$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/yqep_G8fnsqZHp2KD392BykfTrk.roa File: yqep_G8fnsqZHp2KD392BykfTrk.roa (raw, json) Hash identifier: HQnRcgaWLvLvNXVAcP4sgU+H6owQQrzxaUr6PmaRCBc= Subject key identifier: CA:A7:A9:FC:6F:1F:9E:CA:99:1E:9D:8A:0F:7F:76:07:29:1F:4E:B9 Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Certificate serial: 099C Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/yqep_G8fnsqZHp2KD392BykfTrk.roa Signing time: Mon 26 Aug 2024 05:23:44 +0000 ROA not before: Mon 26 Aug 2024 05:23:44 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131677 IP address blocks: 2405:b8c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2460 (0x99c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Validity Not Before: Aug 26 05:23:44 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CAA7A9FC6F1F9ECA991E9D8A0F7F7607291F4EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:fd:6b:13:0b:99:25:99:38:11:98:25:f6: 91:1f:ea:f6:46:63:df:a2:32:95:f6:80:ec:3f:a0: c5:fc:60:e9:0e:00:22:d9:63:b4:6e:71:98:83:45: 75:c8:ce:94:5f:77:0d:6a:05:ed:70:2e:22:1f:55: ae:b4:a0:a6:43:6d:a7:54:0d:ec:a8:44:39:39:43: 85:a1:0c:b7:3b:87:50:ff:4b:c2:b5:d6:9f:e0:1a: bd:aa:c1:59:74:b1:ec:3a:fd:e6:78:88:92:a7:c0: 68:f7:7d:bb:dc:e6:e5:7d:30:56:5d:ee:f3:61:49: 6c:53:44:cf:83:6d:a3:3a:be:df:9a:b2:40:bd:36: 1a:84:05:0a:1a:82:9c:af:50:50:36:94:17:12:f7: d1:f9:9a:cf:4e:e4:94:c1:aa:1d:6e:98:65:03:61: 6f:0f:ea:91:21:ab:bb:65:6b:7e:81:53:7c:a1:58: 0d:fc:87:86:69:c9:e0:5b:49:85:ff:78:ed:5b:1b: bc:c1:fd:e8:05:3a:84:9b:c6:92:9c:4b:a7:7e:23: e6:08:91:d6:6f:a5:b7:5e:11:30:57:b2:4a:0a:17: e9:8c:6f:fa:5e:6c:85:19:6d:4b:35:4b:98:84:8c: a1:78:55:5a:90:df:ef:84:ab:ce:fd:cd:10:66:21: 5f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A7:A9:FC:6F:1F:9E:CA:99:1E:9D:8A:0F:7F:76:07:29:1F:4E:B9 X509v3 Authority Key Identifier: keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/yqep_G8fnsqZHp2KD392BykfTrk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:b8c0::/32 Signature Algorithm: sha256WithRSAEncryption e0:92:38:ec:2c:75:8f:d0:21:8e:2b:ca:ef:72:51:c0:ad:61: d2:c0:be:c0:41:e8:0d:f5:1d:38:54:d0:96:db:b1:c9:6e:22: 8f:6f:46:da:d1:76:1f:e4:7f:f8:12:6f:f6:7b:22:04:73:d6: 9b:4d:7d:7b:fd:73:ed:e4:11:64:0c:1a:84:1f:6b:d1:90:8c: a3:c1:77:cc:8c:9d:56:80:fb:3a:0b:0d:c9:f9:ae:ee:37:d7: 3f:50:33:73:23:8f:0e:75:d4:68:36:50:e8:cf:ef:39:be:31: 1e:9e:dc:96:41:c5:44:13:f2:75:36:63:4e:36:c3:ae:f4:a9: d1:71:6d:a3:0c:2e:a5:a2:52:37:9b:b0:a4:d2:d5:f8:27:94: ac:dc:63:58:b7:f8:9e:ad:c1:87:a1:b8:50:d7:34:de:a6:6a: 0e:1d:6e:3e:d8:28:db:87:21:52:74:71:90:6e:4f:e8:69:ae: 3d:47:8c:4c:45:13:9b:7c:1d:66:69:73:74:2a:d1:e4:fe:20: bc:22:65:e3:20:7b:c0:e1:84:24:c2:15:46:cc:d2:f4:d3:c6: 52:10:6a:ca:a3:27:9e:98:8d:86:61:64:cf:82:b6:51:48:8a: 86:e3:a8:10:66:66:cb:f4:37:42:e9:c5:96:a2:da:2b:23:17: 50:2b:11:c6 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICCZwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUz OThDNTJDQzJBMDc5REE5MDE0ODIxMEFDODUzMjhDMTFCQkU5NjAeFw0yNDA4MjYw NTIzNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENBQTdBOUZDNkYxRjlF Q0E5OTFFOUQ4QTBGN0Y3NjA3MjkxRjRFQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDct/1rEwuZJZk4EZgl9pEf6vZGY9+iMpX2gOw/oMX8YOkOACLZ Y7RucZiDRXXIzpRfdw1qBe1wLiIfVa60oKZDbadUDeyoRDk5Q4WhDLc7h1D/S8K1 1p/gGr2qwVl0sew6/eZ4iJKnwGj3fbvc5uV9MFZd7vNhSWxTRM+DbaM6vt+askC9 NhqEBQoagpyvUFA2lBcS99H5ms9O5JTBqh1umGUDYW8P6pEhq7tla36BU3yhWA38 h4ZpyeBbSYX/eO1bG7zB/egFOoSbxpKcS6d+I+YIkdZvpbdeETBXskoKF+mMb/pe bIUZbUs1S5iEjKF4VVqQ3++Eq879zRBmIV+bAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUyqep/G8fnsqZHp2KD392BykfTrkwHwYDVR0jBBgwFoAUbjmMUswqB52pAUgh CshTKMEbvpYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTlJJ Q0gvYmptTVVzd3FCNTJwQVVnaENzaFRLTUVidnBZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iam1NVXN3cUI1MnBBVWdoQ3NoVEtNRWJ2cFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9PUEVOUklDSC95cWVwX0c4Zm5zcVpI cDJLRDM5MkJ5a2ZUcmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAW4wDANBgkqhkiG9w0BAQsFAAOCAQEA4JI47Cx1j9AhjivK73JRwK1h0sC+ wEHoDfUdOFTQltuxyW4ij29G2tF2H+R/+BJv9nsiBHPWm019e/1z7eQRZAwahB9r 0ZCMo8F3zIydVoD7OgsNyfmu7jfXP1AzcyOPDnXUaDZQ6M/vOb4xHp7clkHFRBPy dTZjTjbDrvSp0XFtowwupaJSN5uwpNLV+CeUrNxjWLf4nq3Bh6G4UNc03qZqDh1u Ptgo24chUnRxkG5P6GmuPUeMTEUTm3wdZmlzdCrR5P4gvCJl4yB7wOGEJMIVRszS 9NPGUhBqyqMnnpiNhmFkz4K2UUiKhuOoEGZmy/Q3QunFlqLaKyMXUCsRxg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org