$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/nr1dK64XU8DbfTYpbIsA7xLLzqg.roa File: nr1dK64XU8DbfTYpbIsA7xLLzqg.roa (raw, json) Hash identifier: DkMH85dSvJQEADM16u4jfIB9TqE72YsAtfaCTEJ2KEg= Subject key identifier: 9E:BD:5D:2B:AE:17:53:C0:DB:7D:36:29:6C:8B:00:EF:12:CB:CE:A8 Certificate issuer: /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Certificate serial: 12A8 Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/nr1dK64XU8DbfTYpbIsA7xLLzqg.roa Signing time: Mon 12 Feb 2024 16:33:12 +0000 ROA not before: Mon 12 Feb 2024 16:33:12 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 14618 IP address blocks: 2403:aac0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 11:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4776 (0x12a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948 Validity Not Before: Feb 12 16:33:12 2024 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9EBD5D2BAE1753C0DB7D36296C8B00EF12CBCEA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:02:97:19:51:f0:6d:fe:11:5e:f9:07:b6: 1a:84:b1:29:9c:45:a5:fb:1f:13:c9:72:d1:2c:0a: b1:46:0b:5e:2c:38:cb:97:5a:7b:de:dd:eb:4b:c2: e0:10:a7:38:54:1f:2b:cb:42:d3:2c:3d:74:c8:43: 90:2a:82:6d:df:83:23:89:d5:19:4a:58:b6:9b:a8: 03:6e:0f:e4:16:8c:dc:6d:f8:52:09:f2:4f:01:7b: 0d:fc:a5:66:ee:7b:b9:f7:6f:0c:45:d9:d3:03:4e: 52:5a:54:48:d0:60:78:c9:ff:58:2b:77:f8:04:5a: 59:be:3e:5d:40:be:f0:19:63:cf:f8:8c:a3:7f:1f: 12:cb:2d:d7:dd:4c:95:39:b2:3a:61:97:cc:14:ef: 67:8a:8e:69:bb:c9:53:98:25:36:cb:37:83:0f:be: 07:64:0d:ae:09:f5:6e:f6:9d:58:ca:5c:df:09:c0: ab:2b:b7:3d:cd:85:59:f2:ce:4b:bf:9f:a6:cd:6c: ee:e3:33:cf:0a:25:be:30:d6:4c:b7:e0:af:f7:1b: 78:b2:66:8b:98:3c:c3:60:fe:d0:87:71:7e:51:8e: b9:d8:5b:ea:f1:3c:58:04:d3:33:9b:85:e2:e7:c5: 7e:f0:ab:7a:d4:5e:1d:74:40:19:73:e2:ad:be:0a: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:BD:5D:2B:AE:17:53:C0:DB:7D:36:29:6C:8B:00:EF:12:CB:CE:A8 X509v3 Authority Key Identifier: keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/nr1dK64XU8DbfTYpbIsA7xLLzqg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:aac0::/32 Signature Algorithm: sha256WithRSAEncryption ab:1d:c4:f4:29:36:47:cb:ec:a9:bd:8e:2b:fc:ff:b8:cd:01: 25:cf:0f:b7:1d:97:6c:11:08:e6:f5:56:1f:dd:30:2c:3f:a4: 1c:03:6f:14:8a:26:1d:45:24:a9:9e:c4:9f:1b:26:e4:54:d9: 2e:0b:22:b0:0a:c3:f1:42:be:9f:e0:cd:ee:de:f5:ca:08:50: 10:5a:3b:50:13:a7:a2:12:5c:e9:66:20:4e:ce:4d:88:0f:34: 13:86:47:c3:6f:1d:2a:85:80:f5:d2:4b:77:09:4d:2b:43:91: 1c:e6:6e:3b:d4:f2:a3:f3:6b:23:5e:8e:cc:90:0c:a5:4d:26: e7:dd:65:42:c4:49:9b:a3:c6:7e:e6:09:51:e0:f9:06:c9:b1: 93:aa:e6:12:63:3a:2d:39:73:b7:5a:c0:1e:0c:43:9f:b5:8e: 13:51:82:a0:30:6e:d9:11:ba:6b:1f:3c:a8:25:61:74:5d:6c: f2:8b:c1:48:bb:54:77:1e:d0:f3:78:34:6a:2d:b7:ab:b8:6a: 0b:11:12:49:21:b1:14:24:15:48:1c:3e:ff:cc:f8:cb:8a:76: e7:ca:49:9f:a2:58:81:71:e5:bf:ce:d8:64:bc:47:c1:4a:5c: 03:30:60:a9:b8:48:57:72:02:c3:c1:c8:aa:45:45:66:fd:e2: cd:ed:33:59 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ5 QjlDRTkwQUUwM0RBRDE5QkM1NERGRjYzQUU4QzQxRTIyMzk0ODAeFw0yNDAyMTIx NjMzMTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlFQkQ1RDJCQUUxNzUz QzBEQjdEMzYyOTZDOEIwMEVGMTJDQkNFQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqgwKXGVHwbf4RXvkHthqEsSmcRaX7HxPJctEsCrFGC14sOMuX Wnve3etLwuAQpzhUHyvLQtMsPXTIQ5Aqgm3fgyOJ1RlKWLabqANuD+QWjNxt+FIJ 8k8Bew38pWbue7n3bwxF2dMDTlJaVEjQYHjJ/1grd/gEWlm+Pl1AvvAZY8/4jKN/ HxLLLdfdTJU5sjphl8wU72eKjmm7yVOYJTbLN4MPvgdkDa4J9W72nVjKXN8JwKsr tz3NhVnyzku/n6bNbO7jM88KJb4w1ky34K/3G3iyZouYPMNg/tCHcX5RjrnYW+rx PFgE0zObheLnxX7wq3rUXh10QBlz4q2+CuonAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUnr1dK64XU8DbfTYpbIsA7xLLzqgwHwYDVR0jBBgwFoAUNJuc6QrgPa0ZvFTf 9jroxB4iOUgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0NORVQv Tkp1YzZRcmdQYTBadkZUZjlqcm94QjRpT1VnLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9OSnVjNlFyZ1BhMFp2RlRmOWpyb3hCNGlPVWcuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TQ05FVC9ucjFkSzY0WFU4RGJmVFlwYklz QTd4TEx6cWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAOq wDANBgkqhkiG9w0BAQsFAAOCAQEAqx3E9Ck2R8vsqb2OK/z/uM0BJc8Ptx2XbBEI 5vVWH90wLD+kHANvFIomHUUkqZ7Enxsm5FTZLgsisArD8UK+n+DN7t71yghQEFo7 UBOnohJc6WYgTs5NiA80E4ZHw28dKoWA9dJLdwlNK0ORHOZuO9Tyo/NrI16OzJAM pU0m591lQsRJm6PGfuYJUeD5Bsmxk6rmEmM6LTlzt1rAHgxDn7WOE1GCoDBu2RG6 ax88qCVhdF1s8ovBSLtUdx7Q83g0ai23q7hqCxESSSGxFCQVSBw+/8z4y4p258pJ n6JYgXHlv87YZLxHwUpcAzBgqbhIV3ICw8HIqkVFZv3ize0zWQ== -----END CERTIFICATE-----Generated at Thu May 2 03:38:36 2024 by rpki-client on console-ams.rpki-client.org