$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa File: -_3z9YneTh9_VPXotPLwiW8Tnio.roa (raw, json) Hash identifier: wt63Jl83G2N3TQXeLK9GPFOpcPPTqr87zoZl1TT7Vs4= Subject key identifier: FB:FD:F3:F5:89:DE:4E:1F:7F:54:F5:E8:B4:F2:F0:89:6F:13:9E:2A Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 117D Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa Signing time: Fri 01 Sep 2023 05:00:51 +0000 ROA not before: Fri 01 Sep 2023 05:00:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131621 IP address blocks: 2001:dc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 21:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4477 (0x117d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Sep 1 05:00:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FBFDF3F589DE4E1F7F54F5E8B4F2F0896F139E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:a2:45:4c:a2:ed:8d:4f:f7:c1:f4:3c:75: 37:78:0b:50:4c:1e:9f:e1:cc:88:c0:0d:32:60:98: 50:7c:2f:4d:8f:da:fe:de:e3:e7:52:b2:cd:57:1f: 2e:2b:8c:b7:65:20:68:3d:b5:3b:45:ee:b2:1f:91: 73:02:fa:58:39:6e:ef:c8:42:90:1d:79:cb:03:63: bd:c0:db:5b:2f:1e:18:d2:81:d0:48:76:78:6b:da: 05:b8:d9:d6:9a:24:38:c3:32:3b:fb:97:6e:37:c1: 5c:1f:a6:1b:64:c6:7c:b8:fa:08:a7:b6:d0:97:dd: 1b:07:8c:e8:09:71:fe:db:b9:63:e9:d8:04:92:84: 23:a0:d5:11:21:26:79:e0:50:e7:ee:5e:08:5a:35: 44:50:e5:14:b2:6f:09:52:7c:b0:96:60:0a:c9:ce: d2:ae:9d:d8:e7:88:6d:80:fb:3c:41:e9:56:fb:7c: 06:87:04:94:b5:91:1a:9e:80:ee:14:08:af:0c:b5: 42:e5:c8:23:dc:6d:c8:4c:28:c7:32:a9:30:b0:32: 77:27:e7:d0:b8:7b:01:f4:05:ce:f6:34:53:00:bb: 05:c0:dd:e1:5b:e8:05:48:00:e1:96:00:cc:16:19: d6:40:84:0c:36:24:0f:bb:b4:58:df:c6:e6:bb:39: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FD:F3:F5:89:DE:4E:1F:7F:54:F5:E8:B4:F2:F0:89:6F:13:9E:2A X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/-_3z9YneTh9_VPXotPLwiW8Tnio.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:dc1::/32 Signature Algorithm: sha256WithRSAEncryption 9a:33:13:f5:43:70:2f:1e:65:6d:a5:25:82:cb:86:16:1f:6f: 1f:0a:5f:7f:77:4c:6a:21:a4:3e:2f:36:da:10:2f:df:ec:13: 58:a8:61:a4:e8:a5:9f:99:5c:3a:d3:32:39:ae:2f:de:ea:6c: ad:0f:fa:d2:b0:a0:23:32:da:0a:f1:8a:c0:d5:ac:12:11:fe: 36:95:98:e0:d0:65:af:82:b9:89:91:6a:73:8b:c2:1f:69:0f: 57:d0:46:a2:8a:ad:9e:aa:4d:ad:3d:63:7f:44:39:90:49:c5: fc:3b:e7:1a:10:43:37:1d:a0:cc:04:66:bd:6d:d0:90:f0:37: e7:59:3e:5f:86:aa:be:45:67:b9:61:9a:3a:b1:ec:d8:f8:47: 0e:ec:75:89:c0:56:7f:e6:5f:87:75:83:99:ff:0e:9f:c5:25: 63:11:c9:1c:96:21:a7:96:9a:38:6b:4b:83:76:3e:12:cb:23: 10:cb:d1:7d:df:69:c6:00:ba:fb:d8:a8:84:11:d6:20:12:9c: 26:cf:6c:12:bb:c3:d1:9b:ad:1e:b1:99:90:2a:a9:28:b5:35: a0:b1:ef:b8:fc:7c:b7:d1:69:70:0b:29:13:98:c1:9c:07:60: 6b:e7:4f:97:4a:a0:82:63:9a:0e:31:0f:11:21:f0:e1:0b:62: 6d:ff:48:4d -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICEX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMzA5MDEw NTAwNTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZCRkRGM0Y1ODlERTRF MUY3RjU0RjVFOEI0RjJGMDg5NkYxMzlFMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8oKJFTKLtjU/3wfQ8dTd4C1BMHp/hzIjADTJgmFB8L02P2v7e 4+dSss1XHy4rjLdlIGg9tTtF7rIfkXMC+lg5bu/IQpAdecsDY73A21svHhjSgdBI dnhr2gW42daaJDjDMjv7l243wVwfphtkxny4+ginttCX3RsHjOgJcf7buWPp2ASS hCOg1REhJnngUOfuXghaNURQ5RSybwlSfLCWYArJztKundjniG2A+zxB6Vb7fAaH BJS1kRqegO4UCK8MtULlyCPcbchMKMcyqTCwMncn59C4ewH0Bc72NFMAuwXA3eFb 6AVIAOGWAMwWGdZAhAw2JA+7tFjfxua7OYZjAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQU+/3z9YneTh9/VPXotPLwiW8TniowHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy8tXzN6OVluZVRoOV9WUFhvdFBM d2lXOFRuaW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEN wTANBgkqhkiG9w0BAQsFAAOCAQEAmjMT9UNwLx5lbaUlgsuGFh9vHwpff3dMaiGk Pi822hAv3+wTWKhhpOiln5lcOtMyOa4v3upsrQ/60rCgIzLaCvGKwNWsEhH+NpWY 4NBlr4K5iZFqc4vCH2kPV9BGooqtnqpNrT1jf0Q5kEnF/DvnGhBDNx2gzARmvW3Q kPA351k+X4aqvkVnuWGaOrHs2PhHDux1icBWf+Zfh3WDmf8On8UlYxHJHJYhp5aa OGtLg3Y+EssjEMvRfd9pxgC6+9iohBHWIBKcJs9sErvD0ZutHrGZkCqpKLU1oLHv uPx8t9FpcAspE5jBnAdga+dPl0qggmOaDjEPESHw4Qtibf9ITQ== -----END CERTIFICATE-----Generated at Sun Jun 23 13:19:23 2024 by rpki-client on console-fra.rpki-client.org