$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/AhUf4_GRk52cIiMGWTpKDp_cfpY.roa File: AhUf4_GRk52cIiMGWTpKDp_cfpY.roa (raw, json) Hash identifier: nBBWdkswPM2hTgh2hVdNZvDmdGPHZWrNU8ERsIA8OtY= Subject key identifier: 02:15:1F:E3:F1:91:93:9D:9C:22:23:06:59:3A:4A:0E:9F:DC:7E:96 Certificate issuer: /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7 Certificate serial: 0641 Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/AhUf4_GRk52cIiMGWTpKDp_cfpY.roa Signing time: Mon 26 Aug 2024 05:26:42 +0000 ROA not before: Mon 26 Aug 2024 05:26:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9678 IP address blocks: 2406:3040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7 Validity Not Before: Aug 26 05:26:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=02151FE3F191939D9C222306593A4A0E9FDC7E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:69:48:9f:ff:33:90:84:d4:17:1a:95:a9:b2: 1c:bb:83:4e:dc:11:60:cd:1d:6c:bd:90:b9:38:83: d5:ef:ce:e9:16:da:d6:b0:29:ff:39:4b:97:b2:2f: cd:fa:a9:5c:de:27:24:ef:73:c6:9a:96:e5:a4:5b: 44:7a:75:e4:2e:a5:bc:70:b5:62:f7:fe:91:30:31: 4b:5d:32:93:c5:f0:ff:42:e3:07:71:7f:26:e3:07: 38:5e:66:73:db:12:f7:43:5b:06:d7:80:16:a4:e7: 81:3e:41:bc:a3:ab:a0:dd:bd:52:c5:14:be:8d:3d: 50:4b:bd:9a:22:4e:65:58:91:c6:06:30:8f:75:0f: 73:51:be:3d:0f:9d:5c:f2:9d:21:95:32:8d:56:f7: 30:c6:58:cc:f7:15:e4:8c:75:f4:4f:96:61:e8:ea: d2:e2:95:23:47:82:8f:ad:e5:89:9b:6c:01:a3:4c: 4a:bd:51:b7:ae:ff:6d:c2:bd:c2:2f:38:5d:55:a5: 05:fc:f8:12:1a:ee:4b:29:e7:6e:0b:46:f7:7d:58: 55:e2:d8:69:58:d6:2e:09:cd:63:ce:2f:00:8c:bb: 4c:5e:36:78:df:54:a5:84:b6:80:49:d7:61:51:9d: ba:22:b6:73:f4:93:63:18:d6:27:70:0f:f8:da:79: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:15:1F:E3:F1:91:93:9D:9C:22:23:06:59:3A:4A:0E:9F:DC:7E:96 X509v3 Authority Key Identifier: keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/AhUf4_GRk52cIiMGWTpKDp_cfpY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3040::/32 Signature Algorithm: sha256WithRSAEncryption 5a:aa:26:18:cd:7e:82:ad:cf:b5:0f:b9:3e:71:73:ca:ab:1e: 8e:da:5d:8e:a3:3d:65:ab:c9:87:22:2b:1b:1c:d2:20:35:0a: 33:3f:e2:e0:74:6e:1f:65:72:75:89:af:c0:c8:94:57:11:bb: b9:32:5a:91:49:a4:7b:ec:ec:7e:a2:c1:d5:c2:c5:39:ec:56: 21:98:5a:e6:de:76:f7:ad:f2:86:69:c2:d1:dd:be:01:37:2b: eb:88:d8:4f:76:bf:6f:8c:6e:65:9c:e3:db:0a:ea:c5:fd:94: 98:9a:1f:56:3f:c1:db:38:09:8b:17:0c:c7:c9:58:60:41:dd: 7e:34:72:c1:a3:ed:97:c8:02:9b:35:e3:4a:1e:4f:b2:43:f8: 20:ee:55:7b:09:fb:66:73:0c:c4:ee:ce:fe:29:7c:d2:c5:74: 7f:35:f0:ad:0c:a3:0c:98:aa:6c:3b:c2:67:3f:3e:54:48:0b: f7:ea:06:10:d0:c6:bb:04:5e:65:7a:c4:0a:b3:3b:56:7c:32: c5:d7:9e:74:7e:e0:10:12:fd:c2:b4:b0:ef:b0:61:7f:0d:be: d9:ae:65:ce:9c:6b:e1:d7:05:c6:72:89:f4:08:87:28:b2:6b: 55:3e:07:b9:3e:4d:9b:3f:ff:d3:4f:55:25:00:f3:8c:97:86: d4:df:90:e1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjI4 MzlCRjdBNkM2QjE3RTdDRkNCMzczNEEzNkMwRTk4QzM3QTFCNzAeFw0yNDA4MjYw NTI2NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyMTUxRkUzRjE5MTkz OUQ5QzIyMjMwNjU5M0E0QTBFOUZEQzdFOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDRaUif/zOQhNQXGpWpshy7g07cEWDNHWy9kLk4g9XvzukW2taw Kf85S5eyL836qVzeJyTvc8aaluWkW0R6deQupbxwtWL3/pEwMUtdMpPF8P9C4wdx fybjBzheZnPbEvdDWwbXgBak54E+Qbyjq6DdvVLFFL6NPVBLvZoiTmVYkcYGMI91 D3NRvj0PnVzynSGVMo1W9zDGWMz3FeSMdfRPlmHo6tLilSNHgo+t5YmbbAGjTEq9 Ubeu/23CvcIvOF1VpQX8+BIa7ksp524LRvd9WFXi2GlY1i4JzWPOLwCMu0xeNnjf VKWEtoBJ12FRnboitnP0k2MY1idwD/jaeePhAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUAhUf4/GRk52cIiMGWTpKDp/cfpYwHwYDVR0jBBgwFoAUsoOb96bGsX58/LNz SjbA6Yw3obcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU1VNQVRS QS9zb09iOTZiR3NYNThfTE56U2piQTZZdzNvYmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3NvT2I5NmJHc1g1OF9MTnpTamJBNll3M29iYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NVTUFUUkEvQWhVZjRfR1JrNTJjSWlN R1dUcEtEcF9jZnBZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQGMEAwDQYJKoZIhvcNAQELBQADggEBAFqqJhjNfoKtz7UPuT5xc8qrHo7aXY6j PWWryYciKxsc0iA1CjM/4uB0bh9lcnWJr8DIlFcRu7kyWpFJpHvs7H6iwdXCxTns ViGYWubedvet8oZpwtHdvgE3K+uI2E92v2+MbmWc49sK6sX9lJiaH1Y/wds4CYsX DMfJWGBB3X40csGj7ZfIAps140oeT7JD+CDuVXsJ+2ZzDMTuzv4pfNLFdH818K0M owyYqmw7wmc/PlRIC/fqBhDQxrsEXmV6xAqzO1Z8MsXXnnR+4BAS/cK0sO+wYX8N vtmuZc6ca+HXBcZyifQIhyiya1U+B7k+TZs//9NPVSUA84yXhtTfkOE= -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org