$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/VU4EddcXcK0NTvgC-0qlNLB_BPs.roa File: VU4EddcXcK0NTvgC-0qlNLB_BPs.roa (raw, json) Hash identifier: /Qhq+lKhyqHXSqcx3N4452psactXD7wfqeIPhuPVVEs= Subject key identifier: 55:4E:04:75:D7:17:70:AD:0D:4E:F8:02:FB:4A:A5:34:B0:7F:04:FB Certificate issuer: /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Certificate serial: 0290 Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/VU4EddcXcK0NTvgC-0qlNLB_BPs.roa Signing time: Mon 26 Aug 2024 05:27:50 +0000 ROA not before: Mon 26 Aug 2024 05:27:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18178 IP address blocks: 2400:5120::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 15:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5 Validity Not Before: Aug 26 05:27:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=554E0475D71770AD0D4EF802FB4AA534B07F04FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:b7:fe:66:c6:b7:20:bf:83:d2:4b:c9:da: b6:41:4a:ef:af:c2:a7:a5:86:72:b5:b6:b6:82:1f: b1:df:e4:53:08:8b:67:0b:35:2f:c9:b8:e5:f7:23: d4:36:ad:fa:b6:98:24:cb:96:b5:3b:f9:22:32:1e: ef:32:1b:b7:97:50:40:1d:9e:2d:70:4f:90:79:1c: f7:d2:e6:3f:50:72:55:27:25:cc:14:39:55:98:ae: 41:63:00:ec:92:b9:ae:ab:44:87:c5:56:b7:57:1f: b2:ca:20:dc:ea:f0:cf:de:c6:ce:07:93:23:81:63: 3e:b3:ef:d9:9a:5e:ef:3a:f7:d4:18:f2:a9:1f:1d: b9:f4:17:a6:03:ba:c1:4c:52:fe:7f:61:47:91:ce: 34:f2:1f:3f:02:a2:2e:08:98:eb:d9:21:66:41:fb: 8f:4c:e0:fe:8d:26:fe:7a:e7:72:ea:ec:42:ee:5b: b4:b9:5d:47:7e:db:40:f4:48:dc:77:15:57:a1:95: 40:b6:1a:0f:b7:f5:d6:6c:92:a2:ce:af:87:23:0f: 7d:ac:0d:4b:d0:a0:c0:f7:69:70:fa:b6:1c:88:e6: 89:e4:a1:e8:da:3b:51:12:f6:a8:62:4e:2e:70:b7: b2:87:9c:87:fa:10:03:24:f8:0f:bf:47:7d:c4:49: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4E:04:75:D7:17:70:AD:0D:4E:F8:02:FB:4A:A5:34:B0:7F:04:FB X509v3 Authority Key Identifier: keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/VU4EddcXcK0NTvgC-0qlNLB_BPs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:5120::/32 Signature Algorithm: sha256WithRSAEncryption 82:80:79:8d:41:bb:27:b6:5b:bd:ba:56:85:11:0f:fc:66:9e: 03:03:14:9c:3f:45:a2:03:01:1e:cf:27:54:1d:ef:c0:f5:8a: 0c:1f:8c:9e:cb:fe:f7:dd:6e:79:8e:70:05:3d:30:c1:eb:5b: 0f:e4:0e:0e:91:70:48:25:00:d1:75:e8:77:f4:0c:70:4b:0d: 38:7f:30:9c:bc:b7:8c:03:e4:7b:af:6c:b1:00:fc:30:d2:03: 4a:09:77:73:c8:c5:31:d0:7b:c0:82:ae:3a:25:86:a5:fc:af: 10:bd:02:19:13:d4:f7:5a:d1:7e:b4:89:a9:67:29:f0:64:38: 08:fa:f7:a4:ee:6c:0a:0a:ae:ab:c5:93:db:4d:cb:7b:f7:0b: 0b:15:36:4d:64:3e:3f:37:48:64:7e:9e:51:77:81:d6:f1:d0: 08:a6:46:fd:16:4c:6c:3f:e8:da:c2:41:62:68:ad:9b:5a:e6: 1c:b0:5f:ae:6d:8d:d7:0c:db:1b:10:b6:82:f3:8e:85:04:1e: a8:81:31:49:67:c9:4b:3e:61:ef:1e:76:3c:32:c4:2a:77:cc: 60:dc:a2:e5:1a:d1:c1:75:b6:fc:dc:48:8c:e2:6c:95:e7:0a: dc:53:5e:f9:ff:ba:a1:bb:9d:38:9a:dd:e6:74:b8:4d:a0:4b: ad:f0:66:bd -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICApAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUI2 MDY5NkQ2ODc3M0FFMkU1MzJGMENENUQxMEZEQzBDODI3M0VBNTAeFw0yNDA4MjYw NTI3NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU1NEUwNDc1RDcxNzcw QUQwRDRFRjgwMkZCNEFBNTM0QjA3RjA0RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCl7f+Zsa3IL+D0kvJ2rZBSu+vwqelhnK1traCH7Hf5FMIi2cL NS/JuOX3I9Q2rfq2mCTLlrU7+SIyHu8yG7eXUEAdni1wT5B5HPfS5j9QclUnJcwU OVWYrkFjAOySua6rRIfFVrdXH7LKINzq8M/exs4HkyOBYz6z79maXu8699QY8qkf Hbn0F6YDusFMUv5/YUeRzjTyHz8Coi4ImOvZIWZB+49M4P6NJv5653Lq7ELuW7S5 XUd+20D0SNx3FVehlUC2Gg+39dZskqLOr4cjD32sDUvQoMD3aXD6thyI5onkoeja O1ES9qhiTi5wt7KHnIf6EAMk+A+/R33ESd9HAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUVU4EddcXcK0NTvgC+0qlNLB/BPswHwYDVR0jBBgwFoAUm2BpbWh3OuLlMvDN XRD9wMgnPqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL20y QnBiV2gzT3VMbE12RE5YUkQ5d01nblBxVS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev bTJCcGJXaDNPdUxsTXZETlhSRDl3TWduUHFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVEdNL1ZVNEVkZGNYY0swTlR2Z0MtMHFsTkxC X0JQcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAFEgMA0G CSqGSIb3DQEBCwUAA4IBAQCCgHmNQbsntlu9ulaFEQ/8Zp4DAxScP0WiAwEezydU He/A9YoMH4yey/733W55jnAFPTDB61sP5A4OkXBIJQDRdeh39AxwSw04fzCcvLeM A+R7r2yxAPww0gNKCXdzyMUx0HvAgq46JYal/K8QvQIZE9T3WtF+tImpZynwZDgI +vek7mwKCq6rxZPbTct79wsLFTZNZD4/N0hkfp5Rd4HW8dAIpkb9FkxsP+jawkFi aK2bWuYcsF+ubY3XDNsbELaC846FBB6ogTFJZ8lLPmHvHnY8MsQqd8xg3KLlGtHB dbb83EiM4myV5wrcU175/7qhu504mt3mdLhNoEut8Ga9 -----END CERTIFICATE-----Generated at Fri Sep 20 14:32:20 2024 by rpki-client on console-fra.rpki-client.org