$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/pYEIOMoI0s_E_4nAHPXpGsHBMwI.roa File: pYEIOMoI0s_E_4nAHPXpGsHBMwI.roa (raw, json) Hash identifier: jzwrUF3CM6ln3f8Q3MApU/EvMRmsFZIbc5uZ/5BnRio= Subject key identifier: A5:81:08:38:CA:08:D2:CF:C4:FF:89:C0:1C:F5:E9:1A:C1:C1:33:02 Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Certificate serial: 0C9F Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/pYEIOMoI0s_E_4nAHPXpGsHBMwI.roa Signing time: Mon 26 Aug 2024 05:26:54 +0000 ROA not before: Mon 26 Aug 2024 05:26:54 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131584 IP address blocks: 2400:4e80::/32 maxlen: 124 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9 Validity Not Before: Aug 26 05:26:54 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A5810838CA08D2CFC4FF89C01CF5E91AC1C13302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:8b:5b:46:1a:32:5f:01:f9:c9:41:e7:c8: 0b:5d:c4:56:b9:17:46:48:c2:b0:80:07:50:57:ea: a3:d5:5c:58:5a:fc:b2:84:7d:ad:50:88:c8:02:0b: e2:29:57:7e:b8:3a:29:1f:ce:35:fb:0a:8f:50:3c: b5:65:6d:57:3c:78:eb:a9:61:92:b0:88:d9:1e:3a: dc:32:bb:dc:fc:c6:dd:0b:42:22:ed:ef:a1:92:70: e4:9b:dd:51:18:ad:67:81:68:4b:9a:1a:c9:cd:0d: 57:9a:24:69:49:a0:14:ce:e1:c0:9f:99:85:5d:9f: 5e:9a:15:b9:02:6e:e2:e6:3d:c2:27:bd:81:9d:91: d5:74:7f:e6:4f:17:05:b9:58:cd:26:4e:84:08:d1: 87:04:cc:4d:63:0a:79:a9:b3:8e:3d:93:94:81:1c: 1f:36:8c:7d:23:37:bd:d9:e7:d3:fe:1c:73:65:92: b3:f1:53:9a:68:8d:15:8d:9c:cf:19:29:ab:fa:4c: ad:05:b2:ee:41:19:ac:2a:7a:5e:cb:95:97:c1:0a: e8:2b:e8:71:ac:54:4a:7d:fd:e4:d9:a0:18:07:ca: 6e:09:b4:4e:29:c7:08:a9:88:65:df:09:19:2d:d2: 23:be:ca:d8:40:d0:ef:ac:78:bb:2c:bd:38:d1:b1: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:81:08:38:CA:08:D2:CF:C4:FF:89:C0:1C:F5:E9:1A:C1:C1:33:02 X509v3 Authority Key Identifier: keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/pYEIOMoI0s_E_4nAHPXpGsHBMwI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:4e80::/32 Signature Algorithm: sha256WithRSAEncryption 15:80:67:f4:7c:c3:dd:06:f4:a5:df:ee:40:cb:b8:5c:c3:85: e2:3d:0a:03:13:3b:39:40:ee:ec:a2:78:ad:44:3f:74:73:66: 15:83:1d:65:b9:5b:56:46:68:9e:ba:d0:08:9d:71:85:36:7c: f2:19:ad:2c:4e:8f:86:a8:33:59:68:03:14:0e:73:6f:21:11: 49:2c:fe:2d:d0:9b:48:66:31:ca:5c:ef:d5:4f:69:21:56:ad: 5b:44:31:cc:bf:bc:2e:8e:fd:a4:f1:54:14:5f:7e:1e:46:5f: ea:de:c1:50:60:c3:82:23:2d:e7:e4:7d:67:94:ee:fc:b8:90: 2f:a4:1c:9a:e1:bc:f3:ce:d0:3c:a9:a4:e5:87:8c:6b:80:48: ba:eb:87:18:a4:67:1b:88:e6:46:b5:8e:65:47:8f:24:3b:84: e5:5b:b0:d1:42:ec:b2:a3:03:47:7e:01:70:19:85:34:b3:99: a4:e3:d5:fc:f8:c6:18:f1:80:0d:6a:bb:c9:2b:54:e2:d6:ca: c2:5b:fc:97:e7:f7:10:42:73:9b:17:bd:bb:88:eb:b7:bb:ee: ad:fb:3f:8b:d9:3d:d1:8a:ae:e2:75:41:c6:77:89:78:d0:c2: 7f:b2:24:ea:7b:a5:01:be:4d:15:72:4d:65:2a:0e:49:01:a5: 82:aa:4c:6e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREY1 NjczQTE5NzIxMjZFN0QyQ0M1RDRENTFCNDkxMDgzNDVCRjhDOTAeFw0yNDA4MjYw NTI2NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE1ODEwODM4Q0EwOEQy Q0ZDNEZGODlDMDFDRjVFOTFBQzFDMTMzMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCoT4tbRhoyXwH5yUHnyAtdxFa5F0ZIwrCAB1BX6qPVXFha/LKE fa1QiMgCC+IpV364OikfzjX7Co9QPLVlbVc8eOupYZKwiNkeOtwyu9z8xt0LQiLt 76GScOSb3VEYrWeBaEuaGsnNDVeaJGlJoBTO4cCfmYVdn16aFbkCbuLmPcInvYGd kdV0f+ZPFwW5WM0mToQI0YcEzE1jCnmps449k5SBHB82jH0jN73Z59P+HHNlkrPx U5pojRWNnM8ZKav6TK0Fsu5BGawqel7LlZfBCugr6HGsVEp9/eTZoBgHym4JtE4p xwipiGXfCRkt0iO+ythA0O+seLssvTjRsSH9AgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUpYEIOMoI0s/E/4nAHPXpGsHBMwIwHwYDVR0jBBgwFoAU31ZzoZchJufSzF1N UbSRCDRb+MkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83 NzE2LzMxWnpvWmNoSnVmU3pGMU5VYlNSQ0RSYi1Nay5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvMzFaem9aY2hKdWZTekYxTlViU1JDRFJiLU1rLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFJRk83NzE2L3BZRUlPTW9JMHNf RV80bkFIUFhwR3NIQk13SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkAE6AMA0GCSqGSIb3DQEBCwUAA4IBAQAVgGf0fMPdBvSl3+5Ay7hcw4Xi PQoDEzs5QO7sonitRD90c2YVgx1luVtWRmieutAInXGFNnzyGa0sTo+GqDNZaAMU DnNvIRFJLP4t0JtIZjHKXO/VT2khVq1bRDHMv7wujv2k8VQUX34eRl/q3sFQYMOC Iy3n5H1nlO78uJAvpBya4bzzztA8qaTlh4xrgEi664cYpGcbiOZGtY5lR48kO4Tl W7DRQuyyowNHfgFwGYU0s5mk49X8+MYY8YANarvJK1Ti1srCW/yX5/cQQnObF727 iOu3u+6t+z+L2T3Riq7idUHGd4l40MJ/siTqe6UBvk0Vck1lKg5JAaWCqkxu -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-fra.rpki-client.org