$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/vfc0YYqbgV017xcaQ2Dp4phd2E4.roa File: vfc0YYqbgV017xcaQ2Dp4phd2E4.roa (raw, json) Hash identifier: GzR8w92o9oV0ht6yXiCZXRTQ8iRRWR3mgRguRpMSDzc= Subject key identifier: BD:F7:34:61:8A:9B:81:5D:35:EF:17:1A:43:60:E9:E2:98:5D:D8:4E Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0CC8 Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/vfc0YYqbgV017xcaQ2Dp4phd2E4.roa Signing time: Mon 26 Aug 2024 05:25:56 +0000 ROA not before: Mon 26 Aug 2024 05:25:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 2402:c340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Aug 26 05:25:56 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BDF734618A9B815D35EF171A4360E9E2985DD84E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:91:64:07:d2:08:ee:59:5c:7a:6d:23:23: 02:c1:90:ae:04:a8:11:17:a7:5a:4b:41:40:b7:06: 42:15:5b:f8:64:de:4a:7a:28:e4:a1:20:4b:77:b9: a4:9f:f6:31:63:b1:7d:15:08:69:bf:67:ef:1d:7f: 91:e0:f7:90:d6:5f:41:d6:a8:6b:22:58:6a:46:4f: 97:b5:60:79:e5:e0:f1:f2:28:80:ea:a6:83:4b:ce: 7a:c9:21:2e:ce:bf:5d:4a:ac:a8:a0:34:a9:ea:2f: e1:65:39:80:c7:e8:fc:17:7b:b5:36:b4:69:3b:65: 46:e2:bc:07:52:ca:41:40:bc:f2:c7:e7:bb:e5:65: 60:8a:62:92:7c:de:ef:55:91:40:37:f0:55:88:25: d6:76:b2:c4:a7:1b:6c:57:30:76:4a:1c:25:e6:80: a9:c4:d6:29:d8:5d:af:0f:56:14:72:76:b1:e8:35: 71:45:18:9f:7b:a4:e9:67:ee:ce:d3:bf:55:48:2a: dc:64:1d:99:da:fe:fd:70:c5:56:b7:ac:bd:91:a5: dc:43:89:c6:44:45:11:33:6f:4d:5d:69:d4:b0:59: 96:e0:fd:43:76:4b:51:45:b8:80:97:9e:d8:fc:3e: 9b:cc:f2:58:6f:bf:85:46:1b:b8:b0:bb:f6:e9:87: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F7:34:61:8A:9B:81:5D:35:EF:17:1A:43:60:E9:E2:98:5D:D8:4E X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/vfc0YYqbgV017xcaQ2Dp4phd2E4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:c340::/32 Signature Algorithm: sha256WithRSAEncryption 16:31:bc:eb:48:d7:b9:f4:70:09:b2:bd:6b:47:44:14:d5:dc: bc:27:39:26:d2:2c:40:47:bb:69:d1:bc:c2:9d:aa:de:c0:39: 63:79:f1:ee:da:ed:c2:34:df:08:9a:50:c5:ca:6f:a4:54:8a: 28:b4:bb:0d:fb:d7:24:d9:e7:30:23:b2:8b:66:11:18:14:5d: fc:7e:8b:c2:27:17:6f:16:da:35:24:e8:f7:8f:9d:2c:b0:ff: b2:1c:ba:5a:87:8e:7f:03:6b:2b:02:f5:4c:9a:7d:33:b8:b2: b1:89:e1:a1:b7:99:98:80:e8:aa:45:2e:69:b5:33:77:fa:22: 21:ae:72:47:cb:14:8e:43:f9:62:b6:2a:af:6a:87:54:34:fa: dc:61:13:58:b9:1b:c4:a4:b8:d3:4a:fe:78:60:da:4d:fb:5a: 67:42:9c:f7:ec:f7:ee:d8:6f:8f:fe:18:d5:dc:9f:e3:e8:38: 01:33:9d:36:ca:5f:66:9f:b4:db:06:42:29:5d:d8:ff:b1:ff: c7:00:03:cc:34:d1:3d:7c:fe:7d:e6:d0:30:96:7f:43:49:9e: 61:a4:14:25:c9:24:fd:8e:63:87:f0:cd:a2:87:e1:cf:e9:bf: 31:61:70:07:27:bb:be:d9:db:40:56:c8:f6:d9:3b:a3:c6:09: dd:c4:b1:dc -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNDA4MjYw NTI1NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJERjczNDYxOEE5Qjgx NUQzNUVGMTcxQTQzNjBFOUUyOTg1REQ4NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWdJFkB9II7llcem0jIwLBkK4EqBEXp1pLQUC3BkIVW/hk3kp6 KOShIEt3uaSf9jFjsX0VCGm/Z+8df5Hg95DWX0HWqGsiWGpGT5e1YHnl4PHyKIDq poNLznrJIS7Ov11KrKigNKnqL+FlOYDH6PwXe7U2tGk7ZUbivAdSykFAvPLH57vl ZWCKYpJ83u9VkUA38FWIJdZ2ssSnG2xXMHZKHCXmgKnE1inYXa8PVhRydrHoNXFF GJ97pOln7s7Tv1VIKtxkHZna/v1wxVa3rL2RpdxDicZERREzb01dadSwWZbg/UN2 S1FFuICXntj8PpvM8lhvv4VGG7iwu/bph6DTAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUvfc0YYqbgV017xcaQ2Dp4phd2E4wHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL3ZmYzBZWXFiZ1Yw MTd4Y2FRMkRwNHBoZDJFNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAsNAMA0GCSqGSIb3DQEBCwUAA4IBAQAWMbzrSNe59HAJsr1rR0QU1dy8 Jzkm0ixAR7tp0bzCnarewDljefHu2u3CNN8ImlDFym+kVIootLsN+9ck2ecwI7KL ZhEYFF38fovCJxdvFto1JOj3j50ssP+yHLpah45/A2srAvVMmn0zuLKxieGht5mY gOiqRS5ptTN3+iIhrnJHyxSOQ/litiqvaodUNPrcYRNYuRvEpLjTSv54YNpN+1pn Qpz37Pfu2G+P/hjV3J/j6DgBM502yl9mn7TbBkIpXdj/sf/HAAPMNNE9fP595tAw ln9DSZ5hpBQlyST9jmOH8M2ih+HP6b8xYXAHJ7u+2dtAVsj22TujxgndxLHc -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:34 2024 by rpki-client on console-fra.rpki-client.org