$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2FdFP3YEJsT79X6kTCNYrc6Eq8.roa File: M2FdFP3YEJsT79X6kTCNYrc6Eq8.roa (raw, json) Hash identifier: V/KYWGkdzB21kU6QSiT8dvXB7jodNX9+1qs8JojAINc= Subject key identifier: 33:61:5D:14:FD:D8:10:9B:13:EF:D5:FA:91:30:8D:62:B7:3A:12:AF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 3257 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2FdFP3YEJsT79X6kTCNYrc6Eq8.roa Signing time: Mon 26 Aug 2024 05:31:34 +0000 ROA not before: Mon 26 Aug 2024 05:31:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38841 IP address blocks: 2407:4d00:ff04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Sep 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12887 (0x3257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:31:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=33615D14FDD8109B13EFD5FA91308D62B73A12AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:76:d4:5a:06:32:c4:f1:9a:e2:26:20:a8: 36:0f:60:0b:cf:d0:3c:32:34:93:7a:51:b7:9a:16: 05:99:a9:63:e9:99:97:88:7a:24:93:97:03:0b:bc: ca:5d:5d:2f:47:df:4f:9b:ee:55:f3:bd:bc:e6:38: b4:74:06:97:14:d6:37:e9:3f:0a:3a:e4:dc:f6:f1: ef:38:e6:0f:13:21:f0:c7:57:be:a6:0c:81:ff:42: 52:29:bd:43:5e:11:16:84:5f:7e:a9:29:cf:94:17: b2:e7:6d:d2:7f:28:60:48:df:1c:df:f5:58:c5:0f: 74:6b:32:37:ba:18:82:45:50:69:85:f3:21:ce:5a: 78:04:27:d8:1b:e9:af:57:46:90:a7:ff:b4:97:23: 8f:ce:93:15:25:87:68:00:ab:03:86:23:a6:89:76: bf:59:75:8e:27:a3:28:cd:b7:f7:35:10:a4:98:73: e7:c4:1b:93:b4:f4:7e:35:c6:ea:20:42:e8:48:f9: 86:37:e6:2f:b8:f9:50:e3:f5:3e:6f:cc:70:55:72: 6b:10:e1:77:14:df:35:08:13:b6:df:56:48:61:5c: c5:07:ca:f8:97:e0:08:74:0d:83:f7:ff:7e:ac:25: 73:88:19:66:76:68:76:4f:3f:7f:cd:fd:fb:bc:ca: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:61:5D:14:FD:D8:10:9B:13:EF:D5:FA:91:30:8D:62:B7:3A:12:AF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M2FdFP3YEJsT79X6kTCNYrc6Eq8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff04::/48 Signature Algorithm: sha256WithRSAEncryption 76:ac:09:31:6c:83:c8:0e:ad:09:e8:5a:55:23:10:47:4c:21: 4e:c9:e8:fa:da:ce:d7:a9:88:0b:1f:71:ec:2b:70:02:06:03: 13:69:1a:9f:c3:42:75:67:41:c4:9b:c9:ac:5d:fc:95:e2:7e: d3:af:ad:68:4b:64:10:04:33:4a:40:e4:5b:0b:6f:c8:b5:bf: 80:69:b9:d8:e4:2c:99:00:8e:73:0d:ae:aa:39:73:2e:9b:b1: 32:91:9c:7f:55:48:88:11:58:6c:a4:ab:86:97:77:51:b8:b5: 68:82:f7:46:63:97:56:2f:0f:ef:33:bc:18:9f:61:51:7a:68: ac:22:fa:54:b5:18:e1:24:d6:a3:cb:ef:85:ed:ad:8e:96:b9: 4a:78:98:cb:13:0e:1f:29:f3:f1:9d:29:61:dc:b5:6e:f6:83: 4b:cd:b1:3d:d6:94:e9:19:8b:95:26:5c:9d:be:05:33:28:d3: b9:02:7a:ce:53:87:5b:2a:92:e7:5e:9b:36:16:71:07:40:b1: 7a:87:17:97:1b:61:cb:7a:90:5d:b7:2e:61:ad:f9:3f:cd:7f: 90:74:ae:6f:fd:ed:bf:8c:d8:de:0b:cc:df:af:24:41:16:c1: d9:30:03:e1:47:87:22:35:74:14:0a:b0:e4:bf:ed:d7:93:d4: a7:9c:e7:c9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICMlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTMxMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzNjE1RDE0RkREODEw OUIxM0VGRDVGQTkxMzA4RDYyQjczQTEyQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Y3bUWgYyxPGa4iYgqDYPYAvP0DwyNJN6UbeaFgWZqWPpmZeI eiSTlwMLvMpdXS9H30+b7lXzvbzmOLR0BpcU1jfpPwo65Nz28e845g8TIfDHV76m DIH/QlIpvUNeERaEX36pKc+UF7LnbdJ/KGBI3xzf9VjFD3RrMje6GIJFUGmF8yHO WngEJ9gb6a9XRpCn/7SXI4/OkxUlh2gAqwOGI6aJdr9ZdY4noyjNt/c1EKSYc+fE G5O09H41xuogQuhI+YY35i+4+VDj9T5vzHBVcmsQ4XcU3zUIE7bfVkhhXMUHyviX 4Ah0DYP3/36sJXOIGWZ2aHZPP3/N/fu8ynGnAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUM2FdFP3YEJsT79X6kTCNYrc6Eq8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL00yRmRGUDNZRUpzVDc5WDZr VENOWXJjNkVxOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wQwDQYJKoZIhvcNAQELBQADggEBAHasCTFsg8gOrQnoWlUjEEdMIU7J6Pra ztepiAsfcewrcAIGAxNpGp/DQnVnQcSbyaxd/JXiftOvrWhLZBAEM0pA5FsLb8i1 v4BpudjkLJkAjnMNrqo5cy6bsTKRnH9VSIgRWGykq4aXd1G4tWiC90Zjl1YvD+8z vBifYVF6aKwi+lS1GOEk1qPL74XtrY6WuUp4mMsTDh8p8/GdKWHctW72g0vNsT3W lOkZi5UmXJ2+BTMo07kCes5Th1sqkudemzYWcQdAsXqHF5cbYct6kF23LmGt+T/N f5B0rm/97b+M2N4LzN+vJEEWwdkwA+FHhyI1dBQKsOS/7deT1Kec58k= -----END CERTIFICATE-----Generated at Sat Sep 21 00:29:51 2024 by rpki-client on console-fra.rpki-client.org