$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcqL7v3aOMRhTdFcBmUMS2Pu4VE.roa File: ZcqL7v3aOMRhTdFcBmUMS2Pu4VE.roa (raw, json) Hash identifier: 7NJLJGn/pSv6ZVN+fKnwx/83BMyhJiAwqP3CR4m/dcc= Subject key identifier: 65:CA:8B:EE:FD:DA:38:C4:61:4D:D1:5C:06:65:0C:4B:63:EE:E1:51 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A16 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcqL7v3aOMRhTdFcBmUMS2Pu4VE.roa Signing time: Fri 01 Sep 2023 10:07:29 +0000 ROA not before: Fri 01 Sep 2023 10:07:29 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 2407:4d00:ff02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10774 (0x2a16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:29 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=65CA8BEEFDDA38C4614DD15C06650C4B63EEE151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9f:2b:b6:9c:80:08:fb:ce:a6:87:57:c4:51: ed:b9:4b:56:f3:f4:c9:1f:a6:ca:ce:d6:9d:e8:b9: db:49:96:dd:89:af:4a:15:5e:10:f0:bd:23:ce:8d: ea:3c:85:1b:44:6f:e8:97:ab:ea:7e:85:4c:5f:4f: bb:68:e0:0a:69:dc:d6:c5:6e:15:d1:13:20:53:49: 74:5b:0e:62:d8:02:df:90:7e:e7:d8:f8:10:ec:fa: 5a:1b:b6:b9:49:8b:fe:29:72:13:52:13:5e:4e:c8: ff:e6:0b:f1:6a:de:8e:16:95:4a:fe:02:71:d5:0e: 82:9f:02:0a:4f:80:c4:92:1b:5b:d9:d4:15:09:53: df:78:04:8f:01:7b:e5:51:b4:66:a9:5e:6c:b3:f9: 42:b0:0c:46:b4:08:81:95:73:5e:c1:92:17:74:2f: 2c:2c:08:fd:50:a2:d6:26:1d:c4:06:32:24:7e:31: 55:f7:37:35:fc:fb:3b:76:24:84:c7:78:75:98:1c: 06:7f:bb:70:56:d2:0a:37:a6:17:0d:f2:50:8e:bf: 9b:91:d4:6d:10:5e:e4:c6:15:e0:da:3d:eb:e9:bd: 92:37:f0:82:e3:1e:c1:c1:67:dc:29:a2:0f:39:6f: fe:7f:eb:7b:39:f7:3d:50:a5:57:5c:c8:10:c9:84: ef:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CA:8B:EE:FD:DA:38:C4:61:4D:D1:5C:06:65:0C:4B:63:EE:E1:51 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcqL7v3aOMRhTdFcBmUMS2Pu4VE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00:ff02::/48 Signature Algorithm: sha256WithRSAEncryption 6f:f8:48:07:0b:e5:4c:18:ed:c5:77:68:86:5d:c1:33:c3:08: e9:07:6f:35:cc:2f:fb:21:e0:bc:79:a7:7e:f3:91:9b:33:1a: ed:4d:a0:60:bb:41:77:c8:26:56:15:ee:e4:00:b8:b6:10:17: d9:0a:50:26:a6:fb:67:d9:8b:60:49:96:65:62:a6:e8:ca:e2: d2:7a:9d:ba:29:3b:b8:36:d9:e2:fa:2d:79:42:cb:3d:9d:6f: bc:33:10:84:ed:57:3a:74:25:17:30:1a:d5:1b:be:bd:de:c4: 0c:1a:d1:f6:3e:fa:af:e6:db:52:a1:6b:e0:e8:90:1c:2d:fa: da:88:15:67:b0:67:f7:76:75:d2:9a:16:5f:35:ba:8f:5b:f1: 61:bc:8c:8c:8a:31:cd:40:a5:f4:5e:37:e6:fc:49:4d:ca:75: 02:49:2c:41:ab:0b:fb:17:37:19:7e:be:d3:fd:f5:db:d6:a1: 10:97:5e:c6:7a:c3:37:8f:89:fb:05:f8:d3:5a:56:f4:bd:54: d0:74:82:32:d3:03:b1:fb:46:48:20:1d:40:27:01:f7:51:99: 40:eb:7f:a6:35:3c:4f:6c:8f:98:f1:cf:54:b2:df:a3:5f:a2: 38:c5:2e:20:f8:d3:be:8b:87:72:a7:96:12:f1:7a:ba:a5:33: 12:68:09:b5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICKhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY1Q0E4QkVFRkREQTM4 QzQ2MTRERDE1QzA2NjUwQzRCNjNFRUUxNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqnyu2nIAI+86mh1fEUe25S1bz9MkfpsrO1p3oudtJlt2Jr0oV XhDwvSPOjeo8hRtEb+iXq+p+hUxfT7to4App3NbFbhXREyBTSXRbDmLYAt+QfufY +BDs+lobtrlJi/4pchNSE15OyP/mC/Fq3o4WlUr+AnHVDoKfAgpPgMSSG1vZ1BUJ U994BI8Be+VRtGapXmyz+UKwDEa0CIGVc17Bkhd0LywsCP1QotYmHcQGMiR+MVX3 NzX8+zt2JITHeHWYHAZ/u3BW0go3phcN8lCOv5uR1G0QXuTGFeDaPevpvZI38ILj HsHBZ9wpog85b/5/63s59z1QpVdcyBDJhO9PAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUZcqL7v3aOMRhTdFcBmUMS2Pu4VEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pjcUw3djNhT01SaFRkRmNC bVVNUzJQdTRWRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk B00A/wIwDQYJKoZIhvcNAQELBQADggEBAG/4SAcL5UwY7cV3aIZdwTPDCOkHbzXM L/sh4Lx5p37zkZszGu1NoGC7QXfIJlYV7uQAuLYQF9kKUCam+2fZi2BJlmVipujK 4tJ6nbopO7g22eL6LXlCyz2db7wzEITtVzp0JRcwGtUbvr3exAwa0fY++q/m21Kh a+DokBwt+tqIFWewZ/d2ddKaFl81uo9b8WG8jIyKMc1ApfReN+b8SU3KdQJJLEGr C/sXNxl+vtP99dvWoRCXXsZ6wzePifsF+NNaVvS9VNB0gjLTA7H7RkggHUAnAfdR mUDrf6Y1PE9sj5jxz1Sy36NfojjFLiD4076Lh3KnlhLxerqlMxJoCbU= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org