$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cEOaZaAsp8owATkrnHNjaB05xI4.roa File: cEOaZaAsp8owATkrnHNjaB05xI4.roa (raw, json) Hash identifier: zS27O251jHnujNDPm6AgBGkw0Gqux9HBZHklx1lMHVQ= Subject key identifier: 70:43:9A:65:A0:2C:A7:CA:30:01:39:2B:9C:73:63:68:1D:39:C4:8E Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Certificate serial: 0B81 Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cEOaZaAsp8owATkrnHNjaB05xI4.roa Signing time: Fri 01 Sep 2023 09:59:52 +0000 ROA not before: Fri 01 Sep 2023 09:59:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131596 IP address blocks: 2405:9200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7 Validity Not Before: Sep 1 09:59:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=70439A65A02CA7CA3001392B9C7363681D39C48E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:87:c2:53:87:1e:75:12:f4:b8:69:15:2b: 8b:13:25:eb:59:72:42:e6:8d:9a:0e:d1:dd:7b:0d: b2:e3:b1:1d:54:b6:8f:d3:bd:b5:e5:d7:a3:a2:66: ae:f1:e2:86:e0:07:62:d5:e0:56:d8:bb:6b:4e:6e: 15:e9:a1:f6:68:5c:4c:18:a7:20:ab:ab:f9:9f:51: 20:68:a7:75:be:c3:95:a2:7c:33:50:32:5f:7a:8a: c4:53:57:7e:7e:3f:b5:06:a0:1f:cc:47:1a:46:30: a0:17:78:8d:42:1b:c7:b4:87:e5:bb:76:97:56:77: ff:6b:e5:0c:20:3a:05:de:15:c3:93:78:38:8d:ce: e1:14:08:57:98:21:3e:b2:6e:52:88:d8:34:55:b1: 86:34:1e:13:91:9d:96:71:74:24:0b:0b:3b:23:ee: de:ec:93:1b:30:dd:26:31:c2:54:88:1c:9e:76:8a: e4:7d:9c:bc:dd:ca:3e:76:f6:04:f8:d8:b5:14:36: 95:5e:5a:58:22:5b:5e:e1:18:b5:30:62:ac:35:a6: 1e:41:df:92:f8:91:7a:88:b1:fe:65:08:7b:a8:1a: 2d:6b:cf:91:16:3c:2e:18:a6:a8:61:13:e0:59:7f: 99:86:35:2f:cb:f6:ed:c9:c3:15:e8:cb:8b:c6:35: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:43:9A:65:A0:2C:A7:CA:30:01:39:2B:9C:73:63:68:1D:39:C4:8E X509v3 Authority Key Identifier: keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/cEOaZaAsp8owATkrnHNjaB05xI4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:9200::/32 Signature Algorithm: sha256WithRSAEncryption 0a:5f:4f:61:dd:ba:7c:17:7e:1c:77:f8:bb:a8:f8:ba:31:2f: 0b:e4:27:b4:49:0c:56:2a:a3:50:e2:21:69:d0:c9:64:a3:89: c0:b6:8f:62:40:58:97:f0:59:2a:03:dd:d4:0c:d1:ac:6a:64: cf:0e:78:48:76:7c:e8:6f:30:41:ef:05:98:2c:c8:95:94:26: 5d:88:0e:af:d9:83:0a:a4:ca:2b:c3:85:c3:a7:ca:39:ec:75: 53:d7:7f:74:b4:e2:7e:bb:5e:24:b3:59:4d:22:55:dd:97:9a: b7:b9:9a:83:26:74:f3:44:56:a8:21:f0:55:d9:ce:5d:31:98: 14:47:00:f3:3a:12:6b:3a:0f:5a:e0:c4:ac:61:b3:24:dc:25: 95:78:d4:52:75:87:1b:2f:10:9f:a9:33:c5:47:21:ea:3e:5e: fb:d0:61:f4:ac:22:52:f3:98:b8:c7:1c:04:c3:b0:8d:75:9f: e4:e6:19:6c:1a:7c:c6:2a:76:3f:d4:03:09:8f:44:d0:30:77: 55:0c:18:18:3c:21:8f:77:e0:e6:7a:79:d7:e4:fe:c1:c8:74: d9:df:0c:89:95:73:ad:f7:ba:e3:cd:f1:d0:d3:f1:00:d1:62: 14:42:21:19:72:7b:ee:bb:2f:73:22:b3:82:47:f8:20:a6:8a: bb:ce:9f:f2 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMzA5MDEw OTU5NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwNDM5QTY1QTAyQ0E3 Q0EzMDAxMzkyQjlDNzM2MzY4MUQzOUM0OEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDB3IfCU4cedRL0uGkVK4sTJetZckLmjZoO0d17DbLjsR1Uto/T vbXl16OiZq7x4obgB2LV4FbYu2tObhXpofZoXEwYpyCrq/mfUSBop3W+w5WifDNQ Ml96isRTV35+P7UGoB/MRxpGMKAXeI1CG8e0h+W7dpdWd/9r5QwgOgXeFcOTeDiN zuEUCFeYIT6yblKI2DRVsYY0HhORnZZxdCQLCzsj7t7skxsw3SYxwlSIHJ52iuR9 nLzdyj529gT42LUUNpVeWlgiW17hGLUwYqw1ph5B35L4kXqIsf5lCHuoGi1rz5EW PC4YpqhhE+BZf5mGNS/L9u3JwxXoy4vGNT99AgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUcEOaZaAsp8owATkrnHNjaB05xI4wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9jRU9hWmFBc3A4b3dBVGtybkhO amFCMDV4STQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAWS ADANBgkqhkiG9w0BAQsFAAOCAQEACl9PYd26fBd+HHf4u6j4ujEvC+QntEkMViqj UOIhadDJZKOJwLaPYkBYl/BZKgPd1AzRrGpkzw54SHZ86G8wQe8FmCzIlZQmXYgO r9mDCqTKK8OFw6fKOex1U9d/dLTifrteJLNZTSJV3Zeat7magyZ080RWqCHwVdnO XTGYFEcA8zoSazoPWuDErGGzJNwllXjUUnWHGy8Qn6kzxUch6j5e+9Bh9KwiUvOY uMccBMOwjXWf5OYZbBp8xip2P9QDCY9E0DB3VQwYGDwhj3fg5np51+T+wch02d8M iZVzrfe6483x0NPxANFiFEIhGXJ77rsvcyKzgkf4IKaKu86f8g== -----END CERTIFICATE-----Generated at Mon Jun 3 15:52:36 2024 by rpki-client on console-ams.rpki-client.org