$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/WS0jXG_oKrBxXxYH14TcxKITTpI.roa File: WS0jXG_oKrBxXxYH14TcxKITTpI.roa (raw, json) Hash identifier: QuzEU+tU/sxWkX12VLCm2QNMFtO3wkW6sAXjQZhzxRw= Subject key identifier: 59:2D:23:5C:6F:E8:2A:B0:71:5F:16:07:D7:84:DC:C4:A2:13:4E:92 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 12A6 Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/WS0jXG_oKrBxXxYH14TcxKITTpI.roa Signing time: Mon 12 Feb 2024 16:32:44 +0000 ROA not before: Mon 12 Feb 2024 16:32:44 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 16509 IP address blocks: 2403:aac0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4774 (0x12a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Feb 12 16:32:44 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=592D235C6FE82AB0715F1607D784DCC4A2134E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:78:3f:ff:f0:c9:b5:fb:ac:8a:ae:da:63: d5:59:4a:19:4e:6e:ff:8e:61:83:b5:94:ee:f9:7e: 67:0b:92:b8:7b:80:7b:6b:76:0f:a1:0c:30:6f:63: 58:76:27:67:80:d0:42:17:66:bc:10:91:ca:65:8c: 40:0d:b8:64:90:d6:22:d5:e4:4b:03:83:3e:f5:92: a2:8b:10:f1:da:42:45:ec:bc:30:fe:26:37:f7:c1: 34:ed:4d:d9:da:7b:37:e4:98:28:66:7e:3c:b6:78: ac:2e:01:e2:d2:74:ea:4f:b9:9b:ca:02:4b:5c:70: 42:0c:4c:e6:03:56:79:70:20:b3:42:64:2b:4c:e9: 06:b1:73:71:d2:64:3a:8f:91:c1:33:c5:6b:a2:97: 3e:e4:db:4f:02:80:6f:b8:e5:ab:b5:be:81:99:57: 9e:48:e6:24:3e:bb:5e:c3:8f:54:ab:4b:34:e3:19: 87:56:9a:24:35:63:1f:95:d7:e5:1f:38:5f:8a:a4: e7:c5:9e:0b:51:6c:8c:c7:66:95:13:22:ed:4f:d0: 8f:ed:e9:40:34:5a:f5:29:88:11:3e:cc:83:3b:b4: e1:dc:d1:11:6c:28:a1:b2:1d:b3:35:bc:83:30:fb: 83:18:17:93:aa:4e:84:3b:97:0b:72:3b:f6:3d:7b: 6b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2D:23:5C:6F:E8:2A:B0:71:5F:16:07:D7:84:DC:C4:A2:13:4E:92 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/WS0jXG_oKrBxXxYH14TcxKITTpI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:aac0::/32 Signature Algorithm: sha256WithRSAEncryption 08:b6:5f:57:1d:94:84:23:a6:b9:e5:c8:d2:6a:81:3c:85:4f: 1f:bb:e0:63:12:a8:2f:33:b3:73:42:3d:72:6c:3f:3c:e8:dd: 2b:bc:81:d0:c6:23:f3:a3:c9:e5:03:fe:76:bc:3a:41:97:d9: a8:19:f4:13:e7:34:15:12:fc:22:53:d3:68:c1:f7:de:99:b3: 51:a0:03:0b:fa:1c:c0:f1:6d:39:0b:a3:41:21:c1:b6:d3:23: 03:5e:e3:62:97:3d:2e:bb:4f:c3:81:07:a9:59:78:6b:3b:47: bf:52:f6:df:a3:bf:2c:a2:01:4f:de:ed:5d:98:b4:af:c1:e8: 6d:c0:43:b0:d4:6f:ff:d8:52:79:67:37:77:b2:83:5f:47:42: 90:01:ca:ed:88:c8:92:a1:d6:6c:88:95:68:44:7e:3d:3d:aa: 04:e4:7b:8e:c2:9d:63:61:21:7e:bf:35:7f:30:77:f4:54:58: f9:18:61:a6:59:5b:9c:1b:48:cf:18:85:95:ae:74:87:74:21: d8:12:55:88:1a:76:ae:ba:da:a6:53:30:0a:e0:a6:1a:bd:37: b5:23:29:73:19:46:d2:f7:8a:6a:ba:21:2e:c4:e7:05:06:13: 41:f4:c4:56:a9:08:57:1f:a3:d1:df:d3:2d:12:d6:a3:df:53: 36:bc:56:97 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDAyMTIx NjMyNDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDU5MkQyMzVDNkZFODJB QjA3MTVGMTYwN0Q3ODREQ0M0QTIxMzRFOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRnng///DJtfusiq7aY9VZShlObv+OYYO1lO75fmcLkrh7gHtr dg+hDDBvY1h2J2eA0EIXZrwQkcpljEANuGSQ1iLV5EsDgz71kqKLEPHaQkXsvDD+ Jjf3wTTtTdnaezfkmChmfjy2eKwuAeLSdOpPuZvKAktccEIMTOYDVnlwILNCZCtM 6Qaxc3HSZDqPkcEzxWuilz7k208CgG+45au1voGZV55I5iQ+u17Dj1SrSzTjGYdW miQ1Yx+V1+UfOF+KpOfFngtRbIzHZpUTIu1P0I/t6UA0WvUpiBE+zIM7tOHc0RFs KKGyHbM1vIMw+4MYF5OqToQ7lwtyO/Y9e2uDAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUWS0jXG/oKrBxXxYH14TcxKITTpIwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9XUzBqWEdfb0tyQnhYeFlIMTRU Y3hLSVRUcEkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAOq wDANBgkqhkiG9w0BAQsFAAOCAQEACLZfVx2UhCOmueXI0mqBPIVPH7vgYxKoLzOz c0I9cmw/POjdK7yB0MYj86PJ5QP+drw6QZfZqBn0E+c0FRL8IlPTaMH33pmzUaAD C/ocwPFtOQujQSHBttMjA17jYpc9LrtPw4EHqVl4aztHv1L236O/LKIBT97tXZi0 r8HobcBDsNRv/9hSeWc3d7KDX0dCkAHK7YjIkqHWbIiVaER+PT2qBOR7jsKdY2Eh fr81fzB39FRY+RhhpllbnBtIzxiFla50h3Qh2BJViBp2rrraplMwCuCmGr03tSMp cxlG0veKarohLsTnBQYTQfTEVqkIVx+j0d/TLRLWo99TNrxWlw== -----END CERTIFICATE-----Generated at Thu May 2 03:38:36 2024 by rpki-client on console-ams.rpki-client.org