$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Y05D41Y7OLRALfjti54rQ6k1Pm8.roa File: Y05D41Y7OLRALfjti54rQ6k1Pm8.roa (raw, json) Hash identifier: F+oVL81Y8HrLrM6vtlnoNVrCjv2I1Tc3j+Lk22pm1ys= Subject key identifier: 63:4E:43:E3:56:3B:38:B4:40:2D:F8:ED:8B:9E:2B:43:A9:35:3E:6F Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 1174 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Y05D41Y7OLRALfjti54rQ6k1Pm8.roa Signing time: Fri 01 Sep 2023 03:14:22 +0000 ROA not before: Fri 01 Sep 2023 03:14:22 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 14618 IP address blocks: 2001:dc1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 23:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4468 (0x1174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Sep 1 03:14:22 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=634E43E3563B38B4402DF8ED8B9E2B43A9353E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c2:a1:03:0c:ea:b5:6d:f6:28:c1:a8:e6:6a: c1:68:b5:e1:05:5f:cc:71:5f:67:01:85:3b:3a:71: 54:b3:a7:80:e0:b1:1a:19:12:43:f2:3e:39:11:ef: ca:94:e8:eb:c5:1b:5a:d4:ce:92:d0:58:b8:60:bb: a1:dc:25:e1:c9:bb:0b:4e:37:53:71:89:98:53:f0: a7:10:50:ce:9d:43:1c:1c:46:47:de:97:a1:56:f9: 2e:26:09:0b:f9:94:4d:29:cb:06:eb:48:3f:f4:0e: 07:3a:ec:b2:53:80:4b:72:14:04:de:11:78:38:ed: b0:a1:4c:36:77:96:53:31:6f:bd:b0:a1:f2:1c:9b: 55:f4:2d:53:77:6f:b7:fd:8d:38:c2:f6:c7:02:d5: bd:47:17:86:78:89:50:4d:c0:d6:5d:8d:f5:4d:5e: cb:b6:73:2b:d3:12:fa:4d:d0:22:33:5f:dc:12:eb: 31:24:02:e0:e3:55:3c:be:b2:90:35:57:ab:58:85: 0d:ff:e3:79:95:52:e7:88:cb:8e:96:0d:cf:fe:7b: 15:22:d2:58:a6:78:35:71:bb:2f:3a:a9:21:72:98: 13:0d:08:90:ac:b7:9b:d8:28:3e:26:d4:2a:d0:19: 9d:56:c9:40:1e:c7:2a:fb:51:1e:58:27:d2:9b:d9: ec:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4E:43:E3:56:3B:38:B4:40:2D:F8:ED:8B:9E:2B:43:A9:35:3E:6F X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Y05D41Y7OLRALfjti54rQ6k1Pm8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:dc1::/48 Signature Algorithm: sha256WithRSAEncryption 42:67:e7:94:5a:58:29:7d:63:09:74:6d:5e:4f:6b:6d:a2:37: ca:ba:60:3f:a6:30:8a:67:98:cd:55:f8:9e:52:fe:e7:1d:21: 0b:48:9a:18:fe:cc:88:84:b7:e5:10:af:9f:50:91:56:ae:01: 40:38:8a:b1:fc:01:e4:87:19:8c:de:b2:b9:74:af:29:aa:89: 54:20:d2:f2:2e:0b:a1:0b:8f:e5:7e:69:33:9c:2d:65:92:c2: ea:85:17:2c:f0:13:cc:bc:c5:70:4d:f9:95:51:ac:17:2a:02: 4f:47:84:ff:22:f6:33:a3:e0:89:fe:fd:25:67:e0:ec:a3:1c: ea:e8:86:8d:60:1d:18:8b:d8:11:0f:14:ce:48:6d:ad:d8:d3: 0f:0d:2d:8e:07:bc:8d:a0:44:28:04:44:eb:8c:28:8a:d1:16: 85:8a:ff:68:4e:75:fc:5c:70:36:ff:35:aa:6a:05:23:a1:30: db:8e:8e:d5:20:61:40:de:6a:b9:f1:20:5b:d0:87:c4:af:a7: b0:5c:81:26:9d:9c:fe:fc:8c:c3:ff:a9:66:ea:11:82:c4:f0: cc:97:b6:d7:3b:30:5a:a9:cd:1b:ab:18:cf:53:b6:09:68:b3: db:19:56:04:df:c4:42:50:26:47:43:c5:aa:83:6f:92:c2:76: c5:42:0e:49 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEXQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMzA5MDEw MzE0MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYzNEU0M0UzNTYzQjM4 QjQ0MDJERjhFRDhCOUUyQjQzQTkzNTNFNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqwqEDDOq1bfYowajmasFoteEFX8xxX2cBhTs6cVSzp4DgsRoZ EkPyPjkR78qU6OvFG1rUzpLQWLhgu6HcJeHJuwtON1NxiZhT8KcQUM6dQxwcRkfe l6FW+S4mCQv5lE0pywbrSD/0Dgc67LJTgEtyFATeEXg47bChTDZ3llMxb72wofIc m1X0LVN3b7f9jTjC9scC1b1HF4Z4iVBNwNZdjfVNXsu2cyvTEvpN0CIzX9wS6zEk AuDjVTy+spA1V6tYhQ3/43mVUueIy46WDc/+exUi0limeDVxuy86qSFymBMNCJCs t5vYKD4m1CrQGZ1WyUAexyr7UR5YJ9Kb2ezzAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUY05D41Y7OLRALfjti54rQ6k1Pm8wHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9ZMDVENDFZN09MUkFMZmp0aTU0 clE2azFQbTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN wQAAMA0GCSqGSIb3DQEBCwUAA4IBAQBCZ+eUWlgpfWMJdG1eT2ttojfKumA/pjCK Z5jNVfieUv7nHSELSJoY/syIhLflEK+fUJFWrgFAOIqx/AHkhxmM3rK5dK8pqolU INLyLguhC4/lfmkznC1lksLqhRcs8BPMvMVwTfmVUawXKgJPR4T/IvYzo+CJ/v0l Z+Dsoxzq6IaNYB0Yi9gRDxTOSG2t2NMPDS2OB7yNoEQoBETrjCiK0RaFiv9oTnX8 XHA2/zWqagUjoTDbjo7VIGFA3mq58SBb0IfEr6ewXIEmnZz+/IzD/6lm6hGCxPDM l7bXOzBaqc0bqxjPU7YJaLPbGVYE38RCUCZHQ8Wqg2+SwnbFQg5J -----END CERTIFICATE-----Generated at Thu May 2 04:47:41 2024 by rpki-client on console-fra.rpki-client.org