90:a9:31:e7:d2:08:d5:5a: c8:8b:be:17:3e:c9:3c:7b:bf:d5:14:d5:44:b7:35: c3:c5:ed:20:69:d6:14:92:f6:35:5e:0e:be:be:ff: 49:91:e5:8b:d2:d6:82:34:26:b2:ca:79:70:91:93: d9:18:cf:77:5b:4f:99:b1:39:69:1c:bc:05:4a:6c: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:13:CE:06:FD:27:3E:2F:E6:49:54:80:06:61:63:66:87:10:EE X509v3 Authority Key Identifier: keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/yZgTzgb9Jz4v5klUgAZhY2aHEO4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:2a40::/32 Signature Algorithm: sha256WithRSAEncryption 72:d2:ee:fc:fe:ba:aa:88:94:aa:e9:ce:a4:e0:ba:50:fc:71: ca:d6:0e:d7:04:6e:8e:aa:bd:f1:da:37:ed:2d:38:a8:07:df: 1d:2c:99:6e:35:78:c1:a0:0e:05:a7:a2:9b:69:3c:c8:3b:33: f5:fb:5e:f8:95:6c:2e:54:16:d7:3d:e7:6b:d6:45:b9:bb:1f: eb:11:6d:e1:5f:7d:f6:29:95:0d:a8:a3:d3:1c:d4:52:ce:20: d8:60:73:55:62:c8:0f:a4:90:cb:92:9a:f6:83:f7:97:75:68: 07:63:0a:dc:9f:10:e7:6d:07:d4:42:35:8e:c8:71:8f:f1:c8: e2:32:a1:bf:d6:d6:d9:dd:dd:22:32:fb:6b:b5:ce:e1:4d:49: a3:7c:a3:4f:0b:4d:d7:fa:cc:68:3d:31:34:c0:7c:34:90:8b: 1f:7d:76:3a:4d:ca:9d:0d:e2:10:9d:64:1a:a1:6b:ec:3f:2d: 93:95:e1:97:8d:b5:cb:57:2b:0d:40:69:99:ea:3a:74:ae:f4: ed:54:fc:40:e9:cf:40:3a:f7:cc:fa:ac:77:ea:35:ad:94:b9: 5a:42:52:16:87:aa:8d:e5:9d:00:31:22:37:da:f9:a1:e3:5a: 83:36:e1:64:31:dc:1f:b5:e4:3e:d6:c2:ca:6d:9f:b4:cb:28: 8f:2b:83:c4 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3 MjFDNUREMzQ1OURGRjg1MzQ4RjFCMzlEREE5REQ1MDU4NjIzNDAeFw0yNDA4MjYw NTIwNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM5OTgxM0NFMDZGRDI3 M0UyRkU2NDk1NDgwMDY2MTYzNjY4NzEwRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCauryLrHrNlrPHpbKutbTkuSWPajXa7ODx3d44kQqtI7N6NPzV dlMA5qzMyBBHHaRg6st1dLtK5/uvy7AO7Xdu2M1SPHnbIEw7B9iCVK4TL+oGk4iU yzAyilz3oDyiI+jYlIgr+PpTt+mMk2G+xvymfR3W7VHIbTjF7iFMuiG2biAYHWHD tRjHjMYLJSvHO83JHK/4FGrV1DwzqZJq18a8FyUf5QlpGAxmNR9+WkNRySEdZx3G dtIVt1eQqTHn0gjVWsiLvhc+yTx7v9UU1US3NcPF7SBp1hSS9jVeDr6+/0mR5YvS 1oI0JrLKeXCRk9kYz3dbT5mxOWkcvAVKbBuzAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUyZgTzgb9Jz4v5klUgAZhY2aHEO4wHwYDVR0jBBgwFoAUTnIcXdNFnf+FNI8b Od2p3VBYYjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkcvVG5JY1hkTkZuZi1GTkk4Yk9kMnAzVkJZWWpRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9UbkljWGRORm5mLUZOSThiT2QycDNWQllZalEuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HSklORy95WmdUemdiOUp6NHY1 a2xVZ0FaaFkyYUhFTzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAQqQDANBgkqhkiG9w0BAQsFAAOCAQEActLu/P66qoiUqunOpOC6UPxxytYO 1wRujqq98do37S04qAffHSyZbjV4waAOBaeim2k8yDsz9fte+JVsLlQW1z3na9ZF ubsf6xFt4V999imVDaij0xzUUs4g2GBzVWLID6SQy5Ka9oP3l3VoB2MK3J8Q520H 1EI1jshxj/HI4jKhv9bW2d3dIjL7a7XO4U1Jo3yjTwtN1/rMaD0xNMB8NJCLH312 Ok3KnQ3iEJ1kGqFr7D8tk5Xhl421y1crDUBpmeo6dK707VT8QOnPQDr3zPqsd+o1 rZS5WkJSFoeqjeWdADEiN9r5oeNagzbhZDHcH7XkPtbCym2ftMsojyuDxA== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:40 2024 by rpki-client on console-fra.rpki-client.org