$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUCD/XLK2QiHP0DOpko1zqJefV9domko.roa File: XLK2QiHP0DOpko1zqJefV9domko.roa (raw, json) Hash identifier: /T5ZJQ2U2fHAQS7CMXsHDZMPYXBABqSbP22mV+D3KxM= Subject key identifier: 5C:B2:B6:42:21:CF:D0:33:A9:92:8D:73:A8:97:9F:57:D7:68:9A:4A Certificate issuer: /CN=35D63F285426D9D57209D42C46B9125B23A78EC1 Certificate serial: 0174 Authority key identifier: 35:D6:3F:28:54:26:D9:D5:72:09:D4:2C:46:B9:12:5B:23:A7:8E:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NdY_KFQm2dVyCdQsRrkSWyOnjsE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/XLK2QiHP0DOpko1zqJefV9domko.roa Signing time: Mon 26 Aug 2024 05:28:23 +0000 ROA not before: Mon 26 Aug 2024 05:28:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63908 IP address blocks: 2400:ebe0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/NdY_KFQm2dVyCdQsRrkSWyOnjsE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/NdY_KFQm2dVyCdQsRrkSWyOnjsE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NdY_KFQm2dVyCdQsRrkSWyOnjsE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 00:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35D63F285426D9D57209D42C46B9125B23A78EC1 Validity Not Before: Aug 26 05:28:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5CB2B64221CFD033A9928D73A8979F57D7689A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:8f:bc:00:8a:c8:1f:f1:44:06:b8:2e:ff: 37:20:17:e2:32:68:97:c4:af:55:93:32:ce:28:4a: 7b:cb:ea:48:85:bd:48:00:d8:fd:3b:2b:8f:1c:3e: 35:e8:ad:50:75:11:33:02:f1:98:29:e0:3e:c6:8b: ff:d9:ed:fc:7b:1e:52:52:83:9d:07:48:c2:e1:1f: 37:e9:59:d1:64:8c:02:be:d9:33:62:62:62:1b:c7: 8b:36:0c:22:24:52:51:3f:b1:90:34:82:36:6b:2a: b8:47:39:1e:62:0e:c5:f9:42:1a:fb:ab:d6:fb:a8: 96:d9:e0:e0:68:9a:c0:06:ec:d7:23:a0:98:87:81: 4e:ed:d4:5f:ec:c8:f4:39:43:ae:70:db:2b:a3:b6: 68:25:17:fe:6a:15:d4:e7:43:86:63:b7:f6:da:52: 84:31:ab:9d:ff:f6:de:2b:ee:58:97:f8:c7:af:9e: ed:2b:60:01:dc:13:d1:db:df:89:9a:6e:84:59:b3: 8b:ad:7a:2c:ad:15:aa:a4:48:f4:4c:d1:3c:9c:ab: 58:b3:7f:8f:37:89:29:e9:6d:29:d6:e7:84:c4:3d: b8:32:a7:c7:c1:25:01:97:d8:92:8a:13:f7:bf:11: 8d:5f:3e:7b:d6:6d:4e:c3:c7:3e:64:81:6d:ea:5d: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:B6:42:21:CF:D0:33:A9:92:8D:73:A8:97:9F:57:D7:68:9A:4A X509v3 Authority Key Identifier: keyid:35:D6:3F:28:54:26:D9:D5:72:09:D4:2C:46:B9:12:5B:23:A7:8E:C1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/NdY_KFQm2dVyCdQsRrkSWyOnjsE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NdY_KFQm2dVyCdQsRrkSWyOnjsE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUCD/XLK2QiHP0DOpko1zqJefV9domko.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:ebe0::/32 Signature Algorithm: sha256WithRSAEncryption bd:89:79:9e:ef:93:80:9e:b3:7e:1e:c8:a1:61:e6:a9:fe:50: 35:f6:f5:c2:7a:a8:dd:d3:3b:05:42:d7:2f:5d:d8:de:7f:af: 7b:50:cd:b5:8c:fd:3e:33:07:ba:01:3b:9d:fa:a0:02:e4:33: 92:b4:56:67:5d:7d:1f:8f:91:d6:5a:a4:83:81:de:7d:ff:36: 93:2f:30:3e:01:04:e6:06:bd:b0:d0:80:66:1b:47:ea:23:d0: 1b:25:65:3e:9f:d2:cc:37:81:e8:78:d3:d8:7c:68:74:3f:20: 12:93:cd:d7:1a:9e:0d:7f:90:fa:8f:e3:53:b9:08:13:09:9e: b9:72:53:d1:be:70:e8:db:66:5f:11:2e:05:00:7b:0c:cf:ef: c8:af:5c:41:46:a5:72:fe:33:81:fd:b7:ef:22:97:9d:6a:dd: 92:27:41:f9:dd:ae:f8:2d:d8:8e:1d:80:91:c0:b0:22:1e:3f: 28:b4:04:bf:14:9f:d9:35:ef:dd:38:8c:b4:14:76:95:98:11: 38:55:73:7d:79:68:aa:8b:d7:6c:69:e4:b4:ef:21:fc:8f:a1: 87:12:6c:34:98:61:94:06:ab:59:26:f1:b0:86:62:bc:e0:1a: dd:43:99:77:b3:8f:bd:ef:1c:6c:b0:1a:d9:32:44:55:d7:fe: ff:f3:43:81 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzVE NjNGMjg1NDI2RDlENTcyMDlENDJDNDZCOTEyNUIyM0E3OEVDMTAeFw0yNDA4MjYw NTI4MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDQjJCNjQyMjFDRkQw MzNBOTkyOEQ3M0E4OTc5RjU3RDc2ODlBNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1rY+8AIrIH/FEBrgu/zcgF+IyaJfEr1WTMs4oSnvL6kiFvUgA 2P07K48cPjXorVB1ETMC8Zgp4D7Gi//Z7fx7HlJSg50HSMLhHzfpWdFkjAK+2TNi YmIbx4s2DCIkUlE/sZA0gjZrKrhHOR5iDsX5Qhr7q9b7qJbZ4OBomsAG7NcjoJiH gU7t1F/syPQ5Q65w2yujtmglF/5qFdTnQ4Zjt/baUoQxq53/9t4r7liX+Mevnu0r YAHcE9Hb34maboRZs4uteiytFaqkSPRM0Tycq1izf483iSnpbSnW54TEPbgyp8fB JQGX2JKKE/e/EY1fPnvWbU7Dxz5kgW3qXfKtAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQUXLK2QiHP0DOpko1zqJefV9domkowHwYDVR0jBBgwFoAUNdY/KFQm2dVyCdQs RrkSWyOnjsEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVDRC9O ZFlfS0ZRbTJkVnlDZFFzUnJrU1d5T25qc0UuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L05kWV9LRlFtMmRWeUNkUXNScmtTV3lPbmpzRS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL1RVQ0QvWExLMlFpSFAwRE9wa28xenFKZWZW OWRvbWtvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQA6+Aw DQYJKoZIhvcNAQELBQADggEBAL2JeZ7vk4Ces34eyKFh5qn+UDX29cJ6qN3TOwVC 1y9d2N5/r3tQzbWM/T4zB7oBO536oALkM5K0VmddfR+PkdZapIOB3n3/NpMvMD4B BOYGvbDQgGYbR+oj0BslZT6f0sw3geh409h8aHQ/IBKTzdcang1/kPqP41O5CBMJ nrlyU9G+cOjbZl8RLgUAewzP78ivXEFGpXL+M4H9t+8il51q3ZInQfndrvgt2I4d gJHAsCIePyi0BL8Un9k17904jLQUdpWYEThVc315aKqL12xp5LTvIfyPoYcSbDSY YZQGq1km8bCGYrzgGt1DmXezj73vHGywGtkyRFXX/v/zQ4E= -----END CERTIFICATE-----Generated at Mon Nov 25 20:56:35 2024 by rpki-client on console-fra.rpki-client.org