$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/0GqIdERh1Ytvw78iibaPv1UZK7k.roa File: 0GqIdERh1Ytvw78iibaPv1UZK7k.roa (raw, json) Hash identifier: x7zakGS8q+fn2RhCs91M0aaCWJui5BE0o0Mf1agFpbU= Subject key identifier: D0:6A:88:74:44:61:D5:8B:6F:C3:BF:22:89:B6:8F:BF:55:19:2B:B9 Certificate issuer: /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A Certificate serial: F3 Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/0GqIdERh1Ytvw78iibaPv1UZK7k.roa Signing time: Tue 21 Nov 2023 15:31:00 +0000 ROA not before: Tue 21 Nov 2023 15:31:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131657 IP address blocks: 103.51.90.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 08:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A Validity Not Before: Nov 21 15:31:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D06A88744461D58B6FC3BF2289B68FBF55192BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:4c:8a:62:a2:11:dc:cd:00:45:b0:1f:25: 01:ca:e0:8e:f1:6f:c7:27:af:f9:9c:4a:66:61:e1: 6b:eb:7e:c9:1a:46:ae:bd:09:29:6f:98:bf:8f:93: dd:75:8d:de:5a:2a:67:d5:d3:aa:19:9c:fc:a9:f7: 15:26:a5:30:b0:22:c6:96:ba:eb:a9:0c:57:70:5c: 32:fb:0b:c0:59:2f:fe:be:74:2a:3c:21:4a:a4:65: 40:1e:48:ed:1e:6a:d0:32:7c:e8:c7:75:cf:05:de: 9c:74:cd:40:46:df:00:79:e9:7a:e5:6e:5e:73:0b: 97:08:ce:50:e7:80:e8:07:97:b9:af:dd:5c:8b:11: a9:2d:82:b1:3c:ee:76:09:14:2a:69:a4:01:b2:b4: f9:68:d0:74:54:fe:16:e4:82:fe:61:36:35:95:1d: 95:77:b9:a7:5e:b9:71:e4:9d:e1:69:e0:2c:f0:71: 41:a3:f6:fd:df:68:24:f7:4a:74:43:9b:f8:c7:55: de:fb:5f:f0:d5:af:9c:0a:19:5c:69:fa:6a:d8:a0: b1:4a:38:eb:a4:0e:b9:63:e7:f5:c4:9b:96:ef:c6: c0:2b:9d:cc:7d:95:62:e2:70:34:9b:2e:70:38:ea: a3:15:33:c6:a6:96:4f:f5:15:4a:ac:51:6f:d8:95: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6A:88:74:44:61:D5:8B:6F:C3:BF:22:89:B6:8F:BF:55:19:2B:B9 X509v3 Authority Key Identifier: keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/0GqIdERh1Ytvw78iibaPv1UZK7k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.51.90.0/23 Signature Algorithm: sha256WithRSAEncryption 39:ed:4c:2e:24:25:48:56:2b:e5:b3:ca:b9:cf:e4:20:8f:9c: aa:21:84:1c:d9:75:d9:6a:52:5e:43:e9:95:34:34:12:a7:78: d1:bb:aa:e4:9e:5c:b5:ba:f8:62:5c:f5:9d:1b:19:df:6e:0d: 40:f8:75:89:7f:ea:db:ba:1b:ed:95:8f:6c:3d:28:42:b3:ca: 70:38:36:aa:43:a2:ab:fb:02:98:92:f7:0f:e6:04:58:4f:01: 6f:37:a4:a9:6b:22:0f:23:d3:c3:0b:90:b1:37:cd:82:99:37: 46:df:c4:b1:69:7d:b2:2d:5c:2b:8e:d2:e3:6d:59:83:7b:41: 15:67:94:9b:37:e7:33:b2:c4:48:c4:df:0a:93:ce:f2:e4:e3: 31:58:66:9b:a7:d6:0e:d5:64:1f:69:f1:6c:43:f5:b1:89:5b: ad:44:f2:48:5f:8f:fb:cc:37:99:3b:93:b9:27:69:e1:4d:1a: 2f:9c:33:00:74:02:ef:23:01:6f:66:ee:b7:6c:f1:bb:cd:44: ba:9a:e8:e5:5b:26:b8:fb:54:67:33:5b:5c:91:87:09:31:aa: 33:79:d0:7c:9b:b3:b4:db:a4:7c:6b:03:b1:00:87:0c:8d:1b: a1:12:22:1f:b3:e9:a6:69:65:24:5d:81:03:1d:b0:e7:f1:71: 3c:fa:1d:7a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTVB NkFDMzhFRTY4QzM2NENGNzkxODhGMDY0MjdFOUM3NjZENEMxQTAeFw0yMzExMjEx NTMxMDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQwNkE4ODc0NDQ2MUQ1 OEI2RkMzQkYyMjg5QjY4RkJGNTUxOTJCQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsI0yKYqIR3M0ARbAfJQHK4I7xb8cnr/mcSmZh4WvrfskaRq69 CSlvmL+Pk911jd5aKmfV06oZnPyp9xUmpTCwIsaWuuupDFdwXDL7C8BZL/6+dCo8 IUqkZUAeSO0eatAyfOjHdc8F3px0zUBG3wB56Xrlbl5zC5cIzlDngOgHl7mv3VyL EaktgrE87nYJFCpppAGytPlo0HRU/hbkgv5hNjWVHZV3uadeuXHkneFp4CzwcUGj 9v3faCT3SnRDm/jHVd77X/DVr5wKGVxp+mrYoLFKOOukDrlj5/XEm5bvxsArncx9 lWLicDSbLnA46qMVM8amlk/1FUqsUW/YlfW7AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU0GqIdERh1Ytvw78iibaPv1UZK7kwHwYDVR0jBBgwFoAUpaasOO5ow2TPeRiP BkJ+nHZtTBowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJJQ0tT SU5DL3BhYXNPTzVvdzJUUGVSaVBCa0otbkhadFRCby5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcGFhc09PNW93MlRQZVJpUEJrSi1uSFp0VEJvLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJJQ0tTSU5DLzBHcUlkRVJoMVl0 dnc3OGlpYmFQdjFVWks3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnM1owDQYJKoZIhvcNAQELBQADggEBADntTC4kJUhWK+WzyrnP5CCPnKoh hBzZddlqUl5D6ZU0NBKneNG7quSeXLW6+GJc9Z0bGd9uDUD4dYl/6tu6G+2Vj2w9 KEKzynA4NqpDoqv7ApiS9w/mBFhPAW83pKlrIg8j08MLkLE3zYKZN0bfxLFpfbIt XCuO0uNtWYN7QRVnlJs35zOyxEjE3wqTzvLk4zFYZpun1g7VZB9p8WxD9bGJW61E 8khfj/vMN5k7k7knaeFNGi+cMwB0Au8jAW9m7rds8bvNRLqa6OVbJrj7VGczW1yR hwkxqjN50Hybs7TbpHxrA7EAhwyNG6ESIh+z6aZpZSRdgQMdsOfxcTz6HXo= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:40 2024 by rpki-client on console-ams.rpki-client.org