$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/S-5haFp8wkAygh0SRxedQq7qahs.roa File: S-5haFp8wkAygh0SRxedQq7qahs.roa (raw, json) Hash identifier: ChwbfZ89FQ4rM5VYhIi3lGZ1oSqm+6JiV6Bt69ujA3A= Subject key identifier: 4B:EE:61:68:5A:7C:C2:40:32:82:1D:12:47:17:9D:42:AE:EA:6A:1B Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Certificate serial: 038E Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/S-5haFp8wkAygh0SRxedQq7qahs.roa Signing time: Fri 01 Sep 2023 10:16:41 +0000 ROA not before: Fri 01 Sep 2023 10:16:41 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18178 IP address blocks: 2406:9740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B Validity Not Before: Sep 1 10:16:41 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4BEE61685A7CC24032821D1247179D42AEEA6A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:00:f1:78:ef:55:99:63:db:dd:7a:27:98: 99:30:91:e9:bc:94:09:02:ef:22:eb:73:8a:0e:ae: 47:fb:3e:34:e0:b2:53:43:53:3e:82:98:a7:3f:93: 4b:f0:d9:89:60:e4:46:bc:10:79:b4:e0:dd:a5:3e: 74:15:d3:c8:25:f1:a3:e7:9e:79:75:de:98:f6:6f: 03:30:27:b3:a9:d0:65:47:77:f1:aa:18:7a:ef:32: 4e:f6:07:06:da:6f:93:43:b8:6d:ab:47:54:f0:16: 5d:a3:da:28:37:e8:06:1b:de:e3:aa:25:5b:34:d4: c5:92:70:56:0a:c2:2d:7a:ed:1f:ef:3d:5b:d2:ab: d3:c9:2a:39:ba:72:8f:d2:38:9e:03:d6:e6:f1:29: e8:64:bb:eb:e1:ee:8f:f4:ea:fd:15:b8:23:4f:87: 3b:81:07:7c:44:fc:67:2c:c6:52:68:21:b3:9c:dc: 6e:be:97:35:80:83:9c:e4:9b:8d:a0:a0:0f:b2:b2: db:45:3b:9b:0d:a4:2f:18:bb:d5:da:c3:96:0e:2b: da:be:14:88:26:cf:36:e2:2d:f4:4e:2f:51:41:38: 3c:d5:c7:37:1e:4f:18:93:e8:33:96:c7:c2:87:b1: 34:ef:67:b9:ef:ab:0d:05:43:62:ca:8f:52:15:26: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EE:61:68:5A:7C:C2:40:32:82:1D:12:47:17:9D:42:AE:EA:6A:1B X509v3 Authority Key Identifier: keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/S-5haFp8wkAygh0SRxedQq7qahs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:9740::/32 Signature Algorithm: sha256WithRSAEncryption 58:c9:08:1b:bc:9a:92:a8:72:8e:8a:21:df:03:ea:17:d8:71: 70:a8:56:6d:c4:2c:62:53:d9:59:14:a4:df:53:c5:84:5d:77: 97:f4:fe:ae:a3:c8:f6:9f:ab:f8:a1:f5:0f:2f:82:1e:7f:b7: 55:ea:4c:25:f4:bd:2c:30:8b:1f:8a:1e:cf:c3:01:f8:dc:7c: 84:97:03:0d:fe:c7:be:81:dc:4b:14:69:d9:25:32:8e:7e:62: 5a:ed:92:5b:02:6f:7f:ba:29:13:15:be:bd:0e:b0:00:66:03: 5b:55:3a:6f:24:3c:8e:d9:26:0b:ea:9e:25:5b:c1:f8:0b:53: a2:46:bd:90:ba:fc:7e:af:a2:e9:7c:47:03:b7:0a:27:49:37: 50:3f:d7:a4:55:81:34:2f:9f:26:39:d0:e0:37:8b:3b:3f:6c: 54:92:a0:12:b6:b7:f7:c7:38:bf:c2:29:cc:e9:7b:4b:b3:ae: 47:54:3f:74:26:e9:1a:37:5f:90:8e:63:50:b1:76:c7:64:fd: 72:a7:60:93:5a:cf:27:6a:5a:aa:ce:8b:88:31:e4:b6:4f:0d: e7:fe:d1:a4:1d:89:96:45:a9:58:e5:00:12:60:bc:a5:21:b6: ad:ad:14:5a:cf:74:35:7c:6b:87:dd:f9:96:34:4c:8e:96:76: 54:0c:2e:46 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgICA44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkZC QjdGN0I1QzU4MzIzNDkwODc1ODQ5QjhFRERBNDk1RUYxN0IxQjAeFw0yMzA5MDEx MDE2NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRCRUU2MTY4NUE3Q0My NDAzMjgyMUQxMjQ3MTc5RDQyQUVFQTZBMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7sQDxeO9VmWPb3XonmJkwkem8lAkC7yLrc4oOrkf7PjTgslND Uz6CmKc/k0vw2Ylg5Ea8EHm04N2lPnQV08gl8aPnnnl13pj2bwMwJ7Op0GVHd/Gq GHrvMk72Bwbab5NDuG2rR1TwFl2j2ig36AYb3uOqJVs01MWScFYKwi167R/vPVvS q9PJKjm6co/SOJ4D1ubxKehku+vh7o/06v0VuCNPhzuBB3xE/GcsxlJoIbOc3G6+ lzWAg5zkm42goA+ysttFO5sNpC8Yu9Xaw5YOK9q+FIgmzzbiLfROL1FBODzVxzce TxiT6DOWx8KHsTTvZ7nvqw0FQ2LKj1IVJmyTAgMBAAGjggHpMIIB5TAdBgNVHQ4E FgQUS+5haFp8wkAygh0SRxedQq7qahswHwYDVR0jBBgwFoAUv7t/e1xYMjSQh1hJ uO3aSV7xexswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL3Y3 dF9lMXhZTWpTUWgxaEp1TzNhU1Y3eGV4cy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev djd0X2UxeFlNalNRaDFoSnVPM2FTVjd4ZXhzLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvVUxDL1MtNWhhRnA4d2tBeWdoMFNSeGVkUXE3 cWFocy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBpdAMA0G CSqGSIb3DQEBCwUAA4IBAQBYyQgbvJqSqHKOiiHfA+oX2HFwqFZtxCxiU9lZFKTf U8WEXXeX9P6uo8j2n6v4ofUPL4Ief7dV6kwl9L0sMIsfih7PwwH43HyElwMN/se+ gdxLFGnZJTKOfmJa7ZJbAm9/uikTFb69DrAAZgNbVTpvJDyO2SYL6p4lW8H4C1Oi Rr2Quvx+r6LpfEcDtwonSTdQP9ekVYE0L58mOdDgN4s7P2xUkqAStrf3xzi/winM 6XtLs65HVD90JukaN1+QjmNQsXbHZP1yp2CTWs8nalqqzouIMeS2Tw3n/tGkHYmW RalY5QASYLylIbatrRRaz3Q1fGuH3fmWNEyOlnZUDC5G -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org