$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K0-rLaYLIKp-V6cz-jUBePSwQeY.roa File: K0-rLaYLIKp-V6cz-jUBePSwQeY.roa (raw, json) Hash identifier: E85BKvzPOASQ8OhoGmBBMXZ8pq3nddkO7tian3v95wk= Subject key identifier: 2B:4F:AB:2D:A6:0B:20:AA:7E:57:A7:33:FA:35:01:78:F4:B0:41:E6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 288F Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K0-rLaYLIKp-V6cz-jUBePSwQeY.roa Signing time: Fri 01 Sep 2023 10:05:30 +0000 ROA not before: Fri 01 Sep 2023 10:05:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 2407:4d00:ff08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10383 (0x288f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:05:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=2B4FAB2DA60B20AA7E57A733FA350178F4B041E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:96:4f:94:18:d9:67:f3:2a:7d:6c:03:6e: c8:db:90:84:f2:82:0a:99:9c:81:d5:96:7f:2b:25: 04:b6:00:c1:05:21:f2:0b:a1:b4:26:26:7c:62:91: d4:fb:88:43:30:f5:86:4a:22:e5:d9:2c:f2:9f:05: bd:35:a4:65:58:07:71:8c:9b:d0:40:f9:65:d8:9d: d5:0f:8f:2a:66:b4:7c:17:8e:6c:62:31:94:4f:35: 02:cc:b6:f6:dc:2f:94:ac:a9:91:78:2d:c7:7c:89: aa:5f:05:98:12:11:5d:e4:98:fa:63:4e:52:fb:5f: ca:e5:7d:7b:73:7c:92:c7:6a:9b:e0:ba:3d:94:e1: d9:a0:8e:79:39:af:21:3f:f6:5c:db:97:98:ef:28: 66:c1:8f:ad:26:68:5c:7e:50:cb:0a:84:9f:d3:3a: a2:ae:d6:32:5e:e6:f5:ee:e6:96:8f:d3:3e:9a:da: 82:0b:85:1b:b5:13:53:67:da:aa:4f:60:94:77:7d: 96:dd:8d:dc:58:a7:5b:2c:42:a5:c6:24:64:a0:04: 9c:c0:83:a6:3c:de:6b:cb:03:e0:94:3a:e2:8c:e6: 63:61:d7:fc:14:d0:3e:94:ac:d3:7f:61:5f:33:32: fe:56:c5:88:95:05:ce:b8:3e:57:6d:59:40:49:85: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4F:AB:2D:A6:0B:20:AA:7E:57:A7:33:FA:35:01:78:F4:B0:41:E6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K0-rLaYLIKp-V6cz-jUBePSwQeY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff08::/48 Signature Algorithm: sha256WithRSAEncryption 42:3e:f4:db:37:d8:b0:cf:57:e3:09:73:08:39:7a:13:1c:4a: 61:50:30:75:8b:a2:02:d3:7c:b6:12:5a:51:04:25:c6:19:de: 41:34:6f:2f:32:7e:45:21:34:a1:ae:36:4a:76:0d:e3:47:e9: c6:a5:d1:c8:62:22:35:32:c9:93:a7:42:09:66:7b:b7:b1:05: 28:c0:98:26:91:cf:74:26:93:58:75:2d:58:31:38:e1:eb:ef: d0:2d:95:b5:ff:9e:fb:9e:ef:dc:70:30:a3:f9:cf:db:4a:0a: d9:a2:ba:08:65:24:75:0a:3c:2a:2f:20:39:72:de:b3:13:cc: 95:8d:f5:41:f8:ef:6d:db:7c:79:0b:35:94:20:60:31:b8:fd: f0:90:83:13:37:ca:52:d8:fb:4d:3e:29:eb:59:e0:ab:ba:f2: b2:f3:2a:b6:ab:fb:76:b5:32:fa:b7:81:53:71:71:57:a9:26: 6d:5d:5b:f6:71:42:79:8f:b6:1c:1f:de:66:93:b6:f9:5c:19: af:c3:06:9f:42:25:f6:3b:1e:0a:9b:7b:8b:d1:a1:75:48:9d: b5:e6:ab:02:27:ff:8f:2f:63:14:c8:8d:39:93:d5:62:65:f0: 7b:e0:87:93:43:99:67:b7:06:32:e1:ff:4d:80:71:a6:20:09: 60:38:d0:8d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICKI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA1MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJCNEZBQjJEQTYwQjIw QUE3RTU3QTczM0ZBMzUwMTc4RjRCMDQxRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+b5ZPlBjZZ/MqfWwDbsjbkITyggqZnIHVln8rJQS2AMEFIfIL obQmJnxikdT7iEMw9YZKIuXZLPKfBb01pGVYB3GMm9BA+WXYndUPjypmtHwXjmxi MZRPNQLMtvbcL5SsqZF4Lcd8iapfBZgSEV3kmPpjTlL7X8rlfXtzfJLHapvguj2U 4dmgjnk5ryE/9lzbl5jvKGbBj60maFx+UMsKhJ/TOqKu1jJe5vXu5paP0z6a2oIL hRu1E1Nn2qpPYJR3fZbdjdxYp1ssQqXGJGSgBJzAg6Y83mvLA+CUOuKM5mNh1/wU 0D6UrNN/YV8zMv5WxYiVBc64PldtWUBJhd3dAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUK0+rLaYLIKp+V6cz+jUBePSwQeYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0swLXJMYVlMSUtwLVY2Y3ot alVCZVBTd1FlWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wgwDQYJKoZIhvcNAQELBQADggEBAEI+9Ns32LDPV+MJcwg5ehMcSmFQMHWL ogLTfLYSWlEEJcYZ3kE0by8yfkUhNKGuNkp2DeNH6cal0chiIjUyyZOnQglme7ex BSjAmCaRz3Qmk1h1LVgxOOHr79AtlbX/nvue79xwMKP5z9tKCtmiughlJHUKPCov IDly3rMTzJWN9UH4723bfHkLNZQgYDG4/fCQgxM3ylLY+00+KetZ4Ku68rLzKrar +3a1Mvq3gVNxcVepJm1dW/ZxQnmPthwf3maTtvlcGa/DBp9CJfY7Hgqbe4vRoXVI nbXmqwIn/48vYxTIjTmT1WJl8Hvgh5NDmWe3BjLh/02AcaYgCWA40I0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org