$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINANG/15hIa4O1NhV5r6Nb2chk6Bg7nNc.roa File: 15hIa4O1NhV5r6Nb2chk6Bg7nNc.roa (raw, json) Hash identifier: qAGeYy89TYtaG+0lW+n9SUUKnK9myyyQ/kFiPi5fbUU= Subject key identifier: D7:98:48:6B:83:B5:36:15:79:AF:A3:5B:D9:C8:64:E8:18:3B:9C:D7 Certificate issuer: /CN=DB214158EE4B1A7098DB51E3875D4CD03D73463B Certificate serial: 04 Authority key identifier: DB:21:41:58:EE:4B:1A:70:98:DB:51:E3:87:5D:4C:D0:3D:73:46:3B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2yFBWO5LGnCY21Hjh11M0D1zRjs.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/15hIa4O1NhV5r6Nb2chk6Bg7nNc.roa Signing time: Fri 08 Nov 2024 05:33:17 +0000 ROA not before: Fri 08 Nov 2024 05:33:17 +0000 ROA not after: Tue 04 Nov 2025 15:30:21 +0000 asID: 131642 IP address blocks: 2401:d3a0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2yFBWO5LGnCY21Hjh11M0D1zRjs.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 13:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB214158EE4B1A7098DB51E3875D4CD03D73463B Validity Not Before: Nov 8 05:33:17 2024 GMT Not After : Nov 4 15:30:21 2025 GMT Subject: CN=D798486B83B5361579AFA35BD9C864E8183B9CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:93:42:2c:5f:b6:c5:70:46:6b:c0:2d:e9: 94:64:97:db:68:88:f4:b9:37:f0:a6:25:7b:cd:43: 15:c6:df:5e:e0:2a:97:fe:a7:09:3a:b6:52:e5:10: f3:4b:17:2f:5f:44:93:61:2a:ed:54:6c:38:1a:a8: f5:1d:c7:20:fb:7e:ab:00:a7:ea:d2:8e:1a:7b:43: 57:bc:d8:fb:da:ec:e7:34:ee:54:79:78:7a:80:64: b7:3e:be:7f:da:4c:6e:e0:6b:f0:a5:0e:a0:08:94: 9a:79:6e:09:17:6a:f0:df:26:a2:c2:5d:1e:79:a9: bd:82:dc:70:96:9b:f6:d2:e9:c2:a6:c6:20:f9:ad: dd:1e:65:50:19:5f:e6:89:6d:dd:a5:8b:2d:c4:f9: 49:54:00:ae:95:f8:a7:7e:fb:c2:b8:5e:36:ff:90: 80:d4:34:51:dc:d5:52:5c:41:5a:f5:fa:18:19:83: 47:07:3e:b0:53:1d:d8:e0:e8:2e:30:dd:24:9b:8a: 9e:b6:35:f4:8c:70:df:ea:bf:2b:9f:72:71:d2:32: 22:d9:76:dc:92:74:eb:a6:0e:ba:19:b8:d6:d5:e0: 60:59:1e:06:dc:88:b8:61:77:d6:d7:12:f8:9d:32: 1f:52:3f:ce:45:21:f6:56:7f:54:b7:f0:b8:37:4a: b7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:98:48:6B:83:B5:36:15:79:AF:A3:5B:D9:C8:64:E8:18:3B:9C:D7 X509v3 Authority Key Identifier: keyid:DB:21:41:58:EE:4B:1A:70:98:DB:51:E3:87:5D:4C:D0:3D:73:46:3B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/2yFBWO5LGnCY21Hjh11M0D1zRjs.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2yFBWO5LGnCY21Hjh11M0D1zRjs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINANG/15hIa4O1NhV5r6Nb2chk6Bg7nNc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:d3a0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:da:35:ed:67:bc:ca:42:20:36:6d:72:59:f0:8f:70:65:92: cc:b0:d4:38:78:b0:f7:94:be:06:79:6e:77:04:9b:a5:ce:56: c7:84:c3:60:e0:66:6f:e5:c6:04:13:54:e3:47:bc:d6:88:bf: 7b:57:73:40:58:56:03:65:87:4c:e3:f1:cb:0e:27:f4:13:2b: e4:b3:2d:cf:74:fe:76:57:99:8e:32:07:d6:4a:7b:37:24:5e: ed:1c:d4:37:8a:d4:6d:e6:65:d3:ae:86:29:f8:83:c0:89:23: dc:8f:25:06:13:57:3a:c3:3a:61:57:ba:af:55:3b:91:92:93: b4:0f:55:b2:87:c4:2b:c5:24:e9:ca:e6:07:35:bd:45:67:60: 13:62:9b:99:f8:d3:16:40:97:7f:dc:12:bd:31:1c:38:2f:60: bc:df:50:d6:53:ab:0e:e5:b9:54:0b:e4:06:dd:2b:8e:33:30: b1:d6:95:44:00:dd:d5:f1:9d:3e:5d:6a:06:75:09:ce:4b:5f: 51:b0:f1:06:48:0c:5e:7f:1f:fd:9c:07:cd:89:ba:d9:87:a2: d7:ee:c8:69:e2:3b:63:93:ce:a3:ba:75:a8:ef:61:41:db:05: 35:7d:e9:48:41:cc:9a:81:ef:3a:a7:db:92:d2:81:99:39:5d: c4:ad:b4:98 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQjIx NDE1OEVFNEIxQTcwOThEQjUxRTM4NzVENENEMDNENzM0NjNCMB4XDTI0MTEwODA1 MzMxN1oXDTI1MTEwNDE1MzAyMVowMzExMC8GA1UEAxMoRDc5ODQ4NkI4M0I1MzYx NTc5QUZBMzVCRDlDODY0RTgxODNCOUNENzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALrSk0IsX7bFcEZrwC3plGSX22iI9Lk38KYle81DFcbfXuAql/6n CTq2UuUQ80sXL19Ek2Eq7VRsOBqo9R3HIPt+qwCn6tKOGntDV7zY+9rs5zTuVHl4 eoBktz6+f9pMbuBr8KUOoAiUmnluCRdq8N8mosJdHnmpvYLccJab9tLpwqbGIPmt 3R5lUBlf5olt3aWLLcT5SVQArpX4p377wrheNv+QgNQ0UdzVUlxBWvX6GBmDRwc+ sFMd2ODoLjDdJJuKnrY19Ixw3+q/K59ycdIyItl23JJ066YOuhm41tXgYFkeBtyI uGF31tcS+J0yH1I/zkUh9lZ/VLfwuDdKt5UCAwEAAaOCAe8wggHrMB0GA1UdDgQW BBTXmEhrg7U2FXmvo1vZyGToGDuc1zAfBgNVHSMEGDAWgBTbIUFY7ksacJjbUeOH XUzQPXNGOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9YSU5BTkcv MnlGQldPNUxHbkNZMjFIamgxMU0wRDF6UmpzLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS8yeUZCV081TEduQ1kyMUhqaDExTTBEMXpSanMuY2VyMA4GA1UdDwEB/wQEAwIH gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9YSU5BTkcvMTVoSWE0TzFOaFY1cjZOYjJj aGs2Qmc3bk5jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3 L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQB 06AwDQYJKoZIhvcNAQELBQADggEBAJzaNe1nvMpCIDZtclnwj3Blksyw1Dh4sPeU vgZ5bncEm6XOVseEw2DgZm/lxgQTVONHvNaIv3tXc0BYVgNlh0zj8csOJ/QTK+Sz Lc90/nZXmY4yB9ZKezckXu0c1DeK1G3mZdOuhin4g8CJI9yPJQYTVzrDOmFXuq9V O5GSk7QPVbKHxCvFJOnK5gc1vUVnYBNim5n40xZAl3/cEr0xHDgvYLzfUNZTqw7l uVQL5AbdK44zMLHWlUQA3dXxnT5dagZ1Cc5LX1Gw8QZIDF5/H/2cB82JutmHotfu yGniO2OTzqO6dajvYUHbBTV96UhBzJqB7zqn25LSgZk5XcSttJg= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org