$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Y_N-zbY_OBlYe3d3vG-Ue9s_0VE.roa File: Y_N-zbY_OBlYe3d3vG-Ue9s_0VE.roa (raw, json) Hash identifier: BtjhMJRA7jncX6aaoE44WRsz0D2FZqX6EaOo3YMlmfc= Subject key identifier: 63:F3:7E:CD:B6:3F:38:19:58:7B:77:77:BC:6F:94:7B:DB:3F:D1:51 Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Certificate serial: 580D Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Y_N-zbY_OBlYe3d3vG-Ue9s_0VE.roa Signing time: Fri 01 Sep 2023 09:33:49 +0000 ROA not before: Fri 01 Sep 2023 09:33:49 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38851 IP address blocks: 43.227.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Jun 2024 22:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22541 (0x580d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2 Validity Not Before: Sep 1 09:33:49 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=63F37ECDB63F3819587B7777BC6F947BDB3FD151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:49:64:f5:f4:16:09:d6:a7:6c:9c:8b:22: e1:ca:29:0e:f5:09:4d:13:2a:6b:28:12:8d:ba:93: 1f:00:43:04:af:27:6b:77:2a:e6:5a:4c:94:35:02: 20:2b:07:58:13:08:2e:8b:00:f5:98:41:10:48:88: 41:f6:d9:83:04:00:bb:2b:87:e1:43:52:bb:d5:63: a2:1d:b4:45:41:95:41:6b:96:6b:ec:90:dc:92:d5: 74:2d:b3:b4:87:f9:a7:15:eb:02:f4:94:9d:1b:81: 5f:1a:ad:04:56:b5:b4:e9:33:c3:2d:a7:9d:c7:53: aa:e6:ab:8e:8b:28:24:f5:14:61:48:a7:b7:3d:0c: e3:a6:dc:fd:b1:63:b4:77:51:62:81:d5:06:e8:de: 05:5f:43:7b:7b:b9:8f:85:92:f9:4b:8c:4f:44:b5: c7:c3:e1:70:e1:8f:05:bd:75:e4:76:8d:cd:45:67: 63:04:d2:89:76:39:1c:b9:ac:2a:b1:8b:c8:da:03: 71:17:e4:11:a1:ba:09:a0:63:06:b9:d8:ec:8d:f2: c9:68:58:23:f5:b5:0e:ae:f2:7d:6c:bf:57:db:52: 2b:62:3c:26:0b:c0:da:e4:ab:4b:26:1e:f1:65:8b: e2:16:db:42:25:41:6f:e2:30:62:31:14:c0:35:5d: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F3:7E:CD:B6:3F:38:19:58:7B:77:77:BC:6F:94:7B:DB:3F:D1:51 X509v3 Authority Key Identifier: keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Y_N-zbY_OBlYe3d3vG-Ue9s_0VE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.227.24.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:16:36:8c:57:fb:56:fd:88:4d:9c:0a:6e:7d:6c:d8:32:00: 0b:a1:3c:ad:98:67:69:91:97:16:04:3e:74:d3:94:b7:d5:ce: 36:dd:77:26:47:cd:80:4a:24:1a:5c:e7:58:ab:d6:f5:93:3e: 79:5e:36:db:0f:23:e0:3f:bd:05:89:63:48:73:80:96:12:f0: 06:1f:40:45:e0:8d:28:ac:90:b8:3a:f1:7e:d7:af:30:d0:03: 0f:a9:c9:eb:3f:82:e0:f9:a5:45:07:19:21:9f:42:ed:e7:eb: a7:87:7e:e7:e7:5d:7c:6c:c8:98:21:40:dd:bb:99:1f:ea:c7: d8:7b:d1:94:aa:21:f8:f5:5e:45:df:ce:8a:e8:91:46:2e:26: 6a:6a:f8:f8:fa:f0:04:c6:6d:05:1f:68:c0:0f:74:5c:8a:42: 92:07:3f:e7:20:14:42:2c:46:0f:9a:1e:6e:f7:f6:79:b6:7b: c3:03:22:26:1e:e6:a1:4c:7c:ed:0d:ca:20:8f:5b:c6:0e:de: 6b:d9:9c:96:c8:5c:4e:f7:c7:08:2f:73:6a:2a:6f:7e:07:07: d6:a4:f7:4e:a2:9e:da:84:aa:b8:5d:89:41:6a:82:88:7d:d1: 65:8d:4e:a2:f3:68:92:2e:d8:c2:6b:cb:1b:1f:dc:2f:f7:c1: 3c:08:ed:25 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICWA0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yMzA5MDEw OTMzNDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYzRjM3RUNEQjYzRjM4 MTk1ODdCNzc3N0JDNkY5NDdCREIzRkQxNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnR0lk9fQWCdanbJyLIuHKKQ71CU0TKmsoEo26kx8AQwSvJ2t3 KuZaTJQ1AiArB1gTCC6LAPWYQRBIiEH22YMEALsrh+FDUrvVY6IdtEVBlUFrlmvs kNyS1XQts7SH+acV6wL0lJ0bgV8arQRWtbTpM8Mtp53HU6rmq46LKCT1FGFIp7c9 DOOm3P2xY7R3UWKB1Qbo3gVfQ3t7uY+FkvlLjE9EtcfD4XDhjwW9deR2jc1FZ2ME 0ol2ORy5rCqxi8jaA3EX5BGhugmgYwa52OyN8sloWCP1tQ6u8n1sv1fbUitiPCYL wNrkq0smHvFli+IW20IlQW/iMGIxFMA1XWszAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUY/N+zbY/OBlYe3d3vG+Ue9s/0VEwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvWV9OLXpiWV9PQmxZZTNk M3ZHLVVlOXNfMFZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AivjGDANBgkqhkiG9w0BAQsFAAOCAQEALRY2jFf7Vv2ITZwKbn1s2DIAC6E8rZhn aZGXFgQ+dNOUt9XONt13JkfNgEokGlznWKvW9ZM+eV422w8j4D+9BYljSHOAlhLw Bh9AReCNKKyQuDrxftevMNADD6nJ6z+C4PmlRQcZIZ9C7efrp4d+5+ddfGzImCFA 3buZH+rH2HvRlKoh+PVeRd/OiuiRRi4mamr4+PrwBMZtBR9owA90XIpCkgc/5yAU QixGD5oebvf2ebZ7wwMiJh7moUx87Q3KII9bxg7ea9mclshcTvfHCC9zaipvfgcH 1qT3TqKe2oSquF2JQWqCiH3RZY1OovNoki7YwmvLGx/cL/fBPAjtJQ== -----END CERTIFICATE-----Generated at Sat Jun 29 08:56:49 2024 by rpki-client on console-fra.rpki-client.org