$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa File: NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa (raw, json) Hash identifier: XzHRIgIT5OqZgkUXkPPqqS5pAF4e8nHDpsdTbFUhKkg= Subject key identifier: 34:20:68:4E:B7:2E:83:65:92:CE:5C:D2:D8:44:03:AA:EF:C2:1A:F4 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0BBA Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa Signing time: Fri 01 Sep 2023 08:36:39 +0000 ROA not before: Fri 01 Sep 2023 08:36:39 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9244 IP address blocks: 113.21.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Jun 2024 20:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Sep 1 08:36:39 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3420684EB72E836592CE5CD2D84403AAEFC21AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:d6:f4:80:98:0b:f9:08:20:28:18:d5:34: 97:a3:d6:ab:da:0c:a7:3d:2c:78:14:c0:ae:cd:89: 6e:1b:01:b3:3e:90:57:d9:d7:10:11:6e:7b:f3:d6: 33:91:4d:a6:60:00:59:57:35:72:81:dd:77:2d:53: f7:f8:a4:97:5b:7c:15:bf:b1:04:6d:cf:d2:80:96: ab:27:6f:a6:64:37:37:b8:cc:fb:50:5f:38:4a:90: b9:8b:04:c4:71:ad:ca:38:5b:fc:d3:ff:88:fb:99: 63:79:6b:5e:ac:be:8e:56:37:b1:6b:ea:37:93:d3: 86:73:d8:48:a7:72:47:08:3c:39:7e:5e:2b:2b:60: 38:53:c3:8a:b6:7d:8c:fd:45:23:3b:ec:24:97:b5: 37:ee:02:3c:8c:ce:9d:48:59:28:67:ba:36:9d:0b: a3:97:ce:d5:d2:74:f5:6c:ad:2e:16:53:67:bb:3b: ff:e8:dd:ca:db:88:92:47:a9:9d:73:a7:b6:32:11: 34:9e:96:e8:42:09:af:51:0e:4b:ff:e1:90:37:56: 2e:c5:2c:b0:49:cd:fd:63:f7:aa:1b:1e:05:84:54: f9:20:5f:70:8d:94:63:0e:29:da:45:9f:eb:93:db: 68:8a:5e:29:ff:f4:ec:8c:d4:f5:0a:0e:57:91:58: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:20:68:4E:B7:2E:83:65:92:CE:5C:D2:D8:44:03:AA:EF:C2:1A:F4 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.175.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ff:e4:84:e5:89:73:d7:58:5b:0d:98:1a:68:b0:d0:e4:3c: f7:a5:ea:3a:04:d8:20:fd:37:06:0b:05:e0:a9:ca:dc:8c:e6: 9b:9d:83:92:38:bf:68:e9:e7:d7:4e:81:46:89:b0:0e:c1:06: aa:17:93:d7:1a:ac:86:15:bb:08:ca:59:c7:86:a0:ab:fa:7a: 3e:7e:d3:12:eb:fd:cf:52:72:ff:ed:60:a8:9e:6e:9d:40:29: 9e:64:92:2d:32:f5:a9:2d:c9:0a:06:83:5e:37:3f:db:3d:54: 6d:93:f7:0c:fe:25:ff:13:7a:52:af:5b:0f:0c:eb:dc:95:e7: da:06:31:96:d3:6a:dc:f4:e0:81:7a:22:98:c0:a5:04:3d:22: ae:b2:8e:04:0f:2f:34:bb:49:f4:ae:78:68:40:0a:46:2c:e5: e7:26:b8:08:5e:4b:b9:93:6c:e1:6f:6b:e8:21:7e:97:c1:77: ac:fa:c3:31:b6:a8:9b:a8:6f:1c:ff:66:2f:95:c7:fc:92:5b: dd:aa:ac:79:f3:3f:b8:2d:7e:c3:82:db:4a:47:27:d9:f7:c7: 57:12:d5:57:59:0d:3b:c0:29:24:f0:4b:d8:c0:3a:ca:35:76: 1c:d0:80:a9:d0:3e:77:b2:42:01:87:ee:14:87:6e:5b:c1:3f: 74:ca:cd:03 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICC7owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMzA5MDEw ODM2MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM0MjA2ODRFQjcyRTgz NjU5MkNFNUNEMkQ4NDQwM0FBRUZDMjFBRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5Atb0gJgL+QggKBjVNJej1qvaDKc9LHgUwK7NiW4bAbM+kFfZ 1xARbnvz1jORTaZgAFlXNXKB3XctU/f4pJdbfBW/sQRtz9KAlqsnb6ZkNze4zPtQ XzhKkLmLBMRxrco4W/zT/4j7mWN5a16svo5WN7Fr6jeT04Zz2EinckcIPDl+Xisr YDhTw4q2fYz9RSM77CSXtTfuAjyMzp1IWShnujadC6OXztXSdPVsrS4WU2e7O//o 3crbiJJHqZ1zp7YyETSeluhCCa9RDkv/4ZA3Vi7FLLBJzf1j96obHgWEVPkgX3CN lGMOKdpFn+uT22iKXin/9OyM1PUKDleRWHuHAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUNCBoTrcug2WSzlzS2EQDqu/CGvQwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL05DQm9UcmN1ZzJXU3pselMy RVFEcXVfQ0d2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABx Fa8wDQYJKoZIhvcNAQELBQADggEBAIv/5ITliXPXWFsNmBposNDkPPel6joE2CD9 NwYLBeCpytyM5pudg5I4v2jp59dOgUaJsA7BBqoXk9carIYVuwjKWceGoKv6ej5+ 0xLr/c9Scv/tYKiebp1AKZ5kki0y9aktyQoGg143P9s9VG2T9wz+Jf8TelKvWw8M 69yV59oGMZbTatz04IF6IpjApQQ9Iq6yjgQPLzS7SfSueGhACkYs5ecmuAheS7mT bOFva+ghfpfBd6z6wzG2qJuobxz/Zi+Vx/ySW92qrHnzP7gtfsOC20pHJ9n3x1cS 1VdZDTvAKSTwS9jAOso1dhzQgKnQPneyQgGH7hSHblvBP3TKzQM= -----END CERTIFICATE-----Generated at Sun Jun 23 15:31:59 2024 by rpki-client on console-ams.rpki-client.org