$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/s5LIrTjAFWmbDffj4YRenkIEOWs.roa File: s5LIrTjAFWmbDffj4YRenkIEOWs.roa (raw, json) Hash identifier: iskWNYTiSudpEK0tG6UV0xWnDgpNaFm5ZcV1jb9Dwac= Subject key identifier: B3:92:C8:AD:38:C0:15:69:9B:0D:F7:E3:E1:84:5E:9E:42:04:39:6B Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0E56 Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/s5LIrTjAFWmbDffj4YRenkIEOWs.roa Signing time: Mon 26 Aug 2024 05:20:54 +0000 ROA not before: Mon 26 Aug 2024 05:20:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18464 IP address blocks: 2404:73c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3670 (0xe56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Aug 26 05:20:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B392C8AD38C015699B0DF7E3E1845E9E4204396B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:d6:37:8d:8f:3b:a6:b9:3c:ce:ce:c1:78: c4:1b:20:5f:d4:cc:da:62:4a:e7:54:e0:fe:8e:ce: 0b:92:9f:b0:97:74:2b:dd:81:62:94:94:63:8a:21: c8:4f:07:9e:84:6d:7c:c7:d1:6c:0e:f9:31:fa:37: 00:34:8e:8f:38:0e:6b:9a:07:2f:c3:b4:7f:60:06: 4c:e9:8e:7f:25:56:1c:32:4b:59:b2:e6:f2:8a:1e: 0e:cf:6c:c2:de:d1:82:ec:a3:78:95:fe:1f:ee:70: b3:bc:c6:32:0b:e3:55:92:6d:09:2b:0e:e8:7f:b6: f4:e4:61:19:99:c0:20:30:a3:38:48:70:23:b6:e2: b7:5a:6e:62:cc:3b:a6:ff:58:f4:fa:94:3f:32:24: ea:1e:d7:1e:97:46:c5:d1:c0:e6:d3:5b:3c:88:8a: e9:50:82:a8:f9:e7:68:fb:0b:05:87:d6:8d:ab:af: 40:e2:dd:93:a5:68:dc:90:7b:b4:d1:b6:fb:eb:ef: 25:5d:1c:61:65:96:74:9c:99:8a:97:3f:49:3a:72: 56:93:ba:c4:b6:a3:92:d0:59:d7:23:34:d4:67:48: 18:27:07:46:70:a0:3a:e2:b0:e3:34:43:e8:59:74: 2b:2d:a5:66:43:1d:91:a9:b2:43:c2:bc:92:50:af: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:C8:AD:38:C0:15:69:9B:0D:F7:E3:E1:84:5E:9E:42:04:39:6B X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/s5LIrTjAFWmbDffj4YRenkIEOWs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:73c0::/32 Signature Algorithm: sha256WithRSAEncryption 85:ca:ec:ce:4a:a4:a3:3f:6c:cd:22:f0:8c:1f:d6:63:ff:eb: 2b:70:c1:78:e4:d7:24:59:6d:d3:c5:84:4f:4c:90:c4:09:ef: 24:72:13:1d:71:9e:e3:11:56:de:ac:f7:fd:56:65:54:b1:9b: de:24:e3:d0:d3:67:9b:a3:6b:45:f2:47:f0:3b:ed:e9:d0:cf: d7:0e:a3:74:e1:9e:3e:dc:ea:b0:fc:ae:c1:d3:11:82:41:85: 28:16:5b:95:a5:07:1e:36:44:0d:fc:66:dd:b5:7c:e5:62:ef: ee:e2:6b:80:e0:cb:dc:2d:1c:fa:70:6a:58:f4:5c:c5:ca:6a: b4:05:c3:4e:6d:ee:d2:c7:02:66:8f:96:04:4f:b4:58:bc:69: e0:aa:f3:25:ee:66:72:d0:a2:48:f3:56:a8:d6:02:e2:98:e6: 5e:76:93:f5:38:8d:39:61:04:8d:7b:48:bd:97:f5:90:02:3e: 5e:c3:2b:3e:e6:54:54:e2:fd:46:23:62:17:7f:fd:01:30:1c: e9:18:09:53:33:e4:56:3c:08:cf:b8:4a:c7:7d:65:9e:d3:e3: 4f:4e:ed:39:a7:be:44:0a:02:db:29:9e:42:df:79:97:1a:45: 4c:1d:f7:1a:f6:f7:7c:eb:6f:92:b1:b7:b0:94:94:00:24:39: 34:3b:58:cb -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICDlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNDA4MjYw NTIwNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIzOTJDOEFEMzhDMDE1 Njk5QjBERjdFM0UxODQ1RTlFNDIwNDM5NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH2tY3jY87prk8zs7BeMQbIF/UzNpiSudU4P6OzguSn7CXdCvd gWKUlGOKIchPB56EbXzH0WwO+TH6NwA0jo84DmuaBy/DtH9gBkzpjn8lVhwyS1my 5vKKHg7PbMLe0YLso3iV/h/ucLO8xjIL41WSbQkrDuh/tvTkYRmZwCAwozhIcCO2 4rdabmLMO6b/WPT6lD8yJOoe1x6XRsXRwObTWzyIiulQgqj552j7CwWH1o2rr0Di 3ZOlaNyQe7TRtvvr7yVdHGFllnScmYqXP0k6claTusS2o5LQWdcjNNRnSBgnB0Zw oDrisOM0Q+hZdCstpWZDHZGpskPCvJJQr4ArAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUs5LIrTjAFWmbDffj4YRenkIEOWswHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vczVMSXJUakFG V21iRGZmajRZUmVua0lFT1dzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQEc8AwDQYJKoZIhvcNAQELBQADggEBAIXK7M5KpKM/bM0i8Iwf1mP/ 6ytwwXjk1yRZbdPFhE9MkMQJ7yRyEx1xnuMRVt6s9/1WZVSxm94k49DTZ5uja0Xy R/A77enQz9cOo3Thnj7c6rD8rsHTEYJBhSgWW5WlBx42RA38Zt21fOVi7+7ia4Dg y9wtHPpwalj0XMXKarQFw05t7tLHAmaPlgRPtFi8aeCq8yXuZnLQokjzVqjWAuKY 5l52k/U4jTlhBI17SL2X9ZACPl7DKz7mVFTi/UYjYhd//QEwHOkYCVMz5FY8CM+4 Ssd9ZZ7T409O7TmnvkQKAtspnkLfeZcaRUwd9xr293zrb5Kxt7CUlAAkOTQ7WMs= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:09 2024 by rpki-client on console-ams.rpki-client.org