$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/vc-bBERtXKcLuuRqM5Y3xAXoOK4.roa File: vc-bBERtXKcLuuRqM5Y3xAXoOK4.roa (raw, json) Hash identifier: wo3aeVqGh4TKeSxZvYlX1NMy7wdwiFvYJsQu4BVq8PY= Subject key identifier: BD:CF:9B:04:44:6D:5C:A7:0B:BA:E4:6A:33:96:37:C4:05:E8:38:AE Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28 Certificate serial: 0C58 Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/vc-bBERtXKcLuuRqM5Y3xAXoOK4.roa Signing time: Mon 26 Aug 2024 05:27:40 +0000 ROA not before: Mon 26 Aug 2024 05:27:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131590 IP address blocks: 2400:c780:fffe:1d64::/64 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28 Validity Not Before: Aug 26 05:27:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BDCF9B04446D5CA70BBAE46A339637C405E838AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:af:5e:08:ce:f2:6c:21:ae:e7:f1:15:a1: 04:14:41:2a:07:f6:73:89:dc:c7:e6:f4:b3:00:85: d4:7a:15:ba:24:b1:1e:74:92:d2:1c:b0:56:8b:84: b7:3b:ce:bf:76:0c:c4:86:52:92:79:04:92:0d:ce: 34:ad:8a:c1:6d:46:f6:7c:72:e4:07:53:d7:c2:b1: 4a:fc:ea:dd:bf:5a:b5:d5:bb:d8:40:41:32:c9:63: cb:03:32:72:96:a9:20:17:ab:88:b5:d0:57:65:d0: fd:68:7e:be:ec:f9:22:88:24:a6:c4:a5:e3:7e:b5: a8:83:b4:0a:59:9e:6c:e4:3f:ba:81:01:1c:55:bc: 08:ff:a1:bf:36:86:d9:d7:4f:cf:bb:be:34:61:87: 36:1b:5a:5a:f1:36:02:4d:6c:8c:41:52:60:4d:70: d5:fe:0d:9b:32:16:c1:58:e4:9c:65:9c:40:fd:5c: 4a:d6:e8:cd:e1:2a:18:98:30:56:93:dd:4f:2c:64: 96:29:1f:de:0b:d4:70:85:ac:50:a5:20:9c:6f:67: 9e:5f:2a:40:c5:e4:2c:cb:e7:b3:1e:a9:86:b3:6a: 0f:89:67:ff:f2:48:f8:9c:b4:73:2c:3b:10:be:b8: f0:76:90:3d:0f:bf:ba:df:32:19:eb:93:16:31:82: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CF:9B:04:44:6D:5C:A7:0B:BA:E4:6A:33:96:37:C4:05:E8:38:AE X509v3 Authority Key Identifier: keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/vc-bBERtXKcLuuRqM5Y3xAXoOK4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:c780:fffe:1d64::/64 Signature Algorithm: sha256WithRSAEncryption 34:b5:a7:aa:f7:c6:79:c7:4a:06:6f:4e:f0:bf:7a:0f:10:9e: e6:e6:82:a1:78:08:98:50:5c:7c:42:2c:2f:de:2c:f9:f3:c6: 63:79:44:6c:41:b6:9b:85:96:6f:66:e2:af:d1:d2:c3:d4:e5: 75:ba:da:70:a2:27:b4:02:64:4b:d9:73:61:77:f2:99:e8:18: aa:3d:f6:56:d7:47:0e:28:54:f5:90:72:c5:e8:ad:ab:3c:ba: 92:dc:c4:db:d0:29:10:44:00:f5:89:43:48:53:e0:ad:7b:d2: 26:0a:be:03:8f:01:23:dc:a9:8d:20:56:e3:6e:24:8f:da:5d: 1c:40:e4:41:d6:11:e5:c0:ad:75:01:ca:19:a8:6f:50:de:6f: 4a:08:d1:41:fa:a2:da:22:4f:63:ae:8d:58:76:f1:9a:41:04: e0:2c:8c:f9:61:6f:76:80:da:18:26:1e:7e:2e:05:79:01:65: 9c:90:13:dc:16:0e:74:db:d6:1b:f2:ec:b1:bc:eb:8b:be:bc: ee:6d:ae:08:0b:7a:e5:29:e1:75:47:48:19:53:37:bf:d6:92: 89:34:74:79:48:d9:95:da:11:27:d3:86:3b:a9:29:4a:ec:e2: 64:0d:7e:bb:1b:ac:13:81:eb:c6:eb:ff:37:ee:ed:fa:ab:5b: 33:81:6c:5d -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY4 MkEzQUMxMTQ1NTAzMDc0M0MwQTc0MzcxMUY4QTBEOEVCQUUyODAeFw0yNDA4MjYw NTI3NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJEQ0Y5QjA0NDQ2RDVD QTcwQkJBRTQ2QTMzOTYzN0M0MDVFODM4QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDeyK9eCM7ybCGu5/EVoQQUQSoH9nOJ3Mfm9LMAhdR6FboksR50 ktIcsFaLhLc7zr92DMSGUpJ5BJINzjStisFtRvZ8cuQHU9fCsUr86t2/WrXVu9hA QTLJY8sDMnKWqSAXq4i10Fdl0P1ofr7s+SKIJKbEpeN+taiDtApZnmzkP7qBARxV vAj/ob82htnXT8+7vjRhhzYbWlrxNgJNbIxBUmBNcNX+DZsyFsFY5JxlnED9XErW 6M3hKhiYMFaT3U8sZJYpH94L1HCFrFClIJxvZ55fKkDF5CzL57MeqYazag+JZ//y SPictHMsOxC+uPB2kD0Pv7rfMhnrkxYxgrSFAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUvc+bBERtXKcLuuRqM5Y3xAXoOK4wHwYDVR0jBBgwFoAUv4KjrBFFUDB0PAp0 NxH4oNjrrigwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3Y0 S2pyQkZGVURCMFBBcDBOeEg0b05qcnJpZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djRLanJCRkZVREIwUEFwME54SDRvTmpycmlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3ZjLWJCRVJ0WEtjTHV1UnFNNVkzeEFY b09LNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAkAMeA//4d ZDANBgkqhkiG9w0BAQsFAAOCAQEANLWnqvfGecdKBm9O8L96DxCe5uaCoXgImFBc fEIsL94s+fPGY3lEbEG2m4WWb2bir9HSw9TldbracKIntAJkS9lzYXfymegYqj32 VtdHDihU9ZByxeitqzy6ktzE29ApEEQA9YlDSFPgrXvSJgq+A48BI9ypjSBW424k j9pdHEDkQdYR5cCtdQHKGahvUN5vSgjRQfqi2iJPY66NWHbxmkEE4CyM+WFvdoDa GCYefi4FeQFlnJAT3BYOdNvWG/Lssbzri7687m2uCAt65SnhdUdIGVM3v9aSiTR0 eUjZldoRJ9OGO6kpSuziZA1+uxusE4Hrxuv/N+7t+qtbM4FsXQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:35 2024 by rpki-client on console-ams.rpki-client.org