$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/mqp2Xk2s6zzaouojuRo_W-BVfIY.roa File: mqp2Xk2s6zzaouojuRo_W-BVfIY.roa (raw, json) Hash identifier: Ht/hKidnVUKDCC5lLdfXVucI46rlEOw3SzGh0Z/mn+c= Subject key identifier: 9A:AA:76:5E:4D:AC:EB:3C:DA:A2:EA:23:B9:1A:3F:5B:E0:55:7C:86 Certificate issuer: /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF Certificate serial: 0150 Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/mqp2Xk2s6zzaouojuRo_W-BVfIY.roa Signing time: Mon 26 Aug 2024 05:34:46 +0000 ROA not before: Mon 26 Aug 2024 05:34:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63897 IP address blocks: 2400:4460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF Validity Not Before: Aug 26 05:34:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9AAA765E4DACEB3CDAA2EA23B91A3F5BE0557C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:57:be:6c:d6:ff:a4:b9:b1:8f:88:ee:5b: 84:3e:69:56:07:b2:35:fa:2b:9e:f7:d1:e7:1f:b7: 32:9c:f4:59:b7:f5:f6:65:69:08:f1:8e:36:cb:83: 79:78:d1:00:cb:5c:c3:7d:ff:5e:a8:28:6f:55:a0: da:5b:ff:4d:03:8c:50:a9:a5:72:06:4d:48:f2:1e: 9c:cb:63:f2:03:2b:fa:42:e5:04:7c:a3:0f:94:33: 77:5f:1f:51:f4:95:d6:7b:3b:23:2f:c7:1a:f2:36: db:6c:fa:22:9d:77:42:e4:e9:c7:0d:3e:65:91:73: 59:76:ac:37:80:50:25:7e:c7:0f:eb:f9:fc:53:30: c5:18:99:0c:4e:45:9a:1c:b9:f4:01:bd:13:36:af: 98:e1:70:82:27:46:a1:4a:26:68:4d:fb:17:9b:25: 41:72:92:57:8f:15:a7:ba:69:ab:40:7a:8e:99:45: 77:d4:b3:0c:f6:fc:1e:71:6c:ee:bb:f5:8b:b7:a2: c2:43:7e:c7:a4:3e:f1:cd:14:a7:04:9a:94:9d:5d: 35:1e:54:e4:7c:f9:8f:92:24:87:d2:96:ca:e8:18: d7:d9:5e:2f:dd:be:ec:23:ac:28:f9:7e:a1:ab:08: 91:ef:d5:40:aa:37:bb:20:33:a6:44:0e:9e:18:7a: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AA:76:5E:4D:AC:EB:3C:DA:A2:EA:23:B9:1A:3F:5B:E0:55:7C:86 X509v3 Authority Key Identifier: keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/mqp2Xk2s6zzaouojuRo_W-BVfIY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:4460::/32 Signature Algorithm: sha256WithRSAEncryption 81:86:21:2a:69:13:62:93:fa:73:96:d2:c7:d8:85:8f:83:8e: fb:b3:7c:c1:c4:31:c1:c2:a9:50:27:9e:4e:89:46:94:e3:16: 38:15:d7:55:17:71:24:d1:3c:b0:4c:9b:e5:68:88:6a:d2:a9: bd:91:2f:47:9e:1b:70:b6:7f:dd:fb:dc:7c:f8:9c:41:43:77: dc:bb:68:b5:66:55:9d:8c:1f:0a:34:ce:77:8b:33:fb:0d:03: fd:b5:90:8c:b8:63:6e:96:c6:d1:be:14:78:6a:37:39:14:d0: 57:a5:ba:00:e2:39:d6:a3:9c:38:50:3e:45:0d:4b:6c:be:18: 31:2f:dc:58:c6:24:21:20:64:e2:8a:72:b5:4a:a2:5f:4d:13: c5:9d:ed:33:db:9d:2b:5a:1f:eb:91:7b:95:95:52:2b:8f:22: a7:f0:9c:de:8f:c3:18:77:56:17:36:60:99:46:87:fc:af:fa: a3:b8:ad:6f:14:03:11:42:16:87:c1:16:a1:ac:b7:4d:24:25: 24:cf:d3:9d:e6:51:e9:45:83:e1:ce:7a:cc:32:a9:d8:e3:05: c3:2b:ca:ee:b0:aa:3b:78:6b:f1:f9:bc:07:9f:2a:36:46:ff: f4:6b:df:34:80:d4:6f:0e:02:04:6e:95:76:1a:68:20:dc:a7: 4d:0c:0f:90 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUU4 NDcxMDhFQkEwQjU1MEJDMDIwRkQ5QjFEQzZERUIyOUUwREJFRjAeFw0yNDA4MjYw NTM0NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlBQUE3NjVFNERBQ0VC M0NEQUEyRUEyM0I5MUEzRjVCRTA1NTdDODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXcle+bNb/pLmxj4juW4Q+aVYHsjX6K5730ecftzKc9Fm39fZl aQjxjjbLg3l40QDLXMN9/16oKG9VoNpb/00DjFCppXIGTUjyHpzLY/IDK/pC5QR8 ow+UM3dfH1H0ldZ7OyMvxxryNtts+iKdd0Lk6ccNPmWRc1l2rDeAUCV+xw/r+fxT MMUYmQxORZocufQBvRM2r5jhcIInRqFKJmhN+xebJUFyklePFae6aatAeo6ZRXfU swz2/B5xbO679Yu3osJDfsekPvHNFKcEmpSdXTUeVOR8+Y+SJIfSlsroGNfZXi/d vuwjrCj5fqGrCJHv1UCqN7sgM6ZEDp4YehPbAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUmqp2Xk2s6zzaouojuRo/W+BVfIYwHwYDVR0jBBgwFoAUnoRxCOugtVC8Ag/Z sdxt6yng2+8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVk9DT00v bm9SeENPdWd0VkM4QWdfWnNkeHQ2eW5nMi04LmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9ub1J4Q091Z3RWQzhBZ19ac2R4dDZ5bmcyLTguY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9WT0NPTS9tcXAyWGsyczZ6emFvdW9qdVJv X1ctQlZmSVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJABE YDANBgkqhkiG9w0BAQsFAAOCAQEAgYYhKmkTYpP6c5bSx9iFj4OO+7N8wcQxwcKp UCeeTolGlOMWOBXXVRdxJNE8sEyb5WiIatKpvZEvR54bcLZ/3fvcfPicQUN33Lto tWZVnYwfCjTOd4sz+w0D/bWQjLhjbpbG0b4UeGo3ORTQV6W6AOI51qOcOFA+RQ1L bL4YMS/cWMYkISBk4opytUqiX00TxZ3tM9udK1of65F7lZVSK48ip/Cc3o/DGHdW FzZgmUaH/K/6o7itbxQDEUIWh8EWoay3TSQlJM/TneZR6UWD4c56zDKp2OMFwyvK 7rCqO3hr8fm8B58qNkb/9GvfNIDUbw4CBG6VdhpoINynTQwPkA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org