$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/ppTNXLFPNNCkGFxPwixl06Ehan0.roa File: ppTNXLFPNNCkGFxPwixl06Ehan0.roa (raw, json) Hash identifier: R8UKxdpouIOe6h/A07NHgMSfFAmLExR8GDfbW/vkit8= Subject key identifier: A6:94:CD:5C:B1:4F:34:D0:A4:18:5C:4F:C2:2C:65:D3:A1:21:6A:7D Certificate issuer: /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Certificate serial: F1 Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/ppTNXLFPNNCkGFxPwixl06Ehan0.roa Signing time: Wed 27 Mar 2024 15:28:57 +0000 ROA not before: Wed 27 Mar 2024 15:28:57 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 8075 IP address blocks: 2400:f520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47 Validity Not Before: Mar 27 15:28:57 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A694CD5CB14F34D0A4185C4FC22C65D3A1216A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:ad:20:d0:2d:48:b4:25:4b:c9:9e:6c:95: f0:8b:44:a7:47:d6:b1:01:c9:f9:61:f6:05:e2:c8: 3d:f3:d9:ca:4b:f4:d5:9e:e7:80:4d:f8:22:cb:d6: 27:67:23:a3:d8:c9:9c:e8:10:5a:a1:f7:82:9d:d3: b5:56:a0:5d:5b:d5:17:a1:8c:ce:e6:27:c0:41:4f: 86:c4:4a:28:d1:e6:df:13:4d:ce:19:ad:52:a1:18: f2:cc:09:de:0f:7a:c9:f9:af:93:74:e0:6d:18:13: c2:9e:d1:38:f6:f0:0f:79:c9:54:bf:24:9c:cd:10: c4:de:8e:b2:96:1d:c9:d8:fc:90:b7:82:5c:29:e0: 37:4b:17:8a:db:bc:eb:77:ad:48:69:5e:36:79:67: f6:ba:61:f7:5b:38:a5:cd:f7:7a:5f:75:ec:81:a5: 75:a7:f3:18:0e:70:fe:b6:b5:8e:fc:f3:39:f5:25: 9e:7a:50:12:b0:34:6a:5e:9f:eb:c9:b0:8f:31:9e: be:5e:33:14:4a:28:4d:89:56:79:19:34:25:81:ee: 66:75:37:c4:44:d0:84:2b:bb:54:61:76:91:3a:71: c6:7b:0f:40:0b:cc:bc:db:51:24:11:3a:29:fd:3f: 72:54:13:96:53:d1:3c:d0:7a:42:f3:0c:41:cb:bc: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:94:CD:5C:B1:4F:34:D0:A4:18:5C:4F:C2:2C:65:D3:A1:21:6A:7D X509v3 Authority Key Identifier: keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/ppTNXLFPNNCkGFxPwixl06Ehan0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:f520::/32 Signature Algorithm: sha256WithRSAEncryption b8:9d:83:ff:e8:da:74:f3:93:78:06:54:c7:b2:eb:93:87:c7: fe:5e:d3:82:22:f1:75:13:2c:a7:65:c3:3c:df:82:a9:9d:a5: ed:41:dd:d2:bc:76:42:f0:11:83:1d:a1:6e:fa:09:ef:a9:02: 7f:8a:e3:7e:85:98:43:f5:77:7d:ea:2a:47:ed:09:3e:16:c2: 31:f7:cc:1d:d6:9b:43:2b:46:b9:76:28:0c:33:87:84:5f:65: 11:f5:12:5d:30:72:88:95:ce:33:26:fb:14:78:1c:91:be:0f: 87:40:e1:b5:10:b2:a7:dc:e2:14:68:32:d6:32:23:f0:92:4e: f7:2f:1e:f7:b7:9c:84:29:cc:f9:5a:4c:14:72:d3:ec:5e:ba: 35:bb:34:0b:6f:64:96:27:27:59:54:07:7c:78:ae:38:af:0f: 23:68:9a:da:e6:c7:65:a9:c0:96:49:00:12:3e:dd:02:b7:77: 8c:a0:d2:40:3b:41:59:18:24:1d:56:a1:d8:41:7c:27:7e:ad: fb:6a:56:1b:fa:9e:eb:f5:d5:f7:23:16:7d:65:15:a1:12:97: fb:9e:c6:c3:31:57:b8:b3:09:f4:29:8a:fd:ca:ff:d7:0a:16: df:cd:13:e8:bd:8d:4f:1a:c3:35:3d:ce:90:d8:a9:58:3e:7c: ce:d0:db:2c -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjVB NDRCNUUwNzg4NjVCQUVGOTM1MTM2OUQ5NjFENkJBMjU1NkQ0NzAeFw0yNDAzMjcx NTI4NTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2OTRDRDVDQjE0RjM0 RDBBNDE4NUM0RkMyMkM2NUQzQTEyMTZBN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5YK0g0C1ItCVLyZ5slfCLRKdH1rEByflh9gXiyD3z2cpL9NWe 54BN+CLL1idnI6PYyZzoEFqh94Kd07VWoF1b1RehjM7mJ8BBT4bESijR5t8TTc4Z rVKhGPLMCd4Pesn5r5N04G0YE8Ke0Tj28A95yVS/JJzNEMTejrKWHcnY/JC3glwp 4DdLF4rbvOt3rUhpXjZ5Z/a6YfdbOKXN93pfdeyBpXWn8xgOcP62tY788zn1JZ56 UBKwNGpen+vJsI8xnr5eMxRKKE2JVnkZNCWB7mZ1N8RE0IQru1RhdpE6ccZ7D0AL zLzbUSQROin9P3JUE5ZT0TzQekLzDEHLvBLHAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUppTNXLFPNNCkGFxPwixl06Ehan0wHwYDVR0jBBgwFoAU9aRLXgeIZbrvk1E2 nZYda6JVbUcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVH UkVFLzlhUkxYZ2VJWmJydmsxRTJuWllkYTZKVmJVYy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvOWFSTFhnZUlaYnJ2azFFMm5aWWRhNkpWYlVjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT05FREVHUkVFL3BwVE5YTEZQTk5D a0dGeFB3aXhsMDZFaGFuMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAPUgMA0GCSqGSIb3DQEBCwUAA4IBAQC4nYP/6Np085N4BlTHsuuTh8f+ XtOCIvF1EyynZcM834KpnaXtQd3SvHZC8BGDHaFu+gnvqQJ/iuN+hZhD9Xd96ipH 7Qk+FsIx98wd1ptDK0a5digMM4eEX2UR9RJdMHKIlc4zJvsUeByRvg+HQOG1ELKn 3OIUaDLWMiPwkk73Lx73t5yEKcz5WkwUctPsXro1uzQLb2SWJydZVAd8eK44rw8j aJra5sdlqcCWSQASPt0Ct3eMoNJAO0FZGCQdVqHYQXwnfq37alYb+p7r9dX3IxZ9 ZRWhEpf7nsbDMVe4swn0KYr9yv/XChbfzRPovY1PGsM1Pc6Q2KlYPnzO0Nss -----END CERTIFICATE-----Generated at Mon May 20 08:58:25 2024 by rpki-client on console-ams.rpki-client.org