$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QUEWU/3bmoHHKDVXs7SPyg3p9sHaid5cw.roa File: 3bmoHHKDVXs7SPyg3p9sHaid5cw.roa (raw, json) Hash identifier: bfsejgorqz4l4v7ZMCScz05XPaT95TckxGLm7EpOmuk= Subject key identifier: DD:B9:A8:1C:72:83:55:7B:3B:48:FC:A0:DE:9F:6C:1D:A8:9D:E5:CC Certificate issuer: /CN=9D3F68C726F59B288631AFF37EA4ED76BC2A9EC7 Certificate serial: 06 Authority key identifier: 9D:3F:68:C7:26:F5:9B:28:86:31:AF:F3:7E:A4:ED:76:BC:2A:9E:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nT9oxyb1myiGMa_zfqTtdrwqnsc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/3bmoHHKDVXs7SPyg3p9sHaid5cw.roa Signing time: Fri 08 Sep 2023 12:08:55 +0000 ROA not before: Fri 08 Sep 2023 12:08:55 +0000 ROA not after: Thu 05 Sep 2024 08:24:58 +0000 asID: 131642 IP address blocks: 2401:30a0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/nT9oxyb1myiGMa_zfqTtdrwqnsc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D3F68C726F59B288631AFF37EA4ED76BC2A9EC7 Validity Not Before: Sep 8 12:08:55 2023 GMT Not After : Sep 5 08:24:58 2024 GMT Subject: CN=DDB9A81C7283557B3B48FCA0DE9F6C1DA89DE5CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:d0:59:36:42:21:e0:f9:03:05:43:9e:af: 9a:42:05:44:1b:06:dc:ce:3c:63:e8:3c:49:99:66: b3:9e:77:91:5a:11:25:72:82:45:e7:c2:9f:1a:ab: b8:aa:50:78:09:29:08:2d:12:32:15:d5:72:59:e9: 2a:66:bc:59:0d:4e:05:84:8b:3d:b6:5d:d6:f9:7e: 4f:4a:8c:16:06:0c:b9:c9:b8:26:f3:4e:36:57:6d: ad:82:59:73:ba:13:3c:08:12:49:28:d8:5a:2b:b3: 5f:b5:5d:db:a8:49:84:67:20:28:c7:37:7a:0b:a9: c5:7c:69:a1:dd:4a:f8:a3:10:97:c5:4b:45:54:89: 95:87:b3:47:8f:6a:98:f2:df:80:83:34:7e:53:ed: cb:97:cf:f3:e3:c2:e3:22:63:f1:52:71:82:fc:a7: a4:70:76:15:6f:52:15:57:78:6b:cf:bc:83:de:3c: 25:af:d3:e2:a0:1b:4a:40:13:41:ab:ca:bf:ee:01: 81:58:c6:f0:a3:04:29:cf:05:bb:9b:ad:76:33:f6: 33:6f:79:0a:62:69:31:70:fb:24:68:cb:34:b2:22: e3:ba:09:9d:96:d9:1e:9d:78:db:9d:14:04:dc:b9: ae:0b:61:e2:9e:60:04:80:0f:ef:58:63:1d:62:33: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B9:A8:1C:72:83:55:7B:3B:48:FC:A0:DE:9F:6C:1D:A8:9D:E5:CC X509v3 Authority Key Identifier: keyid:9D:3F:68:C7:26:F5:9B:28:86:31:AF:F3:7E:A4:ED:76:BC:2A:9E:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nT9oxyb1myiGMa_zfqTtdrwqnsc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/3bmoHHKDVXs7SPyg3p9sHaid5cw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:30a0::/32 Signature Algorithm: sha256WithRSAEncryption 4a:af:4e:cc:8f:2b:ee:59:3d:85:b5:35:37:d0:76:fd:1c:21: d5:cc:39:59:f9:c0:c0:ff:83:15:e0:ac:3b:55:ce:6a:61:a1: b0:4b:69:c7:43:9c:e4:4a:43:45:a3:dc:6c:62:91:d9:38:d7: 94:d4:ff:71:7c:b4:69:08:43:c9:d8:7d:15:4b:49:84:9d:be: f2:f3:b2:80:e9:26:3a:02:70:38:e6:17:02:a8:11:84:52:51: f3:0b:9d:92:81:53:67:68:fd:d5:02:11:3a:f6:54:37:9f:60: 0d:5e:3c:90:d0:64:6e:56:43:ad:68:a8:06:ac:e6:76:b8:b3: 77:dc:42:cc:b3:bd:e2:dc:d9:f7:ce:21:b2:1e:fc:fc:5d:54: 10:12:d8:67:f4:a5:05:81:93:1c:dc:07:ae:66:2b:a5:4c:43: 2b:b3:bd:13:68:2e:19:c2:16:cc:26:c6:cb:a0:ce:43:dc:47: 2c:46:44:3b:ab:69:bd:15:f6:db:9c:7c:77:dc:f7:99:71:94: fa:92:6a:71:7f:75:8f:56:47:72:65:22:03:f1:1b:78:71:1b: d3:72:f1:fd:59:e6:ae:5d:22:86:2f:ca:a9:85:16:b6:79:9e: fc:7b:db:19:9a:22:01:e4:b8:fe:21:51:25:14:e4:12:f9:2c: 74:37:5a:58 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RDNG NjhDNzI2RjU5QjI4ODYzMUFGRjM3RUE0RUQ3NkJDMkE5RUM3MB4XDTIzMDkwODEy MDg1NVoXDTI0MDkwNTA4MjQ1OFowMzExMC8GA1UEAxMoRERCOUE4MUM3MjgzNTU3 QjNCNDhGQ0EwREU5RjZDMURBODlERTVDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu80Fk2QiHg+QMFQ56vmkIFRBsG3M48Y+g8SZlms553kVoRJXKC RefCnxqruKpQeAkpCC0SMhXVclnpKma8WQ1OBYSLPbZd1vl+T0qMFgYMucm4JvNO NldtrYJZc7oTPAgSSSjYWiuzX7Vd26hJhGcgKMc3egupxXxpod1K+KMQl8VLRVSJ lYezR49qmPLfgIM0flPty5fP8+PC4yJj8VJxgvynpHB2FW9SFVd4a8+8g948Ja/T 4qAbSkATQavKv+4BgVjG8KMEKc8Fu5utdjP2M295CmJpMXD7JGjLNLIi47oJnZbZ Hp14250UBNy5rgth4p5gBIAP71hjHWIzPAcCAwEAAaOCAe0wggHpMB0GA1UdDgQW BBTduagccoNVeztI/KDen2wdqJ3lzDAfBgNVHSMEGDAWgBSdP2jHJvWbKIYxr/N+ pO12vCqexzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9RVUVXVS9u VDlveHliMW15aUdNYV96ZnFUdGRyd3Fuc2MuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L25UOW94eWIxbXlpR01hX3pmcVR0ZHJ3cW5zYy5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1FVRVdVLzNibW9ISEtEVlhzN1NQeWczcDlz SGFpZDVjdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkATCg MA0GCSqGSIb3DQEBCwUAA4IBAQBKr07MjyvuWT2FtTU30Hb9HCHVzDlZ+cDA/4MV 4Kw7Vc5qYaGwS2nHQ5zkSkNFo9xsYpHZONeU1P9xfLRpCEPJ2H0VS0mEnb7y87KA 6SY6AnA45hcCqBGEUlHzC52SgVNnaP3VAhE69lQ3n2ANXjyQ0GRuVkOtaKgGrOZ2 uLN33ELMs73i3Nn3ziGyHvz8XVQQEthn9KUFgZMc3AeuZiulTEMrs70TaC4ZwhbM JsbLoM5D3EcsRkQ7q2m9FfbbnHx33PeZcZT6kmpxf3WPVkdyZSID8Rt4cRvTcvH9 WeauXSKGL8qphRa2eZ78e9sZmiIB5Lj+IVElFOQS+Sx0N1pY -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:03 2024 by rpki-client on console-ams.rpki-client.org