$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/_iYRBO8R9Jp4YEZD7qBcdApBsmo.roa File: _iYRBO8R9Jp4YEZD7qBcdApBsmo.roa (raw, json) Hash identifier: iL3qQUrIJ6UrxP/QCqKixDY/qDEjZE5YzfnUzwm4Q6c= Subject key identifier: FE:26:11:04:EF:11:F4:9A:78:60:46:43:EE:A0:5C:74:0A:41:B2:6A Certificate issuer: /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97 Certificate serial: 023E Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/_iYRBO8R9Jp4YEZD7qBcdApBsmo.roa Signing time: Fri 01 Sep 2023 10:21:07 +0000 ROA not before: Fri 01 Sep 2023 10:21:07 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38846 IP address blocks: 2407:a0c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 04:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97 Validity Not Before: Sep 1 10:21:07 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=FE261104EF11F49A78604643EEA05C740A41B26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:d4:0f:30:d5:50:69:9a:55:99:18:3b:55: 1e:81:01:79:d1:7f:d5:b1:8e:bf:3d:47:94:70:78: f7:eb:0e:2c:5e:73:55:43:6a:ba:9c:ed:65:34:62: 66:3f:ab:a2:16:ff:88:c7:ec:d7:08:4e:82:32:ad: 6e:d9:8e:1a:be:b2:40:0a:72:fd:db:a7:3f:8e:85: fb:03:08:5c:01:27:8f:99:75:cc:09:51:86:e2:3d: 85:b6:e6:f1:6c:83:a7:bb:42:6a:63:ad:a2:f3:5d: 42:d8:d1:aa:3c:da:01:14:48:d8:da:80:2b:fd:7d: c8:a5:a8:16:e8:64:5e:1c:e1:47:b8:3f:d9:39:98: 53:a7:9d:db:09:30:37:e1:69:c3:49:ee:b4:3b:2d: 83:73:9e:88:90:22:c4:7c:43:96:dc:5e:ba:36:99: b3:24:2e:63:fb:58:81:b4:46:9d:a2:0e:a2:69:d7: 62:ab:04:f0:f7:9e:de:12:38:7f:68:84:ae:d5:84: dd:b3:1f:f0:cd:e9:ab:bd:3a:08:d5:a5:f9:ac:37: fc:03:c7:dc:96:78:bd:0a:c0:95:f6:63:04:2e:a0: 70:90:57:ec:81:f0:af:11:8b:cc:a7:1f:da:4d:30: c3:40:fc:08:cc:11:4a:78:72:d4:cd:76:f1:78:6e: 03:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:26:11:04:EF:11:F4:9A:78:60:46:43:EE:A0:5C:74:0A:41:B2:6A X509v3 Authority Key Identifier: keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/_iYRBO8R9Jp4YEZD7qBcdApBsmo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:a0c0::/32 Signature Algorithm: sha256WithRSAEncryption 38:07:95:35:f1:ee:72:4c:5e:72:fa:41:d9:3b:e5:77:54:e5: 40:ae:b8:09:eb:28:2f:97:6a:27:1a:28:a3:18:72:d0:e8:55: 6a:56:db:37:0f:e2:d8:4b:0f:52:4b:f9:dd:b0:ea:eb:aa:bf: a2:ef:2f:6b:e7:1a:c6:23:c1:5f:8b:33:20:ff:e5:c9:62:06: 2b:de:5f:e1:98:81:ee:d7:1a:60:39:94:42:83:51:ed:30:f0: 44:10:20:bb:64:5c:b1:4a:ad:cb:39:ac:22:21:55:6a:06:cc: f3:e7:97:6e:56:ed:b1:f0:b5:eb:ee:d2:a1:16:9e:a1:52:16: 68:9c:3c:c9:57:0d:4d:de:f8:42:57:9e:82:2d:c2:fd:c5:d6: 87:31:86:ec:79:89:39:2d:e5:fc:22:41:79:14:8c:d5:d0:56: e9:a9:14:4c:17:53:f2:c7:ab:af:42:da:30:47:24:0f:3f:dd: a1:f9:07:13:a7:76:3e:1f:c9:4a:cf:4e:4c:f6:e2:86:66:e4: af:f1:b0:2b:e8:ee:df:79:bc:d4:7d:c7:54:79:fa:c6:5b:7f: c4:85:a9:33:6f:83:61:bf:54:bf:59:38:ff:c1:ce:16:f9:3a: cf:30:ab:14:42:9e:83:63:9b:da:af:3d:f6:df:7e:49:e6:5d: 00:0f:4d:bd -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNG QzExNkEzQ0NCMTA1QUI1MERBNDE3Njc5QjFGOUM3MEE0QkQ5NzAeFw0yMzA5MDEx MDIxMDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZFMjYxMTA0RUYxMUY0 OUE3ODYwNDY0M0VFQTA1Qzc0MEE0MUIyNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4tdQPMNVQaZpVmRg7VR6BAXnRf9Wxjr89R5RwePfrDixec1VD arqc7WU0YmY/q6IW/4jH7NcIToIyrW7Zjhq+skAKcv3bpz+OhfsDCFwBJ4+ZdcwJ UYbiPYW25vFsg6e7QmpjraLzXULY0ao82gEUSNjagCv9fcilqBboZF4c4Ue4P9k5 mFOnndsJMDfhacNJ7rQ7LYNznoiQIsR8Q5bcXro2mbMkLmP7WIG0Rp2iDqJp12Kr BPD3nt4SOH9ohK7VhN2zH/DN6au9OgjVpfmsN/wDx9yWeL0KwJX2YwQuoHCQV+yB 8K8Ri8ynH9pNMMNA/AjMEUp4ctTNdvF4bgMPAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU/iYRBO8R9Jp4YEZD7qBcdApBsmowHwYDVR0jBBgwFoAUw/wRajzLEFq1DaQX Z5sfnHCkvZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV09MRk5F VC93X3dSYWp6TEVGcTFEYVFYWjVzZm5IQ2t2WmMuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3dfd1JhanpMRUZxMURhUVhaNXNmbkhDa3ZaYy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1dPTEZORVQvX2lZUkJPOFI5SnA0WUVa RDdxQmNkQXBCc21vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACQHoMAwDQYJKoZIhvcNAQELBQADggEBADgHlTXx7nJMXnL6Qdk75XdU5UCuuAnr KC+XaicaKKMYctDoVWpW2zcP4thLD1JL+d2w6uuqv6LvL2vnGsYjwV+LMyD/5cli BiveX+GYge7XGmA5lEKDUe0w8EQQILtkXLFKrcs5rCIhVWoGzPPnl25W7bHwtevu 0qEWnqFSFmicPMlXDU3e+EJXnoItwv3F1ocxhux5iTkt5fwiQXkUjNXQVumpFEwX U/LHq69C2jBHJA8/3aH5BxOndj4fyUrPTkz24oZm5K/xsCvo7t95vNR9x1R5+sZb f8SFqTNvg2G/VL9ZOP/Bzhb5Os8wqxRCnoNjm9qvPfbffknmXQAPTb0= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:08 2024 by rpki-client on console-fra.rpki-client.org