$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa File: sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa (raw, json) Hash identifier: mm1H1t+bgtqAtSukSKbWzeIs5R0FrD0rZH27ftDyp6s= Subject key identifier: B1:18:36:5E:58:9E:00:ED:9A:F4:05:FA:0F:53:65:F4:8A:84:BE:A0 Certificate issuer: /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Certificate serial: 12F9 Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa Signing time: Mon 26 Aug 2024 05:23:10 +0000 ROA not before: Mon 26 Aug 2024 05:23:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 7482 IP address blocks: 2403:b340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4857 (0x12f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB Validity Not Before: Aug 26 05:23:10 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B118365E589E00ED9AF405FA0F5365F48A84BEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:de:57:b5:8b:61:99:80:6d:ef:5f:50:aa: 50:93:09:89:91:10:da:52:24:9e:3d:e7:f6:d5:8d: 6c:57:64:ae:e2:18:3f:c0:97:46:34:1c:0b:e2:7f: ce:89:67:d7:5b:30:67:f5:8e:e5:4a:9b:f2:aa:d1: d6:ee:f9:4c:3b:1b:43:f9:13:8e:9d:b5:14:2b:2d: c4:a6:dc:19:2f:4d:df:6c:ab:e6:db:4c:d9:a4:b9: 80:02:51:da:71:17:d2:e2:c0:5c:db:8f:ff:d8:b8: 7a:b0:11:6c:2d:a0:32:85:91:eb:74:a8:88:ce:f1: 92:5e:80:3b:c6:cf:de:eb:22:5d:3c:3a:37:cb:a8: a1:2e:0d:e4:cf:94:27:b2:6d:21:db:84:5e:5c:c0: 72:23:6c:94:64:da:df:96:5d:fd:dd:a0:32:4c:d6: f2:16:22:64:59:8b:c4:3f:70:e3:14:5e:61:07:6c: 53:78:69:1a:c9:35:5f:98:73:aa:df:80:0e:2e:0d: 97:43:6e:55:81:33:ff:96:37:5d:1d:ab:49:e2:84: dc:f3:a4:2e:5b:03:fb:f9:ea:a2:be:9e:a7:f1:22: 32:06:87:b1:e5:40:a5:9c:35:f4:4e:0d:a7:39:30: c0:86:46:ec:d4:9d:87:07:ed:da:b6:92:20:a2:d9: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:18:36:5E:58:9E:00:ED:9A:F4:05:FA:0F:53:65:F4:8A:84:BE:A0 X509v3 Authority Key Identifier: keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/sRg2XlieAO2a9AX6D1Nl9IqEvqA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:b340::/32 Signature Algorithm: sha256WithRSAEncryption 09:33:f3:10:7b:34:fb:f6:49:f8:5f:d5:61:b1:b6:c8:f6:f2: bf:de:66:66:bf:46:13:c5:53:fb:bf:69:4f:69:0c:78:3f:ec: fd:9d:81:94:04:e5:82:ef:6b:fb:95:a9:69:bf:7d:f2:a2:3a: b7:70:f2:59:36:da:8b:23:c2:b9:f0:f9:6d:7a:9e:f5:1e:21: b4:e4:5e:3f:e3:f1:43:8b:56:26:91:c1:70:a9:1d:4d:46:34: b5:39:4b:3f:e3:21:f0:ee:83:61:11:e4:f0:9e:95:d9:fa:a4: df:34:41:43:48:d4:79:8c:89:e0:00:e8:0b:23:33:8a:e6:98: 36:9e:74:74:a2:65:85:8b:83:18:c5:2d:6b:92:77:d3:0d:21: e8:9c:d4:f6:9b:c0:1f:f8:d1:15:b3:5e:80:a2:84:fa:ba:91: 4d:61:d6:43:a5:3d:c6:25:f2:77:49:c0:74:22:3c:18:e7:fa: 4d:6e:f3:ca:88:af:88:e8:85:8c:9a:ba:00:58:9d:26:21:5c: 23:2f:4e:d7:bb:b9:21:2a:28:0b:59:d0:7e:35:50:f8:ba:13: b1:74:0c:6e:ea:eb:96:57:f9:ce:70:4d:c1:e1:26:dd:80:f7: d4:d1:a8:b8:7a:a5:ff:39:de:15:60:0b:03:02:2d:b9:b1:85: 38:50:50:b8 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1 MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yNDA4MjYw NTIzMTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxMTgzNjVFNTg5RTAw RUQ5QUY0MDVGQTBGNTM2NUY0OEE4NEJFQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRNt5XtYthmYBt719QqlCTCYmRENpSJJ495/bVjWxXZK7iGD/A l0Y0HAvif86JZ9dbMGf1juVKm/Kq0dbu+Uw7G0P5E46dtRQrLcSm3BkvTd9sq+bb TNmkuYACUdpxF9LiwFzbj//YuHqwEWwtoDKFket0qIjO8ZJegDvGz97rIl08OjfL qKEuDeTPlCeybSHbhF5cwHIjbJRk2t+WXf3doDJM1vIWImRZi8Q/cOMUXmEHbFN4 aRrJNV+Yc6rfgA4uDZdDblWBM/+WN10dq0nihNzzpC5bA/v56qK+nqfxIjIGh7Hl QKWcNfRODac5MMCGRuzUnYcH7dq2kiCi2WrzAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUsRg2XlieAO2a9AX6D1Nl9IqEvqAwHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVUL3NSZzJYbGllQU8yYTlBWDZE MU5sOUlxRXZxQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk A7NAMA0GCSqGSIb3DQEBCwUAA4IBAQAJM/MQezT79kn4X9VhsbbI9vK/3mZmv0YT xVP7v2lPaQx4P+z9nYGUBOWC72v7lalpv33yojq3cPJZNtqLI8K58Pltep71HiG0 5F4/4/FDi1YmkcFwqR1NRjS1OUs/4yHw7oNhEeTwnpXZ+qTfNEFDSNR5jIngAOgL IzOK5pg2nnR0omWFi4MYxS1rknfTDSHonNT2m8Af+NEVs16AooT6upFNYdZDpT3G JfJ3ScB0IjwY5/pNbvPKiK+I6IWMmroAWJ0mIVwjL07Xu7khKigLWdB+NVD4uhOx dAxu6uuWV/nOcE3B4SbdgPfU0ai4eqX/Od4VYAsDAi25sYU4UFC4 -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:11 2024 by rpki-client on console-ams.rpki-client.org