$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/LI7bcfTDbYcs10A9q7EKfZXK5-E.roa File: LI7bcfTDbYcs10A9q7EKfZXK5-E.roa (raw, json) Hash identifier: BrY1SW7TM/qy2HD7oRe81lyayZYv/KtgYcm+DJsMUR4= Subject key identifier: 2C:8E:DB:71:F4:C3:6D:87:2C:D7:40:3D:AB:B1:0A:7D:95:CA:E7:E1 Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E Certificate serial: 0B49 Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LI7bcfTDbYcs10A9q7EKfZXK5-E.roa Signing time: Fri 01 Sep 2023 10:00:50 +0000 ROA not before: Fri 01 Sep 2023 10:00:50 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 57401 IP address blocks: 2403:7f40:e001::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 17:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E Validity Not Before: Sep 1 10:00:50 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2C8EDB71F4C36D872CD7403DABB10A7D95CAE7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:b4:5c:0f:0f:3f:57:a6:65:91:62:9f:68: 32:90:db:37:6c:a1:7e:94:80:a3:56:63:d5:cf:6d: 24:e5:cb:ef:2e:67:8f:8e:16:ad:f3:ef:e9:bb:6f: 57:ec:9a:00:bf:76:2b:3b:d2:e7:55:00:31:30:90: 1a:03:0b:7e:c4:13:ce:99:9b:76:1e:e6:0c:5e:53: b4:6e:92:90:53:11:62:fe:d4:cb:fd:12:98:02:8e: 57:70:32:11:34:4a:04:ba:6f:51:1b:d9:d5:26:c9: d4:d8:49:4e:41:9b:96:6d:de:f6:79:da:ee:d3:cf: b5:df:1c:6c:6b:ae:6f:19:2b:d3:8c:3d:31:36:97: dc:ff:17:24:99:32:b5:81:3a:d9:77:07:6d:1f:c5: cf:f2:18:93:fc:06:2c:cf:af:9d:34:5f:e1:47:ea: 14:62:39:80:34:93:2b:b4:5c:ae:72:9c:e5:dd:b1: 1c:63:dd:00:b2:f7:b9:d1:1f:aa:ab:b5:f9:6d:0a: 3c:b3:e7:eb:ef:5f:38:8b:d2:c2:7f:d3:92:69:b0: 93:f5:a4:f8:3a:59:b5:4d:c9:72:37:d6:08:9a:91: 6f:13:e6:66:7c:f1:e0:2d:51:a6:a2:97:64:3d:e5: df:90:a9:6c:7e:89:60:c3:b7:7f:28:41:b3:0e:ac: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:DB:71:F4:C3:6D:87:2C:D7:40:3D:AB:B1:0A:7D:95:CA:E7:E1 X509v3 Authority Key Identifier: keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LI7bcfTDbYcs10A9q7EKfZXK5-E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2403:7f40:e001::/48 Signature Algorithm: sha256WithRSAEncryption 65:12:63:59:2a:2d:40:f5:43:4d:4e:cd:5c:5a:18:ae:50:78: 18:81:76:07:c3:23:ba:3e:2c:97:43:7c:b3:88:b3:72:6a:c6: 9a:c5:bc:98:71:a4:8b:f4:32:d0:db:35:3d:e8:cf:c1:fa:2d: cd:46:b9:94:13:7f:b6:7d:4b:f2:a1:d1:8f:ed:56:54:ce:cf: 0e:e9:8a:bf:49:25:02:ed:85:f0:f9:bb:9f:ca:91:04:cb:51: 7c:b8:e0:94:1a:5a:e6:b0:b9:26:12:03:66:d0:8c:ef:89:87: f5:3c:32:0c:09:53:e1:e9:e3:60:42:c7:13:53:05:d8:2b:53: 3c:98:56:97:bb:98:cf:d7:0e:08:8b:76:42:46:a6:38:b3:ee: 87:47:6c:01:0e:92:ea:b4:da:d2:c1:96:ce:65:96:94:02:b5: fa:5d:9c:ab:d8:20:7e:0d:47:63:1c:61:65:11:a0:b8:6e:d0: 40:c6:ed:6a:72:55:1f:3e:e9:cf:4b:fd:53:3a:83:9c:6d:0c: d1:20:61:ea:37:e4:a9:76:0b:94:ce:bf:b4:87:21:ac:16:5a: 1a:1d:58:ec:78:5f:75:14:11:54:21:c4:3f:31:e4:6b:ec:e1: 43:71:9a:44:21:21:af:5b:fb:46:e0:44:25:c4:96:2a:5a:f5: c9:de:ec:fe -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkQ3 MjA0NjE3MzU0RDcwNTIzQjZGNjVBMjcwNzEyQjZCMTlEODE1RTAeFw0yMzA5MDEx MDAwNTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJDOEVEQjcxRjRDMzZE ODcyQ0Q3NDAzREFCQjEwQTdEOTVDQUU3RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg2bRcDw8/V6ZlkWKfaDKQ2zdsoX6UgKNWY9XPbSTly+8uZ4+O Fq3z7+m7b1fsmgC/dis70udVADEwkBoDC37EE86Zm3Ye5gxeU7RukpBTEWL+1Mv9 EpgCjldwMhE0SgS6b1Eb2dUmydTYSU5Bm5Zt3vZ52u7Tz7XfHGxrrm8ZK9OMPTE2 l9z/FySZMrWBOtl3B20fxc/yGJP8BizPr500X+FH6hRiOYA0kyu0XK5ynOXdsRxj 3QCy97nRH6qrtfltCjyz5+vvXziL0sJ/05JpsJP1pPg6WbVNyXI31giakW8T5mZ8 8eAtUaail2Q95d+QqWx+iWDDt38oQbMOrA/vAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQULI7bcfTDbYcs10A9q7EKfZXK5+EwHwYDVR0jBBgwFoAULXIEYXNU1wUjtvZa JwcStrGdgV4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL0xY SUVZWE5VMXdVanR2WmFKd2NTdHJHZGdWNC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TFhJRVlYTlUxd1VqdHZaYUp3Y1N0ckdkZ1Y0LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVElIL0xJN2JjZlREYlljczEwQTlxN0VLZlpY SzUtRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkA39A4AEw DQYJKoZIhvcNAQELBQADggEBAGUSY1kqLUD1Q01OzVxaGK5QeBiBdgfDI7o+LJdD fLOIs3JqxprFvJhxpIv0MtDbNT3oz8H6Lc1GuZQTf7Z9S/Kh0Y/tVlTOzw7pir9J JQLthfD5u5/KkQTLUXy44JQaWuawuSYSA2bQjO+Jh/U8MgwJU+Hp42BCxxNTBdgr UzyYVpe7mM/XDgiLdkJGpjiz7odHbAEOkuq02tLBls5llpQCtfpdnKvYIH4NR2Mc YWURoLhu0EDG7WpyVR8+6c9L/VM6g5xtDNEgYeo35Kl2C5TOv7SHIawWWhodWOx4 X3UUEVQhxD8x5Gvs4UNxmkQhIa9b+0bgRCXElipa9cne7P4= -----END CERTIFICATE-----Generated at Wed May 1 15:29:35 2024 by rpki-client on console-fra.rpki-client.org