$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pyJCRpftwUAHcs_aEZLsdEJ_jXk.roa File: pyJCRpftwUAHcs_aEZLsdEJ_jXk.roa (raw, json) Hash identifier: vbOb7wDDVtdwn5AAwFj3hrHP1WiximDCig+X1vddu3Q= Subject key identifier: A7:22:42:46:97:ED:C1:40:07:72:CF:DA:11:92:EC:74:42:7F:8D:79 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A6E Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pyJCRpftwUAHcs_aEZLsdEJ_jXk.roa Signing time: Fri 01 Sep 2023 10:07:53 +0000 ROA not before: Fri 01 Sep 2023 10:07:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 2407:4d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10862 (0x2a6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A722424697EDC1400772CFDA1192EC74427F8D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:29:45:2a:0e:72:6a:12:2a:44:99:e8:a7: 9f:ad:9a:f1:fe:17:82:4d:13:9d:65:e9:bd:c1:4a: 10:7e:3f:a0:8c:a1:6e:18:44:2d:60:83:7c:fc:28: b5:fa:00:9d:b5:8f:9b:f5:44:d4:9b:ee:c3:6f:23: 29:47:75:7a:6d:ef:d6:5c:83:aa:33:e2:06:dd:cb: e1:fd:48:99:41:2c:68:18:b4:a8:db:57:ba:11:0e: 5e:42:4c:49:62:99:d5:9c:4c:0f:17:af:43:aa:2b: 4c:94:e9:44:59:4c:9f:24:0d:28:83:a1:d3:4a:89: 93:30:1a:f0:c6:5a:ff:7c:6b:8e:3a:8b:ed:73:5a: 5f:b7:32:a2:a3:22:0f:76:8f:91:16:88:5d:7d:c8: 23:a0:2e:c8:6f:b5:84:1a:d7:96:82:02:fd:2d:fa: 86:ce:0f:32:32:f0:f2:95:33:83:52:53:79:70:97: 3c:c5:8a:31:0f:b4:84:3a:20:5f:55:db:4c:9d:b3: 30:0a:1f:4b:44:eb:45:83:c8:35:d8:44:ab:ab:69: 11:66:d2:4a:d9:43:7f:b6:38:ed:94:8e:26:d6:49: 52:4b:25:31:3f:e1:fb:ba:5c:c9:c3:f2:bc:9f:cc: e8:d1:16:1c:33:76:db:f6:1e:80:ca:5b:28:ce:6a: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:22:42:46:97:ED:C1:40:07:72:CF:DA:11:92:EC:74:42:7F:8D:79 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pyJCRpftwUAHcs_aEZLsdEJ_jXk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:4d00::/32 Signature Algorithm: sha256WithRSAEncryption 37:d3:19:3a:ae:23:4c:b6:de:fa:53:09:b4:df:a0:6e:df:ec: db:53:9f:d5:9b:e7:6e:e0:a3:4e:21:68:81:bc:f9:f3:94:a1: a0:35:71:e2:37:73:5a:e4:da:ee:95:c0:0d:9b:79:66:45:e0: d6:71:54:40:03:46:cb:14:0a:61:2a:5d:bf:a6:d5:60:b5:3f: 8f:b3:d6:93:29:f5:c5:cf:60:c7:5e:41:24:67:49:3e:83:33: 71:79:e5:db:df:5c:1f:e1:77:c5:31:34:71:f0:b9:6d:4b:26: 1f:4c:29:7f:ad:c1:36:d6:49:98:79:6c:14:c4:21:3b:ce:3c: 14:72:3e:54:12:93:3d:3b:9c:52:f7:f7:b1:56:e5:a7:61:09: 26:1a:de:8a:6d:ad:af:91:6a:5d:55:32:10:65:d3:cb:12:bb: b5:31:48:c9:f5:1a:e3:e9:59:bd:cf:31:3f:05:20:3f:8f:95: e9:83:c2:5d:0e:55:31:68:d8:a2:e3:bc:f6:3b:9b:a0:13:22: 7d:12:94:30:fb:85:f4:16:fb:5b:8b:46:e2:0b:0a:37:b0:ee: 43:7a:ff:ed:b3:8c:27:f7:29:c0:94:c7:60:ce:5f:00:a7:14: a6:54:37:1a:a6:ee:8d:7a:e3:10:30:35:fb:50:f2:e6:7e:19: fd:51:d8:0a -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICKm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE3MjI0MjQ2OTdFREMx NDAwNzcyQ0ZEQTExOTJFQzc0NDI3RjhENzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClLClFKg5yahIqRJnop5+tmvH+F4JNE51l6b3BShB+P6CMoW4Y RC1gg3z8KLX6AJ21j5v1RNSb7sNvIylHdXpt79Zcg6oz4gbdy+H9SJlBLGgYtKjb V7oRDl5CTElimdWcTA8Xr0OqK0yU6URZTJ8kDSiDodNKiZMwGvDGWv98a446i+1z Wl+3MqKjIg92j5EWiF19yCOgLshvtYQa15aCAv0t+obODzIy8PKVM4NSU3lwlzzF ijEPtIQ6IF9V20ydszAKH0tE60WDyDXYRKuraRFm0krZQ3+2OO2UjibWSVJLJTE/ 4fu6XMnD8ryfzOjRFhwzdtv2HoDKWyjOauzfAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUpyJCRpftwUAHcs/aEZLsdEJ/jXkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3B5SkNScGZ0d1VBSGNzX2FF WkxzZEVKX2pYay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAk B00AMA0GCSqGSIb3DQEBCwUAA4IBAQA30xk6riNMtt76Uwm036Bu3+zbU5/Vm+du 4KNOIWiBvPnzlKGgNXHiN3Na5NrulcANm3lmReDWcVRAA0bLFAphKl2/ptVgtT+P s9aTKfXFz2DHXkEkZ0k+gzNxeeXb31wf4XfFMTRx8LltSyYfTCl/rcE21kmYeWwU xCE7zjwUcj5UEpM9O5xS9/exVuWnYQkmGt6Kba2vkWpdVTIQZdPLEru1MUjJ9Rrj 6Vm9zzE/BSA/j5Xpg8JdDlUxaNii47z2O5ugEyJ9EpQw+4X0Fvtbi0biCwo3sO5D ev/ts4wn9ynAlMdgzl8ApxSmVDcapu6NeuMQMDX7UPLmfhn9UdgK -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:06 2024 by rpki-client on console-fra.rpki-client.org