$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa File: nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa (raw, json) Hash identifier: g9aao9fvU44ZjN2Jn7l5+Q2euy8Mc1hzfF4HE2tPWNs= Subject key identifier: 9C:18:49:F6:50:45:0A:51:4B:C7:05:C2:DB:96:A1:16:7E:12:93:A6 Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Certificate serial: 0C00 Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa Signing time: Fri 03 Nov 2023 02:52:00 +0000 ROA not before: Fri 03 Nov 2023 02:52:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9244 IP address blocks: 210.67.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3072 (0xc00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97 Validity Not Before: Nov 3 02:52:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9C1849F650450A514BC705C2DB96A1167E1293A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:d1:7c:fa:bd:22:04:d8:d3:b7:aa:db:f2: 05:ac:0a:f3:47:82:f3:b0:fa:9d:dc:61:c2:b6:ae: 88:18:bf:e9:c4:91:ad:c7:e2:e9:74:ef:91:ea:45: 31:5d:0d:8b:6f:73:92:2f:af:a4:9d:00:e1:4a:f6: 86:28:e9:cd:40:02:a0:ec:c4:06:e1:30:3e:52:c1: 47:7d:e3:0d:90:1b:d1:c4:1b:0a:30:c5:ee:cd:79: e5:13:b9:24:84:a7:da:16:73:55:ac:7d:05:bd:a9: df:12:25:23:5c:65:9c:86:7d:16:78:ad:b2:d5:e3: ab:25:4e:aa:b5:87:89:67:dd:d0:c9:f4:23:ac:24: 46:97:ca:1c:2e:63:c7:6a:1a:ce:5f:00:40:23:6c: 7a:be:53:d1:2a:27:a2:36:45:65:e7:6e:c3:9e:72: ea:38:16:11:f9:e2:bc:55:c4:21:a1:85:6b:72:59: 1c:bf:3a:b5:39:3a:27:88:07:99:38:b3:40:f5:ae: 4e:3c:01:57:52:69:20:a1:f5:0a:a1:89:a3:a7:a5: 8a:0d:38:e9:b1:5f:86:cb:70:5f:bf:a4:37:aa:fb: 4f:4b:5b:fb:d7:30:da:e8:68:3e:34:0d:76:db:7b: cd:4b:5d:c7:71:fa:95:99:1f:36:69:0c:8a:b8:5f: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:49:F6:50:45:0A:51:4B:C7:05:C2:DB:96:A1:16:7E:12:93:A6 X509v3 Authority Key Identifier: keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.96.0/20 Signature Algorithm: sha256WithRSAEncryption a6:a4:65:f4:fa:30:8b:ad:28:63:39:98:b3:c8:50:4b:6c:f0: e6:cd:78:e3:79:6d:74:d8:a4:08:5e:0c:af:97:26:03:ae:12: 5d:d4:66:4e:1d:b0:0a:19:2b:90:4a:7e:dd:9d:6b:19:0a:87: e1:a8:b9:9c:d1:be:24:dd:d7:f5:cf:ad:9b:e0:ab:37:6c:19: 78:b2:e9:ba:30:7d:99:66:43:cb:65:ef:54:5f:c6:10:04:f2: 2d:fc:62:68:70:f7:1c:69:4b:4a:0e:e2:1a:c7:03:4d:bc:c2: d9:39:b3:34:75:c0:5b:8a:4e:ea:af:92:11:1f:fc:06:71:09: 40:ae:8a:c5:b0:5c:63:0d:fa:e5:44:a2:48:0e:85:0d:7e:d0: e5:ea:d9:11:84:03:27:51:71:3c:de:75:cd:43:fb:3c:09:59: 44:6e:90:ab:ce:26:86:f1:19:c2:05:10:43:1d:a0:80:3b:82: 01:e8:cd:13:45:7e:12:ac:3f:18:ce:78:7b:40:a9:b9:54:d8: b2:5b:f9:51:1f:ce:08:45:07:1c:c5:9e:0f:78:d8:a0:bd:c5: 6c:65:b9:95:44:1f:bc:09:b7:1d:de:c2:d8:d6:69:52:d3:ac: 8e:90:be:73:de:e6:cb:0a:68:06:47:34:41:13:46:3a:65:d5: 00:81:a7:18 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMzExMDMw MjUyMDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlDMTg0OUY2NTA0NTBB NTE0QkM3MDVDMkRCOTZBMTE2N0UxMjkzQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnFdF8+r0iBNjTt6rb8gWsCvNHgvOw+p3cYcK2rogYv+nEka3H 4ul075HqRTFdDYtvc5Ivr6SdAOFK9oYo6c1AAqDsxAbhMD5SwUd94w2QG9HEGwow xe7NeeUTuSSEp9oWc1WsfQW9qd8SJSNcZZyGfRZ4rbLV46slTqq1h4ln3dDJ9COs JEaXyhwuY8dqGs5fAEAjbHq+U9EqJ6I2RWXnbsOecuo4FhH54rxVxCGhhWtyWRy/ OrU5OieIB5k4s0D1rk48AVdSaSCh9QqhiaOnpYoNOOmxX4bLcF+/pDeq+09LW/vX MNroaD40DXbbe81LXcdx+pWZHzZpDIq4X2K7AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUnBhJ9lBFClFLxwXC25ahFn4Sk6YwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL25CaEo5bEJGQ2xGTHh3WEMy NWFoRm40U2s2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATS Q2AwDQYJKoZIhvcNAQELBQADggEBAKakZfT6MIutKGM5mLPIUEts8ObNeON5bXTY pAheDK+XJgOuEl3UZk4dsAoZK5BKft2daxkKh+GouZzRviTd1/XPrZvgqzdsGXiy 6bowfZlmQ8tl71RfxhAE8i38Ymhw9xxpS0oO4hrHA028wtk5szR1wFuKTuqvkhEf /AZxCUCuisWwXGMN+uVEokgOhQ1+0OXq2RGEAydRcTzedc1D+zwJWURukKvOJobx GcIFEEMdoIA7ggHozRNFfhKsPxjOeHtAqblU2LJb+VEfzghFBxzFng942KC9xWxl uZVEH7wJtx3ewtjWaVLTrI6QvnPe5ssKaAZHNEETRjpl1QCBpxg= -----END CERTIFICATE-----Generated at Mon Jun 3 10:15:28 2024 by rpki-client on console-fra.rpki-client.org