$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa File: oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa (raw, json) Hash identifier: o9r/HicinzelOLCTWIYhbhxSk7aKIQnwSGTt0E0xGiI= Subject key identifier: A2:A2:F8:18:6E:79:CA:E1:70:49:9F:87:C1:CE:FD:C4:13:D9:AF:16 Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Certificate serial: 12C9 Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa Signing time: Mon 26 Aug 2024 05:32:33 +0000 ROA not before: Mon 26 Aug 2024 05:32:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 14618 IP address blocks: 2001:dc1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Oct 2024 23:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4809 (0x12c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965 Validity Not Before: Aug 26 05:32:33 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A2A2F8186E79CAE170499F87C1CEFDC413D9AF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:c0:3d:5c:ad:43:1a:25:37:4f:35:a2:f7: 2e:4d:75:97:23:48:7c:1a:44:b1:de:eb:80:c1:67: 02:b9:93:35:2f:2d:37:83:15:d6:31:58:4d:9f:1d: 7f:21:0a:9c:c0:e4:96:e9:0c:26:11:dc:6d:7a:dc: a0:1a:38:8f:5f:34:cb:f0:c1:36:a9:4f:84:df:9c: aa:b1:17:5e:8f:73:9f:89:c0:f4:8e:7d:91:3c:ac: b4:e4:6a:ad:a0:78:87:ad:72:4e:40:ca:74:36:ec: e7:64:f5:2d:f5:a6:01:59:9b:ab:0d:5b:15:d5:8b: 5c:d8:84:19:6c:dc:2f:50:42:74:2e:7c:0c:3a:2e: a3:88:0e:f1:b6:85:38:03:33:d6:47:da:62:a6:27: d5:90:ce:3d:a8:cf:0e:e3:c2:e7:34:3b:79:d6:a7: dd:ee:df:5d:1f:4a:27:fa:ba:ce:32:ce:51:04:b5: 6c:5f:fe:fd:08:c0:ef:05:b7:c6:ed:f4:db:95:b1: c6:dd:92:a7:53:56:11:20:19:45:34:cc:d9:d4:69: 11:a1:20:01:cb:59:91:e1:e2:2b:c2:86:34:38:d4: 97:c1:3f:ad:c7:a3:79:3b:ac:76:33:c3:d5:42:cc: 07:82:c0:21:32:d2:0d:16:82:da:39:32:7b:5f:75: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A2:F8:18:6E:79:CA:E1:70:49:9F:87:C1:CE:FD:C4:13:D9:AF:16 X509v3 Authority Key Identifier: keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/oqL4GG55yuFwSZ-Hwc79xBPZrxY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:dc1::/48 Signature Algorithm: sha256WithRSAEncryption 7e:12:af:25:02:99:19:3d:b5:aa:f7:a3:37:7a:ce:de:0a:7a: 1d:85:2e:e5:f2:5c:06:aa:dc:f4:56:80:ab:7b:8c:9e:60:83: 15:f6:16:49:ed:12:36:e9:df:36:61:8f:3e:26:17:13:b8:8d: c3:85:3f:db:d3:d2:f8:0a:26:11:c0:a4:59:89:cb:74:7f:9c: 18:18:1e:83:c6:e5:bf:a3:99:bf:98:f1:58:91:48:a0:62:1e: e4:4c:b8:76:64:a4:84:f0:5d:4f:2b:82:44:e6:3c:fd:ef:ae: a1:2e:d4:15:cd:e9:9a:d0:1c:8c:ca:f9:06:81:ee:24:95:2b: ae:61:1d:79:d6:14:11:e6:d6:74:7d:49:67:9c:91:85:4f:09: a5:dc:5a:6a:f7:54:41:10:23:c8:3a:d3:ec:51:a5:1d:38:2e: 98:0e:8b:54:ce:86:c5:d3:b3:26:20:34:60:9a:d3:b8:36:ef: d8:72:99:da:86:a1:0c:39:0f:a2:ed:ab:14:c4:38:5c:ce:45: e6:07:82:0c:35:eb:61:88:dc:2a:f2:a6:1b:2d:cb:66:c6:c5: 3f:eb:83:ae:f3:d1:5c:73:ad:e0:ea:e1:d8:63:37:60:7d:e3: 2e:1c:6c:81:fb:58:36:eb:15:00:6b:78:a0:73:2d:41:92:24: 69:b9:aa:e8 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yNDA4MjYw NTMyMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyQTJGODE4NkU3OUNB RTE3MDQ5OUY4N0MxQ0VGREM0MTNEOUFGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8CsA9XK1DGiU3TzWi9y5NdZcjSHwaRLHe64DBZwK5kzUvLTeD FdYxWE2fHX8hCpzA5JbpDCYR3G163KAaOI9fNMvwwTapT4TfnKqxF16Pc5+JwPSO fZE8rLTkaq2geIetck5AynQ27Odk9S31pgFZm6sNWxXVi1zYhBls3C9QQnQufAw6 LqOIDvG2hTgDM9ZH2mKmJ9WQzj2ozw7jwuc0O3nWp93u310fSif6us4yzlEEtWxf /v0IwO8Ft8bt9NuVscbdkqdTVhEgGUU0zNnUaRGhIAHLWZHh4ivChjQ41JfBP63H o3k7rHYzw9VCzAeCwCEy0g0Wgto5MntfdZ/RAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUoqL4GG55yuFwSZ+Hwc79xBPZrxYwHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0 p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9vcUw0R0c1NXl1RndTWi1Id2M3 OXhCUFpyeFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN wQAAMA0GCSqGSIb3DQEBCwUAA4IBAQB+Eq8lApkZPbWq96M3es7eCnodhS7l8lwG qtz0VoCre4yeYIMV9hZJ7RI26d82YY8+JhcTuI3DhT/b09L4CiYRwKRZict0f5wY GB6DxuW/o5m/mPFYkUigYh7kTLh2ZKSE8F1PK4JE5jz9766hLtQVzema0ByMyvkG ge4klSuuYR151hQR5tZ0fUlnnJGFTwml3Fpq91RBECPIOtPsUaUdOC6YDotUzobF 07MmIDRgmtO4Nu/YcpnahqEMOQ+i7asUxDhczkXmB4IMNethiNwq8qYbLctmxsU/ 64Ou89Fcc63g6uHYYzdgfeMuHGyB+1g26xUAa3igcy1BkiRpuaro -----END CERTIFICATE-----Generated at Tue Oct 22 19:33:19 2024 by rpki-client on console-ams.rpki-client.org